{"type": "bundle", "id": "bundle--d0e03ee4-b719-4ea6-b897-6ce7554699ca", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--3530022c-5e8d-4cba-8662-4503b3c0f2a5", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--277b105a-05aa-4309-9579-8379274bdbc0", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--b110ec0f-57d5-41df-abfb-c2303bab2464", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--3df3ac92-a154-48e2-8316-e8ea9c6e1608", "name": "Vultr Paris", "latitude": 48.8566, "longitude": 2.3522, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "FR"}, {"type": "location", "spec_version": "2.1", "id": "location--3b978f96-7864-4251-be46-bd66e81d6bb4", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--af5b8a3d-b145-4271-8db1-fc862924930a", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--35e16e56-dfdd-438e-b288-fabe11ffc803", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--889073ed-abd7-49f2-8880-ef0537a1be1b", "relationship_type": "located-at", "source_ref": "infrastructure--35e16e56-dfdd-438e-b288-fabe11ffc803", "target_ref": "location--3530022c-5e8d-4cba-8662-4503b3c0f2a5", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--4d0f9c9d-efdb-4478-89cf-d513b6ea4a1c", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb396395-24ef-4bf1-bc2f-c033cad6449c", "relationship_type": "located-at", "source_ref": "infrastructure--4d0f9c9d-efdb-4478-89cf-d513b6ea4a1c", "target_ref": "location--277b105a-05aa-4309-9579-8379274bdbc0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--2a9ab86d-1960-4525-9b99-62cd48234e1d", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--20f21288-56f2-4c58-a0ba-5bbb7e7df2e0", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--caa3646a-49ba-4593-915f-299e29acdf2c", "relationship_type": "located-at", "source_ref": "infrastructure--20f21288-56f2-4c58-a0ba-5bbb7e7df2e0", "target_ref": "location--b110ec0f-57d5-41df-abfb-c2303bab2464", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--8ed6cb0b-de55-4d6c-908b-2b5563fde319", "name": "Vultr Paris", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63f71928-e111-4d75-8bac-47f7f82c55dc", "relationship_type": "located-at", "source_ref": "infrastructure--8ed6cb0b-de55-4d6c-908b-2b5563fde319", "target_ref": "location--3df3ac92-a154-48e2-8316-e8ea9c6e1608", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--3bf23aed-3b8a-4f60-9a7c-8deafde6ce52", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0836293-763f-40bb-b4c7-455e3d930164", "relationship_type": "located-at", "source_ref": "infrastructure--3bf23aed-3b8a-4f60-9a7c-8deafde6ce52", "target_ref": "location--3b978f96-7864-4251-be46-bd66e81d6bb4", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--c2582b8f-cc8c-40c7-bb9a-27618b3e6bf1", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--797a26ec-0907-4b56-a235-47cc083e7136", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--5d4d7749-dff6-40b1-9895-49482c613731", "name": "CVE-2021-31207", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--10d8e540-78c9-45c1-a41e-2319cbfbc671", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--0580933d-3fbf-4d55-9e6b-1b6da4d0e758", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--382dbc2e-4941-47f5-8e36-f24ec3e8e262", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421503b7-04d2-40e4-a88d-5d74f8792256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.12.231.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd7a6c3-50e8-4aeb-ab37-d78e8bee41dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.215.199.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e522927e-ef5c-49ca-aa12-34339d305b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88a1854-afa6-4b98-9f33-cc9d5cca6752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.54.5.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ce5542-c9a2-4578-a858-8d2a2be97c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e694af50-ec69-43a7-a39a-a03f1ebbeeee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.94.220.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1abb71-d017-40bf-a19b-b6a60c33c1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.95.91.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbf08e7-3965-48e9-8cde-1e8fca4e9cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d489a2a3-93db-45a3-ab42-0a76f3e575a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b55fcec-a55d-4723-9881-4dbbbfc0bbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a64fe10-0191-4f58-b671-dc8e27920879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf1f1d6-fd55-4ed2-abf8-0592908b0576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d219c5-0df1-4d4b-8d15-51f84e727096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2475bca1-a844-41e0-8473-30060e9d9a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836c6acf-d379-4d7a-9fb8-21575c8f0159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68636d55-52d1-4ef9-8701-1f03be59d586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ae9474-4c52-44a1-aac7-1b0fc54934bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b52b525-3190-4713-8f4a-1b57fe65eb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1ccbe9-4b04-4325-94ca-cb24969f8fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfe5a3a-792a-4e29-a060-7b708d3b7630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efa39e5-30fd-4561-b987-ed82547717bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5994a44c-1676-4193-bfa1-b2ecf55406e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93a3e85-26c7-4881-b077-8dbf62463ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9764b966-90b9-400f-8a9b-88f2d855b86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ac7ab9-45ff-4ed7-989f-cfe1c8434fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5b06e2-6dab-47b2-a6ec-d4359a6710e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3143bdf-2a72-4d71-933b-db85abed3399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a65d743-425b-44f9-a3fc-8ed4b5a10d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7df882c-9c25-4f4d-bd81-6e94b6674496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23200a3-ed88-4cd4-8a92-5239d6bef97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cf73d3-9105-4733-917f-42f7f033ca99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e65dce-0c75-4dc5-b523-c4486c103fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8a6689-7725-4a24-a832-1f319de7750d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231aedae-dbc6-45d4-9782-16722eba36e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43a1e0b-d6a1-45cb-92ef-6ba0b84ecf2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb564c21-3f42-4aae-a6ba-47635814afa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac142eb-6523-4962-9244-65378d6bbc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7b4ca5-cf06-40fc-b306-c2742f70991d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e33342-6041-44db-a3b4-f1eace92fb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916bd4e8-4631-4f04-9c99-aa74d2c956c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd3025e-741b-4e8d-831d-6e2843fcf244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f41b2e-451c-48f2-bdf2-b0860440a4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d2c1ed-2b91-44cc-b149-4c44e5019011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50cc0f4-6813-4049-b041-a5c01ccc7996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce038d30-fbaa-454f-80ad-c24f584ce6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b3fb03-b862-4677-97c4-76841b8743bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d073193-b9a4-4d70-92e2-a42e60735da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0752178b-4991-4334-b3b1-0d3d87ad3cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cbbf79-465f-4ed6-8c24-97b1642bfcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6778196-c88e-4107-9cf4-e0195a43d2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1720fc72-8bd0-47fc-b030-c0f95a6d6c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.48.87.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61bc646-0c11-4708-a7c3-af8cb2c52979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e157c22-d6f5-47ac-9044-8b208ea08c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea918fff-01ce-48c5-9033-b2ec7ff48e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.55.25.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9756eff-1067-4eeb-8d78-047ead4df5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.109.72.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d36ad8b-b268-4af0-837d-53ca81c0aa49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.12.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbcbff8-f526-4701-ba4d-6d36fe987a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.67.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438a8f44-790b-4979-9150-7ecc70a73c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.81.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98d2280-b0f1-4dcd-be62-88757c25a8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.188.20.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3604fcc5-314e-4bc1-9aa8-159fb10afa2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.104.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8b2fb6-1049-4361-86a1-58db9224bf75", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.227.203.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48eca4b-0a7a-46db-80aa-2714ee6a4025", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.237.36.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83e8e68-2d8b-4297-a41d-9ea0f206f8f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.239.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78796d5e-32f5-4d11-bf7e-5147ad019d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3012fe8f-0063-4292-a214-dfae807aaf95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2f9ce3-1c1e-4d94-a1e8-259037a148e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1974ecad-fc83-4557-b378-f41c90681a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96574e42-68ef-43f8-88ef-6d513cb178fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa105e3-1c49-40f4-9dbb-6da77ec1f98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea27b6d-7a14-43cc-8973-22434c1682f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf761f5a-3b0c-4a6b-9e5f-2166852e9c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50d0dfb-3f37-4606-adba-fea6c856d698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53c5c1e-28c0-4cde-a67b-6e33591a16c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78149728-7519-4b5c-a5ff-1a1e2e0a133f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4531934b-920f-44e7-b1bb-f73c7db171d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db45600d-4c6f-4a44-bfe6-173556cdbfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962bc7b5-cf65-4725-8a91-21ddd66596d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10eb304d-0338-4c04-ac9a-9d365efc3c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc196f7c-b61e-4b3d-a116-4a80c8a3ae5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589dbf02-59bf-4318-bee8-d400b3ce8283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd833df-e9d9-4e60-9bc4-abe965b698b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18c2132-eb12-4fe7-a071-0c92b4153a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c80853-ec98-4584-8b8c-0648dc5f8521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a7f0f6-3a05-46ee-8619-014538e0d70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a45c7cd-d8da-42ac-bc1a-6281b0dadbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74191c27-7742-4d64-a0b4-bc54021b5c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26615ad-27d1-4b33-bb7e-6cc953d14437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99d7909-5899-462f-a2dc-4d2810e85b5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d36bd3c-e176-4e9c-961c-a9d3ce94f87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.66.165.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f099d73-38d3-4c89-abbe-ef00951b2575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.192.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1283d98f-82fe-4089-b595-5331fff12606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.100.217.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c943929-7ae5-40ba-b1fa-5f0f5638adb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.103.164.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ad8cad-1911-434c-9701-37f678f95a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1765a263-b4e6-4e66-a9a2-d7dd9da0c1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b473a560-a97d-438e-b5b0-45ce42ce293f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1ebd8e-dc12-438a-9319-4a20c8b53114", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.130.125.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9990ac1-142b-41f1-9398-355915ad93ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.135.170.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e599941-7b2c-494b-83f0-0d9459df00ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.142.107.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc08ebba-f27b-43c8-b2a9-98d6a29b1251", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.157.64.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0e2cf6-0596-4b03-b5bf-c4e331a1bb40", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.178.124.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2584e9-f11e-41b1-99ec-2e8a7558b62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.188.91.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcc32d1-c693-4233-9ca1-e13d5561f09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.205.214.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376dce45-717c-471c-b117-369bf25cddf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.206.92.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d42c1f-6ed2-4531-aa7d-6378792eea8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.64.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcab3ae-02e0-46b4-9859-f69b7b0522dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.134.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1953b00f-39e4-45f7-9adc-b65aa47f74bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.75.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29c4196-0242-46aa-a7f9-49cbe9b8de43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b8c6d2-d063-4a34-836f-93704de973ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.38.95.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a723655-778b-469b-a6fc-b10d13fbeff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.39.183.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaae2238-c723-4c9b-b201-18b28f89c033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.40.70.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0152c07a-65e5-4cd8-ad27-8a70ff952496", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd45cd31-b00c-49a7-ac5e-bb57024ddf35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.90.126.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c968a3-dc01-424c-94c4-9d54916d281e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.90.81.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b348c32b-c9f9-4341-b270-91fb7759a42a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.91.132.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cf87da-db63-4aa8-9b27-cdb0dfd1f0df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.91.132.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0426ead8-b00d-4e31-8051-76160fa12482", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.91.132.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e97ef2-f30b-4655-bd6d-4f32afe52da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fb2451-0657-4244-80e7-7e2f0f7cd47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.102.246.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea3a439-e625-4d94-a978-628766b62390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.106.232.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c78a7c-2e17-4e4a-9b5d-fb9d4cdda875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.108.141.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e81c67-11f2-4061-b2de-b8a267cd387f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.110.5.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9df837a-9c75-40a4-a4e7-0df237491406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.114.211.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913af565-f8f5-40ad-8668-41a82d9865c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.200.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165552c5-70b4-4e7a-a015-68db97e3d0f5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd45812-affe-4fab-bd24-b2b5c174d394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.126.60.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c763f0-57e2-4e2c-a575-8a8244c5d1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.130.175.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208ab660-3314-4a2e-aa6a-9eac2d831dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.224.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345e29b1-c353-4aaf-8397-ff45c6954118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.243.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8037ece2-9f4b-46cf-8b75-dd7573995cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.25.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bdc94a-af95-4e73-9321-05bdc43cb039", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.25.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0055e3-1ad1-480f-b90e-a21fdc713c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.25.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1a4f47-f441-45ba-ae34-375201669414", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.25.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4672e7d9-6074-4a0f-8e87-bd47c4ac80ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.10.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fedc05-b481-4442-bfdd-86e488517fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.148.20.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78946bbb-5121-47fa-8962-d5d6dd2cea08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.151.213.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ea6d1a-776b-48f1-83b3-247941f3542e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.147.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0565f3-5f49-4824-b687-c060f5290877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.249.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9768be5-9121-4f51-a014-71371e70ed8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f38e05-2415-4fd1-b76a-a0153eb87766", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.164.107.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731e7d1c-0527-4624-96a4-8447be98f944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.59.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7210d0f2-3749-4248-ab52-8167a0cf383a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.158.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f11c5cf-9c2b-4f31-83e4-8145378117a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.29.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2b5f0b-de0f-4761-9e09-3228404463ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc355a96-1131-4b5c-b08b-3adb141f57ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195a9e42-ecbb-45cd-b10e-2fdc2b3104ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017e81ed-ca32-49d4-b407-27a70f9e8b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.18.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce5587e-2dc3-4500-95db-6174a5531254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6a3be0-443a-468b-a82a-0a87092baca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.178.104.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b91f300-9339-4170-9ec5-459463fcda23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.178.235.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6022d8ce-bc9c-45a7-89bb-6439796ec2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.18.14.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d2b8a6-18df-4b16-b1fd-bd77c633b8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.184.66.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a903950-5ba1-4ce6-8fff-951aabc39a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.147.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfb7f5e-68a6-4625-9ddf-3bd683b9f1d0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.91.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8d3a92-9ed9-4578-a35a-686bfe9783e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.208.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecd621e-205c-4f0a-96c2-c4574d5bc2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.193.75.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e703e5-2cda-48b4-9c64-fc534e952b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.195.100.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e1f9ad-0b4a-4529-873c-fbb48680ce52", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.135.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7422364-fb24-46ec-a989-46ad5ff7546c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d62c5a3-cb94-4185-bf9f-ea96cc3511ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2b6336-819f-476a-8fcf-addb3ab72391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fce97e5-fa76-4c72-8284-f4608617e5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa160a8-06f5-4fc7-8112-b0c2235248b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164e4c72-4e33-463a-87c4-aa1e445692cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4fbb8c-ba87-4f90-9838-22f3e4de22bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dee036c-1a6d-4454-a6fb-8379d874006a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845b1be3-5935-4323-81d5-9b5b03a4394b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0780a548-2d24-44ab-9343-67cc0ca40fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.211.217.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9966f8d-48c5-482a-bfa4-6819518e4184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5451ed2-a131-4294-b0ef-e8789f716b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.229.188.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38263a1-d98a-4924-a22d-337a13be54b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b323bc3e-5047-4502-9700-26b3f57c0a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4a12f4-2f6c-4f65-8f32-5b52b64fc4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aad540e-eb25-4e80-bb7f-2c7986d8f848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8a45fc-02a3-4e06-9e9a-7345ea6663c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521fd691-070f-4211-9603-dcea3be012e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbed5bd-13c4-4480-a0de-ca521a53eb37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19419a37-e41a-4758-932f-a77c8bf4634d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b71051-9c96-4705-b631-bf60fe3d9aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bab8d6-d346-4eef-9268-7bcd0d459a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783a366b-314e-4f29-b347-3f3752ca2146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0cd228-70b0-45a6-89c4-4b3920573990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ddbe99-a0e9-4894-8da3-ec7ed6e2767c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ee7582-5a09-428f-8608-a20194968ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd75131-5c91-4267-92aa-41d7e3c14911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.96.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ece56a-d31e-40d1-aaac-ca5af83dc39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.235.92.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5c824e-ea34-499e-a27e-a665d1875701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.237.157.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169b566d-cbb0-4527-b176-ba0bb6396df9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.240.99.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cb6ac3-625f-4b88-80d8-cf856a8a0daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.246.250.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a807bae5-bd99-4270-85d4-3f167758f6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.247.13.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88897eed-d1c7-41f5-bd89-79dd18501c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.253.68.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc5ea51-fd62-449f-ad21-318d2ecda6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.31.82.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c845241a-e58a-4353-8790-b0e0a9596c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.35.123.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4911a6eb-bfac-4bec-9260-d09ca06f8393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5723fe-bf3d-43e7-97ee-b54dca2b80da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.179.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201da877-08f3-4c55-9092-dc74d37d78a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.61.223.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53b326c-b515-4b59-b4aa-bc55e5f16384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.85.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafb3ae6-1d95-485d-af0b-cf1e3dcfe923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.70.147.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7c837c-8884-40b6-91de-9a4cda62aafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.70.177.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4da251-ce18-4d85-9312-25eb311db827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.73.199.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1096c35c-740e-4163-a287-a37c4d5d4657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b932682e-d5c1-4394-899a-43202f10274b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a07d489-ce4c-432f-9c22-17f25dfdd2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.246.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e797d74-3cbb-45cc-9369-d420930b8d10", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.80.70.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4a22eb-9829-42ef-bff7-7ca992c8b1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.37.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9b4f9f-862a-45cf-881d-03a5459df27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.83.175.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315c42cc-ed28-40f8-a510-df6632f57fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.84.58.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff99ddbe-1abe-49fa-9487-a194daf1cb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682f3e06-337c-42bc-8c96-02b5805185a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.91.226.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a90ded-a9d2-47f2-b74e-4b42ce45a133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.93.42.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299a9e37-4458-45ec-bef1-5a9f3f1a1cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.128.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f913a9ab-5284-4dbb-b3f3-ea732e31c9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.127.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a974a2-73c5-42f6-bf28-b25b30eeaf4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.173.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06eb2bee-1c5d-4739-a24a-2944152aa98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.164.62.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4b613e-0530-438d-8af5-687d5e10436f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132fa1d1-c7aa-4fb0-9a9d-908a24b28aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.8.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef891bf-bcfa-4a83-9af8-8e89b30883c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac7dc72-19cc-4895-884d-6ade9c0b9b2b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.4.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff20a39-1e58-4654-8fc8-1bcb579f8a47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46211fa2-bf78-468c-97c7-f76fff36d5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.164.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a067458-36da-408e-a6a4-b76834824224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.225.143.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e6cda1-1f00-4b10-a6ca-5d13057084b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83608d68-b552-4a59-82e0-72384ce841bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.199.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db03ba2-f230-4e48-9a15-d59e3788f313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.32.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d499088c-76c2-4e39-919e-4e4b2cd4c91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.66.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6849c0f5-a6cc-489a-9802-485b0b6b483a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcc5056-cdec-437d-a4df-6cdfb06a715a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.147.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d441646d-d758-417a-83c8-f9a47f01ee8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c67e75-1751-4fb8-a098-f512177f07a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd019a2-d887-4849-984d-c5e28253982b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.240.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076b7301-7c12-4457-b86c-b309333ec296", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.224.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094cb239-6c51-450c-8763-a7bf4a30477f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3b5e00-7332-4248-b945-4c5155a68fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd317b4e-f534-45cc-82d3-3bf6d30aa833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.38.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4628dc47-ba89-4ee3-9200-55f95d38e773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83d7110-3642-4a81-9700-d5fc5592f87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.75.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd5a277-6110-436c-8a5a-4571f4fa3d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.79.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d43c73-846d-41b6-b983-1b40f55221a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.136.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc15ede5-2a5f-486a-ab65-abb8cfa87e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.143.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96f70b7-bd46-495a-9054-c40193abe545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1225554-f10a-4f43-86ef-57eeaf150dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.177.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfa2034-16c9-4971-8e8f-cf9f6cd996bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.184.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b874f6-c791-4c2b-9a32-559eacac5d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.195.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbe94f4-c8cb-4a30-84c6-e61d1423c48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.198.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c0339d-64ef-42a0-8f24-de055e48e373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.40.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b949c62-075e-42a0-bd64-ce3cb5f5f915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.51.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3960e35-4094-4c05-94ac-5cf5f06bd235", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.36.181.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eead1396-d979-4113-8e3c-79ad1dc6e064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.172.112.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc419b7-308b-4ecb-bbed-3077a0c6fe3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.172.236.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4641fe3-1514-4995-bb80-7673b52cb069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.188.122.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627f4513-d1ce-4c9c-8d9d-a93abaf6cbe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.188.50.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb02d74-b5b2-4173-824b-088aea76dff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.197.214.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f03e83-a0a8-4b47-9349-4dfd45a3d18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.24.184.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cafbde-62f1-4f39-85e9-043820d9210a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.114.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d431709-17b9-4896-b117-5667e410bc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.74.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d14a237-adac-4e31-a61e-3e5623680210", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.37.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cace0b7-2373-4c5b-ba51-6e5ddcfea4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.48.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fa69e0-2ebf-4c45-8c9c-9a99bce16615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.96.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e108e8a-393a-4713-8bb5-a3acb0cde501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.15.238.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df944048-d2c3-454c-8da6-2af1481429a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.15.6.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fce964-0ccc-43b8-b055-3d70d2ca38eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.202.31.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca2ec88-dfa6-4ed5-9c0f-166e76b9994d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.202.61.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0351f01-a527-43ed-aa21-5b7bafa8c66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.215.138.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0625ffc5-bc2d-4d66-804b-b47d6eb3e112", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.215.162.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d01a7c-b086-4878-8845-80d23de96556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.219.120.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6743d7-8da6-4022-a760-053d353e33d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.219.151.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafa569f-4276-45b6-a291-ce0c6718c20e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.219.183.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd26d393-2ecc-40f7-b8e4-38810ba568f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.255.253.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26367869-0901-4de6-b76f-46c084e873c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.55.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67074f0b-a6ca-4fc4-bb54-363187af2ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71b81f2-0f6f-4869-bafb-d6b1b5b0f00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301415da-901d-4b1b-8b26-decb142001bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621e2227-6dd8-4d9a-bb2a-d613c19659d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17085d8-9a4f-4a02-860d-9fd3b5adfdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afcfcbb-2dc7-4ac0-8375-955689004094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bcf6e9-b882-44b6-b3e8-88cc3d86c5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.184.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1749b8-0788-41d3-9422-87bde96580d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60107acc-e8b8-42a8-95aa-1ce706d104da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3490cdc-b437-4ffa-a3e0-c4e54584eec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2f89db-08a5-48e5-9006-1302e458f673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.224.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e706718e-3c78-460c-9e79-3d0ac8f9ba6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.230.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313e20a4-4ef4-462f-a495-8ec89acf8415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.76.73.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618476bf-f51d-44a3-8b1f-a85626d74ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.76.79.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0746e9a4-679e-4312-b242-4c4b4efa23f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.77.157.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9af0ad-d37d-4c84-969c-b9d34d4593b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e3602b-4981-4938-b8e6-eb99f5c2d242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281d9a9a-6776-44a1-9b4e-cc859545115e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1d00fb-f319-4f20-9e47-2dbb050c7b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae62eaab-85e4-4343-bc6e-583265ddb923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08efcb41-e02e-44a8-8492-31fa5152490d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60acb51e-dd40-4581-aec4-1717921c2fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f92e53d-dc13-40cd-950d-2c71dc6a7967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e72c31c-6d31-42dc-8ee1-2873b71808a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8fb2e2-db6f-4d29-8dbf-ac29d1bcd346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb694ae-6280-4cc3-aeee-d617921b1ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b1f1d2-b464-4c47-a2a4-c5d2118dad88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32615630-d5c0-46ef-8c8f-1623e70fe035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24fc260a-2009-4333-a004-c89bbef45f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5ef361-4b96-4e96-9215-59f42ed9312c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675b10b9-1ce1-4623-b361-8478e8584627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6c2af3-526f-4fe1-bbcc-6bb6fa84e84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a772e3c-8815-406b-baa4-e4e957f5afff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d065db70-c244-48c9-8137-07cf08a61fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d62a860-3f34-493e-8964-658ce13e40e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcb710a-cb45-4b73-ab34-eed0ef82bab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef3c1b6-09be-4db2-a538-52a9b70b1fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809bd1be-2cff-466b-bc95-b8af6df5ed58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ec4cb0-7bf4-4dd9-ad3c-e2e1fa69270e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86202621-1c60-4ef8-8ec1-eeed3d116106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab14d7f6-3589-4fe1-9360-2a1347326435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482e31b7-ae70-47f9-94de-eba25ec7d3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2412e4b9-ff03-4359-8466-4e1cc1455928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.88.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240cab36-d70d-4245-9405-405e4e96a15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.122.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e295f6c7-6e35-417c-9b92-95b0550c2d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.146.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d382bc9-68a9-42fc-b2f8-2f3226d895d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.182.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5472a30-4f9d-4c19-a4a0-8a7948ee8caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.210.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781fea25-0299-4fbb-8d73-63b45c3eda76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.38.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebe2ed0-31d5-4bde-9a74-27d306806397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.41.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7be003-37c2-4ce5-9f19-5677e569a939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.141.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb5211a-d53a-45c2-a31f-12d1ce827d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.20.126.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35eca1b-6243-4333-ae15-23da2cbfde6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.6.164.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a42858-cf59-459b-bcf3-cf176e47506a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.6.164.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0222e55-7904-44f1-b317-867c47bfef41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.6.164.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5fb93d-27cb-4583-b436-ef4554e41980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.7.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93b5be7-8f23-4970-a567-ce4c3090dbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.11.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd159ac1-0782-42d0-a434-562a9e6d89f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.18.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1c3236-276f-461c-b329-1671cde2229e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.2.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1767897b-6cd2-4ef9-8af4-4fdd0433f816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.22.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5174265b-29be-46d4-a6b4-b624dfce83ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.57.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bde35e1-2f8b-4145-ae93-853cd497fbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e853b19d-91c1-4f2e-9c26-c0c43bf92001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45aca171-3622-4c26-8027-d7d67504d3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279f1966-ad72-4673-875a-3cbd2e0b063f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85d0d92-c998-4adc-ab04-1e35818aea19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b83b94-9ab8-4d62-bc71-75c0beff61aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75f799c-5ef9-4031-9fbe-fb768ef1287a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c171d3-219f-40b5-b567-082817dba70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7552f152-32aa-4fb9-96b2-64730ab7b726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e00cc29-a5cd-441f-b309-4b47340aa67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8365ec7f-3281-49d3-bf96-cff9f46f5b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0015a27-86f7-4596-ab2d-36e408b0071d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad965be-f5ac-4c04-a8b4-8010faa2fa92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b46bac-754f-4acf-a64a-055018a24741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323474df-5420-4f82-975c-fe9f57252627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d8e92b-033f-406d-92c3-1967ecdb3f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f6a14c-f51f-4b6d-83c0-aab8cc565501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.211.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9de1ea6-655f-44db-9b55-f912fac92726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.120.184.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84660be8-a09e-4d43-b9de-2d23610a75da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.117.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa47c92b-f5df-420f-82d8-1f7c5330b613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.117.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ad4246-fe16-4079-88ab-6e32b4775b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.149.122.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02c5ddb-121b-47cc-b59c-0ae8531f8c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.169.198.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34f9f91-75a5-4836-88ee-ce7fff7ebe3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da61797-0c2e-4a96-9b25-9fbbc2469826", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.224.242.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec3149e-5b74-4d7f-be62-f778432da0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.224.242.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3746c6-371c-474e-8b9e-1363e05faf30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5478cc5-3d79-438d-9a77-424b6e02bfac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.248.170.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5da718-e20f-4e3f-b030-7f0b29683c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.87.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb075a33-c956-489c-86dd-ede0a9776f39", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a89f1e-f2b6-4a46-a704-a9d536d72aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.20.225.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b61b925-92f0-4e8b-8957-abdb1f2792ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.202.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19097d9d-b7f5-43bd-b7f6-7d21e6ec4b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.35.80.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e3f888-5cfe-43ed-bce6-99f2ac754f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.36.19.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c1170e-d024-4a49-abf4-ebcfedfd2494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aee9ec8-d26c-462f-a4a2-6e178300aaf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.175.88.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9eb8aa-cfdc-42c8-9350-badf63db7829", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.238.174.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ad81b3-e63a-40a8-ac17-e93e3d332af9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.26.6.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf7bf1e-c1d2-4f9b-9c96-b050abb26bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.32.153.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd4e097-8e09-43b4-b203-b5ccdeeef2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.43.94.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3126c5-5918-4e5c-a36c-ee9e1b34c316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.45.29.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdf19fc-6054-46b1-8df2-24ba35bf3147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.68.111.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212b273e-efc2-4e8b-ba76-e0202259819f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.88.132.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f44df1d-57b0-43e6-b601-779661d864df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.118.69.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a512a74b-5e64-41da-87b7-3bbed1b9744d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.162.246.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb24bce-b931-4e5c-8b61-b49c5425a6af", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.170.207.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00a67e4-d5bb-4e17-8147-3a1f005b0592", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.201.186.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba649abb-20d3-449b-9cb3-ec888970243a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.204.96.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a43ae31-70d7-43f0-9d31-f229a6d7ed8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.205.146.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ee2587-6f73-4cee-9254-24963174b75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.208.174.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1295d1fa-d950-40eb-a91b-94d6f0286bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.209.171.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e99bbc-775d-4e1b-ab4b-54d78119d49e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.226.200.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db017044-997b-430b-afb6-0c0e64adf949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.248.0.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176d911d-07d8-47e7-bfe1-4087f5de49dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.38.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0099fd2-d92b-4103-b359-c757d2a3da94", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.78.135.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a75ba3-1a2a-4b85-b427-a8285a98c723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.90.220.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf1ca4b-650b-46d0-bb80-8f75747dd884", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.125.165.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd96fd2-defe-4338-858d-ad97ea9e98f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.125.55.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f7ad0e-db6c-4cee-ae74-c5c3f8243b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.165.186.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c967864b-8d3d-41c9-8a88-b0ee75a66972", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.199.244.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707efa5b-f0c9-4cb5-a9af-731c2496429b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.211.215.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6664ec5-c91e-4c8f-be76-04f856f5d589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7507d1a4-40e4-4e5b-be73-5a9015ce98e0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.112.96.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4ef82d-5861-4fda-b8e9-c3b309b0b993", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4c62fb-5628-4866-bf06-97a1228ae9e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329d3c6c-b91a-4a6a-bfb3-022dfdd7657b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e477790-bc88-4cf1-a65a-bae8017c3887", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0f5cc6-43c9-4357-a7ef-3049f66e7492", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b02020-663a-43c2-a2e0-09a9a9de9a32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517b1d2b-f325-4b90-800a-1b24785efbea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd3d46d-05cb-4532-948d-3ae6429b782d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48efd246-d76d-4572-adad-216cf51a43c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4fd896-1ad2-41dd-b245-e8f14ba2e403", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1b2b7a-1a8d-4d69-8bc0-e3ac99b1b59e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb75fce-bf60-4a5d-8c51-87164d4e1562", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065b91c6-1e98-4ba6-b1c0-098949a6f899", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57704c77-407f-49f8-a8f0-5ca565a8da29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07b8164-7582-4dd4-9e40-0097df98a0f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f728046e-d4d2-4fab-b0fb-f4627531a687", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca045d5-00d3-40b6-88e1-c70d00620b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.220.176.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817a26fd-bf96-4214-b9b8-c1c7aff5a69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.220.75.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86d6a4e-56e9-428a-8d1b-ad381f6f2fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.30.133.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f564ef-ade3-4666-aa22-634210037eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.31.177.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9064118-6b78-4454-8a28-dc93ff8eeddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.229.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6585b6-9bcf-44bd-b48f-8a4b63a0e9f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48993342-8c7d-485f-85cd-f24ac90b847e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.97.191.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44beca7e-65de-4bb5-9e7a-587645b6aae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.135.87.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ced2cd-58e2-4527-b512-01ecea31734c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.165.229.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e1bc1a-fb35-41d3-88a0-ff8c010c8dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.173.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb0f30e-159d-4269-8865-dd6d749b4fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.211.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc83e5d5-9393-4d38-8ef8-f087a93b90ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.54.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885e2722-a106-475a-9301-15af922cf254", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.27.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442c8e7c-7911-4bc1-ab3c-3b574ab9ae3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.193.219.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9766c83-04d8-4ebe-bf1b-ca0f9d3beea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.203.217.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef233bb-f36b-4239-8890-6a790e371d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.115.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0683c07e-ef54-4f2f-9f71-16e7b54bbe3b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c7f9d3-c431-4de3-89c6-0425f473fb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.43.72.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8fee75-2b77-4ebf-949b-98be1ccc6489", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.85.80.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7d17c7-ff97-4af7-b20b-800a23488c24", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.154.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ece80e-565e-4fcf-8e4c-a76497b1d547", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.147.40.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db848011-0fcb-4f1d-87bf-c5becebfc817", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b89fb9-75db-4f07-822d-041aaafae116", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322de091-c2a9-4301-ab9c-309150187387", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7895338-cd09-48e8-9c9b-21e77bc7bb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.203.16.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d91ea9-cc13-4795-9e4e-68055d3b1c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.95.87.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8500c41-4ac2-49c9-ab06-1f0dfa5fa2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.11.225.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fc1d4e-3603-4c8d-a6ce-129352373231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.11.92.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7b8efd-d629-4569-9101-bef4725f17c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.154.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3202fa10-0b7c-44eb-8bac-5b28dc0be16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.172.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb50aad3-24b1-45d0-b857-702f493c82c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.173.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1a8fae-b916-4e20-b86e-5d1850145b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.144.13.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718a48e5-dd0d-4175-bb49-1c3ec06158d3", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.146.110.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a317a0-0df1-443f-8072-dbc0cbb69ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.175.105.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf647166-0b7d-4daf-8d63-4db959b3b49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.41.181.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff2ea27-0d66-4904-8e57-a0fbc50db624", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.6.44.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dce0f1-7dbb-4717-b48f-93f7903dfe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.62.22.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799cba71-b89a-4500-883d-c859bad05d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.163.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4232fb1-6217-4cc0-be2d-28e4b1da14c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.89.245.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff32e11-1190-48a2-8abf-28181a42079b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.164.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ae16e3-7e0e-4b30-aaed-af7969837561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.245.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6a97bb-e931-4855-8f6e-a362fe390948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ceddee-13c3-4426-996c-851bbb083a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a3144b-fdf6-46fe-86ea-119d6519fa8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13adb916-03ee-4302-8263-1548ef870b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61a3515-c549-44a8-afff-ee7dd19a68ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7e3219-e9bc-4f8c-b4f6-ad5bc86ea6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d66ec3-4912-4169-951a-0d2fc3e82c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbea46e8-d0fd-4c3e-97a0-8dea549c78ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8e94b2-778e-4667-88cc-c103447bcd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec72ad24-6dcb-45b7-b8bb-1db6d5ddc883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7323f123-b1fe-4c0e-96e0-f4a404188a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66df2b1-8720-4c48-9217-8570423d03ed", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6376a6be-5f7a-45e0-bafc-81e71c139740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90761b7-530c-4f42-a993-d25d3ac74a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512481ea-21ea-472c-bbf6-429eb7d4c8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8345d13-d829-4343-9704-cf4f57c0100f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9b2d32-07c7-4cdd-9130-641b057c86e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58445139-5393-45d4-839a-cfd238a463dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226e81a1-77a3-4c29-af96-6153a8c44345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6316633d-4e7c-436d-b3c2-ee265b32c292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fcdae3-1f69-4ec8-925d-981f6f96cd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--face8044-1079-400f-88b1-105f99c509d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdcb596-dc3e-43c1-8fdd-573d5e22e40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942a43bc-1010-440d-9dfd-d2e3725b0949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6bf1be-cf1a-48ac-a094-29b4df657976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a24995e-4559-43f1-bcff-8a4070ad2cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43232d13-4d46-470b-b505-d25a26ca7ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f124efec-4585-4ba4-91a8-e023b1b348ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf086957-d9bc-4cfa-8469-76238ae16cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8184253f-f77b-4383-a75b-92f17e5c7fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5c7e7b-3b38-42a7-bb08-5bc864121e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef1dfc7-bf6c-4838-9d00-4ffc54c92a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdec03f3-b10a-427f-889e-7693cb829734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440659e9-147f-457f-a5c2-3728d77d9428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72500bd3-6ce1-42c8-9614-8b3942fb1363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf6f794-9717-460d-bec2-7aa809a515ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60734f8c-e43d-4838-aa39-25ad547288ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decb30e0-eedc-4456-b9ad-d4eca346e4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcff355-c21a-4adb-ae34-b338d6e48de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752e5440-586a-4814-afab-7b3960b6c757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00760fd8-b500-4ac2-9f26-f850289ba7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b57307-87c8-4a98-b566-71758a705d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1a8a28-8fe1-429f-87c1-b7313f9e5f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77234214-6d4a-44d3-9175-7ed668265773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.16.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4962c200-987e-4d5c-ac59-25fa6d04560a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae0194c-9605-4135-b2bd-8d3f03c1b5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987b8716-8719-451c-818a-a7e9e7fa9c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365fa600-d51c-4712-bf88-e00f9b2beb96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7870c93b-e8e8-4e2d-8d83-98ed5ba74c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e67b7c5-ee68-421d-9ade-0774172fac23", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.79.130.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e7a1cd-4250-4554-91f5-396168a1ec30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.97.247.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e217fd01-e86d-44a5-9961-c170233dcefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.152.240.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58eb7bd-7372-4857-bf75-51f7713835af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.160.215.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d8d71c-0f38-499e-bdf8-d6878e5a5e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.253.93.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62eb6c1d-465f-4b46-9ec6-0c7ab9811e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.107.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13084c01-5ee4-4d76-a542-66c85b6a581b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.122.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4e4b95-6c76-4250-bcaf-311171ec2f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.247.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6996d28-c3e7-4985-9a2c-d0f860772926", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.3.233.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd85d1a0-d4a2-4fc2-b55e-8de91d59dedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.93.215.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b698795-9c84-4f7b-b800-e7946e53f943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.173.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c77c2b-af4b-4e8d-b903-22c8d46c97ab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.242.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abf7139-8ce4-4ea3-bf39-11aa546e0032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.55.16.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fd94a3-0b8b-44f8-9582-df1d889e66ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.24.119.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2eb8940-d0dc-4082-932c-99b64eb2b5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.95.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925301d3-991b-4784-bfa8-7af73d2148c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.79.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da030ee-9217-42eb-8b65-552b99f753b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.231.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7493ac-3c48-4f55-9ad1-308d2f1cc88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.109.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e174f5d6-afe9-4f18-8022-e3282bf9fc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.111.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c25a2b-a13d-4959-b867-267ab35c0dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.130.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837a1d4a-1ad2-43b4-bf99-d1d5e3eb12ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.32.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c4cb1b-029d-48bd-8fe6-9f1e4a3ebabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.7.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf1e87e-01ba-4c8f-bcb3-7411a2a4dcc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.121.95.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99324f0-e1b3-417b-a462-9d07151996ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.123.48.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0b9f5a-b40c-42b9-8a10-7a692274358f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.151.114.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7faf50-d474-4733-9a90-8fa3439fc80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.171.125.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f086382-b5c1-4607-be2a-f9cc9c6ea0d0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.196.227.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3945ee0-a763-41ec-a21a-b44194122647", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.224.5.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0da878d-ea09-4c9b-808d-c45dbac4e732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.224.78.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8677565e-ca21-4c83-8e85-286c1b0a55e3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.227.152.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a30f507-0629-49da-85f0-ca4092b8c395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.31.210.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d1f019-7a28-4948-8073-57c19bcf470f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47138300-feff-4329-8a92-a7ba5514b585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.56.212.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076f8e39-776b-4a99-9575-2a8cc790a9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.58.196.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d0657e-9cbe-46fa-a0ba-ee745a985443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.78.125.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a478452-8315-4160-a32a-474a5ad5b08a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.100.194.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b9df5a-656e-4e23-abbb-e1ff9425865e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.166.228.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1adbda-5fe3-4690-8ef2-051c96506ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.168.89.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75420769-54c7-4034-b7f0-49cb89cda981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.180.68.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037d0f01-f7e7-4e66-a994-a57ee36aa50f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.183.42.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb022eba-7ddb-4be1-b136-cfcca66ebe68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e661c371-9699-40e8-b2d0-978b08e3999a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.54.146.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6440f43a-9ccf-4860-b65b-8ffc120cd68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90a30bc-a1e4-44c8-b64d-8a77a110954c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.13.41.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a09108b-80bf-4fa5-9f5f-921345b27d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.15.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f81b42d-aed5-4a7f-a3f4-4659e6f940ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652aaedf-e1ad-48d5-9083-9082d09f6f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8809bf87-cdbc-4f77-98d9-9335b94112f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1e1c3b-9d88-4548-a031-f822ad7ac598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.207.22.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd27c751-af04-4b6c-8559-95a634db964d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.207.65.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1233ae-399e-4df0-babf-4ad7f82dc451", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.231.171.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ef6b8b-60e2-4f28-8328-3448ef7bb8e8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.231.179.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdfd262-1663-428c-9d81-7cbca261bc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.28.152.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b69051d-ed80-4011-af83-f21c5a60c252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.31.18.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecaacf3-a922-4b5c-90e2-2dd54ba57242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a633ef7-3447-4161-bb3f-eeca97f15199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4bc921-91b2-4edf-95b9-0a3658533d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbd9992-6d76-42f9-ba5b-fe3bc6d88deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3d9f61-6b09-48b1-9afe-16ba6dc31117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ebccea-0c7b-4cf1-b402-1b47f21915b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd3bab1-734c-47fd-b9b5-ef1d0a5535d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.96.235.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26964524-0c95-4555-af26-b4f97acd0c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.105.88.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddbf6f7-af25-42eb-b15d-25e2396dd138", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.122.187.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7235082-cb64-4cb9-8a7a-a6540fffcaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.150.88.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfdbda4-ecc4-43e1-9592-504d35a17e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.206.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4760c635-3c92-4989-862e-f2dce45dfc1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.16.115.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b955eb42-7bc9-44ae-aae2-54744470b397", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.164.251.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e9df69-403d-44f7-9e67-06e52b39511f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83b9e4a-2752-46a6-a364-78d26272794c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.132.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0286ff6-5b0b-4f9a-8d66-6365146328e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.217.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390d9378-f0e9-462f-8194-3b4a73acbb4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.165.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c32eb8-5c1b-4dd6-b56f-a573c1aded37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.78.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa70cbb-a11f-4e3a-819e-3ded72662624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.235.120.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e08a159-6beb-4c18-b96e-4c088d2697f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.194.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419d24f4-6351-425c-8e5e-e579a8586125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.55.221.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb59f73b-2e99-433a-91ee-b804beaf9cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.121.191.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343d44e5-f720-4d84-b318-6dff21a04770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.165.139.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3dfd38-e611-4a5c-ab5d-a05ed77500dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.20.210.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e09ba3-002c-4452-a403-e35b6d6ade10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.21.59.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c184c795-22bb-44ea-8c1d-a51181fbf42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.24.5.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180642e5-f281-45b4-8929-ad8cf5175ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.31.41.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3468e668-cf1d-4fe1-8996-5df3e7e63198", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.46.215.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7700696d-2337-481e-b942-df5130a2a77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.91.140.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97eea3ef-b223-437f-9374-a5c579289e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '126.209.12.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6452ca-8b38-4826-9dad-b967e9528358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3421289c-b0e5-4d16-a134-489c9a5e761b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e799cf7b-4493-450e-901b-ce71ea38adf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbdacc2-ee63-4e06-a26c-8e5e369e9f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.7.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e43bb6e-d832-483a-99f1-c20faf6939e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bdb9a4-ecee-44ef-bc50-38a62401cb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.127.192.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39aada7f-ac67-48f8-ac6d-e0e984fab4dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6a6289-4fed-4ec2-b205-93e00325511d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5b4f34-080d-45fb-845c-fa61ad3ec4d9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.205.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d6f98d-69f2-456c-9444-7e901ea9199d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa91900b-6c37-4c43-9734-47b429a7120a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a69643-2811-42e5-838f-3b971575f2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b3a57a-e85f-4e5b-9ee9-7b404fd81a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5201384-bb45-497e-af30-aaf0e814f3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959c87fe-2a32-401f-9a65-8e9d91fe44a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.89.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f1a042-60df-44f7-80eb-bae55b2cb2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.206.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea785c6-60c2-4932-882d-e8fea919a210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.207.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffe3c01-7915-4e57-9e91-68049cdd8c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8defe1fc-5c66-4ba9-9f4f-ea483643c133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7365a69-0b66-4523-81e5-019429804f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887286b6-9696-4086-833d-cb413ac890fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a369f14-8b80-426f-885e-f72f12f66447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dda615-101b-427f-bdb3-15806995ea3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5355f0-0b4d-441f-b5c9-99d25e27073e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ca9e69-652a-4476-8288-a63dd72b0d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdc9ce9-9186-404b-b3ac-f8ffc2a1530a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fe5597-bc35-497e-8947-34fcf820e22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f6187b-c451-4fb3-a184-6996801bfdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8228226f-9281-415d-ae0c-27351ee226b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54e4cb8-2da6-4d6a-8ef6-c3629cbfdf50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ec992a-bfbd-4e31-9ed4-2bf40e9588a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac9685f-48c4-46ab-9759-5a6f40a70e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a2e154-8ff7-4e1e-8768-9d83e33ec240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c863915-25d3-477f-b289-f40f244a4a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bded74-487c-40b1-9618-dec0358d8e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9f9262-6b65-438f-9427-defb5a3af138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f247bc5-9495-4e42-bcbf-1ff89e8659f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.185.222.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e013f0-74e4-4cb0-95c1-caa3d2bfce3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.100.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e43862d-0f64-4007-bd88-953d5a9934bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.181.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029ea951-738b-47c8-8a15-2cb5cb7fbee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.78.217.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949ae134-9f9c-4681-98f6-39980a62cd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.0.45.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684f9f8b-3234-417f-9c61-da57070042f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.159.24.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad8383a-951c-49ff-a540-c7b414e0441f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.221.66.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70128e5-d0b5-406a-be8f-7bf95cc260d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.211.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b6e203-b395-4137-8fc4-c103684a72e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.211.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba69522-c829-47da-98ac-77af49f0d343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.252.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c7c974-9492-47f0-9a66-183010267c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.253.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a495523b-ce69-4695-91ef-85bf1592f440", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.226.17.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca1a3b4-0dde-4936-9dea-520a55bccb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.72.66.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3997c9-1733-4e78-badc-ef5c45aedb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.225.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ef2dbd-4e53-46b7-aabd-a1a8c18db5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.119.193.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f9a119-bc28-4928-9916-6b71cab15a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.112.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd1503b-76ed-444c-9c96-8206856fed32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.126.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e94a50-2afc-4856-ac70-4882f57db3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.19.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7177eef4-8e8f-45cf-8f23-4404cb1a808c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.20.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6654be-f398-4d9c-a1c4-fa264852a667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.33.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52eb4d28-a7a2-4352-9c00-2cd9860716b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.46.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcd589b-be52-45e5-bd88-dede60a949fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.64.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1e89d1-3d07-40fc-af13-f5f8bbefd9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.69.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce1f891-6f2c-417c-ac35-84080a142817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.76.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf45b4b-2aef-4afa-80b9-0dd6f67e5615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.92.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db046ba7-45af-48f3-8538-3fac50507742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.145.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25ee681-3780-4b90-bb26-19d87afbdb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.161.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7e7c5c-0a73-416c-b7b5-cddc3b7cbfb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.165.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f195af2-d235-4baf-9d0a-85a7b600584f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.169.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1929fe-f5bd-4dd8-9cce-9c4e2f5db0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.211.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befd64c1-3203-4ffe-99da-4e50eb0d114f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.165.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493c8d17-f18b-4a5f-8c78-222652ff34c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.2.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196b3b64-c468-4e85-b934-ba283f1b96c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.203.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45913cd0-d988-46e3-97da-1d7c7c801a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.221.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117c7a4f-5f4a-4994-b8c6-041bd8dff9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.23.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dba7fb4-9c39-4cdc-b237-0d956507ff12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.23.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aca4d3d-4ce9-4fe1-8ccf-184c205c558b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.37.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfed70cd-1695-4277-9c30-620db207e10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.86.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3c1b99-b2c8-4640-ade7-70b00772af56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.106.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee5e086-3d3a-4a6c-9dcd-99c1824f9171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a00b0f8-cda3-4584-9858-01769ae52517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd18b23f-2bf4-41f9-88e8-24a01ffb5a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cabe33-849a-4ac0-9b2e-1c174e53a1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e176327b-f044-4e2b-b974-b8f6f6413013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1c585d-fe43-4068-bdff-2e74a97a879d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2d637a-baa9-4ba6-83d1-f5bcd190bf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc162fe1-cff1-4401-a5b9-fd9450393c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9683b2dc-8c88-4078-a3cd-4bc5cd0e6540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.27.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b64d39-5e2a-4495-b561-3cc170775353", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.33.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f96135-0b3b-404a-8bf6-653d085363bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.160.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee630f8-9fa2-4afe-939f-415217e09ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.67.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55807860-4240-415c-917e-4c447220fdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94964874-064f-4bee-80bf-720fe061d59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0e9e3a-17d9-4775-9475-fa8ac04f1435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.96.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e08d0f-bcd7-4c7a-96bc-8b857d898987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49211c6b-6112-43ed-9f1d-578508dc52f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fd0618-2b77-447c-9300-fdd9ff3d453e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50658566-edbf-4e58-ad1a-559e0849d0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d86ea70-136a-48ed-a16f-0c7f18b0d3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ad0f09-e7ab-4779-91bb-f6e5f61dd419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d03c47-586c-4f45-9821-8ef57d6893bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed7509b-e2b2-492c-ab69-94c9056ba739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c2dddc-2d09-444e-80c4-8081df415095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b68b72-7454-43a0-ae46-7987f4cac6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc5248c-7045-4730-83b9-ecae2a27700d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7a6fc0-833a-4168-90ea-898c6bd0e359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2230fa-0b0d-4e1f-ba8a-e1c81379f30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c941be7-0d50-4159-96a5-f7ced3720aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fc61e3-ed0d-4fbe-8de7-0394ebd222f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a2bf43-9b9c-415c-a6c0-ee3710e64901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdaab45-a849-4c0a-9f81-a08f058643e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283a8c5f-3db1-4e0a-a65e-9baca33083e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9797f061-1ebd-40af-bdd9-95c73db3147e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7093a73-1d7c-4e74-bde9-5b4f15c3fa81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8dd19d-91f7-4730-9353-aa6463598988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d2db4c-b1e6-4b1d-9516-02a37d1404ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44813ff9-7cf2-42ac-a75e-42269196fbed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c881e16-0d33-4ad0-b6ea-ed1809f2cf48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6490d6a-e77a-4194-a890-a07399e04289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48445ab8-7bc6-4008-b597-6489c747b6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e335e2-2a1e-455a-b89f-1660b37b2747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedab35c-c81e-4ac5-9dad-57742e95c834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87e16be-d790-49d6-9879-cbfe1ef74eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca2761b-c3f4-4db1-88c5-15cf48cd92c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34c8efc-8e11-4588-b2db-dac26cf9bc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e43d9c-5ce1-499e-99c9-4271519deb7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1f618d-c7da-4ac4-a3a7-dd80965de98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93acbdc4-12f0-4cdc-b6ca-4212e66b1504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff1bbec-2440-44d9-9c15-ccf0db7bb0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a414a4-7a31-482d-82dc-49a5830d9bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb46ac16-84c1-4d65-8a07-df8ee6162a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e99daa-dad4-4702-8023-223ec2fd4c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.115.140.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72966c15-c0a5-448d-81ed-2f1f71e6b25e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.176.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e938e4c-3d7f-41ab-a0e9-79a6d62ed906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.232.11.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1796d5-7d35-4a3e-9232-d399b4216d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.243.133.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4788c155-feae-4efd-85d6-95262af8778f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.243.76.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d165179-83e9-4be3-a766-456b2cd94db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.113.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe10078d-1fe5-4e0c-a464-2d7d884848f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.125.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383d34ec-b407-432a-a9ef-782f05e87243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.129.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cabbcd4-e0a1-4a4d-9941-0257cf30e361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.145.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a252bb7d-6c73-42c6-9877-00c77b061495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.162.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743bb20a-e85f-4821-b456-790967b49760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.185.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85c06e8-1c7f-4f6f-8aaf-1e938f9d811c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.214.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec1a1c6-c853-4cdc-9532-2bb43ec0165e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.232.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17983f06-2224-41ee-9816-5e439be1b54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b97adc-deac-4ac5-a1f0-594632d44f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868d3019-5574-44c4-9c60-221338436daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee91b892-d012-4f3f-a132-a7e7abf92dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1136d494-8bac-4395-9588-4124ddcca1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.54.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1bd45d-dd13-4e0f-a977-6faeac40f984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.118.185.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b525ed68-f7d9-4296-8ec9-204602f0d69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.121.114.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180dddbb-58b0-4fae-91eb-f0f2b6420cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.16.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22eb1050-0f08-44ba-b3a4-bc1b6eba5bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.185.9.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b078efc4-cc9c-43d6-8acc-ec3d5310caae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.185.94.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982da711-f0fb-49ed-8fc4-b9d490eb59d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.186.118.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a524019-d730-459a-b493-bf1e4a8261f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.0.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4252acd-d4e6-4d3f-8084-8e285a960695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.118.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49122005-c8f8-49d2-beeb-edb243b4fc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.131.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3648f6-016b-40ed-9e6a-1ce750013d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.133.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241461b0-2625-4ad5-8b63-486c2633ca95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.134.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001b4430-b6cf-44fe-838f-55a39e291589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab2f9e6-579a-4c6e-b87e-2247b754d905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddee682-c728-4526-9c7a-630283f1b4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.171.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a560bada-6096-4a62-8e19-b1592a1f4562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.181.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13638813-8c1e-4bcc-ac64-2e51260e8c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.24.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4349b0-0c2b-499b-b278-4c9bba4098b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.102.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b7a26d-22bf-4a5f-8882-6b9b45812449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.36.150.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aebc60a-5ae1-49eb-a29e-7f964b82959e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.160.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b588e02-99f1-482d-8c77-34cf825fa56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.233.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1077eb90-fe49-4c90-9287-d3e2a80690ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.29.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a073f1c2-4d61-4dec-b297-78f0de73ce7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2f2ef5-d0d3-4d99-a5ce-bbd9ba5f5ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36b0f96-9990-443e-a7a9-4c9cd3fd32da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2471d463-d97f-45e6-93cc-845e95b5ac8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.68.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aed3413-a85d-4a36-ab03-2532fcb6998a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.76.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6bcf8c-da45-4f57-b272-818e9969b8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.129.26.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23cb687-c11f-4401-98ad-784ffaf1df03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.60.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1799826-029a-4994-9bb7-56d163e6811f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.135.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7d04fa-a368-4f5b-aa73-b1a183fc6cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1538060-216a-4420-b5d6-bf2d47944272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65141417-7766-484d-97a2-d76bd223c4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b700c66-d646-4221-902d-42ef26277540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b97b0f-254a-4001-a12a-09f959897a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.31.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d49197-7c83-4eec-8735-91adebbeda7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae322f0-31b2-4f75-af6e-c2a1920b9dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53162a58-33ad-4b7a-89fa-6a3d2dcb0f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a782bb62-66bd-4545-82b5-d02ac904c259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.147.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bffef8e-7ff4-4727-b8dc-f43e7886696d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.180.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8127674-67c9-4a36-9f97-0fa44eb6ff2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.21.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f36e7e-c9ff-4b53-80a9-e0bcd0992e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e14a04-993a-4382-a94b-25b821e6c072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1407220-6ec9-443b-8f9f-34e1c1447886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014bca20-802a-465e-ad61-3459c31c3e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.196.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a265fa35-1819-4889-b00c-f236151eb674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.163.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41294e9f-471c-4cac-b05d-462e334cf162", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a249eba-3506-452d-a0e1-c0ebd08ad0dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0927e16-2142-417b-8a41-27da022d2d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.69.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b41ea1c-2c84-4dd0-8c69-cab385e65f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.28.49.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da82d9da-50e0-4980-a7d7-1086144005c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.28.49.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e68fea-b93a-4df1-8bb0-8bbfaa84d77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.28.49.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17543ce1-a7b8-4222-9deb-0cd14a4e20f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.5.108.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43205fd6-5dd9-4d8d-85ee-3320955f15ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.1.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8016a13-0a98-4abc-a649-848581ae32cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.13.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4682cf-92a1-40db-b9a4-f1a3d09b1781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284d0089-95eb-4bfd-99bd-a4afdcfd9d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.2.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81538f1f-c3ba-4f56-836d-9dec2d60c7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.31.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bc5b75-832f-42af-86e6-205e65288119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaec518-b858-44b1-b805-07b254b45f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.56.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d514c3-15c7-4fc6-95eb-cb518efd9b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.58.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c8ea4f-523b-41a6-8190-e717354bd218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.107.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135cc5d9-24a0-400e-b551-72ae4c30497e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.105.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245353c9-ff4f-46d6-a6a8-b978f97882ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.105.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b088d2-39db-4df8-937d-a4ee38ec7425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.105.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66734ed9-6692-4862-a44d-b70ed6b9b10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1481cad-2267-45d7-b52f-2d80348cdd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2016a1c1-dd4e-4e5a-9215-0528c8204dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b6290b-1c49-40f6-b0ae-76003804ce4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677ba37a-bd0c-4d56-8924-515118a7a3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c01fd8-2b19-43cd-ae75-69132167f0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1d0d33-41b2-4379-a4e8-5ff2e6d50ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e71724-336a-4d4f-abee-8764da588318", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.224.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccddd57-6a6d-4414-b36d-834f62a21c69", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.98.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29264db8-fa32-4662-8251-07216633f303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.161.29.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a7586a-73b1-4e84-b82a-fc9b2b739807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.166.100.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67028e48-6f0d-43f8-b490-9e80efbf9934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.18.16.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f469f41-2122-4922-b8cc-2e8f55060da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.190.162.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844da32b-060e-4234-8f27-6b42138e5896", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.65.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9437b6b-fcc3-4900-9851-790c092ecc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.192.157.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1ed8c3-e632-4d9d-9ef3-02e5a4685692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.213.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62981c72-5120-4e62-a441-5c80c84bd9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.237.137.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddd8f9d-a8a7-49ab-af11-2320bb7eca09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.237.71.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18aacbbc-4e8c-4b38-999a-608918794c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.106.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7049f5-941d-4137-93e0-2318c252ccca", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.84.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fd5fc3-996d-45ce-8ee4-b95b7f4da9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.195.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee14acb0-7c91-4a22-8278-77dcc3828ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.210.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718a2b4f-f033-4718-bba7-d48e98b4b8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.53.129.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a59a252-303a-4c25-99a3-ac988c3871df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.56.17.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca28cfc-8fbe-48c4-8101-2db98d31551f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.57.211.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e66285-87bf-4fac-b548-c8ce80e2c745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.6.27.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff912b4-fc1a-47a3-b985-83928b8a5e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.106.25.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e91013-5fc3-47a7-8a15-151659b1d9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.213.162.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf24816-d9b4-4f41-8478-5bff1476bc66", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.213.176.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d831bbf-9b43-4ec1-8351-e29e86595b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b624e55e-96da-4366-941c-3c849fb7bbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.153.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f19bbeb-5113-49b6-b208-0bf2174b7454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.99.190.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87c4a53-6a3f-4001-8b08-4429f9ff4582", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.21.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db46f6e1-6cc1-40ed-9abb-d25a89f69cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.94.94.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573bfcfa-6ff1-4b76-b24f-8565023f1d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.34.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8aed473-0956-4151-b5f9-5ce0d487c3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2eb5e73-0aff-4714-bc35-f18f0d23f6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f44645-c4d9-4ae9-af29-0237d4245c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.154.91.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2a834a-e99c-4b5a-bac1-db27bea54dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.144.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e930813b-f8bb-4d2e-ae7b-005d4167e1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.149.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe4c9ec-0dc5-4394-8d8c-01e87ae3575b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.248.80.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d48179-9d34-4c07-917d-e7bf771af624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d520354-89a4-43c3-a4c2-52426ff3723d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.115.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39762a3d-c523-4bb6-b817-eba48f7db6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.195.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b295970-8a86-4a5a-809f-68d9ad182941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.207.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba233761-eaa0-45b6-b5e9-7ab925f0d977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d870ed11-f157-4e4c-b7db-64001dd369a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.246.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ab256f-db09-4432-8b7b-db5f2e0a570f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.54.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2380dd50-b5a9-4bc2-afa0-bb78ea03f344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.71.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231a1a02-3d2f-4367-b568-7f2dbb4a2d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.37.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd546d37-029f-4ab5-b8c9-72e25ef13781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.145.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd749663-1a98-4895-a76f-1386d33ccf75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.189.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48a3b0a-77a9-41c4-ba1e-7c8789591600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.215.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998475c6-17ad-4816-9dd1-2f4a121d2d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.217.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f694598-673b-4054-9dfc-ef7aaecbc65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.220.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d14b99-663f-44e7-aac7-6b09fc812f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.220.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd23e58-b180-4509-b9a4-7671ebd078ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.240.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353f84b3-7f75-4109-8866-40e18bd2bf52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.156.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e267e6-2904-4dfc-9d7e-7f7e5069c60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.165.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053ca900-4fd8-42b7-8181-8ba509f65d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.228.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbc5b3c-c2db-45ad-8ceb-ffafc8ffa5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.68.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4227bb80-bd10-4d80-b9ed-a8f0d46e3ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.80.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04c7b3c-c0e5-4a11-bdac-5064504cf006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.185.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9528441-8389-4274-876a-0aa2d89dbfb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af7404d-1a05-4e5a-8e97-ad01f5642658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93b02ac-17b9-4852-be7a-ed2cb3a528e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ee5e69-b995-4256-932c-8c30fb05ef94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e657e2a-5456-4cfd-a59d-6a969bc98b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbfec43-3bcb-4ba2-a044-fea21b90c82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5286c3-e4a3-43e1-a90f-c6a5a52eff45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2e835d-852b-40a6-9af5-20ebbbc6a9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6840a56-9042-4cbf-88f8-7183de5eedfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508cfced-7670-4e16-a88d-35003d374693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e909dd0-ecbc-4431-bdaa-0d57861fed66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06862efe-32ba-4118-89af-d0f417f088e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744cd332-c0cc-4dce-a132-bf0820edf786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4be072-a8a9-4b04-9430-b935db6f5699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a63e32-7b8d-4528-8368-9cf2fb3f555e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bafbd6b-a984-4a36-877e-b78f0a310e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0572135-595b-4896-807b-9bb52b07eb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea745bf-3bbc-444c-9443-360ff698785b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac7d7b0-130c-41cf-910e-d74060a480c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae9c156-ee3a-4960-a2d9-582049292d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48cab88-12d6-497c-97dc-a0595f69147f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec174abe-1ffc-4b69-9045-0fe6fd0b18a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.188.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a58781-f401-4924-b6df-7b5c26d258bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.215.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e7630e-1e2f-45a0-93c7-96434819b9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.232.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc80fb7-d921-4754-a9a2-d8118b13c465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6b4d1d-c702-42d1-a5eb-c85ee3204304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.74.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ca75ce-6054-4e9a-a1c5-c1f3e884a767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.3.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d0cb76-9113-4da2-9ff9-11c160ccc54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.135.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb7e4ab-58bf-4798-9245-e5b8196f78d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.243.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2550c09c-c40a-4f27-8970-7261d7d8f6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f90b9e-7dba-4738-9f7c-9711cd18217b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.71.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df99acd-db02-45a2-ba53-8a3397494e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.220.0.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c41b5cd-fb28-45f3-87c8-a9e13c51a603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.185.25.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af97867e-4dad-432f-81fa-d0b0f3a8fee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.210.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a116d18d-3d79-490c-a61a-be10c567c988", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.78.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2f4899-68eb-4363-ad05-c2bfd84b89ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.124.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc94714-9545-45b8-af64-54d3a2aab01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.154.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35a0af4-2e66-487b-aded-9ba66db0e248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.167.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b813965d-b43a-4cfa-9d8c-c70352c43592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.19.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0bcb60-d960-4347-9bdc-121162e61302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.217.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c50dae1-8e0a-4938-a32a-e649cb1e3e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.221.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4119fc5a-96fe-4f0f-9535-09a6dc23bdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.222.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4044f4c8-bcce-49a0-b529-15c9cbf7712e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.45.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e8a7a7-36ff-4ab2-b990-226708387a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.74.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d603c90f-ad7b-4056-9e7b-a3f9cd3a8175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9013d83-649a-4618-8c10-c8dd1d593116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ef2753-2560-45c8-bde0-1bb0b430dc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adece832-da6d-4114-b9ee-ffaf3f2ed676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b4a63f-6357-4cbd-aacd-b442f35528e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a012c9-67d2-4e35-8db0-7af181633141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b5a4b2-ac37-4f24-894e-a153ad10fd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845e0286-d9be-4aac-acc0-5036e2de7728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9f139e-b81e-4c6f-b231-5a852f0e3b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1b38d8-7c93-478e-8e34-2bf3d97a4eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b7511a-b447-4db1-9e96-ba43040870d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d8352a-5c48-45f6-9313-b06010286ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951c8053-e770-40d5-9ccc-4bee99afe775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.135.97.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5924def-b72b-4e76-885b-1d686879ce01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee2c80b-6f54-4f57-87cf-afa9ff0f1ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.155.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c775fd-d473-414d-b742-b86a0d92b9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.163.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85417c3d-6fb2-446b-ac7e-c734d404277f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.166.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb351fa7-2264-4e1e-8c86-276ec4f6916a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.170.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94382a42-79e6-4fb6-8e82-f1cbc5aa154f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.175.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36582f0f-ec1f-4519-9263-3702cfa93a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.180.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9046116e-dad3-40d7-ace3-625c21301663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.183.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf69a1e-f0fb-4040-9ea4-c3538676b84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.213.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8060c38-b466-4586-bb3c-bfa0948db465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be33fe66-deec-4438-9170-220129537502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebab5647-69bf-4ab2-93a1-8972a41e2f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8aa4800-2db2-4c1a-911c-b973569eda71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d57725-0c01-4576-9564-c21f8395ee82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f618e22-84f4-44cd-a7f9-ce2128d86525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bee08eb-da37-4281-bc4c-978bbb9c7f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b995ce01-7032-4cfc-8ee5-7e289efa6ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a4fc7e-c5b6-4445-b070-e8c38da8a4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527efe7d-4331-4037-8f63-61e8881e48b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52795d3c-c469-4f6d-8814-a5769310c6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91da636d-875c-409c-b1a5-b494a57cd244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71aa8da4-acb0-4cf8-9b36-c8e61bdf1f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff867b5-e950-4437-97ff-4b42e72ff20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dd5368-de95-43a2-b4aa-b31541188487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1072a01f-fb7f-4205-a00f-0f62c371f410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3e1adc-9462-41d0-8d9c-310a60eef184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020d63bd-5597-4014-b778-a8f7bf174860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27db961-1c43-4837-a974-c6c057fcd6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf5b01f-41c5-47f1-87bf-3558c5a4ad10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786af464-cd51-4881-914f-ed18aa26353b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc376a31-782e-4d2c-9a78-e46cc661cb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0792c59e-e72f-4217-91fc-094b4e821e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33ac832-4e8e-4c31-9d55-236078636991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e943a48-0a97-440e-bc6f-bd3c2247caac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb87e64-d583-41d4-951f-b61d46eff36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ae46f5-8f02-4c86-8302-f36c988e92b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f5dfa6-9619-4045-ab55-20e4e104ee4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4449cb6a-1836-453b-a343-9a52c3df43b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa40598-7518-420a-8b66-bb21950d7ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5942288c-a47b-40c3-b711-9bfe3dde1a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcc0358-9a48-4563-bb25-6549db6b385a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9a2ec5-b891-4cc8-8634-95e8b4c775df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1f3a48-43cc-40ba-b944-f2c2bcaa2ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b3b089-c6f0-4cf0-b38e-4f760f745780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651ce90e-a83c-4a92-9dd6-5da179cacdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39bd1e4-1dca-48bd-930b-e6c360e3e8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb2f794-01c8-47cb-b204-d229d53a71a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca26666b-6a06-496d-8f5a-42d66dc5bf5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c37233-1da2-47df-81ff-836524e06d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bd430a-071b-4ee2-8d68-49859aaab877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b015c3-c828-424b-aa41-9902047eab31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f4c0bc-d4cb-4c54-93c6-067c68da1186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7060c05-c59d-48e8-ab0f-2dd236578985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1973957-5566-470c-b6a1-dc2014bc45b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec39233-1282-4223-a6db-d59ab911c217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20a309e-cd85-46da-9516-5b6b10b4a28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cd3103-0d01-4727-bb0d-618b74046528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5285ec2-5c55-46e1-b616-b0c08a459025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7d227b-0370-411a-8bef-c0185d667a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb2fc5c-6b40-4464-b9ea-6dbfeb3d46d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a711ce-4c4c-439f-9374-03468cf055de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611d813f-b635-4329-93be-b4e4e9414c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bcc1a3-0edd-44fa-8d96-330feff08df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c394a363-3f6b-44b3-9dd1-cb4e4997844b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e3f791-c30b-4a5f-beef-abfad8ee5048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ae6f51-bf48-49eb-8549-799cee3dc862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363e78ae-b971-4338-a5be-9347dad5224e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b667c9b-16b0-4342-8840-fa9752fbbb0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2bb394-5516-4713-8156-810ec0a7631f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5715c023-640e-4f93-9f60-d72a6ae2712a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802996ba-3f41-4206-8783-29d6a4575594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb80456-ad47-436a-852c-50af064a6fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eab9f14-9be5-4aea-8e62-bcba8c09096b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0591607b-e0a2-4193-be8e-4048dffe4b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968da910-8838-4039-8b1f-07181fb32f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fe0725-06bb-4244-aeec-e03ef8f6148e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4ea1ed-6312-490c-aac6-9435a56568cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c997c34-220a-4643-a34e-a57ff2664f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d0ab18-2dad-403a-adab-e6faff6575a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6804bb01-4e34-44c9-b852-2c3b2630c530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7d9cb0-59cd-4358-8cc2-bc2b4ce690a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874d3dac-ede8-4bb7-b92d-f80889a2edf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3f7132-56c7-4c05-9ec0-5eb3f99ee218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9108bd-e907-460a-9c93-06cfaa1c9bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14db4159-d79c-473c-9cc0-e990f2a43eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2855fda8-028f-4ea3-ab0f-47f266a6c737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da336a26-b695-4e4a-af29-bd26bfc6968c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac1a0ca-83bf-42a9-80f7-3123e9062276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d0eff9-1ad2-4d3b-9c15-73a40e2ee153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af00263-94b5-4468-b5e0-f7f61989b0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4233d006-686e-44b6-8ada-edca523cb52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed4e7be-0867-445e-8838-9f15054752b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71430b44-b8a9-4dce-9850-5483874f80bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c8c2fc-814a-4db5-958e-c64a7dc3e341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2223f17f-4ee2-4b05-8427-2cf693c94d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e582aa92-c412-4b4f-8a13-bf56404b2ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e57100-4ca3-4eba-8fd6-c322058238f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b49c1f-b309-4ad7-a807-8232cf6d0c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff97117-e4d8-49e2-8a47-91db17055761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3308b266-4e0a-42e8-b3b0-846ecca1f9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fffaf6-a39e-4247-9249-1c6dddecd561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c171c4ce-f17a-4a1f-b58b-67d795b5fad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2741b605-38fd-41a7-96af-36db6cc2cb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2288320a-dbde-4403-9867-fb0feb003ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a3925c-1f9d-486a-bbef-b00068d7bfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca25481-6618-453c-97f4-1ffb3ce16476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf1ad4e-9643-4843-a7ea-f9044d3c12e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418177f0-a6f3-415f-a6f5-f41cac3ca2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0b6df1-913f-4c7a-ac2a-b4940bcc962a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab869b1d-12c5-4d54-adc4-272ee271cfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30723bc6-2946-4735-b24e-3dfa60727233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243b6f2e-5ba7-442a-8ec4-ae93685025ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8fa358-0259-4d0e-80b3-446d349a3a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ae2bf9-5edc-4ee7-811d-3d19a1601ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e1ec48-6c16-414a-8391-83da1e9abdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f1ccea-bd3f-44d8-85ef-481347fd0807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a68f221-b493-409d-b376-e60dfdc2d90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb86a137-0e18-4d38-83ad-c2f9b24c3801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58c9d7c-ebc4-4e6b-8d21-0e852b6deb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d6dbc7-4d90-4647-a685-9b257892abb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d757c32-ee6b-4b3a-a6b0-7549da3c9cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c79c4f-d833-4275-9cb7-12477320299f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff9fb55-0944-43b1-a52e-ed6a1bffa6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e1e6e8-eec9-49ed-862e-ff380f28987b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5008133-a041-4487-95ff-795e7c534573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd104074-4160-40f9-bc1f-36df3fd4c958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a1cf77-5065-4a06-9862-28e3d857397b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e715d1-5b42-4d9b-b10d-a5e4bd4e28ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc8be7c-0489-4fb6-a66b-7025c9e513f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b1a8f8-5f0d-471f-8fe6-368d47a6c55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d68b87-732f-4f15-be55-d1d9dfc728e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f626b90c-6f26-439e-99b6-c9eff3866485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5060338-2e81-4626-8d1d-2ae447e802b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8037a13a-1c61-41da-b740-204d412aa632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a72906d-72be-4931-94b9-fea92a53d773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366e0705-e5e5-4664-91a2-e9b4dee47516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46718f71-8fb2-4e55-bed6-6668ef0a8f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96082d6-0aec-4ccc-a33e-9f723820c8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093570da-a151-4555-8b08-d28cd1b99912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f8d7f8-eb29-4e69-b321-448e38011803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2861c48e-60a5-4ab3-9fc2-e33aeff9ec16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7192757-729d-40c6-b7fe-500e03f06038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127d8f31-8bb8-40e7-ac50-277e9beaf993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b55b5e-7ed7-40ff-870e-dc1db96e0a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660ad77c-af4f-4434-93e5-741a49cf0314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180729f4-ddd5-49ac-8d5d-146223c1853d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144725ef-4fe7-4ae2-93ec-7bdb3d3b2841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4dc238-d04e-4000-9bd6-2322ae548f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae3723f-76e0-40ca-9a0a-fcac2ca02093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb222ab-c914-4ecc-aac2-1998e6a4f344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7103986-ba65-4d9a-bb87-80fc16c0718d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719288ba-1abc-4e43-8f3a-eca330ac9fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40637e72-2582-49c0-8644-b210df077611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc92276-e715-4f95-95d6-7c96af8dba81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cf5610-448f-43cc-a42a-46ddab9d504a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fb43ab-3b38-4079-9f10-2f6647b555a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414a0ba8-e60d-4b85-a4ab-369dae5883d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7991cf18-01cf-434a-85c2-7afb4b8b7bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5688b8-b3fe-45cd-bcf5-980318b3c0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54322c8-84c7-47d1-b31c-5a28f13cca3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43839641-1a96-4c73-ad67-053e7761e7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06336a46-7c5b-44a7-bd8e-9ad3c4e5e771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5030957-5923-4fa6-8428-a5a7dd7e40ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba047ff-78f2-4306-9217-3480bddab771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460c14db-9278-412f-bf8c-e405f60ac70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42638ff-d3be-46b5-8437-b4fd28270a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1188611e-c056-41d1-85cc-28659b9e92d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4a9e53-6044-48e2-9ac6-1889c9a49871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8d5726-00d6-426a-931e-02d9f5005a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622213d2-49fd-46e3-9336-32785c0703f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101adc96-25f7-481f-88ee-501f1dc67341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633c8753-f7d8-4f16-b3f8-b49355668f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a40f7f9-d389-4a08-b6be-063cb58caf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12afd49-fdd1-43f9-934c-1c17c542fa53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a64197-e759-468e-99c1-90ba50923b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356b1c32-37b0-48f0-9d3d-321873e5378f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38c8ddc-aa97-4dd9-a593-58a129b70c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dce7a4-8222-4985-8f2d-5a2a761c5d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6b10cc-14c0-4f69-a37e-b5528c791cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808de0a1-660c-416f-b2fc-826067d5edc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ed4579-53b3-4b41-ad4b-95ad3d700712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a0fb4f-472a-4a52-aaa1-f4c99cd4ea9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e13ecef-121b-46cb-b53f-507f94f5fb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c72d87-c3ea-4c3e-b8c3-b29dda78f3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce05c73f-d856-4c02-8bf5-2c8b955bb3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcec2a8-e8c7-43d9-bad4-29c2faa4204d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587a7f4a-4fd6-436a-b52d-cb030708c679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f34f19b-fdb2-4fc0-9ad9-14243e3abe82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cfc783-1a0a-4346-badd-fb633201b424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9292f74e-6fbf-4dea-9198-899c1b9f63e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5dcb431-808b-4bf2-8424-ba719ffb88b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601a5de1-9483-4eb5-9bcd-8d22f96fb4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e359abd-b158-42c2-b3a4-d024395e6d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119e44c8-bfd9-4e2c-a8d1-bedf17cd26a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2206cf-9816-4deb-b8e3-625e79cd3fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad0baaa-ec25-4a6f-9c7c-fcc94758a88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8827cace-7fa3-43b8-a09e-c85c973a009f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd94f3c-961f-4406-a090-534e7925aac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573415a9-79bd-429b-8cb7-5efa1d90423b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efb7bb7-b896-463e-934a-76ce385ea43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2b9f3d-d150-4166-9a47-6d168c951f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e14df9-733c-4308-8b98-73815a48c3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2229ef-1149-4154-b763-8ac0df5560ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f304f7-1878-4d50-98c4-b6d1024d1c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97fcd43-bf27-4b96-87b4-cd6553e8e78b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d43ebb-610c-42ce-a5d7-b1bdc926ae86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46459eac-0d29-4117-a91f-d4ff6dbbeda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c504c9d1-8015-4835-bde1-0403ef714f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d986e5-d783-4582-8a48-2972643ac926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17d2b83-93ec-48ea-8b54-b4875b9b17a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae9b4f4-bb2a-4112-bcce-dc0943f2a92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fcb0cb-ffaf-4d21-a8dc-47b62ee63785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfff5516-903c-4515-aa31-10dfbc5d0db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f681595-58f0-48cb-997b-0882a1b756d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7765ed3b-67c3-4db5-be43-f2773a94b124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c136e6-7796-40ca-a4fa-d1fe00918c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761d3b29-93a4-4c88-86d7-be636d9ad35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6419e9-e2d2-4716-8135-36f32d14d893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f115310-6a79-4be0-86db-f6a226de2f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f0b7ac-47b9-4a76-8f30-b125c40ffab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b75fa3-4a9f-4d34-aff2-df3e6c247c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d6b7fb-cc15-46c3-aecd-3d8f13ee16be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236f3698-f683-4997-b3cb-a9d85b84f4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c8a6de-d3e3-41a1-9b17-29474df5e835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e44edf-45dc-446e-9a93-70505b34bf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc98a914-d1ed-4f7d-b196-bfce8d63b388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe0156f-3fff-4409-8789-3fdd7e8dc481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058545da-f340-4af1-b6bf-bdae080a61bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db15401-a0a9-4c87-b8d5-c8701c9ac694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96c9c01-99b0-4c0a-b22c-1813cf7d4a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2d9732-1d39-40e2-8907-ab29fe3b7076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b89637-225a-4842-8c3f-aacbaf63ab76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2f5610-abdb-4c5f-91ed-123aac4a8ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e0d83f-650f-4a21-a2eb-081ceefa0cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c533ff-47a1-4f5f-8380-fb74b020ba7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0198f7c8-ecbf-49c0-971b-aa3fe131ade1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f81ce0-025a-4602-98a8-858197b330c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed01e8d-de86-4c63-87d2-1944fa9d56f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1d9658-a961-4c3e-b2f2-1b1debe91610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab108f4-5a31-46d9-bc28-ff1fb467f962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ddc5cb-bcde-4f38-bfa5-da0946201335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40acce9-0ee2-434b-adad-9675e62b551b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2f0d14-c708-48c6-845e-367a412c97a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd9a7ba-22a2-457a-a503-c9494f1064b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4263da-5bb3-4148-8ee8-1e1c7a5ff9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944d88a0-fbb4-42ad-a4e5-a02840776044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a43d24-1477-4522-87f7-c602982aa336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5f1e51-0b36-45ac-a96c-1d4eaf3f07d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddd007c-8b6b-4895-a66a-9d76aec9d3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0757f6-60a8-42e6-ae57-eb644539c89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7118f0c0-285e-4104-a5e4-3a5060b721c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c6d0fa-2575-45a9-93d4-02d49b10a0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a26657-ca7a-4b8f-b3c1-99316840f6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bc0f97-c969-4113-96e3-73a442862b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15132d9e-10a1-40c0-8fe9-5f6fd5e1f975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14f4876-cbac-47ee-9b2b-dafd38297b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4c3409-9a73-45b7-adcd-c7dfcc4245a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236eba2b-23ae-4d24-b36d-1f457a38d38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9ec39f-8b15-4593-a0d1-d305c5cfb72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3609c6f-5f66-44fb-bf57-6fc81eb0dee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3106da86-9890-4963-9fd2-0b5297105467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708d9423-a6bd-4096-bbb0-15173137fea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9261b0-644a-4d55-a260-7f43f5b3fb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddc03cb-7ca2-4054-9bde-a6f45db367de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e72e6b-0609-486e-acd0-4b6dc9b17d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7edc2f3-67cb-4338-9d41-ea02125ac127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5964487c-4230-4654-a816-71d753b15003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a4d1d0-6bc7-4521-b419-3272cbe52587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94a6801-24fd-4e6e-b469-d38184600808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153f1f86-2fec-4971-801f-4dbeecb033d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd3fb6a-4e69-423f-bc76-3793ea5beea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e498ce3a-43b1-48f4-8efa-fcff22100989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a1304b-b141-469d-b377-2c813a727c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3897f723-5751-44bc-8586-32cd68dd0600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e3ba6e-7467-48cc-966d-6a23d0357e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3783d9-5018-4cc9-91a2-a722fecdcf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9356c53-61ea-45a1-8e3f-0d0f2f025665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd899262-e7e3-4899-a9df-1beb9341186f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c1c814-60bf-44dc-a10e-930896481cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5558f991-20dc-4ff2-bf31-586aa719262a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c345c9-1663-4017-b017-6ec2822ad57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71891083-7d7f-43bb-b6a6-995933e30f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff6c87b-76f8-42a4-8524-6ddc6cc41c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8af65b8-0b3c-45f1-872f-7886f72c50c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2cefa8-54c3-4b64-aeae-ce8c4b669699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3aab58-4c7e-40de-a08f-609aceb106f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b272bce6-9662-430e-82d7-239361648968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5e6c01-1772-4a9e-b834-4d6c0bbc9ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4345c63-e5e2-4902-a3e7-493ae7af4edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5477d38c-d6fc-4a0e-9f52-54f1f238f150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c045b90a-b3df-4f42-bff7-020c51e091c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb5ee0a-3ef3-45a2-9c6d-5caa4fbab126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4abbb8-26bc-4fac-bd49-c3ade9b2bde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c1cca2-87f9-4b99-b5d0-5280c61ff552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc39e09-c012-479c-a646-b86c28bfdc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e79b06-39ce-42cf-888f-bcac89968c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adec23c9-a445-4cce-9032-eb7cc8271efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af06430f-a150-4359-8ff8-f50f4a321033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ba9690-267e-4fb5-88ef-eb3b67b2009f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d6c604-4825-4dd8-8b96-8a9c27e89c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4eb687-483d-435d-b923-95e5b71cba2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c1fb59-7470-4481-84ff-1d801258822c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e10ed7b-50ad-46d0-bece-1a972a5caacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d00f347-4e7d-407d-9d07-02c3a4dc5bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cb1b8c-20d2-4bef-bd46-0c8ca512a495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ac6470-a002-47b2-b785-7d54992220ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c438b5d9-a752-4a09-a0f2-7684d130470e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb245f63-0903-4e27-98f3-409136986a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567919ad-75e9-4ac9-af61-8317608df7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f81773-0daf-4175-8574-eb531ffdc7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423de3ed-d89a-470f-a5f9-38dc09221bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948ba43f-61af-412e-8787-11400720ecd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96dc8bb-990a-483f-a68c-541dcdc58ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aed65dc-1b98-428d-b55c-5ebb7af722bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982a42c9-cedd-47d2-beb2-204e710f14d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.234.69.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f15436-4738-4607-b94d-34b51d98157c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.236.179.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c962b1aa-eb76-425b-8efb-04afb14f1e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.50.231.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7559f4ed-6a8d-4eef-aeb7-16880df06b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.92.98.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dc981c-19ef-4497-ad3d-afa07d58e337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.160.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29eab5aa-0dea-4e1b-afb0-d20a8b4e5a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.190.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f118307-da41-4fd1-9961-c7617c54a001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.201.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b595fd-618e-4262-a705-ed865db7c676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77acc498-010e-4bf5-8cc4-5c45589619ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba2352f-e02a-4110-95ae-633ad973fcd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.45.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dcd83b-bc07-4828-8722-ec3b8477c9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.122.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f708056-7761-4930-91a0-5d9432554698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.33.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf30586-a9e2-4bfc-8c2e-ad7b49f01612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.45.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e6044c-76e2-4af8-b0fe-46e42b7c27de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.49.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496b5d01-f27b-47af-9adc-536467b32b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.70.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc8a616-9da0-4094-837c-44b2c1496487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.74.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080fc154-eae9-41c3-a221-8d788e3ae55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.94.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4458be-cbb3-4b2c-97f4-7c14d1eaa6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca61004e-7082-4a81-b2ad-a0c35baee4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339eec97-3c8a-4e8a-9789-bd8307ac7ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b355f22-b58e-44f8-8430-9156e81d0719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d6bc12-7235-42ef-9e01-7297415c7cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c363b0-62ff-482d-8c01-a1fdbe505f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7094377-939e-4b1c-8163-c48c789751ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bced3b07-4d12-43b8-9439-cf4f5e76b6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.163.101.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b7a41c-7730-44e5-bc59-3ddb4c1a67e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.102.232.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870ecdcb-ea25-442d-8f44-a8fb83e869f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.102.240.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb44fc0-a18e-4b95-b86c-c0ebb49ee91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.255.39.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82eb210-82e7-45c3-9ace-111fbb2fe7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.56.241.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c067a8d8-c38e-4056-bf64-73e9a40a0b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.110.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d3c1a7-af0c-4b5b-b285-b47b4909e280", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.150.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef35c093-7e1e-41de-86e3-9b2f3ebcc2cc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.157.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8950f9-a0f3-4c7c-a4a2-dd8aef23d7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3226dfbd-2361-4748-a708-02cc56eb2348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f909c6-63f7-4df8-a4fd-bfeee24bf520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8a7202-e107-4438-a736-c654819aad70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4646e88-9d81-4abd-baf1-cce0d7458d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affc0b7f-6bc2-4833-addc-65f1151ba4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae370bc-17e8-4420-830d-40ed0c0cd08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41d10aa-dc79-4ed7-9959-d9b50116d930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532b117b-0362-41cf-a1a0-cb3d299377e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8348995e-b6b8-454f-a06e-0e948a2f7c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e24a7ea-c8d7-489e-9621-02dc761a1996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99640d88-7223-4d06-b124-1416aedc54fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0ea01f-d6ac-44e7-8db3-ea25750960f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d47d4ef-268c-4fec-a3bb-8abc1179d10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8782bec2-214e-4c77-a588-4aecb30d7ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7602f336-83c3-4aff-941f-c567ac2e9067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa61cab-b8f7-4bf5-ba88-1adb533a3e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389a5c76-7689-4cf3-89f1-6f4db5959df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdfd336-b462-4523-8f61-cd120c5a95aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d1d437-c188-47d0-897d-a7173dd8ae9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce00fad9-461c-404b-bd7b-9d2df762a689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57349415-4b50-44d5-a0d2-8a530c2c202a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b897f0-d6b9-4168-b1f8-39d3b9560355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb0d682-33ee-4069-9c5b-983af29b559b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa75094-f78a-4f61-9ff0-d66414e98570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d315d4-ac46-4535-b332-f6076133260f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d150d86-0c22-4d8f-ab2e-52050954b1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a39c92-635e-4c5e-87b0-19633b72a0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c2c89c-6d6d-43ce-aa7b-f2680a5a37ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153bf6b8-7922-413b-b58e-4d30e441844a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc14dcc4-812c-4afa-969d-070f5abfc387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1540379d-d45f-401c-a2ee-a98e413b7577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e730cc-2957-4a08-8d87-e483fbd91aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ef2ac7-18c2-40c1-98a3-9f0b86ac2b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd50b339-0fb4-4282-90f2-b7f0674c105c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abcf1fe-344b-4d82-b45c-ece8e6358815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab8590a-ec7f-47a5-9a36-2dda8699f30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43c5f9b-627e-4db2-9f19-90f50062bc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d08d02b-b2e3-4fdd-a52f-d981108b256d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be98868-97ae-475c-a767-3310ffa18ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f943a2-333d-4d62-bff1-b456994eb23a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcefdc8-89a5-4458-817c-f3ee5a84d644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d7e1de-4f3e-44b7-8670-a0421901d709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8ce590-e1e8-4af1-b311-41b6c70b7007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bbc5c9-e7c7-4809-9666-31b7b421837e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176072fe-abda-4cb0-912c-f4dbfd78fe8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5bdbc7-2da5-4c9e-a7e6-20454c89aba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c837aa-c290-4a2c-88b5-d6e164aeccae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8d083a-a551-4713-ac47-297984158404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0eaadc-ed17-442a-b269-744758058a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09bfde7-17ef-4f34-8802-c25fc85ecb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc124f09-5cc6-4273-8785-d17e4130d029", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.21.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1438af53-91e4-4d84-aeeb-a2b40205f624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.181.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679498c1-b561-4402-b18d-7842c22bb6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.105.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e34ea5e-576d-4cf3-99a2-59059d7748a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.253.33.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b82b4d-8477-448d-894a-a84a267e1ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.178.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331ce97a-728a-496a-83eb-3cf88d1b842f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.169.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78248a6d-d497-4af9-8ba3-2ebc41c2be91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.95.25.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c012c8-4bf5-4c06-a991-6bb416199070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.236.24.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece33164-5b19-4b0f-a052-60fffe149e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.236.39.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ea876e-b427-47dc-95a4-8ab9583ada12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.53.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60468680-0402-49b5-a3fa-8e3f4427c499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.254.45.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e49f0c-f780-4380-9935-5e868e3ce041", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.255.40.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f034754b-1212-4470-addf-9d02e7b9bbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.61.246.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16817682-55d1-4c03-bbcc-3aa93ac9bc8f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.244.200.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0ce4b3-5c2b-4b86-b5ba-5e31f1443bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb758798-69c0-47d7-93e3-5df240fd7f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe73bb73-5b10-4c99-8194-5e8571020143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc73d1e7-11dd-4ea1-a850-04d457a6b2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ea61c8-a200-4f13-9f6e-42947af26d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5135173-b69c-4a21-9840-cc61268bb00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1596cbc9-306a-48c6-a505-5d8b756c4a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ff7603-3b55-465b-aea3-8e30ea24867f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a7bb2f-ebc4-408c-a2ee-96465d076cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa4893c-e61a-458d-a3bb-8e46dc1618c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8051726-c376-4ba8-82c3-c52b7f2807d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b587bd21-07ac-4fd0-8394-cf0dea7b68e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609a38e2-ee07-4c01-874c-cec93a14f6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de2bee1-aa1c-4819-8241-d4b7a95949ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4401eceb-6fbe-4b2d-9dfa-e7bbf73ba891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e545afdd-3b14-4cfd-b98c-e08475d666bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cc8a64-5959-4938-9983-d382fd8f9ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21865e7f-ab51-4f64-b325-7f547ac5709c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b0c58d-863e-4b86-9cc6-eaf819148ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec57053-a8ed-4031-935f-ec445133830e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc50d5b5-a116-46d2-833f-8d07e03711f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904179b4-1527-4ed5-a0c8-aeafb970f4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c8fb58-afb8-4b8d-8322-dd1690d7df9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95844b4e-3a64-424d-8365-6a46baabac03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1608cb2-fe1b-4d98-a4ed-36d7a150e5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1ec947-8959-463a-b608-04d96d3b99db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649130dc-e997-41d6-89f8-90f3fe5e1423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8492d4a-e600-4a14-a53f-eeda05463977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604d6cb6-71fd-45a8-89ff-c5acfb9753fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee70283-013c-4ee8-b0d3-5c482c187425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31af84a5-c58a-4272-b0ce-25ba396428de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41f47fc-e6cf-4cae-a33c-2df8a5e9a4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca286f88-6b6a-48dc-a681-7792f1c7dd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70203292-819e-482f-a09a-de7ca87ae8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3800c36-cc31-4a3a-8d79-d71ab3cbd0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ecebac-1a51-40da-b589-68df44aee838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60aa508-791f-431c-a6ca-15241d3609e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.164.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e3ba30-6187-42df-a670-90ded072d3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d82f722-1b2a-47d6-b798-aaff669d40fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6b987d-1b0e-4091-a9d7-4d719af9032b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e90dad-ac8f-4d6f-9291-c56ac4c63baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621ed880-f3ae-4522-a7f3-5db77fa1c1c5", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c777090-56a3-448b-97d0-3ad91ecb890e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deaaf4e-ef6a-4f8c-ae93-64575fdbeabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b8b3f4-3041-4412-8a8c-435488ac837a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169db939-64a6-4051-b661-b228e4402fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbe2f44-d8b4-4b80-9220-7ac8ac18e1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acbfb38-8040-41ea-9112-cdceb6de2c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc3cb86-bd0d-4af3-841d-b9916ddb0011", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.192.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefc9569-e225-4c51-bdfb-3509dfce4293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e1bfe7-8db5-423a-8748-a2388fc3ab28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67717dc-6e5b-42e8-a9d0-c2c7bebae92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57101fbb-bc4a-423b-a03d-c6ff904fc456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19a41be-c845-44ab-91b5-bb673e61746c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1912aad3-635d-404c-92f1-b18f6ffc8b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d130cc-0b84-4c73-aa47-ec2d20dde88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621bed5c-d395-41e8-a43a-749b8330faef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37dd60e-2c09-4854-9d23-ebc03e4b48b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc37067-1b47-4973-a49c-a779b0e36d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f147fb63-89f3-4b04-85a5-e88d8e427748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0bca7c-63dd-4580-bd13-e6a64e79163b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32622cf-4f4e-416e-a265-b9b88326b772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893df9fd-bc6d-4244-8cf7-2b69f0a3aaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945d3830-0551-4166-9888-81947e36e4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcc181e-d933-4d4d-988a-05f7752037c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0221436f-ddaf-404a-8412-9a6ce0458b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a9d801-6c0c-4581-9778-276c5e4d9853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703c0aa3-c3a0-42a8-986d-37a522e18133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832e8741-3ad8-4c47-951e-24ab1628ff83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0c4856-7bcb-4193-ab36-430c394991c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefaac43-cb6c-4a03-892b-8b3e182beca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c48971-49a8-4659-80f1-259c3033f542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f72081-a578-4c84-abfd-6b1b57ed9ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00960d2f-d644-4b4e-8761-c23c679e9b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75560872-34e2-4e85-8e0e-8ea2dda30c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3146fbd3-96f8-4d8e-8fa2-798d7713640c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dd2058-f874-4d9e-a653-0e4501613d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724d1d3b-43bb-4cab-a700-8ffcaa350121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e2efdd-a473-4428-9fa0-19e849cb6119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4841e795-4d45-4cd0-8238-a72c2f066d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22aaae93-7e65-4938-af07-86b84bfcedbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437f0b26-ee8d-455a-ba19-233f4314acde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e5a3be-3543-44ff-9313-5bcb59da99d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa1ede5-2ad6-43eb-84db-1fe8fda26252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916566a2-e5ba-455c-a546-60d7573df951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6a1b77-a118-46bd-8770-267d6ff01f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abb5651-385e-485c-a3dc-5589f1defad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32d61b2-89b9-4934-ae5c-71365e654657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8d5f4a-318c-413a-98d4-db13b06d0118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa67765-47f6-45f6-8805-85a890fd2b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e20d32f-17fd-462f-bd6b-aafd41ef18a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe813c24-033a-4bba-9f21-ad5b1ee71446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f766a69-add5-4f2e-a4e7-5a0390e0ed3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.142.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18260639-94c4-4924-944d-286daccafd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.44.18.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6478dd-4601-4115-b4fd-92fce005ad1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9003ab22-8de5-4240-9794-22199fa8ad58", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.195.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c021c2f8-df81-4f5b-8ffe-981fb9b77a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd7725a-505f-4cf1-90fd-a31856e3c57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4920845-dabf-4ca3-92e2-9f1df7b55d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.57.154.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154200a7-4861-43c1-becf-d00e516190c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.58.34.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995c4cb4-e017-48e9-bd3d-26c91802d10f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.58.57.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9737b3b-3cc5-4171-8052-6fe1e3576865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.58.58.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b873b5-324b-4948-8341-a6204d230e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.58.60.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91f0035-8eed-4ff5-a44c-3dc93092d444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.0.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ee8544-133d-47d3-bb65-409038ca8e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.24.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91e90ed-0fd0-4901-95fc-26573fd85162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.5.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb269058-8e3d-456d-a7ba-a90ddeb5e318", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.93.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0e0af9-dc61-43de-bcbe-5ad9b87472d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.177.173.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578aab24-8d40-4500-aac9-dca094e37276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.117.199.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1badd78e-e675-4411-b35e-3fc7e15b8746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.225.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5635f3d5-d47d-4b4f-938c-20d4e3e41097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.125.117.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b02ecb-9363-4583-b276-8ca0d2e19b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.125.134.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc298d42-6a67-4896-8c20-10edb3a96635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.125.146.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a64825e-1f7b-4907-a807-bab01f333db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a843a758-9d24-4921-afb8-cd266a7780b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12ebfb0-679f-469c-8535-d9fbe247beb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417e5fea-e90b-4891-af5d-f85b9e03c4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c6a707-15ec-42a0-9d5e-e2d6ea5a2c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfd0376-5f86-4a26-b6cb-a7236b8ada74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991cf12e-4faa-4c12-b470-9dcebb047c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789ca709-cee2-4514-9f6b-a8294b92883f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15059fb-763e-4f7d-b630-ea09b87678b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e047652-4019-44e8-af97-0d331ead0b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82bae11-a1b3-4522-89a4-41e3ca56d5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32b273a-a01a-409f-ab3b-63097ee3854f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b421000-6d91-4bb2-beb0-cf3b19b272dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f256296-c3b6-4fbc-bb62-2b76d8265f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67375f4f-08b2-438f-8985-8689aa63d498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.237.90.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9895a10e-58fd-4ad2-8e34-c7119a8c67ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.45.156.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386c55be-1d60-4f4e-9d50-56634437fae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.58.237.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b7ed1f-3a48-41aa-af01-d042503bcb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.201.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affa2426-02c0-4457-9fc3-6ac0b0d28d7b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.81.15.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7d110a-1fe5-4b7e-b263-6d9159697ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369bdd13-f514-44ab-8e77-6a1a1b1ab212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79178891-140c-4c51-b81c-3a614cf141c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6a4eab-72e6-4277-b68c-52d0eb2aef19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adf7bc2-c127-412a-be7d-285f5297f536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef6fcf1-92f3-4c3e-8004-66f4b7f5f1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8a7d2d-98a0-4144-a02c-e5a9212cd177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793c1ee9-10fc-4ea1-b230-2c1c98bc2f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946c7206-c322-4d27-8fc8-618b8420bcea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3245f4-9267-4257-aa94-928da8c08d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495f5864-d0d6-4923-a52d-0e8c21898322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6d57a6-ea9b-4473-8320-fe9cb5d892b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a4bc8e-e28b-4ba0-9ecd-5ff91d9d7507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5412aff0-b202-4444-951a-95b937cff641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa06eec9-a14d-4c2c-ac74-9958fa79b958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a89fc31-72b4-443c-b729-56dc90b8e190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42cb92d-9a7e-4ec3-9aa8-2d03c49d3d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276b40f1-2fc3-4147-83b0-8e79a49ba9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439576ec-ad7c-41ec-8b3d-c4002875f187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901b253f-b7bb-4d0f-9960-febcc1f0f1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592682c4-1976-4fb9-b038-2a92d309ea55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfee6562-1eae-4f1f-8481-524e186ad4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bae502b-a5fc-4b58-83f5-f2e22a31b1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bbe76c-50d1-42d4-b1e9-a989836e3aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2cfcbb-1665-4458-a641-47923cb667a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae579f33-c4df-4582-aa2d-7455d12247ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b2d488-916c-441e-bd82-8e1e7670a5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de96c196-0d85-4f73-847c-99c50a29d93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaba31b2-628a-4a3d-b8ad-a9a1330e057e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1951aff7-477f-492a-8d83-aa7e6458ede2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d5adf4-1fb5-4184-b8f2-e565e7ed3c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c721c55f-d0c6-4228-a0f1-73c76840cdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9529070-0ae1-4f8e-98ab-7249e04a00a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.93.60.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e51917-d852-48b2-b3fb-8c998ef89ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.254.25.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc63903-22dd-4d08-895c-1309d92e1807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.239.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2e9d02-232a-4170-b157-aad90320c571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.246.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00e91c5-ed94-4a76-8732-c14c0752e7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.247.168.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d195115-a603-4214-a931-69e15bac3459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce2cba6-bd8c-4105-9589-cbcd21015643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.141.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff138740-8288-45ba-bbdf-50f7d51b4b7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd98b2c2-f1c3-4bb1-979a-079b2d5df3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.102.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7adda8-b7a4-4079-9c24-2d328f471f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.122.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61905bb7-9efe-4ba8-89cf-b3298d9ed01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.167.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3440c54a-29ac-4476-a64e-179d899cf456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.20.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8b6a9b-9132-41f6-b538-27208d32998f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.21.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8299d49e-6326-43c7-b8dd-08c1f0b76d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.217.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f74d875-a5df-40d4-918d-80c8bbf01112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.226.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1d49cb-deb8-4f75-a8f3-e914a2eb43e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.230.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42142780-7eb6-44b2-9e97-870b4168241f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.236.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc4c183-c458-45b6-a5d5-d4c8bc508ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.48.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feecad3e-f852-4c37-ab5f-7f2d35ba3ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.6.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60177d3e-059c-4900-b7e5-616ef07c8363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.8.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023cd9b2-527c-496a-a713-8a316ad0f7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.85.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84ae68a-bc73-44b8-b088-90c8e338a329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.94.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9e42f5-2ef4-41be-882e-13561afdc534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.100.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11499785-3f2e-4d17-a265-a5867fb3d283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.154.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5545ba9d-9d03-49b3-ae40-e30bcdedf617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.218.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc76dfc-c332-468b-8196-b87df039613d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.243.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceabdce6-d1ac-4fa0-b324-78bb8e2ca263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.245.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82547042-51fc-453c-830c-191bab96dfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.4.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e399fda9-79d1-41bd-bb96-4b58fdf7ce1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2060b377-87d9-4ba2-a366-c0c6242b9fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.70.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7319647-8493-42d4-af51-d1ef67396ee1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.94.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c109439-4f2b-41b5-91dc-b3583653d19d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.95.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f73712-5d76-49c2-ad87-fe87be89ab2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.254.167.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a7cad7-4df7-4ad6-8171-db6d4231fc37", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.42.22.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7832e3-91f1-4d76-b7b0-1b6acf25df4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.48.252.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faed6902-5645-4e24-9b68-66a980c52d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.48.27.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18d89fe-e0b2-405f-83bc-db7ee9c089de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.51.208.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772ccbe2-fa29-4e02-9e8c-38d890389883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.51.227.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb76ac37-be79-43ae-872c-d34b79316a98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8786e2-9ca0-4567-add6-f4dd822942a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9066babc-ad10-4442-9a14-bc46cd29fec9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cad22bc-8f9d-46d4-9cd8-0b8c87be34ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d34e8ac-cdd3-4f7b-a925-9a7aa00c5b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.118.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa76c71-6fd5-42ee-95ab-a2ad42a3107b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.90.131.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e599a1a-c98a-4169-9040-bb9eedb971b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.156.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743b9e0e-0db8-4902-b83b-e617c6178d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.3.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fd8cc2-3a29-4f1a-a76f-a124d78cf957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d374058-95f9-4d0c-be22-31763b02ebec", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.181.14.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25922090-d1a7-4385-80be-adc5b60f936e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.88.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062443bc-5238-42ce-8f1f-a6f811d2ac27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.255.1.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3dd1a81-04a7-449d-8d99-780173b99e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.226.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7febdea7-3555-40d3-b653-64141c647aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.48.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1b24b7-9f23-41f9-9992-821e99300542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.104.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93dde631-0479-495d-8430-c3ab0b2e934e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.125.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee838f0-9a74-48bc-9f13-74366e4db576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.29.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3fb6e4-816d-45e7-8cc8-1d72b7fb68c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.6.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43c1105-6508-447e-bfd3-0d8ef7c7c534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.130.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd435c4-74f8-47d5-b649-1b6f872ab972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.136.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aefa13d-e844-4f0a-a1b0-ca66a0fd239c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.164.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291ec0f2-d6b0-43dd-ac30-e7e748b6ac7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.183.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a787aac9-8224-4caf-82b2-c156fb6c674c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.203.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af8a6ff-3b80-4aac-8c9d-d20d282b46b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.217.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ee3ff2-18b6-4e72-b29e-30eddb20fe8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.231.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127ffad3-e979-430f-acec-92d89cb06f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.6.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed0ac6e-7f08-4f4f-8ae8-29d1406324c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.70.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa47ee4-22a2-423b-9cc7-3a9e87da23ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.96.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058b196c-8b49-4dad-b83a-d55123da7a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.147.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98765a09-dc1e-413b-9d54-8b0c07e5b800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.184.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1bdca1-762a-49d6-be63-419cf3a5f166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.219.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160687e0-c0ac-45c3-9003-d2f4da9528b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.38.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ded1b9f-5045-443e-a586-5ee8511c30b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.112.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28477e06-4edc-42c8-be80-105c5b7b0e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.113.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbc4615-2bff-4868-999a-bee610fb21d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.165.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29b0e46-aef8-4302-bcce-028508be594e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.225.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26421cb8-9ce7-403b-86e9-c53658bf73da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.32.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb9e999-60e9-4934-9b3b-ca93a1f5863c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.47.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7b3ee6-ee18-45a5-9a82-8ba45db9d324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.55.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c644d6a-309e-49fd-a048-1ef15c45d0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.82.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d0df42-4633-40c5-989a-59e3d64acf26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdc6108-3879-4eb9-a134-aa6eb8242058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa956144-2423-43f4-bdc6-1f5c67f9df3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.58.56.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541b4187-7656-4711-8622-954332f31efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dca3a5-9b4f-419c-8f86-dda9d79e1034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126e951c-5a3a-4fab-ae39-0a1a704be7fc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29f37dc-71a4-4c23-ae6d-b58e8e374d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1112902f-60b4-4c47-8597-8c1fdae45021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a3a4f8-aa4b-4690-be25-b75fda783ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f48105-0c76-4375-b87e-511af5ea24e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.120.175.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1092bfb4-02fe-4915-997f-0639147e5545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.176.117.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce06a69d-caf6-4d87-957a-e6fa7e46cd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.211.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c747b3de-5a0c-48bb-a8a9-57e77a42f539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.191.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48ffa6c-affc-45ee-867e-62b1e2f56803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.233.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9481aa2e-4192-4b7c-9597-5fdc0e461d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.18.68.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63ee2dd-eaf5-4ee4-aae6-83e594c8b945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.109.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b62fd4e-1b28-4f86-ae5e-9d5dcf7ac1d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.13.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82b8c62-4724-434d-aed8-f42cb082dd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.152.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fed53b4-ee34-4e7a-9b85-750cea651195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.155.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194b494f-4591-41c4-9d4f-947c3cef0407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.230.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0964f709-7451-4099-a11b-27089e0e65ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.69.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92917ec8-69ff-45b7-a332-d50530835a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.80.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c127921-c92b-4143-b639-89c0dc78987a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.98.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac1d04d-74bd-4d85-ab93-791812ac432a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.99.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cc97bd-709d-4e93-af5b-f1b972d52b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.157.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c09a6d5-23c6-4abd-b9a4-5af2143ca179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.84.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681a6b21-0b6c-4945-9997-c585587b5900", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.0.220.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7210c9-e34c-44c6-a844-38c13ac9489b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.243.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef873af7-b3c9-4e42-84f2-cbcb3e35f4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212ded4f-a0b2-4366-98ca-8b1073cdbdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d6be62-5b12-4980-90aa-365630b91a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16e2d52-bed4-4437-8179-e9d5f5a1f7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee984da-41b1-4ec8-aefa-3a87b044593d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2c313c-4890-4a6b-9429-3042aa573ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7a2a9f-c169-485c-84d7-4d6e9ed39bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21b0b60-cf58-478d-a561-73eaa94233ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1360a7a5-8279-4dab-9e4a-f2101cf268c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8ce347-857b-4be3-9bdc-2a87a02ece90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f42f88-a98c-4e33-8d62-246e8a46f3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a9601f-4eaa-41c8-9f50-2d9481ac9efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2871d01-ef6c-4a28-8877-384a4a742798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5156d732-d9f2-4e4b-a5fe-30b7c970ec80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7239eb-cdc6-4d76-b426-2cc22c82ee8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a53635e-a8ab-4e11-b74c-cbcf9eb657fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da05e9d-e6f6-47fb-a11a-ceadacf4483d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae81cbb3-04ad-4786-92fe-72b41e18538d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a13c73-c05d-44fd-bf24-34506eca19f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e1d9ff-3c9a-4a87-a437-9c18ae7849e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d3ed8a-1701-4858-94bf-41353431be5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b545bdf-2b80-4ce4-88b1-4803858ebe7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1942a0-16e6-40ca-b9a6-c9f6adbe7fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d84f8a-76cb-46fa-b047-5f960ef42596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7944070-f58d-4dbc-8ba5-f33e3cb2fb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b2529c-beea-4fc3-a32a-23eee44823d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5f65a0-fc27-4458-81bd-8ffe994dcdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9218a8-5b9e-495a-8c5f-cfd58b1fe8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bee2444-c45e-4590-8711-0242a7380977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28225b22-2677-4684-8b9b-b9e23cd802fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbb3f20-93c8-4f7f-9287-6e389098291c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7d7090-c518-4c64-a626-ec28e237dad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ab6b00-6906-4440-99b7-70ba67ea64c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fed1f0-2d34-4f8a-9b6f-967bfb5d8b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1204bce8-9bbf-4007-bb90-93bf2d910c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd63385-25cf-4772-85c1-219404bae730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68eb1a6-7082-47e4-8d91-3e16bc3391af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fa08ca-30c9-41c3-b6c4-ac3ee7ee5055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3badfc0-3deb-4cf0-9463-7a2c6acea63c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82830e09-9121-48dd-94d1-211c4e43acb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48673631-4f77-4d6a-bcdb-2d7d501aefd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24108774-4222-476f-8e21-52b70497f31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5534fec6-41f4-49a0-84bd-8c17b2f91656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcda091-2d88-4431-b772-25e946e5c3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1228477-b3dc-4788-88c0-64990ac42b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1254c2ef-488d-4f2c-9272-bc6e09646106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc91f4c-7eda-4a48-8cde-0fd263cd0ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebf68fd-d86b-4fe7-b6c5-399f1dbe7fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c2ab77-dff4-4362-9b28-6579ecd2206f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696a1045-2bcc-437d-9391-10b1fc95e020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3a6e88-9021-4975-8604-d2553e6941ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea805997-59ae-4879-a7be-81aa742208c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f298125-e97a-4d0f-b5e0-fe6d5543d6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafa644e-69fe-4ac7-bf45-158d5f729a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a68285-a0ef-48c6-8309-202052cd0cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ff0814-9347-49ca-97de-be57924bcca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7802d27c-162f-47ef-8bca-37589d9d69ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a18d6b-dfce-4fb1-83e3-051aa71b54f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80c277c-56c0-46d0-a085-c78a5308725d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb3ae59-6c55-40ab-9290-4d67d942e275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ee6cc0-9213-4600-93d7-ab1aa61a0e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4628e4-d4d1-4b6b-bf41-9fd380cce7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fbef03-8eb9-499e-838a-aa8ea8edf9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9aab05-ee42-476d-b1ff-6db6d87e465b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01cf192-9f06-4a0d-8c76-1172c5a6fd10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608f37e2-412c-45ad-b111-4ca5450addec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ca1e5a-dcb8-4b24-97d2-c9746fed3294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca1969c-bc33-4408-8c85-875ca884fe73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c917bf5-db03-4d32-982a-3a16662b9f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd7657c-2c3f-4f76-ac1f-736a6adc62ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe5fc60-6854-4b46-9b06-ea64f26a1f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e7a76f-e55d-4fc1-b76f-d6a1f1665d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7904ce75-1d39-4ff2-aa79-6e898ab005c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80944d74-7227-40cd-a5da-18d3d78b6a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393cee19-6774-4791-8b5d-67e788f9bb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecf064e-e54b-4d33-9bdc-e1ff1e1d78a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa90be5-6003-4972-9b8f-c25df7cf5ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc117815-f19f-480d-ad44-9819672426d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fee2ef-0ee8-4df3-8b8c-aecfeb1702fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd936a9-fa3e-4b93-9b35-62a1404548c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9968adc-6ad9-480a-b78f-7db79ac3c3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58ce5ce-f7b4-40e4-a49e-8a5d2ba486bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add57729-81d5-4a10-864e-cecc6d25e892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378bed0d-18bb-4f51-99d1-4cfa6c13810e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07cd327-0e53-469b-9d36-860d64b1dc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90822dc-8487-4ee3-85d4-a9f08025f220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad95c877-187e-40a7-95eb-0a410f093c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9295eb0a-2012-4020-ae41-3bea9896fddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b767244-7a73-4796-9348-0fef7652a00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1bf0a7-a11a-41c2-8eac-eee0b64c3223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15280520-cd5c-4e40-a5cb-9faf133f002d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dedb696-db2c-42a8-b3fc-f154d435e06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fa42e0-af8b-45af-8469-06d069d836b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ba8451-6706-4f63-8eae-d9934ee3b58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb113189-45b4-4797-ac84-b6e64d397a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6415fb5e-cd70-4cfb-828a-3a81e3907dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a677d2-9ad1-49ca-9278-83af91f0e638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571e30fd-f1d1-43e2-a750-ad10d2501dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e52f95-62ec-4dab-879b-34020773945a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fed0ea-65ef-48ad-81f3-afbe3aaa8392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9552078f-b08b-4d4d-8700-a8ddef63ff98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01964a1-5920-4540-b109-31f03b90cc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26eac74-17d5-46d8-8e44-80d45f50de2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888fe1dc-fba1-4f3c-85e0-645a3fb264c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ead6c6f-90b1-4b19-afd2-925900703c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8eeb6ff-8d87-46ba-85bc-4ee33a7fe496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4d2dfe-9845-4b83-9c50-8dea11ebf71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b822aa-515c-44f5-b499-6807a4595117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7ece28-2780-488d-8feb-8cde46014e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797d5b0b-31f7-45e7-a045-682742e794c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6143b48f-f815-4001-9eda-0136a9faa54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ced4da-2173-4d8a-ae1d-9719bea4b3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad73751-4e77-432a-af49-249e717c83d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c98bcb-d882-49ea-a608-49ab58556443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd723125-c235-42de-a97e-09f990e144df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c18d13-d4f4-4b5c-b1fd-49c27e752c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272bf708-f612-42a3-87e4-d7de679d39b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20736624-892b-4180-b93f-4ffafeaf8b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8fc226-a128-45cd-ba4d-9677a431d5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c6f12a-3d80-44c6-82ae-3229147fe5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abd7aa8-0ff6-4ca3-a512-3edbd65aa8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727f7f0a-c347-4a49-a7f2-0103fe515cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909dbf06-5d07-4b08-9c2b-579a1a3bc378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43e7d50-fdc9-41a2-a6c2-218ceadef47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ee672f-801e-4f0e-a134-0bb26abe7ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b252f0de-7046-4357-b94f-010b7681f2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857008bd-77ae-49c5-8470-25956d2f3b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82ec734-c8e0-415f-80bf-c8bfadece1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ed20b5-d403-42e4-972f-2247ac578326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0e2563-1cfc-441e-8f7f-2f2eef495a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278004ce-fc1f-40ce-99d5-152306ec0164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3618d876-48af-451f-a42b-f4304fd98080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e180659f-31c1-4b92-9a8a-eb6d1c0d0dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38228047-fcc9-431e-8e42-cf552f4e43c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d4ad95-d036-4633-b2db-850b50fabcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83b724c-fd27-4d14-abb9-acd611b6691f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab3f656-0938-44a0-8f10-f2056888987d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c03a34-4eb4-46fd-99a6-328df8a772d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c01afbd-e491-4f6d-9903-34e4796333d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d1dd6e-2030-486f-9f74-fb093796f6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5781f6-5660-4a31-bce9-279cf81b9162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7f89b7-0c63-4c9c-9858-c713d7d15465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22e2457-c410-4c76-9a79-15f1c0a7db98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5371115c-5c9b-415e-bd63-976a68334d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5709dd1f-d18a-4361-9d0b-5841b6e09a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95a4612-7089-49a8-92fb-1100691b4c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7779ddc3-074a-417e-9e41-f12facdaff00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd5f905-4d2e-485e-986f-56b255936745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc6f419-a43c-43cb-adc3-2f3734093d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9f9a40-0ee1-491c-8690-c717b7210456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b31a56-cf62-4be1-b774-3313f21510d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944951b4-6fa7-4f69-857e-44b11b0803dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad23123-1b01-4923-a45e-4340770a5635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac81e32-da8a-4316-8169-12a68efb0d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1862dabc-805c-4fd3-85a3-676889a7abce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bb1301-8d8e-49d7-a1c3-9d62e138f665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26aa80a-c1e8-4712-8ad0-fe3f733e3147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9996110c-3328-4661-9816-fc430c74eae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5614e772-8150-42b4-b088-5d99f79d8868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b1e1f3-512a-42d7-a021-1f66efaf1c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9492ceff-60bb-4889-8e88-2f9bba9a9e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3de0580-5b76-4da3-a09e-de29bc7591e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058f0c4d-c7b4-4939-9876-184b6f34b732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4986d74-d61f-40bf-aaaf-9418eecde6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4175d9-4842-4649-aa95-1c6cc3633a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6349baa-aff7-4e37-ad95-f5ffa352dbf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a742c82f-0096-4430-af16-a1149952be48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d168e0-c73e-40b2-9286-d2dd07828043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d185038a-7058-46f7-ae4f-e76a6c15a2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58bc7c1-53b5-4acb-9bfe-37274c7136aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e218d1-d456-4951-9788-fc2ab963f1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864f78a3-1f3f-41ec-837a-ac14907b3189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcb89db-080c-4332-825e-8f219d65c700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535e74f6-6c37-46d9-9c91-865bc1a5d931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea85d66-2a4c-4f32-be9c-ee1aa01dd695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5929efe-2d0f-4c34-8398-cc69d22f14d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4425cf-153c-4930-908a-5aff093593c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d2cc93-9570-478d-b14b-a53969e6605e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3129bf8-f3fb-4ded-8381-58971aeb4506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42108d8-fd44-4589-af9d-fec120e7f0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf9f1c8-5bc8-4280-a489-5aa595c21e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5831e4ec-6a17-44ed-a428-aef9dbf93b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299dce50-88fa-4aab-b2ba-0376c537ff86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bd943e-7585-4881-b629-0d682ff0fa72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca9d8b3-f85e-4c42-9bf8-39b8ac8d8668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df2f9a4-402d-4881-8cdb-7ef719e4c725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e960ba-fbdb-45ee-82f8-8c401f271222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af268730-5743-4ed2-95e6-bcb85d235563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d620a2c5-a786-4084-b0ca-6d7701e12c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58be3a8-c0ea-4aba-a393-2c8ef91fcd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2df2d2-43fb-4e08-8d51-fac4ca578486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadf996e-81e7-44fe-9c8c-9e518530ad55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adab97ce-75a3-4383-8615-ad4173449262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53afa16f-5e99-4e21-afbb-e66a3f154600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e488d300-ff49-41ed-a1d0-6c34bb637f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65eb8ba0-d41b-4c4a-8e03-033b733fc830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c6681e-79e4-48c4-8645-cc7610f40538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43afa12f-0793-426b-8a32-4aaa60ffe850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28914a1d-32f3-4011-ac76-02269a605462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5474b957-49ff-425b-8c80-a3287cd3b6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18da9513-de9a-4cf1-b2d1-6202f272d21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8ef111-1188-411d-805b-e767f9c96223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45c0b49-4e7d-4b1b-8e09-e000cc6d43cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cedeaf3-dc5b-4ecf-845f-29b2272dd142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1005ad-5874-46cc-863c-91f754eb8bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9128074e-4e34-411e-84de-e285ccffd803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d09dacd-d6e8-41f9-9e3a-d39d88cb3133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e18e7bb-06b1-4d37-bf24-902adf3ea733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc2c5ab-060d-4ce8-abed-e06f3307cde8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c9231f-b0b7-4e06-93c1-8ed8b6cb463b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c3066b-00f6-489e-8ee1-ecfca7b3dccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2718b54-56a9-4930-a45c-9ac597db5728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76acc77c-a6a5-449b-b22e-4a62a3e62678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7380f7e-e943-4aa7-b409-bd7c54a60a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee25da33-3577-487b-b626-71467c2b711d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34157c3d-e9b2-45b1-a808-37b30832d0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0779e6eb-96f9-4825-83d3-9c0b95de0dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b739277-7f68-4929-9a16-39329fb9a6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9284c72b-f788-46dc-b4ea-f008e72c97d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7162c239-0b99-4cb0-837a-f76eca68139c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d44625-e303-4c0d-a3a4-37790cdb20aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fc3229-b70c-4ab1-9f79-2fae85a5b637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8b0ee1-dfe6-4c59-9d21-2c76904d113c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c34eec-f6eb-4b8e-91d0-19125aeab881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22db5ce-26d0-42bd-b916-6fb9ba0f0eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191bb899-c5fd-4178-8e19-3c1679f32e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3c6a1f-b299-46d7-9099-37c7791f9ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f33851-8180-40a7-8f6c-e3b5f90ac560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01fa89c-0c66-4d06-b1d8-9ec291c926f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcbe62d-6427-426e-8c41-b39582b78fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba2574d-169c-4271-b678-b6e6ab04f644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43c0c77-4a53-4101-a755-3ca705f16d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c63fca2-ccb6-4822-a7a3-4bd2b239f2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209c3ad7-e27b-418f-a342-fa253d2e6a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794ad203-db27-4fe6-8903-051d3f087045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdbe82d-a765-4dc0-b650-b889ba42b2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3252d1b-04e8-4893-aa30-91f47b8b915f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa18b66-6ccc-4169-b3f1-59c57e0cca36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f3dd33-62a6-48f8-af5e-1436e04b7002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e805bde-d097-4f1f-82a1-2a67aa0f3594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ede46ef-db47-4617-8a1a-ba060b46ba11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477264cd-9f99-4dda-b1ce-196bdc1b1e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a9489b-88de-4ea0-8bc2-cccb0b431e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705f8c8b-2dde-4363-935d-553a8275bec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9554b18d-a294-4481-b922-9ed52cef5ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff6b2b9-12a6-44f8-996d-070e82878583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e2f681-7585-4e92-97a2-b5e26ab19124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c880ace-7906-4fff-86ba-7bc71bdcffc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce2b397-7e79-4fc7-9df4-a591177afd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd43eb2-f5f2-4678-9096-e2241f564b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4bb59f-3c28-4df0-ab0f-14d199a43b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f5cf00-4b51-474b-a5d0-d53e26fa5c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772f85cf-be3b-4b45-8f62-d15b09e61a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1df8465-cc59-4af1-8486-58fb26627a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ed2c8b-5d4e-4bc4-a8ea-1d86a773d2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc14b382-043d-41ae-9569-85041b7a9de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7823d6d6-c4fa-4eba-9932-fd781260def8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fb76be-4ea6-4fc2-9b33-6b6fce2a98f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103a48e9-0fe4-4416-b7ff-756ac8583dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe743ad-2071-4ec5-8a4a-f63c2c096063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860ac4ad-1b68-4147-be70-e5b52266b3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5fe6ae-dad2-4598-af76-96a720f3e948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6581d9-4238-4017-9e24-77c0b40af40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b79b425-97ae-4ea8-8657-36358f133628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b320915-0faf-4000-8838-16ddd41f1c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2643b2d-b608-478e-b7c0-46ad60ddac64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc65e5e0-98c3-42a0-b2f4-ee3dec78031e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6dcb32-fc2e-4efb-89fd-3b1f7747f1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849894d8-6c51-4d24-a38b-dc48e2750704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b83545e-3ba2-4982-a823-31286dbd488a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677c8072-01c2-4c61-b745-c44a3efb7220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d45c37-9428-4d39-b3b8-e8b0b5c9acd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4840e2ce-d512-4b76-a55a-6e57c6926da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da76040-a99b-455d-8fb3-0dc637f68fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88c1671-11c9-4dbc-9dfc-f671f03f1135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fdab0c-07e4-4935-a534-d5f947659f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a303076-b1eb-4099-a193-5ee387b41091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac97eea-cec5-41fd-aa49-4e43f5b5deed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d044a11f-7063-477e-b518-179bd6083019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e60d8d-5c3d-4b43-b121-e588b5f242f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4eba745-b8ea-48ec-ac75-d06f08496bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96938dc5-00b0-499f-b99f-405db2811d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3cff3d-4444-45b8-8ebd-b493104e3a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961785e0-735b-4592-a548-e8bf0717f29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce38c9f-95de-41c4-b910-b22b60203e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7e61bf-71e9-4ea5-8159-5bf349a2526c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952737e2-6580-469a-ae62-493140eb8fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19cbbdc-e42d-445b-9881-5ea2fa55033b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d479c674-847c-4972-a6fa-8bf734082c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f36c342-d1ea-4f64-bec3-426a5a7a016e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598fd559-b94a-481f-9b16-794a7867338e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbd69d9-9d52-473f-ae07-f0f671c0a0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f784f3ab-d593-4d5e-9e16-f0643429d412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b9a37e-c6e4-42da-b7d7-25fd49cb5708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac7b552-d735-487e-9921-1e1df61f2175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e5e2e2-de5e-4a59-a1a3-c671d2bea8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55520b00-6664-4d2f-99bc-25a7c8343533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f11602-2811-4ac2-a19d-72a037e7e267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.0.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f7c665-ec3b-4df2-8e78-27ded89af42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.244.81.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085495b1-fb0f-4e10-a215-43ebebd8c985", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.83.167.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e3eff3-0592-4654-84e3-2260f7a0027d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.179.102.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9a2e97-69a9-4374-9866-d382fa91c806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.179.18.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8312183c-fc13-44fc-89d3-8977cf9639f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.54.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908b2037-2ccd-4457-a84a-5ee2f718c7a3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.53.201.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c19034d-4c89-49c1-8c8b-169e497bdc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.138.205.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e5b0e0-e819-4ee1-84da-fb2ea9ab3566", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.138.205.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ac13d7-9d6f-45bb-a10a-2813dbfdb85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.138.205.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726e3f4a-e23f-4710-a150-589912f1d066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b76356-ea6b-4b7b-8927-72431b7ab7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.0.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac7569b-e23e-4db4-882c-fd90cc94a402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.134.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090cdf74-9c11-4e56-b7f9-4ec2ab615333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.154.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb22d155-0074-49e6-aff4-9458322f3b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.177.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac658ef7-23af-4362-93a1-7190a7ff3a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.197.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12391b70-3ea7-4c47-a946-6d8cd3f5e1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d83276-40f6-406f-8879-e1cf5ec2f1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.148.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fedcf5-3d7e-4a49-9942-890fde2686a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.171.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dee5eb4-0ac9-4496-bbd9-52bb0deb842e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.210.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97afb2e4-973a-4e1e-98f9-11f87ab21426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.92.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5228865e-f592-4415-80d3-6adf201f7276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.98.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aae3ac1-d4cd-457d-a211-776e7b00564b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b7aaba-ce7e-4f15-8b04-2fbb17135294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b499d205-1028-414d-b6a4-2dbcc682c7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01223fda-d8a6-4885-ae38-c13a968a8964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678ad598-fa6e-479e-aa54-99007b0cd9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b96762-fad6-4b05-abf7-51750aba8df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e009884-d7df-4e3b-878a-1a513d5b8d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde4accb-eee4-449f-8a8a-460feb374d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fef17ea-7cfc-44ac-815e-d1f21e52b6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fabe43-4462-4e27-94b3-941a32a596ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32a0a24-579d-4e91-ac18-d96f0323fbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e27864-7392-4558-855d-80c1fec9bb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8578307-a0c7-48b6-950f-46bd7b6eea2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fda15d-6d5c-4fe3-b2ec-a07579511a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091d1d2d-6518-4617-92c4-de32203ce268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38048d9-dfab-41e3-8b9b-56c3b418c552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b47134-7428-430a-82f8-252df6636dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce36927-5736-4a39-8035-f699c9afa7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30031d5d-cf17-4413-b2a7-7e67d7518cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6167a0-809b-45ef-a762-007228e839c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e523360-c971-47c1-88c8-3b55be480f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a38fb1-315d-415b-a23f-b9f386fe8c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e4bf33-7327-4b48-8bda-548389f91697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44df0ca2-c239-48a5-8c12-0e2f83266a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9384fbd8-5c52-455e-9679-a5f2d7743c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488f6c75-a1c1-414e-a1a0-4a81c0360aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4f58ea-539c-4e80-a337-e04304f899f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca33bbf7-8c66-40b9-8614-5fc05793cf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfc1dba-a103-4211-9cae-4e74f76802a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4c5ea9-f92d-4734-af96-61b4a035ff36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4d11b6-338c-4e16-a4bf-66ba9e314abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6efed9-2683-4a51-9a75-bbdd46588e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd90068-c942-4e3b-96e2-1f216c0beee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6d2bc1-d938-4a2f-9419-6612726d6bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343054fb-b9ca-431f-948e-5e0d09579362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5209d3-4195-417d-a332-b397f2b0f46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37dbbf4e-d927-4a13-a997-8dd7cff9bf80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed161c3-97f8-45b0-89df-5b0c8360e89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17084954-e4fa-4c66-a00f-0ead950c1d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fba3980-2de8-491e-a7f5-aaa3b43b5456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86402f76-50a4-43f5-8489-823a457282dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e300ac5-6aa0-4e05-a1bb-4a84636b096f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c02359-e4df-4b3d-b1d3-10bd87199618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a391827-11f9-496b-965e-44d7083fc75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aea11ca-4d0f-4874-8e3d-032dd97169e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341b9201-b9d3-4901-b60f-afccf978402b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0deaa6-6d43-43b1-8ba7-e828f058c6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6ac0e5-2710-42a6-ba16-79e58834f789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ddd328-1cc3-42dd-9ef0-64db3ffd75db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14e6f80-7e13-471e-9ae8-5d2232810e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d998489d-9b08-493d-82f9-1119f74ca5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614ab996-9e01-4b60-a20c-cf5b3020f6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0b0316-8968-480f-8d42-5684d341359a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef18dcf-8132-4d00-94d3-95372e7866bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f65dd1-9ae3-4bc5-9084-c0fd7619890e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4fd21f-7e11-4d60-96e7-ef7505015564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ce1070-1210-46e5-9758-ad93a73b61e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5971922b-7d94-482d-ace1-711994157c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa67e925-21fc-4a72-ad29-3167c3d48c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33513423-6857-4769-a1e8-558ed5fab523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73692823-1215-43d9-bdb9-83ce28026bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614942ef-82e7-4a69-a6c7-63e9369f8923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa163a9-1515-4624-a80d-71e2b88244a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922dbfd0-849a-43f8-a60e-8891b836d842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b24595-7fc2-4af8-9923-ade6c7aba19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cfebe1-c3c1-400a-b48e-9efc6b910250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6172f1ee-5074-44f9-b030-1bef9669fb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4358aa-01ea-45b0-a59d-a4a8b30bbdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1add9546-aad2-463e-87ab-8e93b2900d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a68dcd-ce5a-4390-988f-465e1cd1f501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bc3660-b08a-450d-8964-3d0d421dba43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58624af7-c8ec-4bc8-affb-c24d39ed7d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5941b4d0-dac4-406b-be81-febb617d84f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105bfa81-9b50-45f8-98a2-24a08ec5bb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a19cebb-2d96-4753-bad2-a155b11c7c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcccfc10-be51-4e6a-ba2b-f0da3202c246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e6bda8-1f97-4646-b7db-3c096d9356c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0875571-aa55-42ce-980b-e6710664f7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fdae8e-de81-4b4e-ad4f-f0a69590bc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7834f7e-6eff-47a0-aa77-cf2eb99bb5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c33846e-dd46-4108-9fb4-d519fc0e4a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57d92a5-439b-4675-a17a-cf51805e0055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2f4782-aa84-4b02-9e61-cd032d58096f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a895746-3ce6-4218-9c0d-164854e1156b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1f123b-533d-44e2-a1ab-f4490829ef48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accdeff1-a013-4dda-8961-b3a76bef2bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c6ff97-c4ea-496c-bca3-df47b987916b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c2577d-55b2-42db-8781-b09087450678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6817f8ba-3d5d-434e-855d-bca6b20d679b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4e9704-fbaf-4e42-89c0-8132ec9b2e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ba0445-a40a-46f0-94c7-5f819647a1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae70f4e4-5a4d-44d8-9d2e-ad6e23e4a2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f75101a-bd03-4167-87d7-3ccd0175e221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63776e3b-16ed-446d-846b-cbe86dba67ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f75763-018a-4aa9-94db-b0e4cb9164de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76aefb7c-e8ae-490b-a7a5-944ad1ccc8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f31006-1130-4ce5-9e6a-0e40f0c62085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e367d6f7-1298-4259-bdcd-c3c8d3017a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5646b3-4340-4e80-b3f2-e12256c08541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e349a8-9a13-4f08-ab4b-0fc0cfa3fe72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85ceb88-e077-4e2c-8551-a79271c57124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f283cc-02f5-4ec6-b290-d51fe34b4981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b305f2f-ab15-443e-a7a8-4cf6d30a1b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddffc02-f692-495b-b3e4-8691d560ec13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b794658-7de3-4496-a399-5541a7fb35db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f703f1-df4e-4b87-b33d-e1bf72801f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b568d93-1276-407b-915f-8aba9bc1257f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be213897-7ae3-4aab-ab2c-1f2204929b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cd33b9-5dcb-4fae-a739-6453eccaf07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8999d9a1-87e7-42a1-acdd-39503031333f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f3a559-0c02-4856-9cc2-e214aad94b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6dd54e-6d51-4eab-b51a-0575a4061431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c42b2a-55a4-4c7a-b645-4a8f99500f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d4afcf-a466-4413-bcf9-90fb21ad78db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22caf2b2-2073-4298-b4c5-8a17401981da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f425e572-9277-4aa4-86ee-6777b25c6a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3232c6c1-8a38-4b4b-89e7-9a2a308a0a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dd88f6-58d4-4131-bf92-fe605c371ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5adffa-e9c2-418c-901c-4067c367ccad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c028aceb-35e6-4bd6-8f84-701d7d36ef8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06621048-3e58-47f6-a592-7abe167a3b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f558e1-3363-4b9a-abe8-6443901215e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57747b93-0fad-4627-9b44-7406efee1c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd72f49-5b87-4872-b8f1-56498131db4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18fb7e0-f917-4b24-b1c5-46115c8d3235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065a5d13-7ba6-4331-89ba-b2f3943d4e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233c032b-3b70-4a94-84a3-ed18e497768e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af663a85-249e-4108-9f0d-7f6f9bd743a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6df39d-319e-4d7e-a216-8eb61626b578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddb8878-5626-4905-94e9-ccacd34b389f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ccdc2c-cc61-49ef-8300-9aa424bdd357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267fe450-0b1c-4364-84a8-de659384c467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052aadd6-2291-4e7a-b126-8790199d21e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c27bb5-e528-4bbf-abed-2e4d3ca85ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78e6311-562a-486c-b081-e8a0bdcdc013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17198185-8186-4388-b424-5135de6d984f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01142e62-8200-4951-af1d-a9223403e6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc8938e-2baf-4344-8d33-c9726790b471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fcb4bf-3b4c-4431-957c-7e258a203372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b4148d-6722-4e10-988d-6a194364a850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259c7834-5a63-4704-b6e7-322e32cebe3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1048cf31-dd5b-443a-8028-13927e828b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fac418-f857-4f36-8ec1-a174c9063271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.225.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199142af-73c8-4cac-942f-be7c8f0b02b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a022cbb6-c4c8-4629-ad20-f3878cf448cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.244.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d50a52-85f5-4f66-882d-18162b894a56", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.245.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48932768-ce77-4813-a91a-74ec2284237e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.245.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af90f6dd-0d7b-4412-9f23-1d0a31607876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38331b8-9b9c-42f3-9ece-6a513583b0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a212f2-1eb1-4552-97c9-d90db9c057cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a403e61-997c-4f4a-b066-37ed65c9ef25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10718ae0-9512-4607-992d-eb17250392a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bbbf9b-aa53-4caf-9f33-d9dc7ddb4d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7821d4-9955-4c60-b1fe-e95d2919436c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25abc013-e182-4f54-bd64-23e148e85217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdf6189-2546-4abf-bd07-69cb229437d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5b8692-1f84-4cdf-ae24-eef9d989d833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec206e1-daf8-46ff-8b1a-bcd69c418313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d526021-30ee-4b17-9daa-3f8ddea7d227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c78046b-d1a0-450f-849c-711efe76f9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbfdd04-07f6-4c90-b065-b1f80de081ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9cb94f-31fb-4e7c-8461-a7f606f9336a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110cd97f-bd43-44e3-802b-7cf8819e2f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5b4218-ea23-4cbe-9670-71d43d858a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74800dca-ee39-4fdd-bacf-32d5b98ec42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2161ca8b-c5c3-49df-8465-8bdf35dc07ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f561b7-60b8-441a-b747-e75b3d83357f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa826ed0-796b-421c-a208-2f25093b6e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95226d9-28e6-4e34-90a7-5210b3c3cee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145803aa-5d3d-44f8-8e70-fb9a0add316f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f027519-a25f-4875-8fa0-8002fa3e69a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b704bf-0b86-4878-897b-aa4d6c0292c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf747c9-8334-45e3-8f24-0be195fd9f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a24a69d-97b1-43d1-89b1-9f58873a8e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169c70ad-f75a-47f9-b786-7284f425c17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcb0f6f-40df-49fb-a0b3-174e7212f46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0296a2-8f61-450b-8962-dfa8b41d922b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8535f16-369b-4cb5-b550-8295dd9aee78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ad02f8-561f-474a-9dbb-2e42a079c8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33124163-b814-4a71-b6a3-4e33448a394e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa32d82-8ca7-46b2-824d-faebb7726544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79134485-85d0-4f19-974c-1b7fbe49164c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f22ec8a-e174-4a84-b8b8-af04047908bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c43e33-3fef-4466-bad5-5162393841d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.165.95.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1aff968-31f8-4748-a47c-4f5d40470f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.184.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a351ee48-f6d8-4a8e-8b91-3a5773f60054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.186.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb355b6e-e3b4-4b81-9b72-b3b8181bf647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.191.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb08a4b-0e47-4650-91ea-f0288d0b9102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.196.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a82fb7-5d20-446c-88e9-8670c6dd3d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.66.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a43186-9924-42c7-9987-6ab121f3fa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.70.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69b9040-5643-4984-88f3-5a9b9b101a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.72.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274430d4-89a2-4e34-932c-9cb05cec7be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.14.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc316021-7a90-4451-ac08-bafc5ee33a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.148.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47196a26-ee09-4216-96d3-1e750b370494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.195.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ad9f58-1584-4557-84aa-2aaab8cadfc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.34.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea36a62-6d27-4bf8-96d3-39be3e701e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.39.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbe1422-ab18-4225-8a63-f00fec018a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.80.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac157ad-f299-4ec2-97c4-3e6b1c27c5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.107.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed7cc8a-f1aa-4e0d-a8ea-119c0b39cfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.121.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc37901-9356-45bb-aca7-eaff2986830d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.138.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b749e2-d9c5-4997-b688-c097231e74ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.149.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f50313-b9fe-4f30-ab5d-6103cad90d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.83.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93207004-c253-4fb4-8a9c-6c96cf095a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.88.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868949e9-5768-4e71-aa56-4ae8b90d23ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.211.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ff66bd-2910-4a39-8177-59e0e69b3d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.211.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d020bbfb-5f2e-4540-8f76-ad3804c4516b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.224.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb360db-0929-4bad-a36a-17d567c296cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.245.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a865fd-ad76-4c97-9cb0-f8b9b736d0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.249.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a1c81e-bfbf-43a4-83d7-28802884d64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.50.70.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830836c7-a5eb-4a4e-bd44-bd7cc816af79", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.50.98.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e057c66-a8b5-4764-b7f9-b3c9b00a16b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.160.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa0c192-6f8f-49c3-a317-4d0012a461c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.114.156.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c1e2fd-0608-43ba-91c5-594f1f560945", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.136.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56df8e7d-e92b-4eed-b81a-50bd8bcc46b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.170.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80fa33f-07e8-4d4b-8e10-4e9ca0ef28a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.201.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f50f80b-7157-4a71-8636-051bd1c13e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.39.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb46dc82-8e30-4daf-8c35-ee610ebb9068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.47.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509de03d-ee65-4ec9-88df-f706afa5db98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.99.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ecde8c-6b8f-442e-be81-4ca0b7e42101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.235.26.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e853a3-7b18-4326-b069-8a581e3ca1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.249.121.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8621a9-61df-47dd-9a3c-75ea5637093c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.181.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93196648-cab9-4f5d-9bd7-de9839de604f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.226.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373f3519-33d8-4e10-b64e-b2d0688de2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.36.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21129cd2-c4bc-4504-a7bd-1dbb2f7f706e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.37.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0282d958-861b-4001-8d22-6b3c715589b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.58.111.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc946de4-52a5-4151-b032-98d6c4b7b13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.58.46.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83fce15-2cc7-4bcb-a79c-cfb7184388f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.59.68.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4901efc5-e321-4f89-8da8-82825575e959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.60.165.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37e7b28-2337-4f12-b3c1-e882608d6ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.61.194.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef811646-9681-4068-a7c2-71b713d65045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.62.44.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1413f86-4b46-49b5-a4c6-ee0ccfeb15e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.63.234.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dd57ef-5a5a-4c70-8c3d-3f081b9d6d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.102.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1626f98a-a1ea-431d-a6d4-0159a8814efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.111.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8b8218-cff1-4553-ab94-114210614d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.119.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b557b9-3272-4ec9-a9e8-3ec2b12c51f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.152.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795b6848-4efa-4fca-9403-f1775f213b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.156.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30be1a98-9ffa-481d-a035-2c599f514ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.229.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbb374f-c5ca-411c-adc8-cf91b6c6f285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.232.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710e4f25-5116-494e-bf7a-a1cd7ab069dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.237.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de64463c-dc30-443a-b581-e946f8d908f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298e0255-ad79-4395-abd9-b19ee0a76008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d86e5e7-88a2-4c27-9e90-ca50b9565184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5316ed-680d-4915-8015-83851a97c3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac07c4e-83fc-4079-9ed3-61521186888e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6e926e-c260-4ff3-a18d-ebc1c2c996ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05a6cdf-26a2-456f-969f-54de9223b1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758ba0a1-f646-440c-a557-e74167c2378b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7df5273-1bf7-46b8-875e-a6133ffa956a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedb9b9d-5b6a-4e10-bfb3-3da4029da22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3b4f65-702c-4def-85f0-ca1f23ce3b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe04d99-130c-4fe5-818b-e0838c6d0378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222c7aca-a0c6-4892-b4f5-fc8e61ca568c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1e99b1-b549-46cb-8f28-d90ee0f7714f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0dd618-1aa7-43fc-b975-d33ab314b492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d725bcc-fd4b-4c29-8f34-d12fbcb3b13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da84c27-77c9-45c7-81a9-a7e8038b0eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f548af38-24e7-47d3-adfe-3b9af588fa71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1755349-d4d8-4823-95c7-d6649361965e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b996c1-d385-4864-b475-e5f0dac7d8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5106a743-7c45-4d2a-96fb-b1f3329eb33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4d13b5-c557-4ace-a1b6-99176c06318d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bc92cd-92b8-4aa3-874b-033100d0fd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12fd9fa-7015-49d0-a240-efe4d66f2601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760472f5-4533-4705-b10f-6b5790e72c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7287d28d-8966-40a4-b2c8-9b1794550de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6374592d-7ebf-4762-902f-9cca85f06d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1440d052-208c-4476-9d6f-fadd5cd36689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a94388e-1f81-4a37-b4c6-85cbdf975557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b80d94-188d-4034-b1f7-e7b28e740274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd685ec1-d663-401e-a8e5-7864fbcb06de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68489ce-9b77-4b69-a380-260f43f6f9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eed568d-4673-453e-ab1e-0b558344c20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf148ed-7cc2-4fa7-8c0a-6f38e6fa7851", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747fe7c5-76a0-4c4d-96f1-ef437f9a6796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9469c3-00f3-47e7-ad77-a04cc58d794b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc287f3b-eeaf-4fa3-a167-b395af57fdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c5f689-bddb-4fb4-9aec-ee8dbc24f200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363ad3ea-79d4-4c06-b60c-217ae7f35a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c04e535-b78d-4ae4-9341-9f73d2914069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a3178d-ba1d-43d1-ae59-1e6b24a518c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054bd6b7-36c9-44df-807c-8236d8b6713f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f8c95e-ec0a-4cf0-aa07-f297cb3cc4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960ed98c-0ef5-4599-82bb-17775295a771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b621c2-3a89-43a1-9778-e7d6212d6161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ce7e63-a4c1-49dc-8cff-a655ebbee411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed023ed-57cc-42bf-a089-d0452e98abe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b58506-bb44-4957-b03d-dd85d6e225f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6cfd00-4310-437a-86d9-0fadc52db1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a9e2af-9e89-4867-b763-6fb2f2f22365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daaf4be7-b9ac-447d-884f-23f2d8164ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1a6cf5-aff9-49f8-bb1a-79f5e041d9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63767419-c066-4f55-be20-e2a345d55888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.117.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd3fbc7-df42-4d36-b470-61b269777db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.13.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8b75c6-5894-4b62-bde1-6767b0d7e941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.141.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bc4fb4-48d1-47af-99eb-8cd0edb055e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.209.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2be211-0b59-4af6-b6fe-7f919519cdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.210.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13b9174-65d2-439b-b8f3-5f23ea278bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.63.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ce3081-1e9e-4fee-b6d4-f4d795a2fd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.113.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8243b5a-19ee-49d4-a51e-14ace327831e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.116.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7958d5-79bb-4210-8233-7973f8a301ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.122.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f68f2d-bd99-4fe5-97d7-9a9cc3d2dcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.68.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4b30d1-c00d-4360-a7c3-ead98140f51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.72.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1a89d2-f555-4d90-9e1b-33ffda2f4163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.73.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9defaa2-9c37-4f00-b1cd-6b30d43ce8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.79.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282e1ad8-eb3f-4d3c-8013-c25b742ff843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.88.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4dc371-7bfa-48a5-91ed-5f7b1e97f4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.90.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84827e18-cf21-432b-9e49-e286af03de25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.228.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868fb3cc-f471-4783-a0ac-5ee3a0baaba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.181.239.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afd85ef-2b7f-4e89-984f-e5017de22dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.181.253.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e70a435-a4ef-4909-bce3-58ac0419f0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.194.25.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6993092-1276-4282-b363-1e057c7bd555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aceb8d07-1359-48de-8c48-233fae15da5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.24.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1194e908-5c48-4da9-a68d-4a35489b4105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dc6b0b-35e2-424c-8d44-44cb5984188a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.9.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9f865a-3f08-4e8a-93e4-c7bcd6794cab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.232.204.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d839b1-bdea-4798-b1f7-6c47b1ac5721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.0.99.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a245b0d-e44e-4969-8ad2-c7e761c6d435", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.211.232.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fb4cfd-41d3-4d48-9a96-64a9f9e11d34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.241.219.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4401fc-728b-4973-8294-f555ed9a3da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.148.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b0ed98-e1d4-47cd-87f6-e39e64d67032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819e9c4a-699f-4b67-940e-0fcdf8da474a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.150.184.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16aaef7f-af74-4a4a-9d5f-316e833b019f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d71a893-dcb4-4451-8b4c-c81b797aaf15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53676b4d-ff0d-476b-a451-813a44394f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dc118d-987a-43bc-a139-1c5b13062926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc37f3b7-e61a-4cd6-9d9b-2408ed430caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7658f3-8106-49ff-8b51-4ca37fdb5d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e04a1e-33c3-4540-9def-76fdfebd1090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef237d1a-0b40-4616-842b-f09c823c90e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168a69eb-bb8a-4c18-bee7-83274740c42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.180.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd633175-fbb9-42b1-80ea-8aa612ca15c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.238.136.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5e7b13-7e24-42fb-a59d-23150e701bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.59.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcb3cf0-9699-4ab7-96fd-2a8af16df4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.132.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9b6ebc-9c92-4ab7-983d-575933fa4bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d9c9d2-ed62-45fc-bd2f-8fc8e890b26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450391f0-9db5-45c1-ac9b-4fb7c6f303c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.158.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fa0803-f2be-44b1-a8bb-c9e2bdaf77ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.163.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9b6562-bcaf-49c1-b1a7-0e3681531d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a271a3e5-3b43-4f35-b5a1-a8c5f67e6718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.206.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0487be8e-dfd5-434c-9852-fa383d6cc600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.221.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4929503d-1ed3-43a8-9b6a-d69abd651dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.227.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf709f7-b354-4797-9446-ff364b622758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.78.40.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3953cbcf-04a0-4389-b9c4-93be4b79694b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.127.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833fce09-7f99-489e-80c5-e546bbbe8828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.127.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d3a4cc-c235-40d6-bdd4-8b0cb6d9de10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.136.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e378c7fb-f22a-4e32-b8ca-07d9f8a75f26", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.80.18.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9360939-f108-4b59-8ea3-241c06366faf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.230.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344bc146-81c2-408a-88f7-77d2bfc70c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.24.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b152d8-7606-4ef3-b866-b5a04b106440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.213.141.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02335883-9bc3-4329-920e-15ac8a1e6639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.183.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa91b0c-467b-481b-b069-a1817dd2ea90", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.188.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d195676d-ffaf-40a3-9c5d-a22509f36e5b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.185.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6598f0ee-9608-4cc9-bf73-71740d9d5e65", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55239617-88b9-4e9c-a00f-fce327853905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.250.78.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70a611c-4bf8-4eb6-8a4b-cfe12a9c6e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.36.6.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0b338c-717f-4f55-90d0-7cf5ab32247d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.67.71.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9727f5-5767-4717-bb07-0c23aa0d71f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.67.71.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05853a9-2410-4586-a165-7466222a4470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.7.21.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53f128f-08a3-4519-b0d6-66c37d9452c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.78.153.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3e48f1-164c-4eaa-b979-5dc38a0926a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.97.251.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf20f31-c956-41b6-87cc-b55c7a4ec37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dba3c70-6900-46e1-a039-fe1edc16e562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b272aeaa-ebe1-4c0c-b60f-79286285e4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.136.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16488488-7ed6-4343-aae2-e79cf14350c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.175.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69b7bdc-38af-4667-be3f-ef26575591ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c3d040-a252-42fa-b535-38e3a348669a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17cd8e9-8410-4307-9dee-facad9a057fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.109.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74c10c2-41ba-472a-9e61-9589d0db7d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfdcf11-2e71-4876-b26d-6b01e34c98f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.158.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acf712f-8596-4c1d-8676-7afaa7a087fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad9b41a-f8cc-48a8-9024-80f32a198837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.22.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743a454d-6ee8-4b77-87e1-e33f5bab00e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.99.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b522c80e-1766-47f2-a408-e9323be857a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff52816b-924d-4057-8f76-d1abfc9d7f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12060177-0e6c-4d59-a0e5-c2e14fa05a30", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecd4cd9-845d-4f2c-87ab-ddb90dfa4885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950aa7ce-18db-4f2b-bb02-d11348475fbe", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943e9a94-31a4-43af-b1c6-02703070e32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d8f76f-2c52-48a1-8a66-ba8c9b6c34ca", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8d6eb2-e527-4032-b541-48ed796e1b7c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0642df18-4a6b-49a1-80c6-50fc02999053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.241.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a749149f-a63f-4c13-9b17-b7d0a099f582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab28b8e9-1f28-45f1-b3f7-dafcbb8be5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.235.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ea0719-4e4f-4765-85a1-42afcafa97b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.16.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf573ad-a737-4015-9272-071dfef59ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.81.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7913171-eafc-4dfb-b346-f39638a466c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.82.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac55b4a4-6710-44a4-8e95-e4976b4d0f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2089c55-7b83-42e6-a7be-5193b0b6e1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e8d2da-61f5-42ac-90a7-36557933488f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67f6ab8-2153-46dd-95b0-d7bd15a9723a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da724154-4a00-46dd-bf79-a93b9ae31bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2af29d-238f-436d-9263-78fb9761e202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8d79f3-0440-498a-9842-10af11dbca13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31a7eda-d209-47a6-840e-2c7c1fde36ad", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3995ef83-7afb-4477-aeb2-9ebb1bb4c741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cdd865-08a4-48fe-a971-1fb1d1317ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4270b9-db49-457a-b16e-cea4148766a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb047ebd-abdc-47a5-a744-e28b62e42f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d063f2cd-7037-47b6-87e8-450fd9b58287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74995aa-f762-4662-ab9d-f1f983519f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.49.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a31db8-215c-4516-85a3-3b6665283172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.241.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9d467a-35c7-4217-a4ec-6f3848c7f5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b766a5-c3fd-4cc6-af37-28070d2942ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafdf2c1-7e3f-4505-8e84-be198e9b1df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.251.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da262d98-6247-4e50-ace7-3436014bc433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.68.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8f3a4e-c569-4aa2-9a9c-0c3aac89e271", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.188.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e7ed3a-546b-415e-b57f-2762cc7e5419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6815274-589f-4333-9b59-08bce2640c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438123ff-1709-4706-9e57-9ee489f86387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a86465-3ab0-4b1f-a7d0-8c79a283963f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc1c3b0-a46a-4534-bfbf-325e3b4e6105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a07ea4-0bfe-4576-948f-b03fe0ccb12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.143.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f232926-95a2-436d-9edd-4e89bcaad617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9eb203-7edf-4592-a77b-169c902b721a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.246.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5699598c-42cc-4b52-9872-b55c0ec4efd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b037c29-0eef-46ba-b3ce-576000ac2fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9da280-22ef-483b-9fb7-286caca12894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad86d88-223a-41b6-a016-fe6d3bf468a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59be4692-2f62-49c9-b024-307c0c356327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b09daa-aa74-4ec9-a0f4-eb11f256e96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.240.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c127e3fc-724e-411c-b57a-e9fbc1cb51a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62177b0f-b6c5-445b-83e7-6ee888d44037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73179227-1b74-4866-8afe-f2bac6ba5eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099875cd-47e5-4f83-98ac-69ef5a0d9f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f725dfba-9d06-4bd4-92dd-850467704d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da2a92c-e37e-466a-9f6b-fcf72701b549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8626e1-095c-4b02-afc7-eb93406a6840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fd7d40-a2b2-49ef-a74d-1bbeaeb690c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0223fc-9647-4e27-87fd-0cf21e2f14f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c017be8-d0ed-4e9a-af0c-05fcacfc00fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7a3761-032f-455f-ad2b-e9de681ac78b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68f6dd7-c761-451f-a8b9-9c6581389f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294d03f4-0008-4dcb-bdf6-fc8462ccbaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdce748-2963-453f-bf3e-7bb58c741c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d0a862-8cf0-4b45-9cd6-86044a4f9386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030c7731-1fba-48ab-9c9e-1df88d7f341f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fd0bd5-84f6-4637-afdf-da763a534b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe9304c-c1a6-4131-acd1-909ae2b122b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.189.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb97830-7fc5-4a82-ae4b-c445af11f895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.190.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc6b3a4-9fd0-4a76-9298-7fbb2f2228cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.40.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3a43b3-dbff-41b6-9634-611d60052537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d0b304-e13c-45f1-b2cb-9725b81ff08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374c50f2-07f9-4525-b26e-b2b63d71634d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8942a0-01dc-4258-9196-c3cf4a34efe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17de879f-eefa-4bb7-bd4e-f75c79dda5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2492e728-a784-445f-8906-9e1cb21f1ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.119.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddd3a9d-ac5b-41f4-aafd-98a1afd94b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe3c9a1-ad70-4d8f-bb4f-0854f2f7c4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719a0dc9-bde0-474e-9d88-6e3fc06b1278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5712758-02bd-4d48-9913-42ea28aa9872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.127.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2d2707-bd9d-4ba3-836f-3e119995acde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcfe355-bbc7-4d82-a9dc-dc0b8a67a498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2136cc4f-7d7a-4d09-83bc-02c9013f2c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6710ea4e-60c1-4ceb-b9f8-48374bcbfdaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d9cc8f-95aa-437b-bf49-77ff6b2b22e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6300580b-4cca-4bd3-83e4-ba5cabb023c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a9fdc7-d86f-4524-8edd-b69373bb0150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33152092-8c82-4cac-840f-3fb17eb55673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e157ebb-c66e-40b5-8b6f-40c618c3b334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0c80ae-10a6-4903-9912-d2ce4ff11a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f682991e-ceaa-4351-a6a8-818e8d5a2390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db996bb-09ec-4f1d-8f56-33c74db12eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1994bee5-1936-4a76-9cf0-72acda3ed5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f9b492-0274-4589-9895-a56c781211c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8591e9-94e0-4236-a75f-85fe7042a1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855c453a-48e9-4f46-90f1-301cd7119863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47834f7-9850-44fa-ac64-bf3ea3769ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1222e4-e4db-4633-940d-4db34e0c67ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d7f85e-3adb-44b5-b63a-fc3d29129434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eec6317-4636-4836-969a-aa8e1d402690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bedb4cc-4319-4178-b9ba-c0726f377942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996eb4e7-61eb-48eb-b1a6-2f88039736b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8dc773-9bb9-48c3-997c-8099030b863d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e633a028-9b98-434c-bbfe-80278d7c3482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3cadd2-c7e9-4663-9eef-24d8a07e81bd", "name": "Malicious Host", "description": "Observed: SSH activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e2dbb45-fdbe-4029-874d-4ba17d306476", "relationship_type": "indicates", "source_ref": "indicator--7d3cadd2-c7e9-4663-9eef-24d8a07e81bd", "target_ref": "vulnerability--c2582b8f-cc8c-40c7-bb9a-27618b3e6bf1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4fd2f20-b97f-4cbb-bd71-6eff70c986b9", "relationship_type": "indicates", "source_ref": "indicator--7d3cadd2-c7e9-4663-9eef-24d8a07e81bd", "target_ref": "vulnerability--10d8e540-78c9-45c1-a41e-2319cbfbc671", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ff63c5b-a7e2-42be-97af-4d0fbdb64eec", "relationship_type": "indicates", "source_ref": "indicator--7d3cadd2-c7e9-4663-9eef-24d8a07e81bd", "target_ref": "vulnerability--0580933d-3fbf-4d55-9e6b-1b6da4d0e758", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363d2864-284d-415a-b8b7-c23aa1469fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0294f470-0dba-4dc2-9eda-8d573ec2d2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.9.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0454d39e-8e6f-48b4-8302-cb6b64d95f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.58.10.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928de9e1-c3fa-4249-86b8-cb7b217d89f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.59.173.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef9c14a-02d8-43d1-ab06-8b069c237c8a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.105.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe7d9a5-0210-4611-b2f4-a76843b3416b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8078402-2793-4d67-855e-c916903e721e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75348493-824d-48ee-bb72-ca69c05519b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b3347d-6238-494f-85b3-a26dfbeea2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac3d1af-6921-4393-a57c-d5924fc3fe45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127d66fa-d811-4d07-864f-7ca29534e635", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35baeb6e-a474-43db-bdea-c5cfc722b23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7697e3f8-f71c-4205-b3f6-7a06e7a1f718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad36d493-2aae-44ff-b2ae-7aa7d6b612c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.155.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab305cc-48ba-4e74-bdbb-87c9c1f143b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.236.101.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c001a8-cf2f-4dd0-8755-ec4285fc5c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.236.82.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5a5377-c25b-46de-bfe3-f4c50a626800", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.211.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a2810e-b4db-4807-9def-3a1ad1f3e939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8063b2f0-b8a0-4328-a387-edca4981a6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7957557-0bbc-4bdb-986e-04fcaf9a8dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9769de05-e56f-4baa-a8fe-587bd5d87b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f4ed10-b990-4193-bde6-4f9341dee925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf44d3c-af9e-4467-9de1-b3bbe5a077ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe854068-0ce2-4abb-9857-7f132cec4d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a595bb74-3fce-486a-9454-29275ef17dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0502f6f7-3c11-427c-82cb-20491159ad7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaa0edc-7cef-485c-a9b6-21fd0b2a5b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d9d99e-58a1-4d80-bfc7-93b6be818f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e108e71a-d694-439d-820f-619303e5a39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1af0f30-8ea1-4092-94d0-e59ac8e4a046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fb8e6f-fa4e-45d1-8656-48ebed71006a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab8fd32-73f7-4c20-9fcf-b1e71ea48330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3eb315f-08d3-480b-95db-1844636d2e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f53037-9b08-4325-a0d3-9614303e0757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbccc25-f852-47e5-bf7b-ee448d0bec09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beeb483e-ebaa-48fc-96ea-ab0accae52a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.71.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fabba6-2f6c-4a8d-aec7-bf1b724f492d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.3.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc891949-40f6-4360-a339-c60b8e52e5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.179.237.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9a9658-ac0b-42aa-bf59-bffc15063eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.27.187.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e8cca4-b59a-4e67-bc3f-2fb554a7ac02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.67.236.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf81155-3a2a-4388-8b32-ef55d225c085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.73.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bbce82-1b87-4eb8-8456-e4d26461c8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.197.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309ca02d-66ab-43c8-b54e-30d9a823c983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.237.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66303b1-e52a-4424-956d-9ae57c67e477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.110.112.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c20ace2-6364-48d0-8240-fbdbdd798ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.110.115.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73aada82-d489-492f-8a4f-6b2464e3799c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.158.203.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac4e43d-f743-4cb0-954d-be8d01948aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.210.234.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f71723-ff65-48e4-aa48-08bb13cb03fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.24.174.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99741c72-ad56-4df9-90d9-c56f288e08ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.163.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13942ee-d416-404e-b5d9-8a5be96bccaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cab2fd-eb5e-489b-9ec8-5a29f21bcf14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.32.19.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438a1c6e-c3f9-4e28-9fb0-f3a1090769f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.106.230.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1ff694-2d4d-454e-81f6-9708eecbcb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.117.72.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e4f968-f5f8-46f1-89e7-058666eb975b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.119.25.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f8b761-ed3e-48cb-8b62-36224f170131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48debc40-fa6d-483c-a2ed-f132b8d91ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.17.249.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452b5773-2ba6-41c9-8a7f-aaff265fdd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.205.185.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e6265a-43fe-408b-8018-d86ea7e9dfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.205.51.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90de3501-2a2f-40d8-bfdb-a784ab1e7cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.211.112.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3d3992-0ce5-4edd-be04-99d9fa8d8539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.235.182.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799607ee-69f8-480d-8c72-914b84a7c26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.235.86.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945816e2-2932-45f9-944a-1086af4ce838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.236.227.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd49e3a-0dbd-41c2-a7be-c3abdab0be94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c00a6a8-76c2-432f-a47b-84ea9319ada1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.36.46.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc76e88f-18b8-40f9-8c98-261308b9d57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a98b84-fe50-4e43-87df-61631602a72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31c94be-0907-493c-8e2b-937dc7f3078f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb163c5-f448-4b04-9c7b-e7bd9be43196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd78fdb-4207-4609-b271-ff867514636b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7c6dee-989f-4c63-befb-00643dab3321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556ffad1-ca68-41a6-8931-c1cf98d83304", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292dd877-55c5-4407-b19b-904557db4060", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed6814b-6631-4881-b93f-98c46331ab76", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c18429-e6e8-4fe6-81c6-e3b5589c880d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9835de71-fcc8-495a-a48c-dc97632880b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf302b6-0ce1-42d7-9534-6922d95fcb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9825a3-2458-4d96-9ae9-a43e2da89d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd6d1c1-7618-4dd0-907e-9ee5c3f216f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec873f9-1bc5-440f-927a-00e9652724e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94924be6-495f-4e34-83b0-74d0a7c7b615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509ce2c6-0de7-45de-810d-a542d17f2b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2000848-6a81-4dd6-84c6-6aaa1e6eda92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e046643e-187c-4bd4-ab45-3c731c38fa60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76896f1e-05c9-4bbc-b239-db34067870f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d862b2-f47b-4eca-96dc-0cc529e851ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3551c234-c305-483d-8db0-593e5ae10a5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cd9725-4fb0-464a-92ae-18417efb8a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b636c10b-dbc4-49b5-854b-7cdc06477fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b515ef9-684f-418b-b42f-48119cfd19b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b13717-4af2-4020-b222-c4d8acf9cc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a55f7e-4c72-47ab-83e2-3d3f78f4b9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce190810-46ad-40ad-80e4-1e5db3bddb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e90814e-968a-4f21-b0b7-29fdd2f08577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b8cdaa-f52f-4aa2-8319-d31d92532c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f2a3d0-c687-4c65-abb6-12964a6fb103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f73307a-9559-4de3-8047-f353adab79d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e250b609-bbbe-4a34-b0db-4ba67b7ff1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f2ee83-dd20-4feb-a92f-43ec1bc36925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f803737-40b5-43e6-b732-bf6b95dcce23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e64c18d-9ce8-4365-8211-6ba69478fa2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7308af-5630-485d-9597-5d8e96315851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfac703b-9982-41c2-b7f9-7d02b2330322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f3ec79-3e86-408a-847b-14141d504694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15f3266-1def-4a5a-8c47-c90fc7f1aabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5197e01-d48e-48b0-a372-e4a481329711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8537451-0659-4293-937f-2a7359a40e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4614a7db-aada-4057-b3d6-f0edfdcecce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c113ce-d561-4315-820f-b8fde882acb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50dd25a6-7a92-4775-a3c8-aa8b3205c825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89696ae4-09e2-4e15-a578-23ba1e432f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a53aa8-14b8-418f-9e54-448b6361e2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d4e1cc-ab2b-4fee-9878-ed9dd649be61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91b5727-c88e-4eb9-abea-fe2793a1d0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d25033d-4e6b-4111-9c82-c8fc2bbf34ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7799118e-94fa-4c72-8c64-17e7fb0f9cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af2ca65-e63a-4e67-aa91-70c4c44206c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91abd7fb-313d-4527-840f-e5e36df0898a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82146701-3d7d-4b3e-a11f-b26fafcb9be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f87436-d3b2-4d8f-b56f-dcdc6bbae959", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.159.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a534da-cca7-4a29-8159-2217ab328626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.6.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6205c7b3-36a5-413d-a651-ed2d2976e849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.0.185.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20f4cfb-4d35-485b-a626-951275c62f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.10.16.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3226db3f-6d18-443a-9ba9-fa35f2d2ea66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.107.239.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7077f7a8-6036-4d26-b090-2e1532ef5e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.118.187.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8bc50c-46ad-4bf1-81fb-9872589c6ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.124.168.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e74060-9da2-434a-9b3c-d547e32e4c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.143.162.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff03aee-d671-415f-ae61-6424219a9bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.146.210.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7fb139-550b-4ccd-98e2-2eacc63ffee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.152.42.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527973ee-a27c-4dbf-b319-cb66ce47d20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.18.214.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb0a39c-f1a3-4d2f-8e01-ff481440f345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.189.55.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5238fd38-3970-4993-bb48-3931d22cc10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.203.17.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf024b7-219c-4bdc-b30c-e755f18465fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.227.45.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a132c9-e048-4c7e-a3e4-0145e46000cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.227.74.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b07f227-3e87-45a3-a6f6-722389e07e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.236.13.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30aedb4-a478-4fcb-bfae-3df1cd726ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.236.71.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e26d7b-62a8-4878-9665-62e6bc534065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.239.39.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4ae71b-b3b6-4514-ad55-b95ffa03cce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.245.220.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0ed455-1eca-4fa7-b466-736235ac2d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.32.84.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e903bf-0868-4f79-afc8-91e908b627aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.39.168.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c675a741-8a31-47a7-be52-de72ede3bfe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.62.37.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa13efe-e8db-4581-9bb3-66132cde1455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.72.114.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc247393-e208-47ea-83e4-b88333e3e1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.73.111.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fdc86d-eb3e-46a6-98a8-5d7022b17ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.83.216.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f4d866-864b-4909-a48e-45423a79072f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.87.197.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae64886-3a65-4ec1-b9a1-cac2fa608b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.89.43.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5164374a-b2ef-4e29-86b1-ba703f012c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.9.217.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fd1411-0524-47a3-b6ee-be8f9aaf682f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.96.197.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09032c9a-104f-4089-9b98-96bf77dbf84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.10.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932074ba-a621-49fc-9d75-e95ae99c89c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.146.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adf1527-3482-4dbb-9a25-26f43e19f841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.175.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06b3dee-4f09-4635-bc3a-0a16e75ee4e4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.18.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4529a796-7d6b-43d3-af39-807b43f610c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.240.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f55782-9ebe-4f60-aba6-20c07f7d1cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.55.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01068e3e-6096-4bf8-a021-defd2ec52f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27930cae-f728-40b1-b5f8-0118a7dffc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbeba1c-b3b7-48ad-b510-c3a8fca97719", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.89.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91e7731-5846-4372-839b-ef2e9dc35419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.141.242.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262023c6-b298-493d-b58c-a04353e1e836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.156.145.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b05761-11b8-422e-9ea7-0de7b4d1aace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122812c8-f1f1-40dc-a8e6-926851a011ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.175.132.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4899e9-66c9-4fa6-b971-f50cf433ee10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.186.79.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfcc2c5-1b1f-44f7-9214-167106ad5332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.19.98.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48e3b90-f4e4-4abe-9d36-02913b310b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855e66f7-56af-4a64-9808-c500b46529a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d7ff50-d73c-4188-a5e1-30a5909be0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cff2ab6-50ef-4dbf-852d-a7cedf18ffdf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b7d773-6fb0-44f9-8dce-59dbadb0e66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.214.253.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc2a81a-ba29-4a0f-8277-11d1d41cc1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.220.157.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285c8150-8613-4a8e-afb1-53bab4363961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.238.235.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5181f1c8-2e43-4768-8918-4fd5db97b3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.59.17.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa57e72-3828-449f-84f9-977c2847f18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.1.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b9cd09-010f-436d-87cd-7e9f596bbbf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.113.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef22c0d-2671-4354-84d1-bfeadf8bd2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.216.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72e4689-1d2b-4dfa-abd6-87e7d023e668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.40.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e896fc9d-d038-4c98-b5d9-66f02b5f05eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.55.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618fdb69-556a-40c8-8d00-49d5c0bc06a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.63.85.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca52bfcc-91bb-4431-af0b-d96e6aebe5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.99.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452cd47e-23e2-432f-a774-78052cc1f23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.83.200.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc05c85-78a7-4d30-a7ed-713dc2eef39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.83.200.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ecb782-a846-4377-a150-029ba39cf4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.1.13.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f81070c-bf02-49b4-9c74-1b50974a2da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.1.203.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cd44c6-ae36-418b-8f8f-a562d8f7a186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.116.109.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8e4ea8-1980-4239-8762-2324f18edb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.117.87.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0df525-9126-4801-a5b0-048b9b0ea56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.158.35.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caae04af-a5a1-465e-b831-84bd7527eec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.164.89.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93662a60-03cb-42e9-ac7b-437604d9eccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.174.135.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9eae2d8-e6fe-460d-b2f2-6cf046e29caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.180.240.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84da3a65-f80d-49df-9108-75f238ed04dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.185.254.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f5f065-bcc0-49d7-b634-e49ea8c5cb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.227.134.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d964656-c51a-4086-a7ed-7ce8861b830a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.24.175.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a360e0e-403c-4776-8101-968ed03a8b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.24.186.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50b25c8-1560-42be-ad34-07d575b2a1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.26.174.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554758b2-023e-441a-8922-19766ce834fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.29.201.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da358ce3-adff-43e9-a112-1604bb67a23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.32.9.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561d53e0-285a-49a7-9e2c-6cc6374bd629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0100cce0-9166-4a70-b667-d097d6f7b0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.48.184.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9230ab8f-657c-4a74-a455-9be907b719a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.192.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647b19a6-d7ad-4701-b55e-a8177d5c7bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.193.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0144a46c-d4e0-46bf-beb8-2219726be70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.193.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2355f365-5141-4d2e-b59e-a76c456ecd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.223.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7449a48-5ad5-4323-8064-6ac0ca9a4f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca4c93f-4901-4c93-b9fa-6112de886d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f864cb-2305-4376-b01c-a1f50573c105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.63.64.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7be44d-d642-4946-80ab-7eb82c0af822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.94.4.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df515d6b-a671-4e40-bb3b-8f65b58bfd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.96.190.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fec401c-d048-48a5-a76e-31d22eed1c29", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.97.31.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713d2db0-59b2-4780-b571-7730886c896b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dfee59-ac87-4f1b-aa90-44d53ad80779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c14ad3-4668-4187-89b0-6f9661cefad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.40.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34c19f7-104a-40f1-9f8c-b6ec180d8da5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.138.124.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b01ed8-a656-4433-a9aa-0d0805c88572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639c4df6-805e-4b78-a5f9-c5fc75c9264d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e85dd7b-e3d6-4286-afdc-898ff1272145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.205.239.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af6adc4-a1a9-40f6-a02f-0130108696bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.228.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925fe0fe-3fa9-4494-91be-41094d77fc57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.208.191.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cb7aa0-147f-49e8-ab21-1932fe76f770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251d8ad8-1be7-4e36-9fcc-721f0bde4c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883a2e86-4783-485b-b05e-ee9c5581471b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9391e6a8-6c2b-4920-a56c-e3ac1d3e9212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.101.183.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23734d48-8f97-4675-8124-3852af03d3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93d263c-9773-470c-8290-763c8e7b88c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4f33b4-d718-4028-a845-8acd3018b0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.84.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f384356b-13d9-4239-8481-47b46b7b32e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.90.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4036a2c-8628-495e-a045-ed3467ab7990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.235.36.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a02eb3-8956-461d-be39-b865d1a88548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.249.118.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66aee6c-63cc-479b-b80a-3aad998aa330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.137.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c52d3b8-d669-4f3d-acc7-04c26f22e7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.143.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9794e22d-4096-4243-8220-71d4b7f9d743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.98.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be431019-5b50-4a8f-b5e1-49ba5ada18c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.98.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7a73ff-1923-447c-b47e-c04dd896aede", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.114.51.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5ff4b2-a847-407c-93ae-28ce9300ad4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.116.127.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0c54f1-a6e0-447e-b749-d8181b1aa3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.117.162.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102a79a4-881a-4b98-a4e4-a36097d1874e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.118.159.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e78d595-d39f-4424-b5a9-79fb3c51f16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.122.151.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a478ae-e27e-4d93-9ec9-8ffa0141532d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.122.77.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1869a03d-65aa-4a4e-a279-a619cd25dea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.123.108.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d06305-af48-438d-8abd-4416284e6b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.127.169.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783d13e9-daa3-429d-92b1-17656183ca3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.127.206.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9ef4fb-4d76-4347-8830-4e5160f71727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.129.160.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba9d4c0-a82d-4fd5-a3ed-0d02c6b3bbdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.16.170.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdf1b7e-f687-4ea1-b539-4f2cda266208", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.188.176.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9b15fd-9974-4cb8-a5df-13decebe7ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.191.225.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaee1e86-5868-497c-82e9-4f782d720d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.2.169.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32a1c59-95be-48eb-9b1c-711a2ce1d5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.209.111.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72f9935-4128-45db-b14e-a6ea6e3e35c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.209.86.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5893bc7f-90f5-47d1-b115-d5b7860816b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.153.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516c1864-37ab-42e8-a5e2-c1e77455fd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.173.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9142c39-c529-44e6-8ac4-da1fa074abd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.224.4.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3095734b-7cef-48d7-84a6-353eaff455ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.231.212.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60eac80-e518-42d4-b430-4a5c45763669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.114.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3102a2b-2f33-4e67-a4b4-46de8ab0b614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.25.12.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3574a8c0-4353-4d27-a0cd-bb3cb5c14e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.30.225.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e33dbd-b68d-4ac0-ba89-f23ed7d65b87", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.9.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dff322-f5e1-4711-9482-b71962b5a258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.8.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c698d6e-a82a-401b-9282-d97e3cf94873", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.79.66.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de08c97b-6505-4437-a89b-c5f1033b686d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.79.81.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cbf733-6eb7-45e5-88b0-65e2c19be590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.90.30.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfd8a0a-7582-429b-b0e6-2ea2654e9038", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.91.87.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02a28bc-18ab-4001-a2de-4fcb8b6ea994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e80573d-716c-4fa3-a418-0e39cb9055d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a8d46e-51d2-4086-ab78-776526745c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deac1b3b-e35c-4a68-bf2f-1354476996d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.183.177.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc7202b-2e24-47b5-a703-52d25ea0c2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.23.20.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84651812-0f81-4ba0-8b3e-c5b5f121fa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.244.172.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3d930a-e0c9-4353-a895-29feab161f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.252.90.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd636a95-e247-40d4-984b-5a91446f8831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.253.186.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8511ac-c9e8-4737-a661-9976ed322ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.48.70.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fbf638-8acd-43ea-9f6e-e2816a6a2323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.72.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc49fc5-8f63-4843-8261-751526ace104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.171.242.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fb2b28-dc4a-4fc5-a7bb-c278a6aeb355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.233.148.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a396129-437c-43e1-9ba8-74349edb3a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e14601-39a4-4c6a-8f8e-df6ac1ada278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.109.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f23618-42d1-483c-95ed-8d71b30ce3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.91.119.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8327c04a-b369-4d37-b7ec-aefd7317c07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.94.33.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fae71f-54b9-43e8-beec-d0b50a6d8236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f619fd81-1092-43f2-8a0b-5d04f46868b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8ca7e3-0ece-48ad-a808-e8a56f6181fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c60660-6f74-43f9-889f-cb1dfdd0018f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab102ad7-3310-41d4-bde9-49ea2d6ac6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b568fa-8b6a-4402-98fb-91ed4df5a787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fadd907-6378-4858-8723-cd6f34711334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ce408d-2729-4eb0-aab2-867ec5f2effa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b13554-8a45-4534-8876-029226ae005e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3c1445-7009-4c6e-861e-8be7e35ccce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17095730-073c-4446-b38b-db6793e83836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5063a90c-ef36-41d1-bdbd-caf3839c1f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4998dfa7-9b20-47d2-91f0-50d1e676528c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae6bd03-d6df-4958-810e-ddc70b111cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc544fc-5200-441a-95cd-708b6128a041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd35c053-7449-4626-be12-e03d966497fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7e439e-a45f-43e4-b607-3b0c6239b19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2975de48-fc05-435f-bfb9-a8343b8bc844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3be7ebd-b99d-4fcb-aca0-ba3b75c96a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a5d3ad-da19-4fb7-9f88-d9f0a32f5ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c20d43-9f57-4ede-9454-a0e0e8e08308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1860a302-91e4-4494-b449-25732a7b19bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68620935-294b-433e-b652-e9ae7168c928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e81af0-672e-46ed-8c0e-35bb246abeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94779b87-5727-4c14-980d-681fea11009b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbfea1a-558d-49d2-86a2-955e3ebe1a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9c8d10-f823-4fb4-9023-ff99fd0b318e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8ebb6c-4e4c-4ccf-b2de-b78057418624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b45fa6-9869-4d7c-984f-95e2a85b6fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbae226b-a14f-499a-83dd-59f44c52407e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e480f3a-d8ae-430d-966d-d69014689853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7083405-a036-432b-8952-31c6b67075f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c43f9b-03a5-4484-a382-bc3a548310d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae21ad4-7b22-4db5-8ef4-26048085479a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb4f1c1-da14-44b6-9edc-e6a0144d2b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff1dc09-de41-4799-87bd-022dba60abce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdaf51e-994e-4717-8da8-ea9c9da5be7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bb6267-4b3c-46b8-be5b-8fa2110ac188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1d7978-7fb2-4770-bf5a-5d25177fe75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe57138-30dd-421a-a2a9-069312eabe87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b2db0c-72f1-41dd-ba4b-65a5af29284e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e3df03-5a4c-4a0f-bf54-2e76ccfa782a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c380d40-2887-4480-81d6-cb71d87406e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.179.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fef02c2-69af-4e42-94c1-2e1cf3902130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.1.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72da05e8-62a0-4825-816a-4281403a5bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.153.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e4c3f9-40e5-4077-82ec-ec170d52bf7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.156.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec54ead-3c6b-4541-8e90-b3f3b9384965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90441f41-6fec-4065-a1b2-6637f658ed22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.194.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bfeca1-c917-4f94-82c9-eefcb77eaf8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.78.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6661214d-fa89-4012-bd4e-c6bacabe15b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.78.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16da5e23-28c8-47d4-b743-121359cce58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.95.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e54f73-8694-40de-b288-2706ffeabdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.82.112.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd992cff-1538-48d3-8aac-4096225e2b76", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.93.45.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af26f1c-e481-4c53-a266-756608566fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.10.68.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579e6274-ab5b-4266-b7f3-13640e798607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.102.171.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daaccc16-ef74-4872-867d-2f8b1d079b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.104.70.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf41f15-1871-4dc2-b4f3-93c548a81062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.105.90.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb26fd5-9911-4df0-b0bc-e0510e6b2367", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.106.29.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f00c6c-00d7-46de-a25f-0f987762800b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e068b9-93c1-4f45-83bb-88e5c424206e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697c9804-4fa6-4c5d-a68b-1f09addee52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9224759b-ebf4-49a0-9763-af7e52e81ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3570a8-5246-4663-a101-fe5b13612159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429205af-6f5b-4022-9d99-83b51c20ee8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c977b59-ea2c-4745-8b35-09955402b73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac710fa-5d6e-4927-b078-04f444421715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.135.137.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6abf7db-b8f9-496d-9a35-d5cba0c2bb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859752e2-c68b-49fa-a46e-6c9803db9899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a335d9-b91f-4ce6-a8cc-07ea12cb532a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37887bed-a9e2-430d-bc14-40b01b684a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae3a87d-2876-4bd1-ac06-f6dc3dbf0465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49ccf40-3cae-4ca9-a1c0-86ae84c3d541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bc5893-f859-424f-8f7c-09b1f6a39561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bcd96f-5937-4200-9bd4-1d02ae87e1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af18418-c00f-4035-91f1-0501f94cf3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d5ed16-a09d-4860-8db0-662660a8f3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c18aee-56fe-48b7-ac38-f5755cb17ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.114.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6d36d7-bbf3-49d6-bcfc-df770eddf2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.114.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20373329-0611-488a-8a56-4e4c515f6e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.114.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c823f86-7840-48c2-9159-9543d75719cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9527c42d-23f3-4c18-8c22-178f6431e608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.165.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831572ef-9b6d-454f-8619-d411f87f1363", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad665c78-81de-491a-8cc8-4252e5aa3bc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb133e5-0069-4ae2-bff0-a811dfc3ffb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d534eca4-3873-4452-b187-2ea05abf45c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837e1042-fa6d-459d-b69c-64319e947670", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d83e97-ffdc-42a3-a026-ac1985377cc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777e1e6e-340f-4f14-a276-72ad241d59e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd55e51-7285-4cdb-8f3b-461d084795f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9300ba62-96a8-4e03-88df-e60123983868", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943fb4a1-106a-41d3-8740-233544680fdb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883bfee2-0150-4f64-9ffd-206aa53c283a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8cbc10-40c1-4133-9454-a84320005f07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b95689d-1a5a-4116-ad7d-008c611b55a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867a6434-05c1-4343-9673-7c4cd14212e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee8d8aa-8acb-4a4a-aa09-c58a92ae4e32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff1ad41-1288-4090-8ef5-c9e05b16c233", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f83659-d41c-4c0c-afaa-4dfb2825e284", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26312fe7-b9fb-41ff-8553-beb669c790f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5100961-745c-4262-a3e0-182ce537280b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b24176a-3c1b-46f6-8439-6b81384c3d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.146.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c74ec2-312b-4203-a9b2-5aca7aca832d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75a90e1-ef37-4f9b-8689-4e5f9a7885d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffffffb0-622f-4b1b-8a40-e637eb85e9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111af0e4-8342-42b0-8926-2bfab79e1a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cf5cc9-652e-46d2-a057-a5297cd0c847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91b2922-d5bd-4631-b810-58ec84f84bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b722c3a-bc72-4cdf-a8c5-18d2bec184d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996cac8b-1a0d-4ac0-8457-8fe9095fe09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.205.194.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276abac3-8e06-434e-949f-c78fb4f2fe53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.206.124.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0920f8-bad1-4c58-854e-45bde0205166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.206.200.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c59385-1aed-46b5-b7e1-837a6032e6e6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.211.94.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1b5749-9fe5-4847-b687-544366048d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.212.117.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbd5f25-a7e3-4c92-9eae-37484a6c047a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de181790-f552-4768-ad9b-047261deb790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e195afb5-19d3-42c5-9208-379b0a3804bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857a0424-f999-4f17-b736-bf2078fe39ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.220.101.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5405086-39d5-4c9e-9769-2c230b6ec453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7894099-6831-4b64-9514-ffecd4711603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73715e8-1266-441b-b36f-396371a26cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cffd90-0965-4e03-9085-a776effc3f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef8175d-e6d9-4ff0-ad91-f5871eb0ba90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.41.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be00cd1-d315-4ab3-b490-9887d657db48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07f2cbe-8a84-4181-8afb-1f6e79946cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298cbdac-ec9c-4484-bad5-ff1bc6cf7644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8176a78-2c3e-4961-a151-9cb79f8acb2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41c8692-33ee-48da-88d3-c791f6172579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d50472-195d-432c-96b8-37a3b2f60f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3c992e-7a0d-4e48-a3fd-5da907b7cf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f205537d-4bd3-46a8-9cae-36cf227c17bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ed4fd2-b0aa-41aa-8bc9-e09336e4fa29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383c57e4-0a58-43a8-a842-9d0d8aadf57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358da921-6bf3-48f2-a34a-7df11d8d13bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31afbb4f-acdc-4927-9eb7-1e19447d8d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ae64bd-0715-44f2-a13f-aeb7eb851bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952a647e-34dc-4a16-a643-c3687a7b4507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1553d2ac-8c9c-4687-8283-a1e751873b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.24.11.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f6d10b-ecd7-46b0-a79c-4881faa63675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.149.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f4dbd6-e49e-49c8-ad89-c9bb41367653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf06fba-aab7-4b46-9a3f-1520af28aa67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f855eb-3e8b-464f-b867-65b49f4374d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94eb2eaf-b7f1-49d9-af4b-23373b10f6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfd8840-7749-4018-94e3-5a5767fa8c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109d26e5-241c-4319-aa42-c1815ec33527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ace9c24-b718-4d3a-93f3-8dbcde68f586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7f0b2c-db33-4356-965c-358604ab7588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10952027-0c78-4464-9878-440d96d5253a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4772781-cc41-4c84-9e23-405b64df1801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0921623-829c-476e-b1fe-f4e76593bbee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615f7195-c5e5-4d0e-9eb6-651457214fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71b505b-ea97-494c-b782-a9a68d45c2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd3d063-688f-4200-84aa-1bdbf9357093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aba0c7a-e1a0-4683-90c4-c155ce141576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e64cb54-4831-43ac-9f96-1fc749360d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a42972-4176-4158-9128-dfe8d2de5842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a721cb-45b3-4d93-92fd-002c3dcdb727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9bbedb-04b6-4362-b195-135056e81542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38756eba-28d7-4fa3-8e15-17c8639e7040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f09a30a-045e-42d2-9a9f-59c63bb3eb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9482d75-26de-4ba3-bed9-9f7804e9e3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b8e568-58da-4b68-986e-4e3cad253c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572d0ffa-e9c4-4a53-b901-db4ad2560861", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f84d3f8-3390-4366-a15b-278ed9c266e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3657f39-d522-497c-85c0-19ae518e22f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9898bd71-f787-4142-ad80-aab37df7e52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7be08ac-1b61-4a55-814d-59278f44dce3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff89e6e3-e045-4f08-bff6-6f0a395cec0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3e6ad1-5fb6-44bc-8632-2da4027fa37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef284660-9590-4b2d-ab4f-f189e01ca6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1107d6e6-ccc7-4edd-8d37-dca45fe15c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.130.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67dddb49-7795-42bb-9b7d-364ba2aa7132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4336ea9d-1ff6-4018-861e-2f51f57f0394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5702b9ef-5c23-47e2-b139-088b715b1a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01f29be-8a16-4c3d-a1f2-a37818f9ab81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.253.160.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bb75db-15ba-4341-85e5-69f4c5a343c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70eeb7ad-f05f-4e8a-9aa8-bc3251f47031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355aa3e2-df1c-4175-8e5f-b193ff5fe5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c43b78-973b-4eaf-a51e-977b107ec293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ae47ed-9d1f-4d8d-b233-125111347fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082eae04-62cb-485f-b90d-4e5e760d1616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c451ba3-b833-4719-984f-ab388a8200ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.28.37.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793b59a4-ed12-4d6c-8b34-0cf40dac4f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ee9384-0667-45e4-bc8b-b79c3954c79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.148.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1bf5c2-64bd-40cf-b336-a159d337d4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.46.16.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281c1e4c-8773-4e5f-a2bc-803784f8f9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e0f4b7-3b36-46be-a64f-637cc7deb1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.69.186.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257547ac-3bc6-4616-a5ea-d2cb6046f62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.17.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ba048f-ae70-40fe-bb33-9bf5406aa294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.79.153.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d98c70-f5ea-486a-9f95-02d38d7e6421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.127.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921f390d-66d6-4a39-8d02-b93db49f407b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb43394b-698d-44ed-9cf5-e77b506bb451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fadfe1-04ad-4102-9012-0f77ab6f0e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f024ebd-433b-43b7-9b37-0093385e7cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f2545f-1e38-491b-93d4-0a10d227b952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bcfd29-0d43-47e2-a28e-cc54be7b344d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6a2ace-1569-4985-b09e-64025f803d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.118.53.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d863689-e54b-480b-b601-c7b25f635d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.130.125.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e1ebdd-2dd1-4a94-a799-7cec7f99c53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.134.8.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee9b549-b236-4660-b6a6-a800f12fcfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.139.129.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f804556a-ebc9-43c9-99c5-bcd25d8bc2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.148.121.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da716fe-9ae3-4a44-b4fe-774d05128b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.167.113.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dd5b5a-191f-4e8d-9551-d94b077f5c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.167.113.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91379a1a-6973-476d-b914-d20cc2b0a32f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.167.226.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb79b8d3-acb6-4601-9076-9be057ab9fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.190.215.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e879a0f8-59e8-459f-89e3-8ac4c7471c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.209.190.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933b6847-8c10-4dab-bb90-90373088c22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.232.209.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec466cc5-6e2a-4bf3-b9f4-ee7c08115655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd680d78-a92b-4446-9198-07e9585f3154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.241.75.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b505b1a8-91b0-4f3a-8326-70c354ed9813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.33.16.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9ab532-b1f6-4cdd-a41e-f4cc330b95e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.136.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8b821b-8587-44a2-b022-e580e1ceeeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.48.170.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b710762-7e03-415d-ba69-1d3429c86234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.48.173.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a3fdd6-2e01-4679-bf31-03b6678e90e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.48.92.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3db79f9-5aae-4cd0-ac7b-670469ae4912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.48.94.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442c6d60-105c-4174-9f63-3e615fbfcee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.48.99.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cec8f7-6123-49b1-85ac-eda45ccf2786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.53.118.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ee5300-166b-4ce7-b388-ec0093e287ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.73.197.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5994b2e-fa3b-4545-835d-35e41a2f567f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.74.44.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b577cd-691e-4190-843c-c4d0d5257c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.77.196.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d52faf-5fd2-4c4a-818f-ae588168b2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.79.18.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b2f20c-e919-4fef-bdd2-d05f039aed1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.99.98.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1698929-5f00-4d3a-b48b-bdf796c49a77", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.0.238.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0ebce7-4ca6-406c-b065-5cd947fe13f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.108.231.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe69472-2c58-4a6e-8815-eb1cbad3ab12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.112.59.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c1cffc-3609-42b0-9a06-ee9b5bafb249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.169.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f5869d-5c56-4875-b122-a66c7c9df95b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be75cba-90bc-493a-b37b-f320b2f25001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.23.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543b2139-7b6e-4e08-b611-1c72e7a1d6ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.121.236.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548e255a-58bb-41f1-b8e4-b3b7cb399f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.122.60.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e473004-bec0-44ee-86aa-34f9748f2314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.14.213.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c22f26e-7e4e-4ff6-93b3-366c458dc2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.141.121.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c52eb7f-3157-48e7-bf6f-14661f410093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.146.205.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01d4301-2999-48b3-a495-4490fad44d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.147.155.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12aac67-3b66-4beb-b5ad-470388700b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.150.71.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43d1b5c-690f-42c9-9e38-77550ae46fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.172.70.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf2e559-3087-4434-8d10-f2551d4fbcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.188.253.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb61099e-cc13-4da0-878a-1dd758e00e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32774d8-3777-40b5-b050-42730a2284b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0445114c-0119-4cea-af78-dbb6ea1d187c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.200.181.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77e9325-bb20-4134-bf6a-a5b73e72b158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.22.176.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228cdab9-5f9c-4904-809f-14339f10441e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.22.24.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a805e9a7-4b4b-416b-be89-9e0535d086ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.220.42.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463fbfb3-c9d7-4218-b107-5060e853be92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.243.78.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc9722c-1ea8-415a-9529-68b16934832c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.250.10.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045cbd84-2080-4965-bd06-447a72cb07d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.123.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2b42c2-655e-40ca-8e88-f81b1c5056df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.254.111.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b99100-04c6-4964-847c-d67c8f912c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.65.18.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4a744b-042a-4ac1-81b0-b4f75ca578a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.66.20.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e82d78-64c3-41f8-bd5c-ce0321566cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.7.154.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f973d22a-8486-48ef-8f6f-1a1705c7d234", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.74.157.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecd9212-1138-44f5-8503-8fae0391130c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.84.255.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b94836-33a1-4ca9-a8d7-57a49b0c4fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.87.76.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815083a9-2284-4d24-9214-6ff5ff18f932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.113.135.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fc8c84-a2af-4408-98ec-0f8d8efa5e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.150.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce384e2-4a86-4aa3-a2fe-d9e308d9b722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.249.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3067c85c-bb52-4e1b-bafa-31f1530fa5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.163.108.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e12361-a179-418c-a2b5-bf0ed6898b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.117.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6a0cba-8042-4281-9b9b-1adc34358b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.120.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f075f5c8-1e6f-4722-bb67-1e01a1e57b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.145.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cf45f4-dc44-44e6-b86e-177457f83593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.63.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8832aba-c3d3-40af-9fe9-16ec0190925f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.67.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22703b3-8da2-40b9-a240-272c9b943af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.68.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f511f5-deae-4889-bb2b-06ffd27e707e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.71.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4243a29-e264-48b2-a51d-f96eacbc2f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.19.242.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ee0de2-9cb1-41cd-89a0-ff1a8834d994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.19.72.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913560a7-a8e2-4e6b-9b63-46f47a0ffdfe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.213.202.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d984bb4-aacb-4c79-965c-a1776e2e3f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718e7d50-a1c9-43e2-b145-dd4f846a88df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.253.217.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723a59bb-b1c0-4330-9d35-7a3fb08489be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.34.166.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29efe61-4b0b-4a16-bf9c-2edf3f00f777", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.40.21.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2945507b-5e43-449c-aec2-255e808b64ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5ddb77-6107-40cd-8166-d97ed15d2b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecb69be-7412-47ea-a620-3b8ae03cc94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a273ab-4888-44c2-b464-650107d48adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bfc9b9-6f0b-4874-8737-97dd31327ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.49.224.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6537e28-e976-4a8f-bf62-fdc3b1d83b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.109.87.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943769e4-de91-40e1-96d7-52f30e08f4b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.146.71.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cd45ce-5e05-44a7-bfa2-d6fb8cdf503d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.150.4.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5b05fa-073e-46c6-9230-c9356d78cadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.150.70.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8238c722-9aa7-4307-8afb-26cd146c03bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.163.27.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ba7483-0f65-43be-b3ee-9a428861c44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.18.127.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d6659c-fc70-456d-92e7-b8c3adbe021a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.18.21.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6c40e6-6313-4d71-b579-80f2c409c861", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.194.209.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b95208-36dc-409d-bd32-ce224a244b68", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.201.187.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accec3f6-e066-42bc-9513-0cca271868d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.216.232.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dce54d-a03a-47d0-a995-142503cb9aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.219.113.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23913f8c-51df-440b-880a-68150914b1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.220.52.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891e655e-049e-4da2-9c2d-d6bb28dee262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.244.191.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbab0982-0ae5-43eb-b82c-a29cb660d9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.36.252.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f38a199-7be8-4f77-8b53-da75f295a2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.4.3.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae5d4c1-941a-437a-a810-972c2bc7e2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.6.178.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c92ac5-645b-4503-b401-1b2b03d04939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.61.192.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8194998d-86f4-4670-9d54-c744ce7b423f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.90.38.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c0b7a7-8242-40c7-92b6-2dc32ab253d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.102.123.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d63d79b-d236-45d7-8c48-930ef186823d", "name": "Malicious Host", "description": "Observed: MSSQL, MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.103.31.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717c165d-cafd-44f3-9e46-fcc528633968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.103.31.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4746815-cc5c-4b10-a12b-d4fc7278cb96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.104.33.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfb948c-b92b-4f2b-89eb-6257d4fa0b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.108.60.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49aea16-5430-4213-a3e1-d6f5f7060de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.109.18.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0366bd9-7563-488f-b255-2a99db86edf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.110.239.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe6c281-3f17-4875-8dd9-a7424eb82eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.114.245.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa9f4ea-0d93-49b9-bfe6-61ab4008f000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.117.78.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7492c04-a23b-4130-8b8c-77a79b67e152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.120.185.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31836bdb-252e-4f4f-9deb-189c5b8864d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.122.181.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79453f1a-dcb1-4997-9ab1-75a107c95061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.122.91.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35228e6d-0ad0-4713-abff-d374c4e94476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.123.46.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086b57cf-1fb9-45ea-9a98-93ba3d3a9619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.133.56.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb51f33-0175-44ec-9b41-1b6207c88b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.135.86.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e190ffc5-6ecf-40d1-bd4e-d37ec7e86eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.172.80.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcdf44a-15ba-4918-873f-dd812aed4b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.32.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37451b1f-ed7c-49c0-90ac-69ada85fb1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.189.97.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a719cd06-36df-4507-b131-628880e4db2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.196.251.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800dba3b-acb0-4809-b68b-0e5a72db9b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.2.135.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fedd6fb-46de-41a1-84fc-b8567e7c3ee2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.202.25.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2075d7e-49b9-4294-93ce-3123ff2ec0fb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.207.93.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154ac418-9d24-44dc-bf96-e55d98a6f490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.154.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ec90fe-2d2f-4cbb-bd6d-554f7180b531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.219.103.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d18597-dc66-44cb-9801-3f67c7bebfd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.35.106.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90c3cc7-582c-4f02-b4e8-a213e543db60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.35.146.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2238371f-bbf5-4920-a9ab-c2614e06488b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.6.52.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22648291-ebf3-4ca8-9225-ac2f85931672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.47.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5e363f-2355-4ef7-9b90-fb1e76358065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.62.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46faeb39-31a6-4773-957b-4a8aea062ad8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.73.16.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befbad7c-84fd-4d3d-b6f4-953203b09865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.80.54.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae2ac0f-3cbf-47d3-9d1a-0f2351f8de27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.83.70.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d98415-bec0-4370-99ab-3129996bfa93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.85.41.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87c2e0f-5a8e-4a79-9d49-4d0c46a47980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.89.30.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb00bcb-47ec-462e-b282-c34c2d0f7d29", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.94.212.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7324f813-0259-4e8f-b9a8-2e317ef1212e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.95.224.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a01fca4-1e25-4b64-a6da-664f8f9ced0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a86b8e7-287c-4315-a349-9ca5542e3a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8541a0f-35b7-467c-914b-fd1c2970f696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f04978-9257-4a91-8163-252a85968dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.110.126.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013a617f-eee5-4932-9786-bb583df964cb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.112.10.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52f8820-abf2-4f1f-88ff-4f23ae27ad57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.119.148.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd627057-6f3c-4be4-88e3-30e343ca7fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.190.98.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec6d7e9-0a7a-44b4-977a-200d582e2d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.22.57.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93eada8a-7aef-4503-b716-7d2a2e67214e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d73784a-6b1b-43fb-b794-076613fb2cba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.254.16.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681abdd5-3e07-4717-9715-0086467b2526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.37.81.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2ea27b-2e5e-4043-8423-0c98b3a6fd98", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.44.127.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21afde1-ba1a-4af2-84f5-9fdc21beb686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.6.120.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257b78c1-7f5c-4d51-b63a-65b61cdb6a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1e6ecd-aa01-4ef5-96f0-175f27a0048d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020edb17-18b5-41ca-b7d8-89bb58e13b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a30b3c-485b-4498-b571-987860068c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a820779c-cbe9-4fbd-886b-a1e035c795df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b37a81-d9b4-4371-96fd-0740d03b8882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34585773-13c8-4590-b13a-0de5bd690850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdcc109-21d2-462d-8acf-6b19eef3853e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.226.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afe9e61-c828-4128-9a0f-1739637b7a11", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.193.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b81ffe5-e187-4562-a4a4-ac4d688222a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f978b23-3d56-4d36-b192-919428a7d8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bedf98-cf12-4865-9ff8-b50608e708e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.213.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bef609-a0e8-4e37-9566-fb5c3c1e5b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.154.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c407c7d7-0438-456d-846f-42f3711996c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.179.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eacacc9-2361-4b65-a1b6-085807fb3cc3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.66.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e1b7fc-1194-4d5b-a616-0ed24e5f88c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.250.235.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5c431f-1170-47a8-8ec9-98e17a7e7e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.250.239.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d57aa59-16ab-4f41-83b3-4956dced8f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fe5eae-bd1f-4ec8-a59b-72fd92acc9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4814dd28-1845-4c73-98bb-35f7ba963a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab87a8c-ca69-48f6-9a4b-a39f561f8483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017fab42-3d17-4bbe-aab7-aec6869e26ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.150.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3ecc66-8bb7-4afe-8958-2d49e9d1b8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.206.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0c6a9a-9fe8-4f60-91e1-a80fd206849f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.52.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a15c5e5-7b0e-410a-bd28-e98510139ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.90.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de779a19-e5dc-484a-b5a6-7754a6251779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982de547-c3fc-4d0c-b198-e089f7b4a383", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e110526a-c88f-4ccb-9a26-f981bbd7e760", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a07c5ad-993c-4bf6-ab41-7869cf4f4cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d837263e-034e-442a-a513-4bd465c41da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.53.122.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2510da7-9dba-4ba1-b524-0db3d8efc9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.249.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1856f9fc-a2f9-462d-91e0-7e9c8dcfa29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.129.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa21c74-3ee5-47b0-919b-1d4d57ff6183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.129.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77edc7b-6c25-4bd8-9a02-00216f5f5d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.129.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4612e251-8ee4-4040-80fb-13b84d84aa11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e11a33f-74c0-4eb3-9917-62a3a6a1fa0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e4e140-22f6-4f0b-bb66-d675ba62e266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2232e7-2f8b-4e81-b7a9-fb02ecdd3930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.10.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fced95-6d35-4ace-91e3-fcd030911029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.107.75.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e790310-cbfb-47b8-b2fd-008b543df816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.135.9.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb04214-a54c-4814-8a3d-f18de78cd20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.146.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f22a10c-0f7b-404c-8348-cc1ea5e39281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d55263-f616-48ff-a07b-ab6016f6b46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e141c1a4-d4ae-4c71-bf03-a1d971e581c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36a4c43-7b95-495c-9e63-194c02d85250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5761bf2d-0abd-4e2b-8fbc-8e29b5d52f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79aa5b1a-fc07-415d-a90f-bd74e1eb8ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf735e8-c67d-4102-8cfe-c7ee6ece1c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7d9d4c-d1df-422b-9e1d-709f649b49b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b2d664-026a-42f4-9b1e-b6b70b87276f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a534743f-fb10-4aba-b646-9dd028dbc7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea8e02d-4175-4577-a958-299954965073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ef6832-8da7-4694-ad66-e6408ca4e2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a630cc-b839-4dcb-ba0b-c62b0868d41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b63d4c-fb12-4326-97b1-5c9be80ea6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff77491e-3150-491f-82da-4daad93b6f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6390e5-4cdc-46c4-912b-ed0f8dc0775e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d673e15-ae42-4aee-bead-b5f6c34545df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d65f8d-c975-4d04-bb96-1b8bcc228cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dadab5d-b7ce-49ae-b4e4-436543751c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320fe0f5-fd3b-4b7c-9d17-52072d0ea669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda980bc-5cc9-471b-a09c-dd6f63719dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b39fbc-e4f0-4755-9f58-a647fc2525ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd35fb7-2761-4737-b7ec-6d7128471ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ea1f18-a7cb-49ff-817a-d898da84cfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3787c542-d267-4823-a91b-0ba6da8f8277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ce8df3-5853-4fe9-b52e-cd26f68a1d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51d75e8-0152-4fa1-bf2b-875a20c3df1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099a78e5-e5a4-4bb5-96e0-7f4ba0283649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000ef5be-c97b-47d5-9c3a-7a6bb21f310d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3264674-80de-4f7a-a8f7-b83acf8f3e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a1793a-e498-4aec-9a90-151904458528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47252f79-c8c3-4629-99c2-5f16396d8c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a50658-6448-4743-b955-76311b5f0c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5fbda7-c26f-4194-bae3-305ddf003ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ce2d3a-de0f-441e-a32d-114b6b61bf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a1d57a-7595-454f-ae3f-be2fcbb42ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02191660-6ce4-41e0-a130-73966a97bdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ef03b4-d280-4194-ae39-6e682b9c4cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320ec4e2-c697-4cf1-9d48-4b1cb94d4e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b61410-df67-40f4-a987-7dbd4d3feda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17e98ce-e16e-4db3-b467-57fb12e1dd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57f4ed7-aa33-4f85-8c2f-86e9f242bbee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9e757c-1050-42de-9f49-59200102ca94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9ec212-f0bd-45de-bd5e-8cba361c49b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82dbf54-dfd6-44c9-b28b-819634dddef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cfeedb-aa25-4381-ad81-414e5f99ec86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1e7418-8955-40af-adf7-231d6603b274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a2e845-ebff-459e-8e02-de14dddf7041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36df59a-c825-4214-98be-60d692af7c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5397d4-3fb3-4aaf-bfea-c40b480aa2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382e378a-6d7f-4889-a72a-d714f936b7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7725b126-b58d-4774-b97b-90e4228b2046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116508a5-4e82-4840-a85f-53856f66403f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc008e9-8225-46e9-a997-edb5da7d8eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121e2c33-dbd1-4e85-a715-04ab8f529a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b080187-8df2-421a-b00a-6c9f9f29189d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a95be3-bf2b-4c13-b21c-78525e1760e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56274c6c-b3a8-4645-99a8-c69d5c6edfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f90b96d-dfd5-4f88-abaa-aa200fbcce24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b6ed3f-e8b4-4a28-9473-32b6f5e4a4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52cbca5-9d20-4fe2-ad98-46c8697029fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3fb0b8-9ca4-4398-a7f1-4a959471c8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48641cc2-4958-4ada-84e8-515fe29d76c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6535c6-e074-40d3-b81f-4fefa9485ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c2eb3c-6a6a-4975-959f-a1133b1fc6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d414f84a-753d-4130-989e-d71553f4f3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b824768f-ee21-4356-bf80-23ce285f7d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521f2b02-ce8f-4c5a-b5e6-41901ce19511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbeca59-1a9c-405c-a3a3-02893e4911ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06f3ed6-15f1-4093-8f48-1889a7e115bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bfc3aa-add9-462d-af14-ab703ddeb92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18bb599-7b7d-4e65-a75b-b761bbda4283", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bdc2dd-72e9-4188-971f-820e92762948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3737ca58-587c-4e71-92ae-30630ebe7aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2ecca3-75cb-4e8e-8768-ea0eff07b684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.240.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee69a87-b855-42f7-8df8-02fa8925fa59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d694ac-990e-4d3b-b7c8-280beb3d57f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddffb2f-ca84-40f1-a62d-044ecd307f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662b7e32-247f-48f4-ab7d-41715c11406a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.189.100.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a63dac-e7c1-49a4-984e-f259ebb619ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.201.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d02b098-75fc-4aa4-84df-30e548e00c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c41d091-3f6f-4a28-a681-f6f1310191bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.255.55.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc5582d-4b3d-4982-ab14-b2f46a1289e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3771bd-6940-43e2-bb3a-47b4548ce78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72df214a-d1c8-4868-83c4-5fb5892a1f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bb6202-b9a3-4bf0-a0fc-df6547c8c9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb9b69d-6cbe-4940-bf4c-9aadc6598cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55603853-3721-4ba9-9d83-10b2b2fe2a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9992e1-8ab2-4da6-85f5-052c1c7d6d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7cb10a-6cc6-470a-b609-cb9c7a381381", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55d1de8-d488-49da-b313-f014056ed80c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4538b4-7b01-4a4e-8eaa-b2f05bfcfd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147f8587-577c-4321-8dc4-2af6a248092b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba94597-5736-4864-98b8-08553e57a1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.43.140.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff83e28-cf04-47d9-8f22-2679bb5a3437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.43.159.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff64cbd-a18f-4deb-a09b-e2ee4cb0a6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63c3c88-ad1e-4578-af46-1cec19c2e036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.70.122.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2607fb63-8d14-4559-beed-5bd88a22ac48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bde2e81-2cb2-4d0c-89de-6a5acab09260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.84.3.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f238d562-a674-49df-a25b-ee085a80f0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af45c2d-d639-4bfb-a3d5-bf42d41cfef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890c83a9-4635-4b12-9034-61a680703d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.151.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2498dbb0-da2b-4ddb-8a11-d9c677e9ccfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.191.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e40e6ef-75ce-4f63-8ce5-8a9dba58550e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95f84cc-4a58-4d89-8d2f-3d8fc760c401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e122fb23-3881-411d-bc5c-4d1f1d169bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c901603-0403-4d22-a0b5-c6c01fa1d26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a811f41a-c35c-4a75-b4fb-37bce0618791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897aa650-6dd0-414b-80ae-f3a41862fea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2241f0f6-3666-498f-ad49-e9ffa46cbbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e1426d-3a2f-4511-a437-7ac54a7d3b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9083fe2f-4c9a-4ed5-a202-6816743a7f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0234233-e982-4d26-8811-89d08fcadeb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730fe4e3-c4e9-4bc9-913a-df5339d71550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028b2f40-8e69-4ad9-99a8-d3b1bb1c5e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08de37e-4f03-450a-b3ef-c6b7fa1deab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50f8fb6-57c8-49b6-8137-6c0daf9780a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dbfe04-8099-4c2b-8eff-1ce88da92e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02f6b3f-fa4d-41ff-9bef-5c850123625f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d12876f-7110-409f-86ea-724b7616af2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79be5cd-e538-4a63-9100-d4b93d53b405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56adb77-1da7-4312-a5e3-f31d2b5f534d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3ac612-8b5f-4d6f-82de-5d27d0bde790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94e22d2-9819-45ea-b971-4e32cc4c623d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.213.3.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e7029c-c052-4789-b36e-dba7604b8b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.246.88.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304279ca-cf34-4db1-83a0-e4d5901da80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.35.227.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41192a6-4135-4dcf-a6b8-0f0671c92fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.205.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9282c51-6eb8-471b-97f4-9cdf84c1b4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.99.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc628956-8e5f-4974-be72-d740de32373d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.248.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2b6d2a-b69e-4e1d-9a38-4835570184a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91102d9a-5d21-4659-9c7b-fa5ede146ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.183.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ce6995-fceb-49ce-a66d-437ba75721ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2e7cfb-a6a8-45a3-bd92-2b2ec541cfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.61.52.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2592768-dde8-42c9-9a27-e30c64a08443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.163.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feefaeb8-4405-4b27-8f22-d922ae10f07c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.87.216.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57cecb4-eb55-4b9c-9e7b-0b7cbfc170d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52730b53-7945-4401-9bf4-8dcc476d07bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.200.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed0de10-cba8-4364-9d76-41f7344fffe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.155.171.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7a08f0-0dfa-4865-ac17-ffa44fbc89b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.160.220.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19c22d3-d96c-4bbe-b4bc-f30c66402e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.170.172.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6f9b57-1e6d-47d7-a676-b62c30e8d141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830056db-0421-4cd7-a87a-6f33b304ad21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8906b94-081b-4685-89bd-959c6fd18220", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc794dc-cf8b-466b-9db6-f46c475b83f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec98cca0-4280-42cd-b353-e402d3d5c045", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b270528e-5b94-4be7-a846-564ba8b221fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df0bbc8-6578-46c4-bbf0-d7eb7b94c408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5611dd-b99d-4ef2-a320-b27ebaf7aea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e2faa6-25a4-4d1b-9d50-aea5b0b9977f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac9d8b4-610e-4304-a0da-537dcc4bc442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afe900e-6d5c-4084-9fa4-293e481b42ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17761108-90e2-4082-a910-d1db3ebb1d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf0c3fa-2482-47d3-9605-cf35cc6ac385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.233.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1ed933-669e-4608-aa9f-17dd39288deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873a98e5-8d17-42b4-8ff1-92e9ee409ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bb3ae6-2212-4915-80b6-2a339618ff66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f28be87-9373-4437-bbaf-8b3153059eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872afeb0-375d-4dd6-a677-295299fd0e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5219209e-d72e-4a00-8f3d-72411818eef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da79a6eb-6da4-43ce-b9b6-11534153342c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0a9719-7e4b-4891-aecf-b4ce7fa64028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abca7c09-fa44-4578-b486-f96954d50478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e863baf2-8238-4c28-9ef3-13e9c3c8df9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbcad3b-fcd6-40ca-b4bb-eff8efea30e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ced7553-30d2-487e-87c0-985c77c07d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246eb507-6356-4f6e-a5ad-55761ec8ff22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5775ec6-b8d8-409e-b939-e4dcd964cb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae436daf-afb4-43d3-962d-a26898f35528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cf55b0-7a7e-43b2-953e-6b324c667a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955fe851-29b6-4844-afb6-f2f9c10869ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d331a735-f3f6-424b-bae7-19e54ede6773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32edc989-c42f-4923-8ace-fc7f125db632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acb3d97-74fa-4999-93e0-73da4a3f42cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4add3037-bc73-4eb0-8f10-1fa6cd6eabe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4352b5-771b-47fd-83f3-b93e43e898aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d162b14-d89d-4ce1-9166-bc026da3242d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890b562d-f990-4efd-921a-e79b574bfcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780e66c6-b0b0-4d51-966e-98c3dc1b9c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2147cc9f-c764-4bf3-9acb-2ac07bd82a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fab45c-9eb3-4bd0-ae1a-a5bda95dd850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f249d7-5fc7-4079-bd00-b1d93225973e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234d0674-35f0-4fc6-b3c0-917df04bcede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6f426d-6632-4f80-a737-c22f37f173b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a0557e-88bd-4871-a6de-41a8b1ee85dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1df29a2-c602-4e3a-bf5a-909c4253257b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cc55f4-c1f8-4f03-ad23-b848c9610044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea37aaf1-56d1-4ff0-89e1-136ee9f77a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bf99fa-91a5-4470-88c2-2da157f38346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac30920-0af1-4a34-a8dd-f981b9885234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0110f26-a5e2-48b2-8871-64a8acb13298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126eec7a-be7b-4fe5-aa4c-87573bed36ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c9db1e-8c55-4410-81f6-caf994ae365f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2711ee4-3e0d-4758-872d-996c5e572a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d821b5ab-235d-4c61-8306-2f1626c0de03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef6f108-798c-49dc-83b0-5672072aec19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d7136c-68b0-49c1-b660-51d7bb28282e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5621fdb-b3b0-4db0-8e9f-0bd872d6eaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90ad03f-6c52-4442-8513-4acdc8b2a8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e6836e-53f0-41c1-89c0-0dcc0b7493b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a10b8af-9d56-43c5-81ac-62b65908adf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250fa429-52e4-4b97-84e2-5c9a659dac66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50d8594-a639-4484-a41d-486d7747406d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8ab27d-08b4-4144-b8f4-92bd8d9ff220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca6e73b-c286-427b-b6b1-aa082985216f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1adb9be-22b5-4047-ad6e-bb765b394591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0bb296-838b-461c-8a5c-53970c882c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4968be-c3f8-4f7f-b0aa-8aa4409f954c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cae9af-53a3-471e-a1f8-3dddea359a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a789e401-bbf9-4813-964c-eddd1bcb1733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6309b646-b868-4870-af79-18b0881cae32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f319268-b8b2-4276-9b9a-e4ac7094ca30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41e23dc-b72e-4f14-911e-cefa40dd26de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6653b84-99ac-4a8b-81fc-06714dc26081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7964a6-4b01-4d57-ba83-2aa5d696bc10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887335f2-acad-4ef7-8175-955f4eb3570e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3912b6e-a917-44b7-b6f8-24e39bf812f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955e4add-5ba5-47f4-812f-7c693cd8c776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0375913a-6f92-48e8-916e-b8e8725ed292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be343d1-cd51-44ad-baf8-b9d496f4a997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b6a8a1-ef9f-45e9-a31e-699ecb756432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fef238-24d3-47f0-b6af-d26c3e12329f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf7ee08-a1a6-45c8-acce-34cec036caad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea791278-106e-4969-865f-3a394c24ac44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6affc7f-9677-4dae-8ec8-ded291c84a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb0e41b-65d5-44c2-b3f4-6b8540830444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b583524-c2c3-4131-923d-469dbd8464ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a362ab-792a-49b5-b9f9-9e0604fc53e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613b60d0-431d-4c71-9921-0ab91ece0137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3041efa5-5fd4-48f7-a73a-773cc522d185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb65136-7155-412f-8022-e85948121326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06323a01-f440-427e-bca7-190fa4eeaf49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba39854-bbf1-4864-8ada-9621794a3bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8f5314-5870-47c8-a229-0a8ecb57f0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66696e0c-1898-46cd-9bff-c8a8f04dd76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da60a47-7f0f-4d48-bd5f-d514d89d1796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f01811-733e-4b2b-9181-531bbbae83bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c78a91-c7e6-4e8e-b0e3-269186965737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace64ff3-a85f-4831-86e5-035b5f664161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3772fc8e-93d1-4f8f-8907-b8823ccf3d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbc8cc6-6f79-4165-acd8-2bec5c4c3a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830d932b-cd03-4b98-9e0d-75b5a202e366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addb97f5-f60d-4fe4-8825-a4b8b651b69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63015e7-1aba-48cf-9389-0e3c458e6ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b099f9-d481-4f26-8b7e-4b193f18186c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1411fc5f-2632-438d-9ae2-f4ea31343152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38013fb-c63d-4c5c-b788-97954a692f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4e431a-41ac-47e9-900d-4ffd029242f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa4c553-4104-44d5-87a0-2b988292f3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3174d12-4838-444d-a80a-8e768829244c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2754a4f0-2fee-4124-aa55-807900e57c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73acd5c-8845-4a1f-8ebb-961109f672b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22c3661-e277-4a3a-88d8-fd45fb92140d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbacee42-07f9-4e78-887a-a8bb77f0ec30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b692942-7a5a-47b7-9d52-d0dea6845b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3446aa95-33eb-4de3-aa82-0f533847d279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1e8b9f-b26f-4aed-8d96-d6fc5397d37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2821da-9db7-4060-a861-c5cf096e4a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ad8e3b-0598-473f-bc76-d23d573b9eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e69c22e-01c6-4502-9b90-c67c566c34cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92078359-75d7-4673-b0c9-ff7ba146bef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c4383b-9c37-4a92-91fb-ebed701a7094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f62c65-a2f7-48f4-92a9-c4d0008842e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8a0006-ddc8-4479-aa87-88ef2d25a422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc1f831-dbd7-4010-9aec-0310157a3790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548da1e2-86ea-44fe-a0c2-c511384cd880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6bfbf8-4383-4734-9b6f-b9e69c00ceb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58c175e-bcc3-4d99-b9a2-346e99dc9d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21587ce9-dbcb-4f0b-877b-42b9da3eba45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3054d7f7-0a21-4a3c-b53b-06450495f657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52698226-4675-4345-bb1f-ec7f41a67e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850191a9-bad0-4ca5-9b11-7537a6e83fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d5405a-75fb-4480-a0f8-bd44f43efb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e463721-7189-45fa-b680-e6975ba74dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.189.197.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f2a61c-99e9-406a-9291-fba338cc9b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.226.59.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c696dc34-513b-40ad-95af-05a86ff4c5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743c906a-2375-4f0f-bfa9-b43f985fe928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fbf50a-30ce-41ad-a494-daca06cd11ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a698d2df-f1fa-4cfd-86b8-59a5dd428c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a35b4a4-e3c9-43a5-9673-63c4af84e30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797e076f-2ceb-42cc-86ef-0c058b59562b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d9b749-fd3c-48c8-9464-8172169296dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f53c9c3-e5c0-49c4-96c4-3dae4a4d3a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd7a7c7-94f3-4ab1-80e6-24dd35fe585d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.18.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d499c02a-27dc-41ac-8429-937fc7f65182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.248.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443a02f7-63b5-4cd1-8f86-d067b1980b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c592093f-6646-4b53-a98d-42968b45afbf", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8dd352-e9c8-4b2b-bb53-1b2a802e4715", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478718dd-c020-4755-9243-ee13fc3cb74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.32.26.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecc27e1-c4fd-47bd-b697-fdce94072ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.37.190.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac566c2-6d26-4c8e-a5b5-13fb989508c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.62.32.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9993b4d5-ee3b-40e6-8f3a-74c21b3371cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.62.32.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8647b14b-b6c9-4613-9777-d33261287ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.88.211.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b175f86-2994-4c89-b659-906b93fb16ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.119.178.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3082974-06c0-4a40-866a-26f7d4138e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.124.224.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f07070-b786-47f3-aad9-54a732ac336c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.37.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cad208-7960-49c7-9d13-2fd4f040e504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.57.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a24204-acbb-4877-a1e3-8b9fa419aaf7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.190.212.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bead843e-db36-4e3c-b90b-eca90b11fe4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.191.2.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71015d64-54d6-4fb9-af32-ecc6f8f137ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.53.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28c613a-7fc8-4f01-af74-553fe8ab8ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.53.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a1297e-dbb7-4ae9-881e-47acd7399cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.204.71.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3685ba-b216-4847-ae09-6d7640805281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.206.12.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d2147c-a427-4e31-8608-1a0e788ebcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.216.61.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2610c05-a7f7-4c01-9830-048494784225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.238.191.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1eb4d04-a043-446a-b020-14447536b588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.6.115.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdf3a6a-8048-4cb2-99c1-907a9a90bfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.75.67.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5660eff8-30a2-4824-8153-512e0419183f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.146.54.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bd15a6-67c8-49e9-a2d0-1f9a6f376f42", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.186.1.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a9304a-5fca-4de9-96e8-af24c78ac1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.186.1.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7232d19d-8b9c-4f90-af6f-09dfb28c6d90", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.186.1.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057dae0b-02df-41ff-b0fa-c92fb02718b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.186.1.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4771713f-1d51-40cc-8572-72c184323f51", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.186.1.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2b70c6-76f7-439d-b11b-ede72f6cb8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.210.143.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453d432c-7061-44dc-b7ce-53b66f934639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.214.239.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b182d764-f2d0-4c9f-87c9-3b2b27714fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.3.249.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7172a95d-8bb1-42c4-9393-a38ba88faa5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.90.124.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b58ec9-6342-4a51-91b1-81e4a6923253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.105.213.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b85c5f-97f4-4c8c-852b-581f6cb5252b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ad5b81-9257-46c5-b2b0-5c672927a4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fd3ced-fcff-4bf3-a470-7e2c356f8f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.121.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3b970f-00c0-4d41-9ba8-8220adb7f45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.70.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b3d4c2-50c9-4c11-a31d-39bd3b2a143b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.104.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d062ae-a0ff-48fd-9b13-16b7ffcf6ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.127.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e66d8ae-ce33-4b6e-8a5d-dbb228373fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.127.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e9aa35-6255-463d-9ba4-f54f4a020081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.127.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e298ef43-2f67-442b-8a0d-cf3fd9138041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.127.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62a7678-71f2-4d2f-ba4c-b54e6b7ecf4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.127.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d4a363-bc9b-4bfa-a648-1cb360caac90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.204.244.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c180f06-6713-4704-85a4-c017538522a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.204.253.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f729071-547a-4f58-9bc0-23be92afc087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.106.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a202198a-1c7a-436b-9a6f-6f2034706402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e0e687-fc58-46ef-b480-623644ffb7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98924482-aafd-454a-ad95-8798d79bda67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1925d7f-9018-430c-9879-cf4a706e3dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b27f75-4983-4bd4-8e8a-427c30f56ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cb0822-84dd-4bee-82a2-2df201e45522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca84f8b-dc98-4a0c-a38d-a03f8af1d41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5350c3-4aab-4b20-bd5a-281db08149f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcbb118-6f48-4de6-b604-a346605d5254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe926c2-bdc3-42ba-82fe-a716a8c3037b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca6a3b7-6170-44c4-b51d-ba731a1b68d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6021db2e-2192-4076-aa3f-d59de25bd3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d448b88f-c079-4db5-bf40-fe24a1312150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c52db6f-7b60-4aa3-a880-063975a34945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f973a36-c46b-40fc-afb4-5cb00917223e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b716d72-6898-4030-8c4d-83b06aa8727a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda53d10-ccf2-4690-921c-6aa4038dba86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677fff56-faee-4eab-b1a5-856b7fa9482d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d305d7-77b5-4e30-98a9-41935fb35925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea78e26-3bb4-48c3-909e-3a178a7fcb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207630fd-a06f-41c2-bf3c-097965a74a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce35037-0ba9-418a-b853-a6bc06b56c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fd4168-1803-4353-aa42-a4de8df3962d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f8c745-cc12-4b7d-92c7-5188d9b11ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dbdeae-3d8b-4a62-9119-d9588a5b2326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8713900-d40c-4e63-abb5-52401be2d3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51efc4e-9c89-446d-b2f9-59ed07ec98e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f0932d-2c0e-40f0-9052-2cc13680289f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd90fe9d-72ec-499e-9350-c3af28751071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2737a622-c73d-4549-88c0-305fd05c265a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58277c0-5b1e-47ec-a5dd-cf4a2041119b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1727a8a-d728-4452-86ce-38ae36bc91f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfaa588c-ef6f-4542-b523-5b7e1305b229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac20257-28cf-443e-a2a4-b3ee95d61b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaca504-3f29-4727-a384-7fee00c246ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb3062d-f812-4ab9-881e-1626f11a9b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb45a5b9-b23c-48f5-b724-b1f9eaf4f45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059078e0-caa9-4748-8f79-f3532abb8e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d2d1a6-fcb2-4364-be80-083d566c62f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c86af6-fe1f-480d-a259-cc740fbd0841", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1af5a6-ef01-49ec-a4f7-8b2b597b00a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d76e0f-e5c2-4516-ab98-f9470aceb802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c5e988-326a-45d8-8469-5f01770ff906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a89f5c5-92bb-48b9-84b9-99c59b492045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7daeda66-743f-41c1-af9e-496431926a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5840357f-94ce-4802-b4d0-6a8cbd9a76ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74636943-29d1-419f-bd84-663a433d0b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0ab51a-3ca4-419d-95e9-c5c3eb872eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfaab65-38f0-42d8-b6ac-8e21e2716eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e152cad-b803-49f0-8237-309e6b68e6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a398e488-1113-4459-adea-4dc65f8b59f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21aa1ac6-96e1-4f95-b172-7c697846b6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28edf86b-8204-4a65-b1b1-e0bf45c0dc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02789eff-51d4-4c1c-a95a-69c97ad16610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a9ac68-44df-4cfe-be8d-f283c8c5fdce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43566583-f2d1-401e-92cf-2d05a0f9fa3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32019495-41d3-40ea-b2bb-0b9d2e5b410d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcb743e-1a8e-492e-9699-12831ea6eeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cab329-24eb-482d-92ac-e755ccdb6f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2dd60a-759a-463e-a24c-771cba9a47de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8489aed0-3342-4c5a-aba2-94875ec08cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4a6451-576e-4287-ae7e-db9ead1f2724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9f72b3-75a5-4c6d-ab78-30cb2c61206b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e5225c-b6bd-412f-bf67-748227f81de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798df3bf-80dd-449b-be0e-312c053175a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6ac85a-c6a8-4571-8514-411152b9446b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672d0ae7-7f01-474d-972c-1faa3e40534b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d970a51f-60fb-4de1-8086-e2e3810fa8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e48ac6-cb92-48be-9ac2-c39dd23d675b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25318b47-6249-4572-84ba-faab5ee9bc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfcdebe-410c-4fda-acbd-e9cab9738d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4731558-6767-4d0b-930c-32c77a179995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4bdc36-f439-4668-a33f-a4ec028d4161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c43fabb-20c7-434b-abf0-2bfce9cf7b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7f2abd-24eb-4d9e-bc57-1ff923a32116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eaf3c47-36c8-4d76-b4f5-b3130a8677f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fa919a-189a-4cb1-9603-60bffdd2f6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef1151e-375e-4c90-a1e0-e3570d223ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d34806d-4334-4c10-b639-57fa7a584318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777113f3-824e-427d-ab23-84752b50f6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9981f8b-a867-4276-95ad-2e4158269b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f22807-66d5-4f8e-941b-92f0745fac9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236b8326-549d-4f1e-95c3-26ce0835e28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2536874-a698-4606-89dd-560bba8cc1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59293f9e-91fc-49a5-b83b-3b10dd1e8730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7972057c-8e8b-4783-ad32-e94545772f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3092845a-9c64-4737-ac76-8f0d5a0fa588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2c6cf7-0d7e-496b-9335-5235794189dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e587e8-ab67-48b4-8b73-6dfbbb7757cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7696e17e-6baf-4aa7-a70c-88861c1dc91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400f47fc-c09f-49ca-80b6-cae1e55168be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb8a274-f5b3-468f-ae57-7ceebfa328e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82b2cf2-a5de-4874-8a61-62efebbcd42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0456db42-72d9-4a98-85bf-8f597a22fa52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4314abcd-c7e3-42dd-bc72-29d46238689c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ea3aef-4b45-45db-8a34-26bdba7fe0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a76289-46bd-4eda-a826-6e75d5a5075a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad52fea2-6b4c-4205-970e-4a703d021262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64926f3-ff28-4ae8-a395-c6b8d99d9766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d38c4bf-3aca-421f-8f76-cbd617fcbd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b454858-ae69-448f-b840-8e6d603f614b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d61d10-6803-4105-a5d6-129af03193ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e99c4a-bd8e-44b9-895e-d2932f6aa3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a10e90f-6734-45c1-8db1-e59a6bc19449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424a6160-890c-4e6f-bffe-beb53f2ccef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb0dd59-3734-4eda-ae47-b4e6269a0ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57ac14c-0bb3-4a21-9b09-6fe5f055283f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4d2316-a65d-4776-a33a-2d7349074a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbf3498-7985-4b84-b6c7-63130a960018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f2c5ce-7209-4f23-8190-8fad171ab7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2be97f2-2e49-49f4-a72e-c01655874ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a33f388-ef3d-4218-b289-b99261f92030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b7de17-6856-41ab-b2e9-3cc1410ab99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34b9304-cee3-47a7-bde9-3f2570f17d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e416e8-d486-4bed-9c8d-c314cdccbe49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0f331e-8f71-4041-ab38-2fa9259be2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2230eb-9db1-4954-a0d3-9dd41e1fb8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0fa083-e2ce-4c7b-9c8d-c9c843a3a52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15be11b1-8591-4c64-b492-8fa49351680e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a7ac01-fdc9-452b-9062-f246019aad9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17889322-e817-4473-8d71-2c21858d633b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73285e02-49fa-4d26-9573-8187687d2869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d8837b-6faa-4bf6-870a-8fd580c13888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea07f90-7c33-4908-859d-0f3cc7839b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb662a76-4cd1-4fb4-be0e-4aebb69e3661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4325dc7d-ae57-40d8-92c7-6c3b9f27ef25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924dd072-c70f-4968-9465-7fd96fba3b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25db0041-4af5-402b-ab42-35a14b4f0d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26213d21-63df-494f-ad08-d98dab375e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1134c45a-4b99-48c8-a6fb-7101fdb96986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b252e6-9852-4f5a-ab3a-fc78e053bc18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ed5ccb-fb23-4e1e-8e89-32e228c681da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60788765-05a1-4e2e-a3c7-2838347ec4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4a40fe-3f1c-4a8d-bc19-fdded5337957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a845f30-13d8-409f-86c9-b1aee216f889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fae7898-1f38-4db9-9659-9175e715e696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ce96ef-9c26-49b3-bd96-447894955128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b3b2a8-743c-4862-a682-b1ffd159b250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a7a63c-f8ff-4d5c-a2fe-6b0d33ce2143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebe40ca-9e72-4941-bcfa-cb4bbce1cad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f10f82-ed99-496e-a2a1-3261a1c00d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f24615-49a6-4e58-998b-8e1d00258684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a8343c-ccb6-4fe8-8bb8-ffbffefe8d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca3b3f2-72ea-4f6c-8eba-191a7c9549bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e34449-e2d6-487f-8082-7e136d3d9173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ceaf70e-82ce-4697-bc92-bdded6bcad0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f95cbef-b96a-4b4b-8125-c6c816f95ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7733d574-324b-4605-9073-06ec6a0989f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78116a65-6214-40c2-8e80-8edc6976c8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.118.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8179a255-ba02-4649-9628-2ee023b804f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.122.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7792355-94d9-463f-8ae9-99eb1dded397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.122.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a225d6-c874-4e93-b309-04327f1ab668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab2a652-428c-42eb-a129-7aa91cd6a714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4087a8fc-51eb-4792-a6fe-85a8fd1d4046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af01edd6-339f-492c-8ceb-2aef77e4121f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.60.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6251f20-aecb-42e2-be07-79b0676a5214", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.101.83.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024f00f4-83b9-43db-b8d7-47041ef6aa07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.60.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1743a530-0fb5-4699-8736-119fc3a6be2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.62.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c726e6-fe88-4674-b65b-b2abd81d795a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc81e015-9d80-4b37-80dd-0651362c5d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cdd68b-ba29-44b4-b839-4fb58e863bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65298526-f088-4a12-a377-9b4f8f2c6321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d09ff6a-6a80-4bdb-8e9f-2835843faef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febfe8a0-f5c5-4554-bb00-5a3c57919817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d281a31-0bcc-4044-be87-266947a6cfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4177edfd-0dbb-4fb5-b51a-54dd9feb2fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1a8800-d765-4271-9f74-2f64b4038bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406641a1-dc1e-4033-a0d7-c5ffdac78e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3194a6-315d-4739-82ee-3e017e8823ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea7b4d8-23d3-4270-b87f-6a28defa1647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76549c64-a981-4446-86cf-94bf0bc5ef65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c65c20-05a5-4c97-99ab-fcea763d45df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029abca9-0031-4b90-b877-462f810f8bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8183d9-f733-49fc-a94d-74d292119b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314d9db0-5602-45c5-9193-f3833a7950f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee42cf82-5893-4ee5-982c-45bf3ac46ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757acb51-af61-4552-8ea7-4a0ba0c48e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e239b07-92d0-40c1-9849-173f97a15f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952e5917-3fab-427b-bf6e-ce5166c4f141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f2e698-f4e7-4ab6-88eb-82aad7c850be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1b50ee-5983-4504-b765-d801c90f51f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2895c25-a0e9-411b-9823-2d38745464ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6f2dbb-b310-42b7-9ec9-8eccad6a46b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8c848f-c5d2-43fe-9f98-2d2b5aade7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd2176b-345a-476d-8abc-7dceb871921e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c66418-2016-4a53-ae9e-a7500a341306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ed87d7-708d-45e0-afc0-43d2a79cb671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432bcae1-97d8-4b88-807b-cb06d525f0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d4b118-157e-489e-980a-ce42997b0782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944039eb-d5e8-414d-ac41-d83896bd4296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506e5f5b-d197-449c-98d6-a1f971872e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3270cc-b9a6-424e-9a46-686ab65a4c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40af5feb-ea06-4d73-be39-5ab9cb5303dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360011db-8f50-4907-b6a4-848bf6d75bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9c2dee-2eed-4517-b985-3e34094c0aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72dc1738-b24c-46da-983c-f1beafaa194f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d904b217-a590-42e1-8672-c040e56ed5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe1c4ee-78c6-4915-8607-d2a91990ac7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f638c3-2c93-499f-bf63-0268f65115ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ec15aa-6299-434a-bb64-0f2dbc242209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4970a8-6106-400c-9148-b7db78c6b479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dd78ef-257f-4b36-85a2-6cd2b42e004d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06ebd80-da49-48d7-a87d-25366b8190f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.217.60.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e14840-3bab-4447-b2cd-1d303428ee1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.103.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55931945-f012-49fa-b7d8-b1eeba0a5b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.63.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812fcb79-e9a0-42fe-b94c-f18ec75eff4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.40.99.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ccc5e7-c9f9-4d16-b216-94d8ab7987b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ef9d1b-2c2c-47b0-b7c4-5f18a6e17835", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8cc048-df90-42f2-8d32-98e5f0281f69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d64f9-8361-45ba-afc0-0b86637e3063", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39154827-096b-451e-b518-563e916cf846", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadad26b-164e-48f1-87ea-c272d1b3e947", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b30af8-322d-49f1-9b8d-dbac219dfa39", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a286f6-2d2e-4835-bd0f-f983e3d41745", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbaecacc-8775-4934-9c33-8310576b19ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cb3949-e1dc-4a94-b19f-eb5f1e07c2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439a787d-aa0f-42e2-a74d-97a53a43858c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f388627-e2c1-4385-83b0-1580ea929cb6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ae6717-981e-4039-9f54-fe04bef974d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c626e1a-d708-4683-9196-845bef9c5a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.218.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6996da36-e5f8-4368-b8d9-c454a7ecac74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.218.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545459a8-eb93-428a-acf8-b05d431a6427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.22.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5903ce-3b04-4632-8364-2ef773f973a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c15a511-59a0-4fb7-9caa-f9633cd10c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.250.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f4cca9-04be-4842-85cc-3457a198da86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.98.35.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71f5656-c921-4af6-881f-ef21fbb34147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb7699b-fa8b-45a5-bf07-a47fe7186642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7d0688-c0ef-47e6-9f96-2983a276abb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4010525a-16ae-41d7-a972-3f7c09892a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29e21c7-c6e4-4009-9548-8423c67d63c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ba296a-ca55-4827-b6f1-78adc998002d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.89.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb6ea3b-0762-481a-95ca-9e50707f0cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.91.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748729d8-1e09-4c35-81c1-63cd00b9051f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1473a18e-857a-4976-81bb-ab5bf816247a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.97.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbb4885-bab7-47dd-9b75-28d369ce89f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.17.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f648ac4f-e8b2-45e1-afea-427d44c3c495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53ff513-a241-4ce2-84c4-39eab77dfe93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15b9d22-0915-435a-aa75-4f045bab8c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.33.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27af2fef-460f-4e49-a8cc-a05df4b80fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f3670c-7c27-4b47-b963-f7fe35742024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f61e34c-f361-4095-9443-c703bf775ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a421523-6a2b-4d3e-905e-f48b253691cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106b8ca3-79fb-44d8-974d-2d75268ef1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7844e20e-5465-48d0-b892-4a42d45d61e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ab5410-ee9a-4b7a-b073-6f846d50f212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f74f6c-ac3f-49fa-a908-7fb46924deca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71e8a36-cbb1-4304-a64a-8cfc0a0db939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3147d5f-dc99-444f-94cc-7a5f6103d1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a71833-d524-4a9c-b752-79bb1d6b0d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1348ca6-ab74-4126-a6f6-810123621b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd558bd2-9591-4b3b-9e21-9854d3aeb29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7958542-6fad-4556-840f-db5af58b435d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d098c3e5-170b-4dc5-b80e-3a730af8f776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7469a255-c11a-4a78-8be1-ea020412c6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6d9083-cd93-4c4f-8c12-231d5f305760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c4f118-5a69-48ea-8e4b-817dce4a06cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.74.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa26130e-35f0-4114-9007-270756e227a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.123.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473c13b9-d0ce-4317-abbc-c075f71a0d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5757515-9d18-465a-a3c8-ad0f2b410f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423a5cfd-4aac-4a4d-8ca1-518734b5b5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.45.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2994c01a-046b-412c-9bbc-441e6f912b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e9b8bc-7c9e-4e51-97b9-fd5fcacd9219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548dd450-1128-4ba6-875c-54674a210835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df9e342-0c6b-4f88-9311-5e322b8a4150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6612975-e782-4ac7-b37f-a1a9af734a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.192.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8cfd13-287c-4563-9d98-5eb786402125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a02c20-9437-4c23-8ace-e034ca6645ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53faad4b-4a63-4d62-bf3f-31c75306c843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca7aecb-ddd3-4729-9096-2011c3cb090a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.217.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d24b50-3a38-4be6-9661-3c886bf6e7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.219.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a922a9b4-0537-46a9-a4fe-c0799beca08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b165400e-c560-457c-9c0e-2227ce1ec724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9044f8a3-08b5-464c-8e9f-8292e593fd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cb2ba6-588f-48ad-a195-f7e354e9827d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a078a9b4-92f0-4d0f-ac49-bff46f3e31c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafb1a28-3f4e-456e-be61-22ab7ecc875e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c290bf8d-c06e-4e6f-a4eb-e23df16f39a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.80.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fb3cb2-d152-47d6-b069-a06f38c471af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.81.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130199e4-5b55-4dc5-87b9-d4262d310ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.87.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caef2b3f-4c63-4f86-aea5-f6cfa0285349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5eb825-3df9-48e7-b371-1bf9af028feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2d668c-5319-4d15-ba75-fee2c974e2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdba91c-8fa2-40ea-8e8b-30b3182d6b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b158f95-ffcb-4d92-9fc5-13af963f489c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31d60fa-e9ab-4dc9-ba29-78aaaea7e362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbbd21f-882f-488d-9522-e3622334539e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b939e969-32ae-4a16-9636-5e1dffd684e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d6367a-74fa-433a-be70-b16d8e802a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4b63ee-b391-4833-9d84-877469adf960", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.151.131.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa1884c-0326-4367-bf85-1d7a33448bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c7c425-333e-42f7-b65c-6befb5324922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e73dbf1-5e1b-4f02-9c42-f24fcde498ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202d591c-126e-44ad-b001-fbfa795b886f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84209a49-685d-4d78-85a4-60597f79be4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfadf09-72d8-460e-b107-cea9c6b597a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8854955b-cb1b-4bff-9998-1c3483086491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7484b51-6371-4360-ad96-848573b8b10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c37022-3010-4560-91ca-46aa181c85a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff0f4f1-b7eb-46b3-b6bb-982bda317234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3bac34-6a91-4c67-919e-0ecb1a281722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1605329-792b-4771-899e-6e6a5938b572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfd84d6-1296-4738-99f6-42efde843ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ac48e9-14f0-410b-bd7d-72558c7c13f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a8925b-a9aa-451d-a408-6592c24b6894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932bfe7b-691b-4437-94df-b4a5e8fd3eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.25.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cc42b8-9e1d-4857-8766-99809b1ee3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.26.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c8ab66-6935-4fa3-bbc3-0fc83f9dd655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e912521-78ce-42fe-abd0-2285490ddbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a346c8ca-a377-49db-805c-cb2fb8006767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5371bd-772c-4fec-a621-ae7ee8930a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025b5e87-66fc-47e0-b9bd-bea19a722ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d296570-4f54-48c5-83d5-d83caaafa5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aae46c0-0742-4409-8361-d22febbf1a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c69acf0-a7a9-4a60-82aa-c58febf2c1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9511d0-7907-443a-8b11-6c0c22116c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b28517e-1b3a-435f-a65a-b979ad4fbf20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cd6f21-6c59-4d62-97ea-66f343909545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e2b9ba-db51-4c14-94a2-e44f8bd849cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c7dc0d-0737-4308-b22a-45f99ee12a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d375b702-8cce-4e0e-a35e-3cc3093f9266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698a2ebc-df7d-4a07-b954-110cbcf652a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38d3956-bd67-4df4-9e38-599fbbcb2305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3e146b-0749-4114-bfbd-22c2e6ec969c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3ee049-b409-43f8-b146-72d63636ccb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8b76c5-f46b-4fd5-854a-67da2f8d9b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1c863e-6a31-44e8-94d2-562c4c746b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a807e9f9-9d3a-4771-bd80-cf0f7f697106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.11.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845f5375-7aa8-4c85-856e-5b78e99c1558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b6bf3f-38dc-4e5d-9042-b4d5d77b8f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121a46be-fc8f-41e5-90fa-2abccc8d16e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901d441d-81c6-4508-9ec2-c85ce0c26ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480ff3d5-4da9-4844-be35-c6614d23ed62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270ed843-7d8c-41c1-922c-ebc4d20ba741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693ac64e-3ed1-4b83-be1c-5ac89cb6d41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72cd008-ed77-45aa-a7d8-b8b959f57684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebad76d7-19b6-449c-90f7-a89e997c0f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed649bb-a165-42af-8705-d98553c4eba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8ca5ab-b17b-49a7-a9b2-17f8e67b56e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b150e662-a2aa-4eda-bd82-465cd1fdd76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4cab96-7543-4b74-b68f-e05973053605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b14f99-74f2-44e5-87bb-1926ca800cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c990dbfa-baa5-416b-8317-f3ce9ee8847d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b8f63c-7096-4770-85c5-6919b2156bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa756962-ff59-402c-9016-3a65c803a00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5d0f13-5b75-4a30-bb70-9ae3a2adb8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4624a04-6e43-4708-86e7-2ee2c4137a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1ed0bd-58ca-461a-af0e-6f2dde155def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.99.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afea676b-19fb-499c-b417-52be35866344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a06b1b6-c3be-432e-8146-3fdc30f027ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d058b0-ba6a-453e-a5ad-76ad2e8020b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ded35e3-1705-43d0-a265-a2705927f3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1878f5ea-4a20-4db4-8de2-a007083fa867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ddd1b1-1af8-42ff-b270-850f0cbe70cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d58e067-4014-44af-9509-7fe196260392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fa5c01-b4c3-48c8-a691-1c16041bd7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c209836-41fe-445e-9f63-d377ae0aa2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02dd3d2-2e59-4b7d-809e-da732941af1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba37e82-877d-44e5-b757-a2002f3a9bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed2d8bc-3584-4a8c-bf2e-b4f6ddec897a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f6b264-654c-4955-9be9-0d77028d8c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cdd267-8619-4f6d-9899-d08c3ce0da92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089b1352-67b0-4884-8c26-da1cbd132707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7640797e-1e1c-406d-90ad-aba53db7f878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418ddf60-788d-4ccf-878d-20a40831f3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b9bc2d-0d8a-46a4-b088-3fea92e27e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5871f95d-0061-4122-88e4-58636ef1ae2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ee02f6-d3e8-42ab-8d17-b9fc1daa154b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2761043f-e4a3-49c1-bf76-75e7eb497fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494ce407-9277-4113-90bc-e30a0dfbb999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcd22ef-0f30-4c46-9f1d-87fe3e7579db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08be9857-386d-4a38-b4b3-afc94b84f46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751b9cdb-cf1b-4aac-9eef-184411035b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45503b8-9ef9-40f8-8186-a10e425c8497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff088852-6eea-43f7-87bd-eeb0d4a6c2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48b5ade-8a68-49c6-9558-7bd788cf7eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e8a412-a48b-45ff-acc3-5ef4fdb10806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.26.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad156de6-7fd2-4ee6-9cdf-4911f048973b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c94349-2545-4fba-a6ca-f216dcc55881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d624b08d-db2f-418a-a85f-bf587df8b3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909255c8-9bf2-4fb5-a171-ea3fef93322c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19da81d7-cf94-4bec-9929-2c8de78f12ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63a553f-4b53-48bf-89f9-7a3fba39d0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25000999-8603-443a-9a68-304b2caa7df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b8a9ad-dc20-4fa6-9e99-d8f980acff57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80180bfb-e664-4f29-b632-439fbe728fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7a0d3c-84e0-4175-a65e-e24fba67058d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a59d76-3fd0-4890-8fef-4f485d7301d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee813c2-0612-41b5-bb9b-b340b7f62364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af6859e-7a11-4b46-a3b8-ab6a00aec86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e500577-4dc4-4994-a15c-0164839eaf04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997736e0-2e9d-4e94-8d4f-fb007464d7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.47.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd11c9f-38fe-4e97-a91e-257a6a553b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033570a5-54c2-47ad-ac14-19ee5fdbfa6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfe5f7e-ad38-4ebe-bf68-23a49b0a2ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6933376e-032d-4f39-a2f8-54ec61b085b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076fae41-11c5-4010-a210-066b256f105d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6a833e-314b-4825-b8df-2571181b2ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98dd1b0-de5b-4257-9cab-489495b0860c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e96a3db-2ff1-45fc-8a7d-dfa1dfdc2718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.43.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05b02fc-a3e5-4061-898f-5f5a49a2e99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.46.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc7f02d-4baf-4fb8-9c67-2702ccea2d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68265b25-3035-4a01-992e-9f8b47c68977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a0a347-78c3-4725-a8a2-637f0dee3355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94766238-dd45-4045-94ca-02f9af7c9df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.245.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a645b2f-163b-4cbe-a9d5-7c9566b9c5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c0deb5-0a30-45b0-83c4-35ca61337a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9ebc54-07de-4dc8-9cf3-ec59146389a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.24.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85e4e34-6673-4498-8ff4-9651c45d059e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef00a7a-29e1-4756-88c6-a4986ba2b992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.4.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7c7f32-9ec2-47ed-99ef-27ee21ee5c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.50.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925bc6c2-e34d-4f05-815a-05b10d8efa0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d0fb0b-324b-468c-971c-251e8cb5e911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.97.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920ada72-0035-4178-b7ec-56b5a6c6f401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.99.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5ff16b-423a-4735-92a0-0a0912821cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58189fea-229e-4cda-a0ee-67e5991623fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7580a502-2e64-4f7a-90bd-429c74569a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c542166-9aa9-4f35-8052-81df06570157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fa5609-3c23-4c1f-8440-092855f4a1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6a2faa-63b4-43b3-b339-24bee6865e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de196e9-5b53-4a6b-8da6-5e387d58be06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11472ee-6875-47f0-ad1b-47209a44b4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e550b85e-8b5f-43dc-be29-b51a754c2aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b94154a-657d-4dc5-b37a-82528a1f7fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3426e251-8a26-4ab9-84fe-8845af03e85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bff95b6-a7c2-4a46-be52-199ed01b0dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88ebfe8-cf12-40f8-85de-450cb39091c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11b3e95-5fd7-4e27-badb-679466bc65a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0c3bb4-1da4-40cb-a7f9-7da60201e7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38642b91-25eb-49c0-af28-390cbf3b8599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde13d12-d7cd-4b23-a7d3-5043a6859847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9d7302-25cf-4b4c-9730-dac13e107d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2d7d52-e8a0-48b9-a000-03547185f425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12417722-ba66-487c-bc55-6af3ed1d2821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6497c7e8-37fe-41b6-b5ab-6823d99d3737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec86c96-6ac9-461d-be50-f5015279c41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37d58a7-a076-4568-8385-fed9f670da5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8200001-b80c-49f7-a042-87f0b76b6316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22bd15c-329e-4a21-95de-ec5780c831e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8ff3ca-2e9c-4d58-b951-437ad2b5aa91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7266c316-0a1d-4df0-9d73-604eb3e15409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df45d29d-85f3-4efc-afc6-03e92623b1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfc5b1d-3684-487a-97d9-7d66ada63ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636c85c3-a58d-4354-9074-814604f61ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0c8ee6-5056-4ea8-938e-c8a5fdddc213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf33e5fe-6592-4466-89aa-8da028108978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd99de8-51ef-4ad8-b857-6fde256e596d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f31a11-c260-4692-8f52-08c354189f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8e1ab7-25ff-4a68-a63b-a8b4f42d40ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31461a7-e531-4e90-a0d3-d4f411c04e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568bd958-35b8-4fc0-bfab-9bb53bd24342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1cd43d-53a8-4d20-b5e9-1a03d672580c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded2e6f0-4c8c-4532-a575-9a85415a011c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5712927b-1b2e-4569-9f86-207f2f89555e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b088834c-c6a2-43d2-af77-accd3711c538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532299a8-4a75-43f6-a424-0c3cae1ce14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c57c6d1-5be7-4ad9-baf5-00f7a99f7e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8763297f-4790-40eb-8c0f-1a8df94e560e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cb64a7-919f-49f7-95bb-724edcfbe1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12b0398-8a1a-4a48-a18e-0e45ab7519bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c330d15e-c092-4f9f-ba3f-b99043094f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accb1256-76de-4e12-95d6-b0e5ef13d9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0c88be-dd71-4896-9909-042bc58ef720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d29b24-ed99-4391-8e1c-d744323c9e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f991a94-2385-4e00-af2c-f69d9591389f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e7977e-0a88-4e66-afcf-238d8161cdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf0112f-49a2-45cd-a970-31ecb41385b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a1997b-e28a-4015-8fe3-713326341e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ffc041-0287-4c3c-966a-63708d898c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39a0b27-ac0c-450c-a0ce-0e1badfcca1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876792b1-fd75-437d-8464-41d35ece4d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11efeb92-cdf8-4fd2-baca-02086798b740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a34bc1-55bf-4033-8f65-753a9eb33e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954fdeee-9932-40ba-bfed-2e77c61c87e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242a9c97-0d4e-467f-8708-5c0fea7b679d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1d0964-2621-478d-87c1-3b3b36762375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3445f8-e9a1-4234-a183-2651649dd4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37d637b-c4fb-4f08-a597-80f97f9ba5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4ca467-2fe6-4c94-aadf-e3689217b22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4207eb08-2e98-4cfd-ab71-c711f3fc6074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c67fa03-902b-48c2-8a55-1265d04f662d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf392121-fda7-4f2e-a05a-47e6f7cf755b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c5a02f-d8dc-44f5-a4ed-42f0026521ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661e6e4f-92bc-4258-8691-7874557023ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afeb684c-d5ab-4355-99ab-71246461de00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53134e59-662c-429f-8747-2282547d4a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3291579b-e214-49a0-ad21-c68828f5f27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7858a3-fb1e-4736-8d93-16aec6b1317c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1c21de-deb2-4b0b-85d7-a5fecd06de5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8409f9-618e-4b46-8156-df5fcd3516a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67d2d55-2208-49a0-81cb-267f37e3a492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb6c883-5dc4-445d-ac53-99eb4ff1ad77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdca8ec4-60db-42ae-b634-8d4abc273346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043642b6-ba61-4845-898f-c5be138013ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2923b0dc-4a97-4d39-a362-381681aa36ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe435ed3-9a74-4fdf-828d-c3aa6a3f4376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1e9e30-71a3-484e-a78f-60f2b2c915d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fb61ee-4174-41ab-b3ef-e6d7aa819059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decf61d2-cda9-43c0-9820-d75bbbf96168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7737c5d9-e25d-49c8-960a-caf5d131af21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327d9eb4-8884-43fd-bb92-f36fa6de1034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158e783f-aeff-4ce5-a826-f3f217a4a594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae9888f-ab8f-4fdd-81fa-34e7667ba26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d16e3e-62b5-4c54-b68a-3c1b716ed525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6b1409-5151-4a75-8037-a8cdbd720f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831abaab-caec-43fe-85e5-96b914e099ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f862dd2f-c304-437d-8ee5-142b90e79e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5da335-dea0-4ea5-8ddc-72cbf640320a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313655df-ea4a-4d52-97e1-811fdfbcfd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e44864b-b8e3-4694-8217-c62979cb2f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12425a9-735d-457f-ba8b-03df2a478541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f53344-2de6-4d5e-8b95-d86c6c4b187e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2987cf-7205-4439-b8b9-f2ed623b4773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeff538c-40cb-4786-91b5-241034697817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d8a1a9-1f6d-47ef-a57b-bc5873c145c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fffedc-4dd5-49f0-aa92-a6042352e94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add0f287-32e0-403b-82a1-9ef4909aa9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c9ce29-ae1b-40af-b574-6195f2b1bdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.45.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7817f129-d8cb-4d37-9a0a-3923a7599185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971f52e7-3482-4d3a-a288-4f7bfc077dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7448e187-3ae0-4c5a-8ac2-270631f2b8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74e7f06-b2aa-49e0-a400-44328e1a836a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb18f67-1649-419e-9aa5-fac42485115c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.165.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f6f2e7-069d-491c-8a2e-6b88a737ed32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.170.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8fa389-c7c2-4789-a15c-e4b124edf221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff24f75-e77a-406e-b694-bcee88e14e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8922ff56-f955-44a5-b2aa-a577f030b4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73244f8f-e83b-4aae-8ed8-95a64b4ca85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f8bffc-97f2-45af-a6df-ad3b861b9e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.48.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7305909a-b840-490c-ad07-be4ca4e518e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63ed021-e865-44c4-b6c6-1205a1e5f653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6590e00-064c-49e3-af7b-c1fcf24f1230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43456a1e-8694-49ec-a2b5-894d05e16a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.58.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0313dcd-efa7-4496-ae7c-36583db03004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8940f302-7aa0-4c96-bb30-1b95a4539075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859ba54e-2cff-4e8f-bd3e-4e32e05df7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16354f9f-2ab7-4c69-b8bb-36db77f54244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429ede44-bd95-44a7-b870-9c6bc9b85417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.105.166.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bf476b-8f74-47a0-9282-452f6709fc83", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.141.102.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecc25aa-dae8-4f85-a10a-855f2b50f165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.189.22.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30800a79-defb-4fa6-ad42-aec4919fb301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.225.232.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa3249a-3526-43d4-82b0-731b72cb3ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.229.10.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697e454e-11bd-46b0-b652-d84c4024f298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.26.188.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30affeb-71e4-4f8f-91b0-8b16f8b84b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.36.211.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8056ca-7c53-486e-b18c-f1654b24b77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.36.218.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be0227f-f036-4ce3-84ef-6617eae228a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.55.244.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1d6ff4-017f-48b9-bb43-4408b571c772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.191.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece5cf7f-f703-43ae-887e-7ea9e8bd009d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.81.214.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b937e8d5-0607-48f0-88fb-00cb01fc2907", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.89.69.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c3d66b-4089-40a5-9c02-f95863c21189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.90.149.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60231cc3-e7fb-470a-96c9-7f4a6dd854fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.129.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c818bd39-22de-4aad-954c-1519958241c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.127.104.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f8fd9c-7097-42ce-b7e9-4ac6c4954237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.137.9.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0f8794-eb44-4916-a8dc-60d32e4f423c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.146.48.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7f914e-5e2d-4d7a-8633-bf1ad28b0cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.157.255.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf42cf3b-60b3-4de9-adc4-d39581a946c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.16.238.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd50e32-22a5-4986-9652-8dd5f44cb400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.162.104.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b485cac-8784-4d9f-b872-f3f784fdbb10", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.207.176.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08269f01-c275-4b7c-9a82-540e5ca99ef7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.221.36.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1b681c-9753-4e35-96ff-ef5fac533b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388e0bc8-ff96-40e5-8d76-33568e9850fc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.155.157.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018243ac-88c7-4cc9-a22d-b8e18a22567e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.156.63.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafa312e-0894-4709-8f0c-15b6ae533e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.164.135.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252c1458-c676-4208-959a-00580cc50285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.181.177.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48bebe48-2ee5-4910-87a3-662554e16325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7251d480-ef6d-4d03-b115-4bc42f8fbfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.232.111.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c60fa7-1aa3-46db-b02e-07d631a7508c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.4.115.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21229d4-fe4c-4877-8232-150f463741df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.47.185.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3639c92e-a750-4b4e-bb12-9aaf08973973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bceac4c-e75e-4a60-824b-d220fe47dbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.172.223.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37c4c90-b2e4-4698-96a4-c9e2a994573b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba656387-8e80-4c3e-a7be-af12fc4d715e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe41b8f-5d33-4692-8e82-874ddc5411f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.81.236.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3877e421-6fde-4cd8-aa89-584cacf93c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201de686-b29b-4d0e-acb8-0a3ac6212d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.231.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3319132d-1545-4afa-ab72-357cef1bee40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.154.201.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5cc248-7596-41d0-97bd-0d6597c83a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.157.182.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4203c6-8578-4c8a-9f09-f3a9d0d11a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e6e7eb-89e9-4f88-99f2-6cbca2a43273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c73072e-1d8c-4b9b-b1a5-dcc76bc642ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2c0611-0e98-496b-9081-cd5a1695c797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3d0623-0138-45dd-b82a-ed06907e9767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b85d6c0-b63a-419d-b609-710e2caf436e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf6b64a-a584-4c7d-ac19-7a133455d37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d12367c-72ff-4206-ad21-d92425255dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6bddc4-0a12-41e2-9dd8-726c0fefdde3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2a4047-0ea7-4e94-969e-959946e82c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78d1746-b0f0-4f57-b4a0-1337cfe00957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6bdd1a-9ac9-4b39-b9ee-57b7414a3b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095985bc-8ccb-4dc1-8f6f-6ee2f5bb7308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1017eb7-80c1-4148-bfe6-4d789e1cdbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e77fc5c-d5d6-4c50-a35c-f8f9b7d4b19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c935629-bf7f-45dd-a9bf-c56eff5185ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b63d95f-a6aa-4c85-99de-87c5060b3b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f64631-b23d-491d-9f21-75f630fe52b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a42d0f8-8ba0-4775-a462-36645d47b13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e62169-1350-4fb5-822b-c6f6528b78f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87e02c6-9fd4-4f60-9286-30f01e6b001c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67826f1a-66e9-443a-8da1-da48ed6a56d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e389e00-8ae2-495b-857e-12193fe07bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f598252c-4c6a-4cd9-9c6c-18aa0ccd2bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fd85c6-3bde-4664-94ed-3c57911cc030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c95c9f-8fea-4c76-894f-fe16982d97a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ff32c0-0411-4ef6-9b40-42cf0853f568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2c04e1-6464-4525-9f98-d64d39b107aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f2242c-73d3-420c-a104-ba6392989e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e99555a-6e08-477b-8373-8fce32693267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3045ebde-ee6c-48f7-b872-9a3c5219314a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d98cde-442d-47c8-8d58-4400e5d2d7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380d6828-8a77-44d3-bcfb-8937b6479d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94667a4c-c6c4-4e9c-8cde-5d78c650994a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e715c22-973e-4b75-a91f-949282f02e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c31cbb-2b94-499d-85c0-7ca1b5ef62ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1591fe-163e-40f1-95dd-681022375ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60109197-867a-464a-8d13-a6ec04104af3", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5b95c2-7f4e-42ee-89b1-9918e46b8441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c84141-3a06-4347-84dd-80cb89598618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22092fda-c078-4d7e-b65b-4177cad0d045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba47cd0d-00a7-47f2-bb6d-0783a970a2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f504468e-9d39-42ea-938c-1ecb3499021b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d688dc6-a852-4a00-86fa-7cbd5f816be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55f9381-dc46-467e-a694-5f88b877ddd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170502bf-e348-47d6-9d28-270d0dbeaccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690507d2-5246-40b3-a45f-c85c6b2be7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8b7d67-ef5c-46da-a35c-771f121e9901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3937d9-b07d-4c41-adc0-1bc726d9454b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2503936-4fa4-46c2-8671-095baa09abb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00de385d-9110-4439-a0e0-07369d0db36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a318b67-be25-470a-8eab-c9303ff71ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4c243f-3737-497b-a8ad-7d5f20d791e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d258c754-ee95-4e03-9fe0-8d2af4016685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dec6ca7-07bb-48fb-8811-36a84232ffd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237558f3-b64e-4df8-80c5-c72541267ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b96346-2052-4959-855d-bc9f8890d510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd58755-deac-4a27-8341-18aeeff93ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14daf30b-3b44-458c-8a5d-2866f309432e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b0484f-9dbc-4aaa-8f2a-9e93508d0630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49400996-2547-4b57-8a59-84959d2131d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b872e0c-216a-443a-880a-88a14971b583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7627451-178b-433b-b3dd-bd98b2145a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6ab424-efba-480d-b14a-75271501e125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78171ee-9b85-4b1f-8777-e039f8388b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12c9f99-7a58-477a-a7cc-4b332564a955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c3874c-a500-4892-acf4-0ba5132ba7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befcb9d0-42d2-46e2-90fc-e6775f308773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42afb67a-c370-4aaf-a862-48bac25e0a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38fa32e-2538-4bde-94cb-fad005ffe845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af67951-e04b-4e14-aad6-d5e03859ff4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444311b8-235e-4fd2-919a-874f2a843906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e632d69b-3fc0-4ac2-9182-16849fc00553", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292f4793-fa20-4d8c-b53c-14716ba3ea78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23ff7da-7b85-44eb-b658-1d8c6ea4b493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12493359-c5fc-4cfa-aa61-92705ea28d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae87493-a5a4-4006-bdba-dd74d3366be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7df6bfa-2a7e-4502-9718-43c374549bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dfdc4d-134e-4132-9449-403c1cc2db3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c57af54-4a4e-4a66-83a7-dd15b9ff0564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bd22a1-4f05-42a4-b4e6-9786ccce00de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b3d254-e8b8-41dd-b703-25ce702d4093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994917c7-d952-46a1-9426-3b786a229cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26975ac-2d20-4852-b5bb-a3ed7313e73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345c7395-46d5-4949-91ae-0e6f29d7a0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da495964-7b7d-464d-84b9-bf955c4554b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48125117-98bb-4abc-9264-3ab88747535f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab5a18e-9e73-410f-b7b9-02c6c22bd105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9564bc-837a-4659-a635-155967681c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7508928-1ce7-4dc1-be20-757be363a065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f11881b-46ba-4d68-8923-8a09e02ce38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f54352-d3c5-464f-a7a3-cd2d2f227f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84539db0-45fd-4d5d-8c54-da9549f3d01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98acbd42-37ef-4cd6-8af4-7808483de355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5532cd46-956a-49c9-aba2-93ab43ce3342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e747ec18-4422-443b-9061-6a8132f51771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb74a062-228c-44a0-bec9-a31e27b0b0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bdfa02-c2d0-4ebe-b450-ee86d5ef0c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3b84e3-d0b6-4aa3-9304-6721c0ac6cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ab77e0-d1ef-4757-997e-54724f525826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d221d820-f818-442f-b7f3-0c1afca1dcc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b31a0b-0c51-4578-b7c4-055b00f9c9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec5a762-236b-4725-85af-d55f69272198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc29b3b-2e92-4534-8066-e24ce0d6b16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1df2244-4e6a-47b0-b646-5f2ba790a633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719ae503-2b42-434f-a3c3-83ffe38d6307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3011d73-6bc3-4064-9405-3311d89378c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b182ca4-7013-458f-bc51-d6b81e45b245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de69975-cf39-4a1e-9b77-4d792118faf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1b1ee1-ee96-4d98-9ca8-d16c60a21fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e952bcc-d554-40b2-9940-eaba2aafcd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c6d5ca-ca83-4d7b-8022-29ee7dce58ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c3241b-cda4-4b1f-82eb-edd9a9871ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb36f1c-cd06-4151-9045-122ed068c59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce5db51-2852-4c8e-ab4c-181fb580a61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6876c226-d428-4d73-8f74-0d77d57e2f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95061385-17a1-4d09-b573-958ee1ae2405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe8a465-6690-46bf-b61d-193ae9771477", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41123a19-5f14-480f-a008-6b689c347559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b66426-f5ad-49ae-9cd5-136c87218c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e2f23a-69ce-4531-b16e-fb007f0256e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5034977-31fc-458e-9c93-371491ebe80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a6e647-10eb-4916-8cce-458306f23b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a257d66a-a925-4f87-ae8d-1e3983831f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e302af-1d5f-474c-99c6-d55a9f530fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91af744b-7357-4234-9f56-a9be03c5f79a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d6c632-06bb-42c4-86f8-3401fb025372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370cf872-5751-49d6-b605-2deea5706f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130c7025-376e-4503-8405-9d948b9d28a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd753c8-ea97-4d3d-acc5-03b54ddf7279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2224683-2887-4f93-a11f-5fabdfe6dee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b20476e-8b37-445b-93ba-fe76b385c63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0581f5bc-2607-4c64-8ba2-a40ecbb57d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93447643-cb43-4c02-b7a8-de7888c770b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5779219-8fbb-492f-a4cd-b30c703d9e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f73193-e025-4582-8c4f-fb50a30c6f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e8671e-b046-44da-8a90-ee5b7b024f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4729b2c7-8684-4e93-9a4b-ef3b68722df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07bac9a-a707-40ca-8cd1-d8b8a7d72f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504a8237-8e00-47e6-949a-001cb9612f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f8cf5e-c624-43f6-a1ff-6531e10a3592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a07b41-076c-47ac-b685-5fb8bbc0ebce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0083f48-d172-4a40-b949-2d71c0f5315a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cccbed8-181c-40c2-8e6f-28c92a5eba57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a38f08-6e09-405b-9a5e-7250bdd6e57d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9baf2875-7661-409f-a20c-7f3c25af9d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c24de32-92d6-4616-8255-ad3b53a29a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143c827c-0990-47ba-a0f1-f9729749ac51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.250.39.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d221a537-6809-4e86-ab9c-fa10ef871f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.162.153.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc192de2-add2-4dda-9e28-d97c202b6210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.116.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ec80ec-8514-4775-a07d-07274332338e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.122.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a57bb4-5f63-4d49-bf12-79cd14f54638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.132.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f247d6c9-eff2-4184-8b16-08f8b1b9f9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.14.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d09916d-82ea-45df-b654-5ee2a6d9456a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.174.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17d3c25-627f-4be4-83f6-1e316e395953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.205.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40263ab-9223-43b9-8a92-0e8aed735e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.57.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9826c1d3-d8d1-447f-b5b9-479b0f03193b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.62.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a1506f-d9ad-4451-8d26-5eedb13312b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.74.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4238cc3b-1152-4a7b-bf20-593c35099fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.96.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5586e797-aab5-4507-a347-096f2b4de296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.99.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db700982-b3ac-4669-a931-275b3cc554f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f241898b-86c3-4e64-9c09-ece0511b3333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a905f0-5f71-4539-889c-8e5f816b8743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569991e6-91f4-490a-bd79-039550958b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.228.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027ada2b-866f-4de0-9506-4d0928c15ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.196.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c32a2ee-cea6-4b23-a32c-437a12c7af52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.198.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003f4e7c-16f2-4422-a4c7-79affe1738ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.201.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afef2b85-0276-4c17-9f2c-a0ad26b52cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.226.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5f45b6-248e-49c9-902b-0957c86d5481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.232.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a3e80d-5026-49dc-98ff-362ca0060cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.197.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba349d9-7f3d-408a-8ab1-4d1c2d867665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.204.93.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de749b7d-5b1f-4232-ad0c-e62df6336629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.244.227.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b5abc8-25b8-4002-9601-873c60d6852a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4995e4e-60bd-4ffe-a9a9-9c90abdadb1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34864ae-e234-4062-b163-5fec2f309369", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bfa7ce-fae7-4400-bc5d-9ebc022bba29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.224.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc1b865-ee20-4fc1-99a4-f096864a81f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f366daf-8ef9-4c7c-8da8-471a0c4b17c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ecbfc2-c027-4b84-bcd2-5a41e6f2c91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb94e0d7-550c-4ce6-b53c-c8ec8b2540ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f29a828-cef7-48b1-a25c-7207e4d50453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c26b50-058e-4415-a4ce-6b3d0e8c9e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659b2364-cd9f-43d5-88b1-2996d53277c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4472ba-86f5-4721-ae83-70a5378a1335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.115.214.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab086c7-57cc-44fd-a173-255c0a8f0a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d81524-fa9e-4419-b8ee-26c0c54e7f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891438ad-8a61-4f99-9ac1-e81f7c8fc7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67aeafc3-5c89-4230-88a9-d000bce8a30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684c1377-0da0-4020-a179-fe1910e50e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55c9750-8ffa-4dd0-b34e-e05aa171b885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3a452b-2847-4113-b3bc-6ebc502c6533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2293e1ef-ba70-4c32-8768-e2c71dc911be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a79fed1-1dc6-47a9-ae42-65a49a5ce536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.37.38.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5975d3c2-6d4b-4462-a014-aac2312d78b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.154.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e0b6fa-858a-464a-8387-8dc142e6a43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.216.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d3f161-c0cc-4d7c-992f-826cb83c2b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.222.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19272d65-e617-4965-9aee-888e64388503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.33.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c804691-0084-467a-acff-c78569a3d977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.43.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34037b9-ad05-4660-8f21-5dedd61a7788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.79.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c358c194-7079-491e-bbe7-fc708d9358d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9112d97-eea2-4c92-bb0c-9384a3fc3840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5f7f37-eb58-4ffb-a2fe-e9a45e098f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.148.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ab7e66-a7d1-49d4-987f-12df959d63cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.151.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e637c7-72bc-4efe-a790-e62a5b18fd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.189.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4c2c0b-2755-45da-a584-a8dbc940b5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.14.142.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91571620-8eeb-41ed-af56-c46f46a58c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f5d52a-606d-4525-9cb9-1dff35283153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422c72e9-4991-4d03-ad3e-a99e81f01461", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.213.107.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0485721c-d988-4d14-b73b-63fb59b5b01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.217.42.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad69d482-bff6-499c-bb66-2ab666572c13", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.79.142.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98256ba6-fa94-49aa-8ff5-f8ab70755a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.99.112.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1edd91-9017-42ad-86a3-b66f506b481c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.106.63.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d608cc6-1d14-4adb-a33e-41e15324625f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c382321b-dca0-45d1-aabc-796b0606af32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.197.101.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacbb9ee-33b8-42a4-bfe3-61390d5a65e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.202.193.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc22e108-8cdd-41e2-844a-244a6b8eb350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.238.83.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2873d750-80e1-46e9-8811-6068d1a3d8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.251.245.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f98744-3a47-46b9-be4a-50803bd7e466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e078b96-51d5-4b1c-b2e1-ef27aaf6f8b2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.75.38.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c616316-2f20-4784-8970-f5e43e597838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23a3449-b681-425e-9edd-885f889346ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76865c3-d5e0-49b0-852d-266145471e91", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.178.16.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6dcd2d7-1fcc-45f8-a6c4-6ca52ad3d7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0af8c4-eb35-4e91-8d83-4f7c28b959c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a86601a-ba80-4fa8-be1b-f953dc9f62e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266cd8c0-6dd6-4e93-8324-813b617b6a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.237.116.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881758f5-c865-4c58-989f-d3fa174a05d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.237.116.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abdd935-c48d-4c62-ae9f-feb41ad63b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.252.73.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf32c49-0aa1-4e30-a8a0-2f1a4f9adef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.41.8.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98114f8b-018a-41c4-bb8d-31e3775b44cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.56.45.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44820fe3-43b7-487f-a404-e18d50902441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.58.184.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2dcaa1-62a9-41ce-8425-f2c6b3b1f0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.217.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792fc524-3162-4360-9e6d-27f03d58f1d2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.83.186.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8ac064-0243-4b30-b2bd-f906653ee362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.108.3.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782cca40-689e-4c0c-a220-1d7b1a8a87f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.111.148.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b7fe25-42f1-4156-bf8f-f3b31c849c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.69.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7c2330-12bf-4cb8-a532-af430ae9c5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.152.185.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e31e347-c17a-4c3d-a687-2ab511a15534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.172.130.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac7760b-af49-42cd-8aee-2dbd526dec1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc4297f-c3c5-4fba-bda2-5a77724d4616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6151c7b-4fa8-4d08-a066-47c0b469e2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f2a39b-b3c0-43c1-a5d3-e663d7266f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7d69a5-ad54-481a-9cd0-6db3bf0fa6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247726c4-8cfa-49be-8624-ab237e5dbc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fd4ed7-0744-42ba-aaf6-3ad96890c117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2822c558-aaa8-4b9a-ada3-19c9efa4d82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31632ed-7688-44d6-aed6-457d68bbf200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dc749a-9da9-4375-91fa-519914065bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee25de8-8d39-4e16-be22-dbe62f5c1766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fd8597-3f67-4163-86af-b0e0f5f032b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78c6ffc-f3cb-49ed-875d-a097b30e22fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2c94ed-fe2f-4f06-9186-685a2f241236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd299df1-6dfe-4f6c-b898-cc0596521654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a73c352-6d1d-41e7-a168-27b8dd320184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1461e28-6d9e-4e61-a846-a71a667a0c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c9e214-0d83-4cbf-a5ef-4628608923da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c97e2b-f31c-4ef9-9bad-a638c59ccbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b982da3-afa1-4656-9d09-8d1d42c596c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3439f8e5-ea1d-41b4-89a2-bceb1a3b36c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732534a3-43bb-44ff-bddf-182fcfacd1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d606b976-1893-491a-ac77-60d90a5df547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80028592-ad52-48af-8530-82d5a8878f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d39ecb9-d92d-4636-9715-2ebfc2cee841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94540ee3-c641-4cd4-8091-e4b0be6bd1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e55268-b067-46b6-aa7f-68cba3cd076f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f196e65d-e54a-450d-84f3-93770723a293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231b31d8-d2bd-49b3-bdba-af596f6b0918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f42cee2-a0da-429f-bed5-d04b221a1c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23add5f4-c868-4f3c-b371-8df99a546c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cc637d-6f5a-4d11-b365-43e126bb4064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9464f8-228a-4dc7-8aa2-08bb3c2f3b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2322a7a-66da-4200-9193-5bcceb5a6799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f633c277-f8df-40b6-8d3e-db51e2364e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d735d3d7-f648-4d57-8d37-009b56e4adca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18e5a33-279d-4d70-86cc-6113f8dfe314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b92ef7-d8d5-4084-a2d3-81cd907a6d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.181.107.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568f5622-a158-4406-a076-1c657784b93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.183.63.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a3f0c6-55c7-491b-8f39-b5be2ff8eee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.183.63.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adcef31-0f62-47b6-8508-2d36a14301a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.202.208.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb21777-1bfc-4a47-b68f-8b9e7a4c873c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce3ab02-1e32-4f9b-92ac-b3f4da6e9d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf863b60-9f80-4f8e-be1c-86104aa9aadc", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8713dda2-d411-48a9-aae8-6a976e89a18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b970311e-81b3-4229-9537-316f2e37b3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562572a0-792e-4fb4-baaa-da2f4e58828f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf82eb4-0cfc-4a74-9e22-14fe854f54a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52541cfa-fa35-4697-a073-18484b651af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54a7230-5d68-4566-8f55-38c122b847dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad51a5a7-7bd5-4c41-bab7-6d72749a8f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0351e9ab-a2aa-4bae-bc11-2181de7506b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f609747-3570-4f25-9337-6174f7039446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632a526f-ca7c-4a2a-bbe7-d0debe93f11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.118.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10554e7-9cfc-4bb1-b79e-617f1ba1fd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.231.33.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c42a8c4-4682-43c9-b5b8-57005f564436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.74.163.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147a4596-8b0d-4754-b354-098b9baf6c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b6d8d4-4a75-4c74-bde5-5c79ee4c1a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cce55a-8c4e-4f04-bbbd-04d05e96d007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2808eb4-b0fe-412b-bf91-d0095d772bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01a7896-0b53-43f6-a4a7-a8aa46f26c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47466e71-37b3-4d56-9658-411da485da13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3ef8ef-59d1-4faa-b932-51ae3a5b4d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddd5392-1b35-4fd4-a68f-831a4be8ef4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9304d933-ef20-4ae3-84d7-e7fd2fe8b439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32710132-4a0f-49d2-b72c-1ec0091348f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eeccf7a-fec7-4dd6-864c-2a7e7b79ceec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9880500-85ff-41f7-a6f2-a3bb6d15fbe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c97485a-1fa3-431e-b30b-b70bfba7660d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb92b4b-6253-4551-9c18-fb13ff8b2c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523249db-7cb9-4d41-a578-a4497e880937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca30a44-ee3f-495f-9fb9-a340f3b30e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42aa532-f5ec-4c33-b0c3-08f78bbbb011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c9bf36-f3fa-4480-85f5-2c7e21992ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52638ac-2bed-4be1-a0f2-023c8d651ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434f1630-1e24-4ee8-833d-bc9714e4ee77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6c1115-c9be-4ef7-83f5-6802904a2963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27bee01-a654-488c-a751-e139e206be96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2614fb-a25c-4e77-b831-117ebcc05e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af443640-4e32-4b52-a843-60c1dcebd7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9214bd9-ca0d-4b87-9ffa-5f115bda2b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3999b7df-f716-4bf2-b91d-0bf2bcf48cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e27488d-a946-4d0d-b547-d8d39d38588f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498abc87-dc88-4cb1-bf47-97d6df0f4641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671ca8dd-9074-4707-b949-ee02ebd75de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f32007-d6d2-4e7c-8067-dc3012eb51db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a13b72d-8614-429b-9a09-1a6185ea16ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcfc014-d362-4af8-a15f-e89a4483825b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f9d1b3-cf0d-4b4e-9e10-2309bc7c8571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcdb317-7faa-49b1-ad56-dbd7da27bbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fe031f-155a-4221-9f53-2bfb59b13d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38a729e-4006-413a-8ace-26f846d89b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3044a22b-cf00-4dad-9172-0a6dd866d318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5f7437-2e11-4ccf-8036-8c6e191b6d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c3f7f5-e745-4d18-afee-897774d30920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce742f65-1d0f-4502-b288-cc7ca02c689d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7a4950-a387-4a7a-ba3a-1b4925e8c618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380965c1-1a66-4fe4-a57b-cad69cbc15d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc11dce-6fb6-4245-bf21-88e057403518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8221cd78-4c56-47a0-8932-736ad943163f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f95714-7ece-4111-b957-b31e0a8a787e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224ee389-412b-400f-ae74-90208dc0f812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d1f167-19a1-4cfb-8404-a341b2b17400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a48cf6-dd1d-42a3-8419-85310ea9a8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882b3b4e-69d2-48f8-81da-6f61ac2de5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4289dc-ef13-4f61-ba6c-af60bee53f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09670bc-06ff-4936-82d2-92c4ad65dd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abeb4ff5-4600-4db8-b2c7-d8464a3984b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f240bf6-360d-4a54-b784-1501f77c2307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65060d53-8e58-49e1-a500-10ea48c8c171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2d95c1-d04e-4659-b6ae-609b18aae5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815d07bd-6884-4daa-b07a-6a7eda6680d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68536c3-b211-4531-bbde-07e78b80e4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf418fd-2585-487a-86ab-5727c16d687d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975dfd9c-dd84-4e20-ac32-27c857e19372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dedd45f-ad56-48b5-91e5-c34ae4aba21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bef0f6c-c385-4721-8cdb-d473744e78de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e8802d-a9d0-425b-bac4-8ebb21546ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34811642-ec83-43bf-8df8-a6e558666b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df46b25-492a-417e-9a5a-40becb9b3793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327ca543-4758-4324-b2f0-8fffc2d7e6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c16294-c150-4285-a49a-411f84429772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3934e5-5e03-40a2-997e-bf8ba9c2c778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00e9bc4-1069-48ea-bfcd-10a4e62fa213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e116cdb1-d15e-448b-b180-e5fbc88718ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2b4c34-9796-438a-be07-471a9115e784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65723ba3-3eac-47ea-8a5e-f968f05d8029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d55436b-9fc6-480a-9a11-bb175205299d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385360c3-6393-425c-b842-bc42b4f6f3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed6ff58-4e0a-4165-a9fa-c59cdea5cc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23eab18-878c-4e46-a200-8a40a1d77cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7ae4a1-f5b6-4952-b17f-566646fabc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a33f19-232b-4ad0-a027-b7f80fc6b5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88c8e93-22eb-4eeb-9597-c494dedb1b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2819cf-804b-4186-acc8-e24930ee7057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd978db8-74a7-4ebb-bbec-aedb8bfed3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808b4316-b017-469b-b2ab-5b44ecb0c65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f38d64-398a-4e93-9d29-5098197a4376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ffeef3-95f2-4144-903a-9c4e0f6362cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8658f33-2078-48eb-b906-2596bf4a5180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1ef4eb-ade2-4174-83eb-54da3fafd26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cc30cd-fa7a-4fa3-9411-e87b06dc2fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4568a8-08c9-4e64-8c0f-d82da638edf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed33626-4faa-40f9-8e6a-62399b8c1748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e79e52-99f8-49ed-9d7f-8ef8723922db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76ab7e6-6fbd-4275-ae7f-48b27ae56cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b84132b-c2c5-4159-aafe-bb7b3e6683a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e51c74-9f54-464b-8fc0-15eae458c956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58594534-ca17-45a4-b062-df51773bd706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305f6071-ebad-4c8e-8ea1-42a3ee46b538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32880a67-c308-4b37-b644-56c2f9a0101f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b845e8f-58d0-4d03-9ddc-45b8feadc233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a173d01-3a29-43b3-b7ee-36e2a66bae6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea8a0f2-d1f7-49aa-8498-0efa0c8f3d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.252.238.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d688055-4c1a-4ac5-9c11-cde254dfc25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.252.238.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79136ec-5b24-4295-91da-c69ae9797fd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.163.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac71077e-1a98-413e-baa0-492e6f9ca58c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdc92b2-cce8-4b7d-96cf-10bd5134c59b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29457054-5028-4870-949f-d0e5a699244e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d457414-db89-4a35-864d-87d34ec0f691", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f597d5b-2435-47ed-beee-9ed09b0c96ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.9.225.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daef880-8d47-4107-8754-8fa7f0d85611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.99.126.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a89791c-e076-4f13-91b3-869d8eb24c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.12.113.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5b6315-a58d-4f1d-8017-82d24f11b127", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.142.185.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd63d01-e709-4dff-baf0-dee4813653e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b021774f-cab2-4fdd-a950-37af5a851aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.181.136.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8b73d4-619c-43d9-8d3d-a7742b3fb45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.49.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cd5e7c-7b88-4ca3-9bde-b97d6664d5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.84.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e59f30-1cd3-4c81-92b0-f70bea7308a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.27.148.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ea804e-b9f6-4e1c-bcd4-aa71a3cac2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.28.130.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4fc7c8-f339-4cd4-82a4-39b05ed66d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.155.71.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b37b68f-544b-41c7-a94a-42e5416b2a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83fbbb6-e2d7-4f01-ac97-7f21131d684d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.205.95.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa3fe5e-0194-4462-8068-363cdede5c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.78.132.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f8fda8-9e0c-416e-8d08-dbd1758ac965", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.249.245.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d38e78-8270-4a82-8bde-2777d6ed4fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.77.159.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479f1d39-5f5d-47ba-85d2-70ea3c9231a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.92.10.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fd0faa-5e44-4fde-96a0-e57fd0474a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7a2cea-d61e-44e1-a9c6-7bc02389b63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.158.232.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a229b5d1-72ad-4970-81c3-5e848ebb067c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c604b9f9-5775-407c-a69c-0f5b99cb81f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7612b206-32ba-488e-9347-0b596591e901", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324419f2-a062-4ba7-bbaf-4b683ac709c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbbdee4-0ddf-439d-a226-82c28949f932", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4f5c54-a356-4bf5-ab3f-ed0a92a3fbbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188b9e1f-d6b0-4ea6-9979-8828fb85ac52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.78.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db586dc1-d66a-4694-b705-fb1f4387a7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.78.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83232912-aabb-45c7-a5cd-a246887abff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.80.34.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe7deec-f0ea-4e6d-a4fa-4be89d09ea41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c5ffe2-00ee-4ca6-a088-d2a2d6404a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4bae3b-c701-4b6f-8385-ab0f848f6eac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.163.5.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6450a2-bc6d-4d23-867c-858d068ef0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.178.246.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1537031-3163-449e-b431-1c92f9e4b99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.207.34.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3e90dd-058e-4ea7-989e-b32038fa5d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.207.35.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5998a76-f591-48a5-8d66-24ccd2002806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.207.35.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb7d233-cc51-40b3-b694-a497a094b349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.229.220.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6313e624-dd35-4ea1-aa01-9ed09d2940b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.108.100.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff14228b-ad21-448b-8745-d85340a3e3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.111.225.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90289216-0458-4061-8d1d-1615b6297601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c297aa44-e43c-4c86-885a-c4f7dc3ac1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.88.163.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b80320c-93a4-49a1-a9e5-328a9cdd49f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.89.169.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4155b3c7-71cb-48d9-8944-cf737b01070c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.129.7.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dde0dea-f162-40d1-9dd2-ff7f8e6a4f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.185.63.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498bbdfe-5053-4978-a81e-d47b90895ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.196.168.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa72578-1a9e-4b56-a634-2d6e0ca36fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.228.172.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a00309a-3079-4dc0-9a1e-6f63e624f57c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.233.81.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1d5f37-b406-4644-b3a8-5d6df75eaa20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.236.99.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a60784-342b-45e6-9a40-f0ef42d92349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.25.252.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48945d1-febb-4b74-a4d9-4c9d812425db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5c6547-a3f1-4457-bad4-6b83d4f4018a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.73.36.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fffd90e-2cbf-4bce-8e55-e8c892ab0cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.73.37.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808e6f66-02ca-4256-9f03-3a354a4e81b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.77.113.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b192d75-97ce-45e5-b376-79b435f460b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.138.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c86b99c-2c05-4098-ae0f-1258777fe4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.108.217.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337b9e7a-b171-4110-8b67-59c341bf889d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.132.164.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ad538d-0984-4126-8c0d-96cad0c24222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.132.164.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed7e772-ef27-4974-baeb-9ad0f6705ad9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.137.105.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e72c35f-d9b7-47e4-a8ed-d15a7b73ca53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.108.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586a1160-8195-4da7-b26f-143e43f32c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3699880-1e08-4d6f-92e0-2ea7294f2c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.192.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b2d969-603d-43f6-92f0-91e1192f98ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.119.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19d1b26-1a41-410f-a9d5-2bb3fc5918ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.29.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0d5210-8586-4899-be4b-9449ce1d5d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5698599-657c-4f20-975b-8d0c741356d5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.28.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254c5b9b-8552-43a4-9e17-ad396676e1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.30.86.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949c293f-09a3-4655-ab43-0b47882afd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a333d8f2-1e74-450a-8eb3-c39a434b2f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c7a241-3de2-4232-8eec-a9d751111e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029bd47d-ee9e-47a9-a969-d94053bb0426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.204.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef5d1e4-1750-44c9-9972-7e9cf3ca19cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.23.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f841be37-dccc-43f2-a317-a12ad7e2c032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf46624-a2b6-42cc-aa06-738b28fa0775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.20.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583c31f0-582f-40c4-904c-4ea55ab8249d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.223.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a040ffa2-cf5b-4f80-9b55-c6e7d6470f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.43.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee8aff4-0ead-4738-a5c1-a48807cbebb6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.112.221.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1128a678-4bbc-4e9c-9187-118f1b84083d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.120.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfd6fdb-c2dc-4acc-8b7e-c00d05674cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531735e4-2da2-455a-9d4b-bc3bdeb2b3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.87.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a84323-e96a-490d-80ce-48c75a0952d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.152.40.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0ff190-9d20-46e6-8b35-758b2421df5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.152.88.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b0fa4b-a58f-4bee-94f1-5ccfdfd1ceea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.163.114.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006afc49-2518-4eac-a335-a8e4b8fd8eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.105.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac483d1-6266-447c-89ba-63e9d8e3b733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.127.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4d4f75-7fb7-42d1-be84-f5198b7ad292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.85.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad0e843-6ab6-4abb-8169-3eb10b8ef6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.93.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52effdc1-97ef-4c9e-94aa-263eb608f78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.97.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423e4ee3-0caf-4606-a63e-a1983e6ecb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.118.25.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5dbf66-7e22-4364-8f6e-5fce331137e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.147.219.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b670541-98b8-415a-912f-0a67ca48c7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.43.205.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f76b77-8ec5-410c-b1cc-84620f60c17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.49.8.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a959da97-29ae-4502-9b1d-e1ecaa9141ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.5.235.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19484b77-763e-49d9-a441-5305b49fc3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.6.203.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8612a381-1711-45af-a0d1-e4be210d15c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.60.22.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aca2f7e-6bec-49de-b4fa-b168cfe149be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.72.101.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3699189e-8273-4cb9-abd0-00e880ba0a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.2.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0acbe2-e524-4137-be0a-300533807541", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.44.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa102436-b9e5-495e-8197-a3ded2b79f05", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.5.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635f25f4-6505-45b3-ac0f-f82c4ca48f1f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.6.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11c47fd-5208-4ab3-aaa6-f909fae1e0ab", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:360b:a44:e8d6:ebe6:6fd:21db']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e550be3-4f4c-42db-a669-df80124b7ca7", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:3624:12a6:913d:55c9:58d2:1ad6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a223eec-652f-4ae0-81e6-e448f41edb28", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:3624:2256:d5d0:1706:4e66:2450']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab9c28d-235e-4c13-8c9e-e0164845e219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.120.182.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e76f09c-f96a-496e-bfbd-aa0dd59fdffa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.128.190.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebbf7ab-54db-425f-ad75-3c2ee740cd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509274e8-99fa-41f7-8494-488293b2ce6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29aadd9-74e2-4ff6-8c8a-0a3913aa61af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.220.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47aa7186-3425-473b-bea4-3715bdf56c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b24924-b15c-4643-a275-34f84c9ff1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.132.26.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa82153-7054-4b87-a9b3-1f4f31e72b42", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.134.216.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58da03f7-57a7-43c9-b34f-b8cebc288aa2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.140.188.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b379ac-1013-4de1-a11c-b679d29ac194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d1f7a7-660e-4f77-868a-2a2cc8c8e680", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.139.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95119ff-9263-4ad2-a4ec-01e58de5d713", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.146.107.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d3a7db-1e34-4e7d-a407-c16ff78e086a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.17.78.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9940ea-1f0f-47f2-b0a8-a95d195af158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055626fa-031d-4167-9738-777e760b4775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.221.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1c56bf-fae8-4eea-99a0-fb680d21eb36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.81.224.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cfa9f0-3f28-4d11-96b6-f06732cdbbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.104.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd0d2bb-39e3-45cb-b0a6-89262840b6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.198.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4650a880-48ab-4bab-9108-ea1343987a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.92.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee095420-8368-498f-b9b0-0d56ec7d80f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbf8292-77e4-46d7-a0bb-ae947a15d694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.33.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7551c152-5543-462f-97bb-a61fa647c6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.84.4.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dab301-e586-4e79-aff3-0daf691f5100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.18.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b2f853-17b0-411f-9fd1-829d27ec7947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.245.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b632eee9-e92c-4083-9f7f-6192b4e69e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.92.180.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568c05b3-3e71-4d57-b6be-bb4560ec07f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.92.239.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf99b03e-3096-4d93-b28b-4ecb8723cdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.248.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ec0824-9165-416c-96a8-b56dfbbff57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.94.184.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458468c5-d89e-4f97-97b4-2f6af34f942c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.37.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddec98de-d112-442d-91da-c984687473dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.128.247.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b2eaa2-900a-4f49-9b83-0a0d6654daaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30987ec4-c516-42f2-af1c-4a9655588146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc018e68-c08d-4dfe-bb9e-a6666b1e8ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ec6d87-ae7b-4c41-bacf-948f6b8f0bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d40c8db-6c7f-4740-bfa2-ff05e8e8739b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579dd95b-c57f-4208-92e3-2bd085878fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8361a0c5-5f61-409d-8651-a4755b6725ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05df950-5853-4c21-a1c5-e788d824af95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.99.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f27c284-5e91-452b-a29c-ba5609fc8192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.15.17.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c3ef2b-3c65-4bb8-a7c8-9fbe78bf13b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.16.250.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b02fb0-c4cd-4580-8b3d-bd186296df34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.176.148.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4462678-4c87-47c2-a0e6-ecfd6a93937b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.179.161.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc10690-b785-481a-8ff3-033e75905fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.0.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92494d9-9010-43dd-9d84-6ec2448aa0a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.74.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88ffde0-0bea-4b83-bb04-b78327e97840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733480ad-5790-4bc8-944e-137844d681fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de42e10-752c-47fa-bdd9-aca93f5fddff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30f515a-4cc2-423d-816d-82ba45790afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.188.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbcd3f9-f9da-4284-a37f-f42d20e4d857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.189.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e133626-9b66-483d-bf53-fe3842090b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.51.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b85b09-c76f-4d86-80d9-14ed8b9260a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ec4e5a-a906-45b1-9aff-b759f936252a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.129.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b276a2-a825-4850-99a0-aea73cb93b1e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84acbe4f-57be-4729-a2c7-7adc0a8ee184", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f05eb7e-ec8d-46df-a22d-b206fd455136", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0ba202-0014-485d-b1ea-78f7b80b3155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5577803-70c5-4af3-bca7-2a4ca104dfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.192.202.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1999d40e-4bf7-46f3-9d7a-a7c86dadcb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.192.238.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f7ab85-8118-4b7d-b25b-39764870e59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.190.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533fb6dd-157e-47c7-86e0-d55dbbc4001e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.167.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee4cf5d-4a4a-4361-b037-26c8530d88bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.121.163.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec13221-b80e-443f-a8e6-99628503267b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.222.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bb2e50-7e67-4520-8c5a-da1c49acb3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.107.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2504b0e8-24d2-4d47-a2ad-c4926e0ad0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.134.212.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65b18b5-5a7c-43f1-9668-c376a62457bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.51.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6ecfe0-af81-42d9-a41a-fc11aa67673a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.60.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdb8bd0-c869-4c19-bb82-60b02f5eeb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.244.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d844b53a-420b-4a2a-9ac8-5c8f8136a216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.33.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b930c1-0c0a-41b7-ab8a-2310c5241333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.86.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7eeb264-0619-45f5-ae32-c6e42ff2264e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.141.54.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552db74d-740d-49fb-a206-101f20d4ae7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.169.150.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975cef25-9874-4016-ad6c-6208b81c3fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.185.241.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaa5545-22d4-4f46-b73c-268d3df67f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.132.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5de8315-2475-4b03-8018-ff1f6513be4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.220.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e5a5e7-4020-4df2-babc-23a5ca4dcb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b9c783-8490-4a2b-9ce3-6ef8631bb524", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.4.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0778df50-df9a-4e00-afbb-66d9ac24ec64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.212.124.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a843a3b7-53d9-4a21-a280-8145561ebf17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.199.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f93ae7f-b7c0-4ff2-b08e-74d81585f949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.199.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25bd967-d2a4-4ce6-8575-fb334088d3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.224.74.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d87da1-c923-417a-b482-378ccc175984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.226.190.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48577cc4-a781-47fa-b004-806f8c4f45bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc892d7-8d2e-4ff2-830c-9e90b9bf18a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.58.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de737cb-d560-46a5-ab59-77b8a732826c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.122.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaad37f-2661-4489-835f-8b22c1f2a7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.127.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606ba8f2-7cf7-4b20-91b2-c0522b62d616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.155.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eee47c2-7ee9-4ea9-8618-9e2a1e6d9ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.156.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b079549-c9eb-4472-841d-c91e078de201", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.168.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493f1cf2-f8db-495c-a151-cb4aee582dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.202.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afad7c3a-36f9-4cf5-bb5a-0b33889af14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.211.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a140076-6706-4703-9105-8333857fe65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.31.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bc3f38-9793-4235-8f52-d346c16daadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.56.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d5e286-148a-4f6a-8137-3b5385cbac0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.96.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93017c62-915f-4a14-b5bc-c8ef582ab3d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.45.53.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe3020d-575d-423f-ad11-71dc19dc9896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.176.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6edb00-9f04-4704-9761-f2f2804338d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.51.199.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f82244-f34c-4335-9da8-d275e808ac2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.176.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bc326d-581b-4588-8d5f-039949c0aad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.141.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db33a914-427c-4740-8aa0-686cccb504f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.164.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee23b04-45b4-4426-b92e-a3436b98d071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.171.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0bb671-7bd2-4fc6-a539-bca0784fb396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.108.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bf4af9-e98d-4ff8-a540-f6497d9f5e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.219.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388edf85-b6c1-4e9f-9e68-3116328775ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.33.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b33a85-80b0-4691-a19a-034f0585c27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.6.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52c93f7-3ce6-4b68-b169-2b8d1b1eecf8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.68.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e119f18-181d-45e8-9aa1-2a0d8bac1544", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.83.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0949ad-9894-46ca-8893-c9ccd77f9f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.153.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6b2683-66a4-4f9d-94be-c723e0226122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.111.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88ea1ad-75a4-4abf-90b0-7c2257f1c5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.35.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e17a772-1f5a-49e0-9544-187c0c1101ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.182.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ef718d-01e1-4d98-8adc-6b89463f711f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.184.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2b8257-a905-4c10-8784-ce5cbf1eb23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.217.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99eb8d3-4582-45c0-8daf-4cc6eb64651d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.218.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605f0ddb-5d0c-4286-9de7-db390892d372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.47.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda28364-f8ca-4758-8dc8-0a6823c4b8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.86.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf5f88e-ab6a-4ea0-8ec4-c37c4caf60b9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.18.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec2d71b-4450-45bf-bcaa-24dc6ccba9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.186.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2baaf07a-fb3f-486e-8a8e-c28542f29fa7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.86.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2239a5b6-9d3b-449b-826e-269725e2ce8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.125.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7d026a-b075-4c95-be65-2fc7c139010f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.192.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167ae579-73a2-4243-b6f9-6ce48ad03bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.63.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17e1972-4689-46d4-9c12-b10885137561", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.25.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751d8bf8-395a-47c9-9ba9-9e241d82c4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.44.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd948ed2-df9a-4af1-807b-0c323475953e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.231.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed900508-9ee0-4fd8-82d0-37bf0b59c450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.154.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8aef66-6f90-4f52-a9a8-b03486915756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.195.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995c7c21-45eb-4266-977a-c861cba98fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f91b82a-beaa-4bbd-b90c-129322541403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.173.122.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd669cd-2bc8-47fb-8552-0bcde10f2441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.104.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b590596f-d6c0-4607-ae25-6c847559c729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.161.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03c36a7-b450-4159-8152-7fc3ecdba435", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.35.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9e525e-a5e2-4539-b180-36ecd56e9fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.57.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d4eed1-09a4-45f9-9a9d-66c33769353e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.94.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d56a72c-52e6-4a84-8e39-6750d0413b1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.188.236.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6014016-a349-47f5-9af6-7f772c48dba0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.195.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466ae4c0-408c-46bf-9b97-9ea439bfb01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.211.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8786ce-ccf9-4c0c-99c6-9bf94bb9f2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.228.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb74756a-3d5e-4c39-8a71-d7251529d746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.12.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3341717a-dbf5-43e4-b417-32e8d10c4d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.215.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0138472b-d698-4ef3-b305-77d5155e17a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.83.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661c08a7-40e3-42bd-b85d-d8efcb2ee23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.84.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c905cc93-0a01-405c-b489-e25057cb1d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e652be76-3213-4890-9c29-e023a9f65d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b011f85-33a4-438f-8654-e4711654a9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d89010-02d7-4b65-b2e1-fad9b0f2835a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09608750-a165-4025-847a-91d3a0bd2809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05f9202-60b3-4a61-8c0c-cde2c38c9c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d31cc0-6a04-433f-8217-7da165290a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eed917d-6d8b-411c-84ad-05faad0b752d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d74fbc-0bfd-4065-846d-08f6c0cf0082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2454c989-d485-4bcc-84eb-001e9bbdd8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c6db92-c82b-4530-9410-c78e0e6e14df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf2d1b8-8df6-4c51-96e1-57f9526b6af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ec82ef-83f4-4a91-b394-bf77f1f34e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9637ea9-ec62-44d4-9ca4-b9564d09acde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c5cd39-8b7f-4860-b960-7bbd4e326ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141cc365-000f-45bc-b7fa-3a70489a522f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd9d390-db18-4bb5-b862-ddc72c6a123e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83128c4-67ad-4888-b472-22f49707ac3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cb79ad-a7af-4f90-bcd3-fd8c960db351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73d2950-b0b8-4b58-8925-dae388986506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d8f9e6-6497-4dc7-97f9-818b416d7f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f151184-2f3a-4fd1-af0d-998ecfd10290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb42391-94d0-4c27-b998-b6906b0d1589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e872ed-6e15-4f3c-8f7b-590af2aecc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37cd35a-4c97-4a95-a6ce-98b83f787b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84d291d-7471-492c-a655-c573ddfb5d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136261f7-bdd9-4c08-af35-3e3706ec3ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70aadb21-47b1-4991-9d4e-b5c099e6de7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf5fabc-c23c-4aba-adb4-2fc9f42ad6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a276ab06-a73a-4f26-a4a3-2874db8b9674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f781fdad-c5c3-427a-9753-c8bd6893544a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb5501a-f870-4005-9630-737052b51ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaec26f0-3dff-4c18-94e6-0657841e0118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b6e9f5-a533-4a14-b049-3bf53aa67661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e2b1b5-f9d2-4979-aa1b-09330eaa19a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9951cfa1-fd86-435b-a213-822b419e7568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2088c4ed-7994-481b-8712-7bcb9927b4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9e11c4-a058-40a3-b045-90e0ba349ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452a3ccf-b10a-4280-84d8-ff5844731a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6e27a9-7ab1-4396-8a9b-f6e9993cf035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503803ce-086e-487c-a119-31cce5c2b7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b85ee52-13b1-43e3-8c00-b36d21558654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f604dd05-f756-4f7d-a511-75ddf6cc0073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2933241-62a8-405c-b6ab-48192619f562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c7863e-105b-4b1c-afc9-618ef91db7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff98208-6fdd-439f-94cc-8c84d69ebbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b831a76-bf3d-4b10-9821-78b9cf17c2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12be849-8a28-47f5-a349-2d217d57558f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f1122c-f5ce-4b5c-9427-e46ce1a93bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc06b1b5-4f13-48a9-99b1-b4919d9ece30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b083229a-adc7-4ca8-bc25-54052634e2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018669ac-f1b7-4c87-b3c0-ce4475214294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8924e60-0293-42a4-86eb-bee28d7df759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f497f0-6fc4-4529-a6c9-f0a633bd0100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517d0791-111e-4ef6-9a08-253fb70ed30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5470e8b0-eb07-470e-a06c-e8ea7acf3b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b1a0c0-43d6-4b3a-839e-991930228a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da21316-182f-4194-8c39-31f16752cf46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d285eadd-0942-4a8b-b163-ae62c175b6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5257ef77-d92b-42a3-8ef6-ba882115796f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42367186-9364-4b70-a6b8-745f8dc81e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3805fe-c2c8-479e-83f5-3108c0174d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0a9e20-cbee-4ae8-b81f-4f9556bbe2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c59b786-429a-45d5-bf76-0c197d92f26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0b373b-c3d9-4ed1-b523-725f038b9381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f53c9a6-de29-4c41-93f4-3e46cef59e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbf63db-16cb-4443-8809-86fe70094301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01230b46-469e-4d7f-bac2-6f909da8e302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677ccf95-b42d-4260-8504-9ffc958d22c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52c56ab-66cf-435c-a7c8-74d230c40f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e8297f-5b91-4e6d-9eda-9a194aaa6568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d1a693-0b9a-4054-81eb-2e06abd85544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04833951-6d4f-474f-960c-8f5976bfd28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab751c41-125f-4d63-8058-088bc397add5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ee7c55-729c-4736-8c25-65c0247194ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0765e415-2c5e-451f-aaed-252484868c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9021c3-1bb8-4a33-beaa-50842c637430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79d07ac-381a-415b-aecb-5a59404a1777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c0da91-355d-49ca-8125-c4c4142cca38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6aeb780-6cea-4d1b-ab08-ae9d642f12c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36360682-48b3-4d79-bcd5-988cb0b33881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bf8434-7b32-401e-b71f-0c84595998a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0295ea-9ab2-4120-a08a-8adb509eea26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9199f773-6bc7-4f37-ba7a-9b653ae03d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ae1c2e-bc8e-4911-aac7-a6c8ad88f8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211bf4e7-225a-4f40-a63e-f6fabebe127d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0309fbc0-d204-438b-8f20-c5558b13b561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9aad5a0-b7d7-4b91-9fdd-20f74289fd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d4b227-3c16-4b60-8826-9830de1c6548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843d5645-0fa4-43af-8b46-ededfc7ed69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a835f717-b726-4011-82f4-0c97a13d86a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4166eba-7dc7-4572-88c0-6a307be4c79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5db706-f2ad-47f4-80e1-ed941910ae7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9d0661-9214-4050-9610-1f80c160e544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7aa347-7f38-477a-b612-2c95270a497b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df76a354-29be-4db8-894d-f62208f841b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c97443-3a41-40d8-b948-a54538214ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac2df8c-e147-487e-8cbe-92f6464565fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db30dd34-3a1a-4e95-84c0-43472456bf2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c56fd3-7002-42bb-8df2-9ad4f624aa48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d00666-1478-4930-9f45-a2820dce4b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a480672a-aaf9-43ca-9981-e4a0c7de7cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b108d5-8fe2-432c-9e2e-872cc3b7a1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd6acc7-b974-4907-931e-540952c2f669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce89f0c-e9ea-41a6-8ff0-eca14d8a9b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8ea496-f9b7-42b8-9be0-d6a8cc6779d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b073c6-4e5c-465e-9fdb-7f0af407821b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632b6f3d-405d-42f6-bad5-754931e3c5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd24fd9-8529-4fbc-84d1-ef499ddf749f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3261c7-0a7c-4cfd-b486-66103d871d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e822a2d-ff2f-47d2-9ca3-2ac7398cb52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e6b823-4ba5-4fd0-92d6-d6e152d9fac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebc9e4b-e63a-4a2a-b060-a3d1a81bf323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbf5c79-ed96-41a1-bb67-18f41ba08571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a73c70f-9173-420f-83e3-5a950848275e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ea97e9-0136-489d-9335-e007e1fb4f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb94dee6-7e4f-4141-9c69-2940dd239c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80709a9-1e27-4911-8afd-b966e9801ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cd5699-5a0c-4fc3-99ed-047693f14342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e79903f-e3a7-4297-b272-261ee9d1f255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deef254-1fe2-4ac0-b265-17bf2a147b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d631a86-2dbc-4ade-8002-6568f4b89417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848ec805-aeab-43c3-a82f-a0797daa9189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d67f169-e117-4d47-a50c-bda72f2be9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e817a3-5f09-4108-ae02-0aa583bd3569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847db4d2-b1b5-4c6f-8fd8-238022ce96e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9bd632-2348-4a05-83fb-90869277f1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f272efd0-5c2e-4ba4-a984-1a8be1f41a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1281d9ea-62b0-45db-9724-b7b431f35feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9647afe8-abeb-4334-9161-b20039c031ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c0abd6-fa1a-4da4-bc25-d796d053639f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17952e28-3a58-49b5-80ac-267a7eda2475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5549c2-63ef-453b-9fb4-caef0481934c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e8142f-258f-4a80-a2c7-34760dbb346a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1702b6-9d06-4572-95e3-9f72e84849c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff23f14-7a4a-4f53-91c0-6de10751d22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d631c6-f123-43d4-b426-a2ded8ac6086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63456dbe-a35b-4b2a-a455-f0507d627692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6ecd67-a64e-4b60-b1d6-72e4d6a925f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c325771e-8250-49b6-a058-e60a38282c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282a553a-c9dc-4843-9af7-d39a0a990ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a293cd5f-2d4d-4718-ba26-1f16c6a531e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cab962-0037-4858-990e-68828dc9eb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ee2c12-794f-418e-b342-7c53aae8ad7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1bebae-1271-4757-a8e3-eeef6bb7d970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23aa33c2-7ace-4c8c-9c1d-eece1067f6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7c9068-b647-4ecc-b2c4-3c73a4d78447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d20686-756b-4891-84f4-c1f99dc29bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2554d4b8-cbaf-47a4-afbf-a7ecc1961b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad8358a-a061-4ae9-b9db-95ee50f6f5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41e6dea-711b-4d5d-a0b7-f49430315d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b89402-b7be-40be-88d3-0d1c9c4730fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503fc6b9-e825-49b3-a764-28ffdaff61be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79057af-3342-45c1-8c6b-0a4b0a406a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae703516-b08f-46e0-ac09-eb0e000be3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09193767-beaa-42f7-8bd8-f2d0bcb1075f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435a60e2-2741-42a1-9b52-6e54cd03278b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a739c97-96ea-4976-8f98-e4b0b5b5b0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8c4f15-dece-424d-8811-887e34b8fd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8af54b0-8104-419c-8f5f-67283c55b6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f990e2-a39d-453b-9f0f-e18164f34f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f0aa08-6128-4fd9-91a1-ea43501a691a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fd3583-4aca-4143-b121-5c0bb12e380b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1e575d-aa3e-4238-954b-4f43f6401c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df0c1cb-6349-4311-a74d-df1a4c8c44c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c15fb4-3218-4aaa-86f5-19a27e2633dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66106b7b-b083-4537-b215-bdbef50ed2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244f0375-e239-473e-a56f-92216d1e7cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ca7181-f79b-4940-8edd-57c1de313be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2e9f71-8fca-4037-acc8-a4b488639f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b6feda-d0f7-48a4-aa0c-22d20fa74aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5f55ab-de5b-4398-8e39-2d4fec22f7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95217dc2-f82e-4874-8db3-3972231c7ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5ee1fe-f3b4-4324-8ebf-cd309ce9189c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14de205e-6076-430a-b061-5b30c4b8b43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f0ce20-f341-4f81-a9ba-4cac8a9e5179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15902fd7-7e5b-4acc-af35-8adf40be318c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f1b404-108b-4402-8e03-e3693a554676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c41562c-4d79-42cb-b7a7-70dda6fcdb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdd84f6-8667-4a72-9e32-c1f66b9ebbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaee838c-93d3-41e2-842b-69e374e2cc56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcf3baf-0ec7-4043-b001-abdf329426cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979199bf-b38e-4a9f-994f-ad610b6f50c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8844b0-4d06-4ba6-9a20-d29e680df433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d582132-5a70-4f37-92d5-e42e8113785a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e68941b-9cb8-4f1d-b227-2716658d748e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e432460f-54e5-49ce-9d84-b13ed3645c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca98e35-92c2-4590-90bb-f0da700ce331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a828e128-65bf-4829-a0ac-6c75e196e485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df508a2-0d92-47f5-8e70-fa1f86bc339a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350eee5c-579b-418e-981b-4f2e7a739bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8322c3c-2b31-4ca6-8ba1-4c9833800379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5c42f0-10bc-402a-b8a3-262f8f5a7e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702e609e-06ff-4ba0-9bf6-785727004068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b10842d-bc00-4fc4-a462-3fd0166d8c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86b1252-8933-4ed8-9eb2-878a91807c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d2bbc0-b1bf-4661-b05d-270021e91147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbab749-5d76-49e3-b2cf-fe419461f0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63c63da-fbdd-4b1d-9279-00901fce81b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd89fc0f-90ae-44c5-82bb-f489fe84111c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b565b92-44f3-4d6e-8656-5b8de12a014f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5123f509-24c9-4955-8008-3c5c64128cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e97ef98-2754-4e0c-b111-231e99a9cd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7aec355-1fe3-493a-b84c-c14bba948a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644119d9-eb46-4b53-a669-ece120b89d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003d1f08-f9ff-4365-b9ed-dbf5950183e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3974866f-71f8-44d4-addd-4f3ceecfa906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd68d0fa-aca6-41b5-87b8-5ce40b9dff1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b2b283-9fd7-4168-9038-3aa8a4d2f325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea56773-8656-4954-84eb-5235fae814a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6c9eb9-f287-41bf-9d6d-825f436e0879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ded1315-888b-4639-9d69-920001d2930e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4225d8-eef0-458e-82ae-8542c3d849d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5782b348-ebc8-4b2e-ae40-dac4c18dc923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac6ec2b-54ea-432b-828f-5913301d19ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1485aa8d-eaac-45ea-aa44-d9a1cf4bb8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db216ccd-ec58-40ec-85b4-1b91f36dcf8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266520f8-c802-455e-8564-7818ea72a81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a87e23f-c1b6-42b5-bb35-33c66c744b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459558bd-490c-402e-a10f-c342bda2011e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87913fed-b915-41d3-b519-91842228750f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6613777d-fc51-4082-b07d-67c647030ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655f10c3-f559-4ec4-a1b5-388dc0eba258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913cc0d8-9524-4eb6-979e-10e5917ced85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e375df8-c337-4cab-935c-b196f0a2e021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d085c88-6370-45c0-9af8-49285ebb9a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3c09f9-f992-41ae-932a-0ec5b0928f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e692e4-cc6f-465f-8931-f1eb6b918ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f284ace-3cdf-4360-897c-116b2f0deb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff9e575-a753-4ff5-a258-ea1088ea6dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2051c6ed-2fe1-4fb0-8314-b6c2fc523fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c1f4f6-0969-4cf8-9a79-7c9061065dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d39b538-bb57-4ae2-9823-f3a526506e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bc5dac-fc75-40ff-9240-897ff68e3528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ddacd7-8ad5-490a-9e36-0c548fab975f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1a2152-43ae-484b-8054-22ceba8e2f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa071b3-c112-4aef-8863-8898d2d3a4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bc0a83-1a3b-4bcb-a314-6ff5b0569163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28c80bf-13f4-46fc-830d-bd4050a1295d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd5531a-c71f-49bc-bec2-17c028792dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c693919-808a-4e0c-ad09-41e2c324075a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e09006-95d9-4ae7-9e51-75e27844c5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfb9d6e-4e1a-4b5d-ba59-1a81f09fcee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282e9f9d-d37b-4e12-a02d-d887d18ac150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3d2290-8075-42b8-aa7c-345c112ca1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf87c589-c1a7-41f2-b0d3-df1046b0b782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7f0da4-be20-447f-b793-135812c81bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6090e8b3-4600-47c2-9c39-a4d8cc2460bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbc1909-ca90-4595-aa89-8833f3636fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376ee223-eb3b-4b2a-ac3c-7e44bc39359e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136e467b-d1a4-4c5a-bfbe-545ee667c676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74dabbc-5567-4dfb-b8cc-642b143779d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78ef0c0-53c9-4a60-a7ca-130698bad1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6a6790-7e0c-45f7-ad59-a525475a493a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84f7e82-6917-4780-94c0-5a3417011ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a757a620-8472-408f-a26c-9f5fda1ea9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013727fa-3244-4b37-8090-c41123b8d24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ee7e2b-2311-4f78-a3f0-4efb427761ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b730d23e-2050-4d59-aa26-da64c73db968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fb598b-ebf7-4546-ab81-a28d7b3ef182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7e06f3-1f40-4827-acf7-f6deb428cb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0a0ccb-701c-41c6-aa7c-65d3e7a4c2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc01a5c-0af8-4301-b9e2-6601bc6c49ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb58b69-ceda-4c77-89aa-88e64108abd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789e8975-2e2a-4882-a543-002c2300d8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf7d9b6-2a77-4045-b328-8f98ff01326d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7e5ede-d56b-4c9f-b0e0-0fb2be9ff87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e6bca4-4895-46b6-ba14-c65bd2031d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad97573f-e0c4-42b7-afe2-19f11f25d154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8531ed2-a8c5-4897-bf62-c99efc64e511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2894274-01d1-473d-9e7b-fa14d54e8772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce8f896-dbae-46cb-a7a4-4a5549f9fbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b363a0-8a4f-41c3-9615-984a24aab61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7078ab03-6827-4270-81d0-65204d4eb4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe17326-1136-4d5e-856f-fa94b9e89d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6198c08b-3cf0-4ceb-a7c6-fbc56881a1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf0c999-a690-4101-8de1-0a4ee37f8b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b92504a-d418-4c3f-b8ef-27eddf7cc477", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.114.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b0dee1-088c-48ad-bae9-2b31e78b6bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.126.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfb7654-2a30-4017-b9f6-86e94e5a87ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.15.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77943f0d-76bb-4d1e-9630-9177e3f86f34", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.164.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10bf2fcb-865e-4856-86e6-b8e767eb4081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.245.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436a8911-4a5e-41d7-8eb6-973400421010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.140.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1248d754-b19f-4d36-b052-7b5846a3ae56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23128dd-c938-4f5c-bc9d-8b02a4fde332", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.234.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba69f61f-e536-44d4-93aa-c42c186e6ea1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.229.242.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934da038-991e-417a-860e-87686e194ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.22.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f267257-1f51-43b1-9a9b-b0e14c232bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.42.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a66d1a-b3d8-488f-9da2-96c2ba984d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.1.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c082e0-b72a-4c80-ac0a-3219ff0743ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.106.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2ed6bc-d498-45ed-95a8-7614d285578e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.146.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b877fe-3a81-40e1-abf2-8ca7736af872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.168.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cc2450-b7b5-4f3b-ad8d-fda666a17046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.205.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90227d1-cf54-4421-8828-5764767096ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.89.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f66ed41-989f-4ce1-a7b1-6669a9cf374b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ad97a4-43fa-486e-b54c-6068283ffdff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.112.133.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daff971f-fe1c-4c34-acda-d75d6889ec25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.112.158.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569e52c6-2c65-4289-a8cd-d6eefe2911ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.129.33.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5d805e-f51a-4825-a4ba-48cf6048fc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.133.69.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4314a88a-aead-446e-be8b-3e73412554c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.69.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6d5a80-b496-428c-a366-74ebc623341c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.139.7.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7df1f29-e904-4877-90ee-03fef915004b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.140.10.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbd740a-058b-46af-8fa9-a578f59828ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.25.16.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0821fe57-08f3-4e48-a42d-e082474f649e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8844181a-b7fa-4bb9-8af8-251ab91da70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c355e052-462e-42c9-932e-261e08816ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6975e3-f1bd-4a97-b21d-0935f656086b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab8223e-a579-4b7f-829c-abbe472c9acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073a8009-c3e1-47a4-ba5b-13d12d2911d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0f1a20-b156-4b2f-b648-3a0d0b837872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2f9b68-2db6-4091-a244-6c2ebad89bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e73d452-05c9-4e8e-ba3a-b8b348468516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060a540c-28b3-422d-b49c-cb21363e752f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a70b489-19f3-4de8-a8d6-42dacc2b08d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcece8c-6318-449f-9d67-e20efec72c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5de6e1-3203-46a4-a704-8b90fa682795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ae7b0f-0be0-4c9c-97c6-da6e10ed9608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f76c1cf-ac24-4d4f-860a-4f1ce18f927b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad83c34-ceba-460f-be4d-dc9a62f3eddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1043e6-fe98-4634-b0e9-074de59053fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ed5106-f771-4885-9ec0-14b71a5f4adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60afc5b7-e162-4110-acbd-357e96a46639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d770b4-e0d7-44c2-abac-66824894bc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21df31a0-dd7e-4662-b9c9-0b7f3107803f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a59b90-2551-4785-9268-8d6bc8ff2298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b2d9a6-247e-4a90-b4b6-ab36a6152cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e5bb77-6cd4-4297-8bda-dbbe35d99f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d95e1f-e338-4f45-badc-e68a2b43b994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08d4f4d-875d-4851-8da9-e40f96fcec9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b78fce-ef1e-4e3c-b5eb-925c10e69fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baba8d76-2729-42aa-8829-af5993525279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaeeb32-c3ad-4260-80a3-42ec726319a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646fb855-c555-40fc-b8b2-fdfa70aa52f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd63ef9-8fcb-4e00-80c2-edfb5fffdd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fa366e-30cd-4c76-ba4e-8b8cd5fadd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e64dd3b-957b-4f87-989e-e00d9040c10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6f4a17-6f02-4b63-8f14-26031ba8a3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c61fa3-ee88-4cca-ba75-27e7c31eca3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7cb886-1d63-4196-8aa6-ccd240e9e6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2882d90a-4b6d-469a-b210-6f97be93ee5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e485422-6f04-4941-8837-a96216b15c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e9ffca-d12b-4dc1-8814-d31c800f2049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169651de-5505-46cf-a199-ce6c37730dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f3434d-0e3f-4953-8c83-179c8e688288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01f363a-c0e5-48cb-9825-c6a4aaf488cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b65ad2-8597-4d60-9133-e8bae83b34be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7425025c-1a29-49eb-b280-431898fd99d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b9389b-e9ce-4db8-b598-be16a1e88b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7828b7cb-a0fb-42ac-be7d-cd28966f8890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e9c5a1-1ee4-46e2-bf6e-f58f596b4bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a6ab0c-eead-47bf-971e-4a2668b3b8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabd0296-2ca1-4e75-97cc-18208bca0a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a29f8f-f2b5-4b3c-8083-2ebddc8c3679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab6ffe9-a1f8-49e5-bc4c-1bc44ea18dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8e79eb-8eca-4662-b9aa-13e58f170fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7443b51-5f2b-4872-981d-0241102e075c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02417b0-f3a8-4285-9f4b-cee4c4677407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d44f4ba-fe2c-4aff-99a5-8bef41060a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c82320f-b739-4880-805b-a1bdc548fb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa30bdf3-0e36-4b07-9b70-ab8f5d5d18e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc545a74-f0ae-4be7-9579-bf376d822df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af7d20b-32a3-4b9b-92b8-8fb6ffbda7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3781fff5-5b58-47d0-93e4-636353f17d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb9acc8-47d0-435d-8608-f7bdfc06a622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0033b6bd-4baf-4571-8ade-96f8b182b51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d7149d-c031-4ac1-ae52-d0b2e3b7e53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d617acad-9056-4047-b40b-924610ee478e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76768cd6-3331-4ef3-8165-4f23ce242ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc942331-7c91-4ebd-87f5-0c9e9b629e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf6eacd-ff6b-435d-90d6-6fec437b3fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bebd90b-594d-484b-b4a4-0afe71a270ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9635094-98a0-40b8-bed7-98f9c9b32dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c69725-e34d-458f-b25b-198587a3fe9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae4e66b-14b7-487e-b5e4-f718b1ab21a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44bea74-6e66-4c1b-b54d-33ed599143ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385c1cad-6148-42c0-b067-643746475aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ca22ce-99d3-441e-b0d5-cf507ca8b3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba5d0a0-22cb-43b2-b972-fede5a9a1cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3a605f-dbea-4a5b-8f2b-b753f9709030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e419991-a8a8-4369-af24-7d0dc8739221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0141b3-ccba-441b-ac94-795a2927a7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b487f518-8386-4cd6-b431-54f24548c305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511568b8-49e9-4263-8387-f9d557e1aef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0763a5a-370a-4200-a863-9a03a2fbb29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a232f0a-7a14-49bf-80cd-ca4cdf0b1710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7e1d8f-924f-4443-acbb-5bfc23652823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5816404e-50d7-4b15-b5f4-7b58264671a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.84.139.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b32beb7-866c-457f-809b-08c3da8c6580", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.92.6.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff8d473-b665-4a2e-97c9-9f0f6c1a2892", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.95.55.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae63d34-125a-4216-8566-82d7f341e41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.104.113.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5961ff96-9349-4945-9105-167b05a089a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.123.193.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82bc0c5-1f93-49e2-9ef9-f7dcad4866b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.186.120.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7040468-d3a6-4935-a22c-bb885a8f0f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.212.197.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e96b82f-1a7e-40fc-bd51-dd331770c4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.239.129.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec473702-7c40-4745-9df7-a72a84114788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.7.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bdf209-b771-4e1c-98cb-7ea4897a9e38", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.41.162.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f17e1d8-a387-42b8-a648-3dbc4003b248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.52.31.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed386c2d-4924-4aab-a2a5-d3c2ef3787ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.59.115.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b767f7b4-885f-4b47-be46-942e747fce4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.49.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20166dac-7d11-4699-a770-443318edcc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.12.31.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d611419-5340-4e59-b8b5-a28b6ab4998e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.123.48.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fdeeed-a266-4440-95ef-6ce814bc5846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.124.168.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77b3a4d-fe41-4480-83ff-42096905019e", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.133.213.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb55160-ad8f-4a70-907a-18feab48436f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.137.178.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b206971b-0797-4748-b177-71029e4b2fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.156.13.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35827935-7ee6-4595-9ed6-e6b2b5d2545e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.156.88.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b152839-4a47-48f3-ad0f-6220a618284d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.159.49.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a093c8-2be5-4e44-b42a-54e309247151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.124.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d8cb62-2d9d-4940-b290-3b091d7ddb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1d103d-778f-4256-8e24-bdc4813856cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42a87c2-9a2f-4bc9-8d4e-a61a30512978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc070dfc-9dcd-4a56-80fe-02e9f5b40cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e73897-258f-4873-84b2-6086e0c8f381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4102ed49-41e2-454f-8165-1b644d056ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee51d1a5-5c44-4ea0-a8c8-ac3f8b0c3afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278e23fb-46ee-4fe8-8dc4-8b96f60d7a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564d33b2-d359-41eb-bf07-36b90c42ece0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcd833d-e1f2-4d40-a113-0dd69a8870c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5af8a9-5d86-4542-91f9-e892cfd7d686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87753649-6e16-4c1c-8b17-d885bbff103c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d03d69-e8e6-4936-9176-990ab4e51503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.77.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f155fb6-5ed6-4ad6-8219-05ec84780a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.191.161.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9873dd-da88-4816-a890-dc75e88ec9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.196.86.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2686e491-2565-4a3a-8b35-a7cdb37b3570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.248.132.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f159ae58-06ed-41c2-b4a7-3760f6ae6089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.252.110.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f63521c-7b87-4be6-a0f3-72114cdcf1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.3.195.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10b0e5d-71c9-400a-9bb0-64d3df566094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.41.42.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443a20da-d87f-4a37-bc5d-387e0eb40c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.43.244.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edaaa5db-5ca6-4798-81e9-f17c3d2e70ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.49.150.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50512f4f-0657-49d1-a390-d33b4e117bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.51.214.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fcfe57-1f6e-415d-8f21-f057491a18d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.51.215.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7a77f1-fd76-493c-8973-e26a830c5d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.61.238.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a7895c-ecaf-4ac8-904d-1c6f6be8f590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8e9687-1c7a-4259-88d6-5afff4761a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac3d986-e09c-4e00-9307-fed165696f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.157.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b93bd9-d1bb-44dd-8d90-2ca39f4790b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.108.0.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c211ce1b-dc32-4d36-bf0f-8af06f9ccb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.153.252.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3db73a-e52f-4634-bb25-627dba731857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.34.84.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89145dcd-be39-4658-933a-fbbad8f552ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.46.245.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53387b4d-ee04-4587-a645-ad2a413ca181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.49.137.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbd6501-2c65-45a3-b584-41234d950c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.64.108.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4484579f-cd25-4c02-ac9f-72f7eb556112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.99.212.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ff9c7c-5b51-43ac-81ef-92cf7267d81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.190.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98488b87-46bc-4879-825b-c426c8704d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.184.246.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c25f577-4d3d-4a4b-a3d7-48c11c3962d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.193.121.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0956d386-fa91-43ce-ac1d-1e00b7ffa0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36af35d-b11a-45d8-99a7-8752b801649d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89d219c-8ac4-4ca6-9d8a-f6af892cb66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233a745c-4ee8-4eab-8a0b-d299c3557acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.234.194.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2536ba4-e91e-406c-a14e-1f1f2b294a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ed6e72-6ab8-442a-bcb2-ce463c97eeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796cbe55-fc24-4717-9bde-929c1749c135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf11eb8d-207c-4208-a35e-4b75808e127d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de1d0af-dad0-422f-a9f6-ba9bc0a8436e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.119.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3398b241-9ff0-4580-a2b3-1fa4a026763f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d35d15-d729-4d6f-9935-ef1cf58b2042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.169.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedfb922-63f6-4c2f-b5d6-a66f1dd7ae08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab15f07-22c7-4a01-ae27-e78561d65eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334b44b9-b97c-40f6-850a-eb1ca88d7e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fa08f8-ca50-4ad3-8b01-e0a4061a6ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f48190-1c2f-4c44-8144-1cc420761a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3845f16-4f5c-4c40-b13a-6342cf1a91ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4691412b-bc38-4ff9-914c-851fae6528ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e4b3d4-07a7-4512-b670-6631de5aa9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b692f76-9336-44bc-8af1-0e7e949ad640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75845293-e6f4-4cb6-812c-d75cd5fc58c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4d4623-e0e4-4385-ac50-88e8fc1e499a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58a7a83-74be-4851-80f7-d31297a0c3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9640981a-cf4b-49c8-b4b7-ef39aade9814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc261343-0d39-4961-92d9-3b6bdf8f3d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43aa7221-86ad-43db-aff6-8b5f6368e5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c044ba-6596-4de2-98b2-baf428e2c852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49543622-c696-4532-9f48-8b67efa58081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d809364-b86d-4a3c-a0cb-4a5d27c0f330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5678c5-ef9a-4516-848c-949ef72130e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4b9f85-cea5-4031-99e7-b26ade3e45c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b58ccdf-0877-4cb0-9745-843f8d7e049f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4848aa1-d12e-4073-ad94-bee58ca8054b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764ee4f9-bff2-406e-9036-4c9cb9efcfc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633c062a-7b56-4b2e-bb77-0a192d172dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c80f165-55a5-431d-a06d-5b38cdb6aaee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc7759a-bc55-4f0a-857d-f5aa85076cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a91143-bb31-4aa0-9ff6-0527855254ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.117.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369b9d7f-6a30-40b9-ac10-374d94538a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8c8a19-b773-4d85-832f-bd55a5c20994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.137.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f75dd0-bd74-48f5-a472-480673be16f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac4dfc7-5307-4b06-aab5-b6ee0c17f2c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bc1130-6e34-4c12-8848-757a61c865b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece8ba47-4415-48b8-8062-a5ddc561ae19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5e0f8c-f432-4170-9086-ed7f84f98885", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddc3e03-8d70-4fd5-85c3-1d69a3856404", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2174ef4-e9bf-4f66-855d-e20c4f54f885", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79d2504-cf1b-4bbb-8df3-6c7b86dcd9d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e1f114-665f-4070-9807-7c7fb4955ae8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138b858c-01bf-47d6-9567-dcb23d8f8d22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d07d24-25d6-4cc5-80ac-bbfb2b93e728", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7917cc14-66bd-4fb0-bb57-a7c1f8af9b3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802e2cc9-0130-4776-a2fd-fab1de596182", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341cb6ce-c521-498b-9b4e-ea2587d066e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89de6152-ff56-446c-a203-51b6ec4899d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f067b638-3736-4772-a0ec-371c1930f652", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68074da1-b9fb-43eb-8a9e-02c1186a1421", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbba2343-ccb0-4836-8305-162497a81418", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533d8fe3-f3ed-4a26-b683-5df360d29c1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8592524-1d3a-4e78-a025-87d65223bcbd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21c2431-6b32-479f-8976-eaec18493280", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a17332-74ff-4170-be51-7181a7c62771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.200.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08481a3-df0c-4846-a1ed-6979ded8af7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.83.182.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd39f25c-9543-4efd-89ae-aefbe9de0e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.234.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04194893-842f-4e17-9d1c-8e46f0cedc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.250.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab3f490-0367-4e02-83e1-da4aac0901fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.116.55.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f21b375-612f-4dce-a976-c117c9d95a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.158.113.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbc0ca7-b695-42e2-898f-c07d0c50fcaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.162.56.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc3f2f1-9cf4-4fdc-af94-cc760e333bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.173.31.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a190052-6667-4315-bd2a-97eb8d12bdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.209.53.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349f6491-d204-449d-a18f-d18a8af29137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.214.63.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2709331c-4242-402e-97c2-4edf7ec200e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.249.124.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d47cba2-61d7-4e8e-af77-36702dca9850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.251.52.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddf3a20-14db-49dc-bc95-1821f1d313a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.38.14.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc06098-dfe1-4c3e-807c-7b60a7158fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.38.217.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6560f637-8035-4dd4-9869-59eca4b6e89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.75.114.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd374e12-ee48-4145-b037-699fba190cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.75.72.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b630ea-6180-403a-9c86-f24f305d8867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.82.123.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fcfb04-8203-4a39-8d25-7efdea7c980a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.82.81.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c00087-6c39-4726-b359-60f9b1d4b363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.90.188.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46db685-d53e-43e6-a0d5-b928b2745896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.93.28.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e742ee-40d1-44cb-a074-49b7118d06b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.93.28.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad7ebff-d8fb-4a15-a964-53db8e559566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.113.219.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e36955a-0410-48fa-8a8a-91fe38205515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.114.41.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4a94bc-d594-441c-af23-50dffbe202f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.118.186.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab149a84-7bb5-40fc-ada3-d14d876c3d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.83.147.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447fa3f5-2f22-44d8-94bd-0cc16a4b7b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.156.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bc3905-6e81-468d-920c-3f3e930bfe16", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.69.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18499223-9c15-4eac-abe8-d7cac5613883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.87.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dc3569-a449-47f7-9935-004588ec040b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.89.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7d183d-6ffb-466d-bf15-757ff191f9fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.57.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fd9eaa-77b1-4e9f-b10b-b3c744c74db2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.51.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9c42f9-cb6d-4b7c-be32-d0e551625f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.235.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40df320f-7452-43c3-8c47-d3a03a484b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.14.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed04581d-2532-47a9-8258-6d77c6b1db15", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.91.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e995bc8d-135b-4fce-bb5e-732abe805626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.41.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861fa279-f0ba-47cd-a097-19af8d2f2d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.36.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34989ff1-a7fb-40ef-96fe-bdc49f332087", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.68.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bfe816-0f13-450b-ba29-598268a4c6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.104.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf45465-3417-46a3-a5a9-00bbe632d11c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.123.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b862cc0-23f3-40ef-9b92-8232bbaa901a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.127.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f70714f-8b24-433a-b4a6-4b8d07a2827c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.162.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff83676-28f5-4243-9cde-842e3970ebb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.21.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900bc0a2-7796-43ce-9e48-58e43636f117", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.125.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5277e765-265e-46a4-9176-7478d7307eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.249.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27daff32-2b0a-44a3-934d-d3449d5ce295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.44.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19970328-635f-4c2f-87e6-252bdc94c3b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.50.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2d7fa3-fb54-4672-b0d7-d36573e4984a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.153.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3613e92c-716e-4e68-8cf2-856cd0ee703c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0170fcd3-5def-479e-a9be-cad020faa78c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.191.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ebf80b-415c-4566-8f59-5cc8a30fa4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.95.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73caf9ea-e30e-4072-8471-1a42550bd0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.140.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96289de-d731-43d3-9328-adc92347dbc5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.57.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7d4f6d-fb9d-4156-ba21-ab64a18fc26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.63.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72875598-bf63-4c09-8b3a-b9b96679e084", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.0.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe5d8b2-8b93-427e-909b-cae1d65d49c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.190.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0712d119-9c1f-401b-b6d9-f35aa9e9e329", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.186.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968f4b47-15cc-4cca-b0c0-4f42afaa6db7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.4.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601da801-6541-4bdb-b866-527fa8507ebd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.1.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51815a8-b9f6-4339-a58f-9975aca7ada8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.226.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50035ffe-9591-4597-8d09-12fd982f5343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.244.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520e6b5c-7bc7-4ecb-a77b-f8cc0177835f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.7.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa61cdc-fe0d-472c-9ff3-6d0768020c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.198.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e84227-9635-46eb-9363-d1ef6fc82edd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaab53b2-8543-42cd-b5d5-87e777131d7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6300c59-158a-4ba1-8343-11741f91515f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b839ef9-7e5c-4ab3-a4ce-57df7f02351a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749f1e98-f89e-4ba8-b42d-f57591eb71c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44705bf8-3805-496f-9afd-087548682df4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21403348-f35b-4043-9064-36de28d8df74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9064dc-c7d1-4c3e-8ca4-3716ec22a359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cad375a-4704-43ed-9e89-518bb6034113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c200c465-f3f0-4c2b-8df5-2c81173fc4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f3cc26-bee6-499e-961c-86f1791ced30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee43d4f-c5ac-468b-8d8b-888c0511a64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee1acd3-57a3-4378-88b9-769dab10d4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e765c080-9391-48c3-b0d5-65a077cfe841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcf79e4-599b-43ef-a780-bd2ab5484ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873c65ed-abf6-44c6-b41f-bed66fcfd1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b5cc92-248c-434d-b515-c901910fe4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051644f3-2b7e-4065-9a00-2cf7cb8be1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb2bb26-6772-473e-a71d-e3a4e08eedc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8d82ce-1854-44a9-9ee8-98414f39040b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788385c2-f652-4324-8784-19ae790a5825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64710ccf-644b-4ccd-9dca-c6fd070b0a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4673ebd6-8bd8-4375-8545-b39cb8a86a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31aa7f2d-6024-444c-aa4c-d9b86e34f974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f9f537-9dab-4e48-a399-f700508711c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2955934b-9a77-4e3a-ad9f-44b0723186e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33528d25-fcfc-429e-9dd2-205997c18a58", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0446c93c-e445-49f2-bbf2-5d8d408afc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5a942b-5d72-4182-a944-b179382b9775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3cf804-cc7f-47ce-b5b9-4942953b489b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00172425-9273-4f55-8ff1-791a8ba4ac35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2c934b-5377-4263-8dc2-e0b90838eef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bba20a-787d-4227-96cf-6a2c5feff0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b046251d-52d1-4caa-9b9a-c12bb12dfc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827694af-beff-4bf9-8f5c-2fe4aeda5693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25c91e4-844f-4f08-8b18-599474b1e168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed271f96-f621-4ba8-9125-58393d3e906a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74f6f3b-b2cc-43a4-9535-fdf46e096d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7353e2a-d129-4755-bbae-3201b5d914cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a90464b-19e4-4fb7-8b76-814ae830d685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5bb486-aa0a-4729-8ab2-218430bae522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00728114-6084-445a-8696-8c0a2d1d2807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262794fb-f546-4230-a3c9-a51c6fd704a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366ead00-7791-4d3a-95b5-8ea0400269b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db87f3cc-947e-4d8d-af6e-f00c164ea71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0d6de9-8881-4344-9d7f-2a8419feaeeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf7a104-8068-4f75-af57-86e558ed12f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88010487-0609-48c6-9f62-57d83133141e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0677f65-aa0b-4e98-beff-1c72f5967254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7cf6e3-1333-460b-b305-de0766ce914f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1ea2ca-c17e-4750-868c-5b8025dad023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d393962-f948-4096-8860-f8dea408e020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00425783-5d6b-4bf8-a51d-12d4296801f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f253b34-30fb-469c-a0a9-513f5b1527db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37306dd0-d440-4c79-a0c7-a1220bdc9e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be805a9-55ae-44ec-b187-08e2a5671d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2bd6b6-5080-42b4-b603-ff79734c2359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af929cfd-2a0f-4fb3-ab81-0911db899a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30c5044-4f9c-4841-8578-b098a7cc0464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837c3135-4aa0-4801-82d5-f6333ffbaff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8ba021-a5ce-41ee-8eac-75e2a155cda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd8eb88-5b4c-48c2-b391-e867a1874ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79278299-cf37-4c30-b448-df36bf7386a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c74fa7-fbe1-4da1-9455-008a5c9b5c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5546ae1a-081b-4c6a-9915-ac4448c23606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66474823-7597-46b0-b4f9-35904745b758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ce60e7-6616-4642-97cc-47213c299e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42f8c7f-9e2b-4914-965f-2c409e20655e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c3058b-bf14-4498-a0c6-aa607441f5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f5e4b4-d950-46d7-9df6-e2835dcca6cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1cf4a4-7b72-4056-a5dd-4d5efe48b6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3593cb2e-1447-444b-9bc9-b456f5818621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c194a82-2cc6-4396-bad5-d1f2decf825d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6b02e4-1176-4fa3-9f5c-98a97502f4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bcf184-4c0c-4a8e-ac12-f052f9913adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff07c66-a379-416d-80b6-beb9a31d1f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f6b359-719d-4c31-a91e-17437211ea25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe4a956-a31c-4c5c-9d40-ecae991f07bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81ad13c-2623-43a9-8e68-c732a067623f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592a5db8-0780-47c0-8025-3859c46b9423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f51169-df2e-4d4d-807e-2641f66b1364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a00c0b0-b0b1-4aac-b755-5b012bf00d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f08172-a595-42ea-954f-88351436ba25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bed311a-a41f-44f0-95f3-3857d86c73b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee94671-2034-430a-9f19-d6835cb706cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.229.90.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f42dd3-50ea-43de-b5b7-f934d1c78e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.230.93.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4398a9b7-3049-495b-b01c-d81ce18ce708", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.55.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b10e6d0-b303-4e5a-b6aa-825c41de8843", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.246.208.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a257dcd-ba7a-4537-b256-39bc9b4deb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.212.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3727a7e-19ef-40a6-af8f-4a5e3b5875af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.13.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2ec3d6-7398-49ea-8ec2-da0e6a9929ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.192.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9d859e-150f-4e19-a44d-023435143372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.208.162.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6df83f-3c9b-428a-9e63-de0f29c3f5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.45.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60823c37-387d-4799-950e-018861f66dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6466af-4c0f-4cb3-befa-ec9b5e0b8ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5b70f3-2598-4716-a9da-005deba1b391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12976ebd-c344-46ca-9b80-d94fc9cc7423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.233.21.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51b3288-216a-42da-bbc2-29c88cc09609", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.246.243.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c463d2-43e6-477a-a18b-e2d5b9e3efc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.10.165.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9019ea-2c4d-4922-8bec-9dd88900377b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1a74b8-bc0e-4e4a-b21e-2ce30496fdc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.58.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213dc546-e823-4046-8452-4cf8ccd20bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.114.58.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f3d1a4-5e49-4cc9-b38a-b0d318164b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.12.132.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f233be28-31cd-48cc-a521-38a059eaefbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.194.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfb82dc-98ed-4d1f-a7d4-93c5fd6ecc1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.194.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2beff7dc-a581-4071-ac1e-b3b03b1e2412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5185e75c-cb35-4a01-b795-39d14e9650e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.140.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b3be26-ebac-4420-8172-84e65b729d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.79.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41752bb1-522e-4095-abc9-a49b5d5a878a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdf354a-d990-4e0c-a6a7-bfee88966315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8267fa-3c38-4c44-af88-45cf3ae28cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b13eb61-0830-4b9a-9c00-00ae2cfb0b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4996f0-a9f2-4124-8d1a-0a7d46781dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6aa15fa-20bb-49d5-9df5-15b495a937ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.122.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21d34b0e-e15c-4fa4-8f66-b8b67c1d78dc", "relationship_type": "indicates", "source_ref": "indicator--b6aa15fa-20bb-49d5-9df5-15b495a937ba", "target_ref": "vulnerability--382dbc2e-4941-47f5-8e36-f24ec3e8e262", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568f8ed4-522c-4d8c-9233-3537eee06873", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.140.25.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944be0ea-62d5-462e-b42e-fb6499ee9337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.140.46.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92d10e6-c1b7-40c0-bda1-49e6dd1a509e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af218c71-99ff-429f-889a-2f371c8d8257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753f6000-4b3f-46ed-98a3-401000983121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.0.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60a03ef-a41a-409f-90c1-ad73d693567f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007cb26d-6bfb-4fb2-b3cd-a315197f4ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c16593-9fb1-49dd-82ae-4c77f38d0b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f517872-462d-41db-b35c-8925128399a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3c8770-0c71-4442-b4a2-696e97bd2f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb18a229-3ca7-4575-a89c-abaccffb6550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009772ca-3696-4db3-92f9-41d926789abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f67e8e9-558b-4863-b091-9f53b960fd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb6bb43-f66e-49fa-8aa0-6b711bc4dc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27544ec8-573c-4d3d-9510-3a1e283f3c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5c06a3-86db-419a-b158-874ec9dc1f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cd59b2-5d33-46cf-809a-7d8fb7802818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a26e5a-a048-4414-9a61-8b5be4fc9c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f46ea55-5de3-47b5-bd33-be5269621ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7fa5a6-a704-474d-af1c-f7d5aea8abe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabcf98b-a46e-4ab7-9380-42adc7204121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7eeaae-55c5-4cb4-827a-735a9492c9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecdb59e-af87-4239-a10b-af57f408d1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5004e8a-7535-46b4-a7dd-3d5847e06be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca85677e-d12e-44ce-ae22-c42de78f850e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9af6ede-6011-444a-830c-507b87ec6edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3142473c-0db3-4cea-ace2-e3b838e0e8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6e29b4-d64b-4112-84b4-a8f076a1182b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faad6a4c-73ef-475c-a2b4-b069283b4a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5200992e-32c3-4830-9847-2045d97b697e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e270a4b1-f4e7-486f-98c1-b7c67399c171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b021619e-de07-40b0-8826-01ed54036568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62492db9-b971-4716-84e6-332d483a2ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5aeb7f-1a50-4cc1-80e1-7beb298e8f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.3.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e6891c-9ff9-43ac-80ec-06e48e658eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.31.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0141c1-324e-44f9-b4bf-02b496daa479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.212.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1795ff-ba31-4fdd-97d3-fd8a1a5415da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.212.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44af3140-b237-4863-8d9e-5782830e79a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4100484-e33d-4255-8906-4791a0b189a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38af8ef5-a580-4aa1-8d3b-601cce60cae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c26ec9-5426-4663-8d13-9b5fbf7289d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bb267a-4b12-4536-966d-f6d55fc32845", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5f60fc-966f-47f7-b7c9-454cd554468a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7874992d-1705-4e32-af05-34d608c5f0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c78e93-40a1-40f4-8e1c-fafdcbc186d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb28dc7e-4595-4625-96b0-813a9cf84abb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb21f0f-a3ee-4f0c-86eb-b386a20225bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab6af4b-4991-4b23-86f8-215fc9da97d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdb043b-109e-4b60-a10a-10d572853e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d3a224-b890-4338-8809-cf8a8ff7b65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03284073-8c49-4a25-a76b-67215eff64f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2066385d-ead4-4dc8-8acf-e21b6aee2338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2744c7a7-90d8-4e48-b0a2-69fdd51dadfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c51ecd5-c6d6-4e1a-aebb-dde122315476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf3c051-1c08-4d24-81cb-a4a39d82220b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429e61e4-6fe4-468b-b535-bbc57c3733c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.145.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0634fc23-4190-41f5-bd63-614f8aa38354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06908f3-e466-4e90-8faf-a44efcd7a101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.147.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710ebea0-822c-4b08-b03d-ee6de5de35cf", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.9.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3800cf40-7bd7-45fd-b1bc-c670cfa3e846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5cfd86-5f79-435e-a5f7-1611c2940ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ec22b4-c54f-407e-bcea-a9ae3ceeeef8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.98.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c8a834-dd8d-4749-881c-b312177582fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44527f5c-066a-4d70-a556-d9562403fe81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c03273-64cc-4d3d-bf97-53711ff4b2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2497ddf6-54e9-4609-977d-941d7541d42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084bc153-07c5-44ae-bc89-246eb8ece6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4691502e-636f-4206-9757-d4cf93106535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b06f23-53c2-4f80-989b-172d6e873787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18319ff9-c7d4-414f-8c13-eac8e7c89cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7033a3-f5f4-423c-ab52-4987051c6ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790ee18c-4afd-43f3-85ed-06d51a89cf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38eb4695-3bf2-43bb-8eb1-28b9ec7f3bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5964fd2-c4ff-4176-ae30-653c65c861dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8f6a7d-cd31-4198-8516-3423180a0aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee37e7ea-6df8-4f9e-84f0-4f937ed2fb4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b365a912-d7f1-4a3e-89cf-d44ee1ed3d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67bdb47-bbf5-4a6f-9cb6-ab51f91a7acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a445249f-586a-4dbf-9a61-bbf91b410c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d985ecd-db92-4dd8-bc5e-823be2374d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf102eb-67d4-400a-8435-06448ac2afb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8609906-dce6-4fb0-8f15-4925ada1e321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf393fef-25b9-4004-8d54-11ed6dafaa74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bca2d5-ea65-42cd-a9e4-3c5231139118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa66a55-a52f-40bd-9c1c-9145cbf782e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721d2ec3-ab6d-4ea9-846e-4d2a4794df29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5487fe48-6e17-4adc-ad72-80088d3c33ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c695a4-7895-4d36-90b2-72a36635f15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2d3d3c-1b19-41df-ae8f-a60073b1896f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a19aae-535a-458c-82ed-e84255c3860d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099cca12-103e-40d8-8d58-8f86cf7a4ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b88959-49c0-4d97-ac96-dcf72d33ad91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aea36b3-9df5-46d6-873e-b7deb5e29ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fdd604-ceaf-495a-a7e6-59c4fe2307e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bb946e-e04b-4df6-b74c-b17fc5f408fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013e2b97-e166-4e20-b11b-c2f1533c2403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1e8b88-06f5-466e-ba1f-ceb1f8d34b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bef7589-d530-4606-b4d9-b640f3acf64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa18323-fa7b-4b82-91cd-2fa26e6da486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67928fb0-9d06-4eca-980b-23a3f7e4d586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9870559-779d-41fd-877b-cd311ec54b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7340cba3-ece1-4565-adad-e140d0f4bbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4224323c-68b9-41b2-8102-cbbeb38dd179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143a606a-af11-48c3-895a-70533cc9dbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1022873f-4260-4618-b882-7e63ef08ca60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.96']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d8239e-6db5-4c9b-86a1-876c3fc3b3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.223.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9cf4ba-1843-4b54-b7e3-9ab51cde4dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e78fa75-3453-475f-9fd9-c007c3e72875", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abc58bd-26ef-47e8-aaa9-cfde3e0ea917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb71a28-dc6d-4820-9fbc-3e7de0b579a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7872d894-4efb-48d2-a5d1-59a180435b09", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f598cd16-b621-4cdf-bc5e-80e12aba0d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f81444-bf51-4733-9771-ad2889f300e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.161.2.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e4b107-7998-4e27-ad1d-6d51ebc00508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.167.184.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f92f6e-c82c-4ac9-8d26-e96def37de9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.168.113.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8385345e-0c6a-46ee-9e1e-59df9267451c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.169.89.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b59f46d-0630-4402-b31e-2d3794221f53", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.171.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90d3b87-b8f0-4b19-9249-0d2986196d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.173.217.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f00468-b435-4e77-b473-dc1da25a3a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.162.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9909972c-77d7-44a7-8639-53d49e3ca06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.142.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d82700-49d2-4c5c-9018-2cb0c29cc998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.176.106.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06dbe01-7eff-4b77-ae6d-e8d4862d17d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.176.93.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218de6d1-3fad-4307-b7db-7c0d93a21ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.177.144.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a812021-1ead-4873-8b01-31e7a9e4190f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.177.29.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f068fa-631e-43c2-afd4-c6b925dbede6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.178.44.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76757ea5-d9a2-471a-b76a-ae04b22f38a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.35.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01dbd01-e6e8-484c-8709-72eafa67cfc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.45.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac0dbd3-f8bc-47cb-abdb-782518d1dfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.183.86.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80475175-3404-4d77-8d3d-5e962b5b9141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.184.77.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbd7ff8-4536-4541-badc-a96709279ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.113.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c728e164-6711-4802-9999-1de7bc8f9891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.187.235.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788f3a39-c3b2-4c6e-8acf-1a48118c33ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.187.80.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d935b965-e4f7-4a3c-b71b-7345bf2d5883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.188.236.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a302e8bd-0648-4469-b1ff-5a19202d642e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.189.217.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1779a610-b9e2-4a35-a36b-484910564296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.190.184.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af0e3eb-acf8-4f0e-ae2e-8df55252ab7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.190.95.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696800f2-8a81-4ea2-8338-0afd25c74512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.184.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1848d92e-5452-4227-8bfb-68b6c3fea0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2697b574-0ff8-42ef-8062-553f83f64e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f23c71-25ad-4e08-bd39-df890a217775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.196.222.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a12239b-8536-486c-92d0-188ff523d279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.196.233.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6b837e-d4ea-44fc-8785-0abe17652937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2c2c71-a963-4138-aa63-d9472f362af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.201.216.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c164fcc-7bc6-4399-920d-51025a668447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.202.247.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11feb8bc-50d9-44d6-9f0d-951022b9f775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1db8ea-821f-4559-bdb0-488e91d6aa9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d9f02c-e6e6-4aa1-8d4b-f687e30511d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c36a95-70bc-4eb1-96b8-3f00eb1682dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0711f351-214f-4619-8c21-604698616fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02cfd6b-04db-4b0c-8384-2c7d52cdbce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a3e845-59fa-4fa8-bffb-f024da07f135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.207.34.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4f67de-2f46-4930-8443-be8805cfaacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.190.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3040f1-8142-468f-b399-ee10b6aa4675", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7150e84-7e0c-4cdc-bab3-6ee85e375a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f3f695-ca90-47ca-a23d-e2680818ea97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.229.38.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b351e50f-77bd-4d79-a173-72718393e323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.231.224.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d0d2ad-d15b-43d6-bcae-7a5fca1febbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.40.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc066f7a-d249-4342-bf67-7f181ac8a5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.103.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2682262-07ec-46d2-97f7-8ce1a6b80b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.103.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdefb872-a68b-4409-8e1e-a430e3e1bd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf835676-5b87-4095-b74d-c47d8c8383c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb871128-6ecc-45a8-96bd-e59e37d73667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3e6745-f377-4cd0-8a42-1fb5e58e3d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c0ba05-c6fc-45e0-b6d5-4269304995ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5bb419-e8f9-41cf-919d-9655eb90a947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29dde7dd-1244-4dac-8386-4a650148b944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.114.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09267f2-3227-47d2-9af1-21e3ff52efd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3aa26c4-64d3-4ca3-ae0d-dd9367a07934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f491d0af-8b83-4752-bd54-221357d9bb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c57c2e-14d2-460d-9c73-850622b307fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1cc5a1-ba9a-4b43-a1f4-eaaafa7b70ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.16.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22d0740-0eb7-4369-b9dc-2427a680d062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5523f345-846e-4333-b85b-532a9b7a64d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff88eff-a313-4fae-aa95-8d8435e5a95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166433c5-8c1d-413c-aa05-fae906a6c7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edac9999-b52a-4a8e-b27e-93f922bd905a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.60.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddbccd8-fd93-4bfc-9ed9-7ebb8efe052d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa2bf09-1954-4649-85ef-2f9f4bcad15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.80.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea48d438-22eb-41e9-925d-7e9ada0f7286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f98bbf-e49d-4928-81da-0b0db3e71a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.86.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48327789-7907-4eba-8a9c-9577c71e8e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.86.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba74d06-b774-4a0a-a6b8-e24ea853b94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1fa106-802c-4182-872d-43375d0755d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1d6029-ca16-4951-88ef-f0c12acbf3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba7db54-d0a7-40df-bfc9-0337e5b65347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc9ec14-38a8-4b5b-bc13-a2e63afe9b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b6fb20-7646-4d69-8c68-75a862afadb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d486cd-6b5b-44b8-98fb-e9921ae6fe6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.45.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabb87cf-b3b1-44e2-969b-33cd06e20a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f1c91c-79b9-48cd-b46b-da98a2cc9824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa0351e-a5b6-4e8b-9da1-7b1d302edcf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050b7fcf-0e9b-41f4-80ee-3eaae80f06d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7972a91f-c62b-4c72-b3ad-04da04701ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4690f0d9-4462-4897-9d63-d1de29dbd66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad0c2ae-667f-424c-8409-c628f41243c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08f4ce6-e569-41c6-86eb-bee029769bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a69146a-0ba4-47ff-b2f0-a183e952e066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.230.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abab0ec5-7b7c-470e-80a0-2ba6dc66a4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.33.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358f503a-2bc2-406c-bea0-72438106fcdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.93.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb3eccf-870f-4def-a594-6b2cac27f60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5d1d71-aefe-4302-b656-b779f144a8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d582e24-ed57-464c-8a8a-f52aa3b4312a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.82.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a145306-4e1f-4d77-9713-56310bcd428e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b637f6f4-ea58-4165-85fe-b23f50abec5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c6bb01-660e-42bc-9c79-fbcae45ca8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d418c0d9-98b5-46ac-b3ef-0d06880fcaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb74ab9e-febd-4ab4-a6e2-aae56b5f7aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ae76e5-cadd-42a7-9b53-c38d69bb4145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.65.219.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af30bc6-41db-4613-a312-49fea0f4e3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.70.189.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3f5dda-9d04-4e6a-ba32-0111047ab64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.244.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e499221-330d-4700-8bdd-a6ab16ab4353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.237.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea92d23-eb78-45f1-a542-9a447e330fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.198.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fa46af-5ad6-42fc-b1c9-e1cf41ba1fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07359642-f0e3-4771-aafc-702498a5643d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906a10c4-d8b9-48a4-a3cc-3b13c868c99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4eb7d0d-5caa-424b-84a9-41e5b9eae946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b2d592-b668-4975-8461-90385107897e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce9ae9c-7ddf-4566-ace2-9cbb46dbfc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e2fdef-9d36-43be-8341-2911176a07b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fefc46-6187-4a78-91a4-8d784273911b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310cb432-3904-4a2d-9a09-3218a3e29122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b000411d-680c-4c4e-8907-ab4a7f3e876d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d37d8f9-2926-4450-b1d6-3cd057d923c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c477c9fd-526b-42c6-93dc-2bf13063903e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a14a877-ac91-48cb-acc6-b11e09c2d460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb296a4b-4510-49a7-8767-144912e1074f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23929b1-f463-423b-8b2a-b3e023f546fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316be0e0-1b3b-4dc6-abd4-28ea36138294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d04ea0-98c6-4527-b669-8fe7b38abf44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e1a2d9-cfd6-4b7a-83a0-851d1bc9ebd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548be442-e456-49a1-be1c-2f99f8826814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cacb901-67a7-485b-9088-38cd38039e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ae20e4-2547-4164-8872-f4b8024c1a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdaa176d-f3e9-4e22-a466-b60b9e7c3f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbd4fb2-fe29-4bcf-9dad-e649003e8a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbf8fce-ff7b-4081-a3ee-23529f2e37f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec0d06d-40ef-41d2-b0a8-ca522f9a232a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f92433c-3950-4d7b-87fc-90b654d12f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf97bb8-382a-4b72-b84e-fae97ec87e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcf6395-eb92-45c3-883f-c794fe2c3906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cdd4d8-bf30-4296-8db4-8428eb72f2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f83650-bf34-4a27-b974-b1ef6c8da192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923e16dc-9d72-4f3f-93fb-ed620cf7207b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399a9093-38dd-4ef2-bfb7-e6f8c1f41963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.224.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f855550-5550-4b0c-9edb-1b1c455358b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74f2344-7d02-4592-ad52-1ce9d87f8bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0237a115-3e20-4561-a35d-5a88e46a4286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddfd7a7-8809-4d9b-9701-aa018e6c665e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9228b8a-e567-49bd-8a7e-38b84d8da95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db7c9d9-8265-420a-9b19-aed422f57701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662374de-33dd-48fc-9dfa-eb5206103e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d09b51d-bae3-4fc7-9766-7ead38bf3cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c04fe9-860a-4641-9973-d4a5c66a8ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab03af4-f711-4f71-b52e-22a878c875d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8755e21-3f10-4842-ae14-4af2a879989f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea131c66-761c-442f-9077-4a1c622c5765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b6aee0-63de-4f7f-8798-08fcdec9dad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c8f361-4de6-472c-abda-bca42d837b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec363c51-6af1-4b91-8ba0-41d33b4c1433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dfa6c8-b0e1-4e3e-9b63-60b03b1699c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff13fdd3-adb5-472c-8096-e320aff5aaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dbfaf0-fdcd-463a-a14f-2914f50a2443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ce4c8d-801f-458d-a099-46cb1ec02769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364610eb-6d9c-4eb3-b8a0-11bc6d5950f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b407e4c3-a2ee-44c3-b508-f8729fc2173d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d351c99-b1e4-48f1-9d61-227f0218816d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8a07ce-2ce3-4868-8551-bbea924a6612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b28c67-91df-4072-ab55-54f5ad4d4aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923593f0-abbd-44bc-9327-8e1ff0fc343d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d16a8f-3709-4e34-a277-5fa3206ffaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d0ffa8-adf8-42bc-86f9-093553304f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa74e94-9c0c-4d36-b1c1-f43c7a6c5579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af10f953-d2a3-40da-8d1e-9f2551dabc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc5345d-df79-4a8f-b151-6b527b60c78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f556cf-78e9-4626-b42f-e25c4cdf2895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0b0385-4cfc-4053-9ee4-1cbbd9c760d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7892f9-bd1d-4a58-91c2-eea829da5986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274f230e-9bd0-4986-8215-1852c35e2373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc3bfe6-2006-47b5-bb3a-a2358fc31b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425d34a6-f0bf-4372-bbae-3911652550e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95178f4c-2f35-4df8-bd5f-bafbe17dfd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078fa6b5-3cd0-4524-982a-5cfe1ed1a34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.144.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efda06e-58eb-417a-b180-373f400bc084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.153.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e909ca4-47f0-47e2-a0a3-525b680bd4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3857965e-b01d-438f-8750-68ecabf603c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcbc99c-e6ee-40fe-833d-2c3930475cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.0.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302dd496-cc5e-47f0-8563-fab62b64eecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bacd5c-e44e-48c3-a5f8-68df667dc9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.105.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512ac408-027d-429a-96eb-4826e4fdf72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efc7ae7-5c53-48fa-a708-43121c39ca4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c701bd-14cf-4cd9-b20a-6d0cfb5804bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.141.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d292764-c3fc-4922-a334-6d400ea01044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.175.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d56f4cf-069e-4572-bd36-32cdfc2bd46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.230.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353ab8d4-0bff-4a4f-8145-89b8c9032948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.251.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b2ec7e-81e4-4c44-a966-26685aa6d40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.255.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bb13fc-a33a-43af-b3f5-3c8a56fbe95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.79.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c6d161-aa7d-461f-abdf-2ae16f1c892a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.102.225.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f07dbc6-e7f9-431c-85d9-4ca4c0478540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.103.113.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0729dfee-e830-4a5a-9f6b-db90220401e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca35d1ac-409b-4ef2-965b-aeb09e3952c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.116.140.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a94b75b-78aa-4937-b91d-5091ce398299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.120.220.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20269f6-fd2c-4bfa-90d3-84547e54094c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdbd0f3-ffa6-4018-aa9e-caa7cab02ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356998e4-3959-4a69-85f5-542cdeac9a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b421f7c1-09bc-4274-829d-48d73704bffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.175.144.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731170f3-4dbd-463a-b120-f3271c12e227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.221.7.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bda5d9f-ca4c-4b76-af65-771c969f13c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.224.203.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82178c43-bcc6-4aab-b89f-8f2b6c56dd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.235.8.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8214d3d2-916e-4e17-a798-d4ad7dc79deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.249.98.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e93c18-a491-4555-9d43-6110882cbff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.36.131.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73ba6b0-f3ed-4651-8c40-7f6ab8759913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.4.63.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735ef9b5-0fb9-4d31-829c-47169f41a953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.60.48.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38bb633-38c7-40f8-b981-9380afde9bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.157.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e126b5-f6bc-4cbe-975c-4f2ee65e0483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.63.126.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecaeed9-9f62-48b5-bc86-5554a63fa465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.31.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952f7491-672d-4fad-ab14-de2b52362219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.99.161.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24c1bce-a2d5-4481-b871-04e7a2bd0f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.36.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a62e33f-2d8a-4cc6-9fc5-2daa5b11de98", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.105.60.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907912df-7d6e-482d-99fa-9b9bfa13a1f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd7f451-17d8-42a5-b224-4e6e4d90f617", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6016eeb9-8d58-44e8-9ef1-d8123e64d65c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185a40ba-3d1a-49d9-9804-f1521b51e4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.145.244.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662b330b-18d9-474a-b413-c4974ebccef2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.15.217.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a552777c-83fb-4aae-90f0-6c9fe81744e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.181.223.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff066e7-c761-43a6-9cb8-d317cb39ed5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.162.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b56cabb-c650-404a-86a8-c3ef3cbe4b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.167.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dc0550-eb1c-432e-8269-9a78310ef1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.244.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3f9117-84f5-4e6b-83f7-ccb0395a5594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.124.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9184842-992d-46bf-9fa7-ae978953d23a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.87.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2ebc2b-affa-457d-a62b-97c28e055f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.50.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a11c7d1-d589-48ce-b287-e8cdc9383410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.117.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998a27b9-1f3d-4518-be4b-b4d551f6ed70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e7e235-ae70-430e-9675-36674777d6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc5d244-4709-4ca7-bef9-683d9eb78b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86fe81c-8290-41f8-975a-d514f5fc0c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2132b9-9447-43d2-a630-b82bec6d888d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bf3788-bb6b-49d7-8d00-6e802c643193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4069a469-9cdc-41c9-9e92-ea135595c26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e4a5e8-a0b9-4f29-b787-e31383b769f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030c91e3-9e66-4417-bf4d-146880a7555b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99878823-e26b-4686-8f5a-a70adb3e3097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61620faf-4f39-4f75-8540-b8b569a351de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208b4f45-4454-4790-919f-4cd5875d2fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eaa1a6-31da-45dc-898a-f3dda629135a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9552259-b37a-41c9-8e75-4427f80ce1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0776b6c2-d80e-40bd-8602-68931d3e9002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10171224-5a99-4420-aa2f-eecd355bfe06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8320b96-97f6-4d92-95a4-d93af9dbdbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e76602-a4be-4c10-89f6-8700387fcc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da68372-3e21-4cd9-8bb5-7dfc9f63c0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d95fd0-2fd8-4ed7-b6f4-a0ba094a2c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b9a514-8e43-4c47-806a-c097dc4d3b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be96c25-7df8-4f48-a45b-9ebc942d5d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4086e76-9ebd-4620-9eea-b3ab24f628e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ed9b19-0d90-4fc1-a67d-dd6806a5d429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d01331b-4d46-4f39-8ea0-43c79e7ac3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0972dc81-b5d9-4c6a-94a3-f9a9b19fabf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a1639c-6006-4ec7-a516-1e8c8dd053f8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.92.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08c2a5f-a086-4760-a3d2-c447d20bc93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.114.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cad4710-1f53-4b2f-81f9-d52e2df1e77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.118.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cf3322-845b-453e-96f7-17d674f5e52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd8a6cb-e574-4d89-85c9-166563c1a219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75ff3ca-a8a8-4f73-a230-33326db95798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a4e143-535d-489f-8d4c-2eaa7c03df25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b6f80a-ca57-4cb8-9711-06cd5c0bc9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea02183e-2657-4571-adb6-79425dc0cd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4612a9-7e78-47ce-99e1-f376b368c1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05e1656-ae62-42d2-9cf7-512d52b0e007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ea191d-671d-499a-8174-d0dfc93909e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.141.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5303e781-9a77-4aa2-aa1f-dcb8a30fc72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9debbcce-3162-4d49-8816-be08ed6875fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded1c9ee-4336-4672-a3cb-d4697ba7b84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ece780-a06c-4396-b5ff-372995c4062a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.147.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c15061-8d42-4a3b-9d23-a4c81bd83901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.148.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0902dec9-7de3-4455-b92f-7074cdd672c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e36be9-7460-4b04-a539-08127c268032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50817e95-609c-48c4-99f6-640461f5040b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a865a28f-1655-4169-9035-0c8ea73ade55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.153.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631c7909-1ce1-4cd8-9576-22f466ca8837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.155.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca96c0a3-f230-42cb-bbb0-9ae85da916b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.156.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20930f5f-0d1b-43fd-ba91-7d07d30d3f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b01eb6-983f-436d-8d17-12e825ce6cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c3d4fe-3ade-4573-992f-485cafe38650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430975a8-d5bb-414d-8af0-4fc94246a793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.176.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0c3197-e076-46af-a3a1-70e78bc7fc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ecd049-d4c6-4693-a1a2-adab6c833547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.184.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc861e3-1257-4327-95f8-11230365e917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c4e29f-4d5e-4713-b04c-d75c5a1bc2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1337f52-e1df-4a86-922a-f8530e6559b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.192.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2f46b8-d313-432b-a528-672477ff250f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.193.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4aef6d-f292-43ed-a4b6-76f5a589c0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d0f827-cf94-4eca-987c-b49977685086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.44.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c68767-73d3-48e0-9e3e-9b3e979f38cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.46.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a3fb3a-0714-41a0-aa64-2873f1fdaed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.47.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a447a2-23a5-483b-8cc6-44416cf95499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.58.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac47021-9947-47e7-a685-08346fe5cac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b95fe27-e7df-4887-a252-53dcfec8dcb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bb147a-0d96-4dae-b349-c8a252215a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3eb771d-b3dc-4b54-92d8-c444058ef76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6aef8d-721f-46b0-b1f5-1aea906a9c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80493bd3-28e8-4910-9439-de8363bb3c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a6f27d-4ccc-48dd-bf88-211ba9b6ee22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d574f81f-7c8c-407e-a854-a2cf9720464a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae855b00-45fe-43f5-b01d-cd0ef6633f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f597771-561c-4d5e-96e0-72db019f51f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f984e5e-6fc1-41c2-9c1a-d58ae3f7696b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf9ac8a-a534-4679-9862-4d0062048160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c091c765-dcb4-4c50-a783-32f9af2d4751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac9d143-1466-453d-8e22-1e6c3270ccde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220e158d-dd46-4d0d-b0aa-51f0c81f11fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.109.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a25b0a-fd4c-448d-8294-4faf1e3cf9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f83dd5-d7a5-4742-80a2-418f3de87aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.114.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be714bd-21b6-453a-aeba-79eb4fc79260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b341c48-8730-4f18-8013-834e247a6345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a43c4b-bd3d-4057-8636-36c0c9a76eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5f075e-4273-455f-8852-08a2fc1a10b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833b5fe5-9286-4d62-8e87-0c6ae058b0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bd0fd8-106a-4498-b5cc-54bd8d1aef98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81d2303-f51a-4ad5-bd7c-45b5c98406bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.14.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10704984-0e4e-4180-9d3b-7923b91e96d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f3edc2-6fac-400a-879b-dad6cf059c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfa90d1-bb4f-4f5a-9cc5-c23df687b54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49faaf80-56a9-4884-92a9-de7f0c5609b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396b19e2-c840-4212-be67-7495c98f98bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddfa917-bdc0-40d9-bbaf-4ffa02c6ea6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76a78bf-b5b6-4705-b3db-297669a40975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9f16b4-a41c-4781-b5b0-12e39f883c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c198a6c-540c-4e44-852c-053a8aea7783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.241.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70a3510-af30-4990-9bec-44b1eddf1b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65620e3-9cce-46a0-a053-a83154c15b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1e39a6-8a75-4b7c-bee2-29bab3bc8da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca88103-a75c-42ab-b5c8-6c63cd4a0e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cca1b3-6007-4d18-a162-fec37d196bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f2bd29-b7ab-48f4-b14c-329bbbee3177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f026e3b-6b35-4b46-afac-7e807f17e1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999020f5-f460-4ef1-8fc3-0aa8c9284f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd108a6-a63b-4555-b619-25e927535379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.254.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687d5275-8d99-4bdc-9da8-8a609a12caad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b22560-283a-4cf3-bfb3-b9bbe17991af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911cceef-8593-438d-86c1-fa171b816dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e123179d-9cdd-4e57-b0e5-5b6633814fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eff89d7-d5c2-4c27-b5d6-bae55fcdb1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.37.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e6bd83-92e5-409f-bc70-6820644b47b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbef71df-b2b2-4b68-b7f9-695f1a63698c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.44.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54a2255-f120-4a41-8470-3094a2d20276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed5b03a-0934-4358-bd52-58daad1baedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20aa50c-2836-418f-99db-b3afa67ab837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4c09b6-45d1-448a-9223-87668afc3577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.61.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b63b8df-e971-4bd4-8bf1-40f0b9b7fd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08674a5b-49fc-4806-8f3b-0e35cacbcd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92928fe8-3bf0-4885-8c8d-c4462f538297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.69.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0267baab-a18e-4dec-89fc-4b0e2ded66f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca532bf-4d0f-4a7a-8eaf-4e52a8423af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.75.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74354cfc-a76e-49dd-90bc-89b7f8796072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debd4fd0-686e-45d1-adda-dfbd301edb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbaf0d8-f452-4180-b0de-6771efbfd565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f89f6f-b9a7-4d09-85d5-1ae3330f957b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bc7c20-3e30-4c7c-98db-a2440353db1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581b8caf-0bf2-4842-af48-c1818fafcc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2517d03d-e3a4-45be-82e7-3f54ddbb2643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5f6857-6100-477e-adc8-c4a7d238ed10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea553a02-5a81-4b17-807d-e20c459c9cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3495ea-2c2b-4e43-8dc6-8cc9780b3459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.95.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc4b29a-aad2-40c0-90ea-58f557191ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.99.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46657f1-ab7d-4868-a674-29e106a1ffe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.113.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ee63c1-a67d-4ee5-9465-e5ecee7ddf69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.223.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb76526-7eab-4499-b380-0af7be5db824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7c1af4-ec04-4281-aa98-2f4266cdcdf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936aa24d-5eea-42c5-97d4-426abd70fbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.131.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936b23d3-a198-4679-8315-9eb1e7776b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2d4a50-e415-41f6-b8e8-c2217869ed5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.135.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd93506-7eac-44b7-8972-fdcd897e9a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.14.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c733ff50-a65b-4ba8-a2a4-19a892546067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.141.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c325175-0c81-4e5d-a471-d08b5847407b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.142.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3e8314-38e0-4601-96fc-44d953d673ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7269c375-4c0a-4243-95e1-fb1471e18ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.146.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87207eaa-2762-4e02-841d-1698a50b9ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd9d4d0-dd5e-4dc5-9bb2-3eb175578622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.15.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b07e55c-c742-4640-8ace-e5f17956025a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88cab27-17cc-4b3c-96a0-7680978e2a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.153.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd53ff3-75a3-4070-bc3f-4037fd6fc3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8393a1b-a8cb-4e47-b704-7ffdc129284b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb16a498-bf97-49e4-8e6f-87c99470da03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56666e1c-a755-4d45-bfd1-9f8e2283250b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c82173-6533-4387-84a2-19f74a65d2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb9e29e-1671-4562-8760-2f8825da7f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6513911e-958d-4deb-98e9-5c26512f4484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72592a2b-9e3e-4521-844b-9cbdb2e987aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.183.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4789c8b8-f49b-4db6-84e2-26a513bbb474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.192.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e2ff64-173f-4226-b196-69bdad1d8351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.193.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315e85a0-a2a0-49a9-86ad-b5c9c3a6fbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.193.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfb04d4-19ed-4881-a82e-8dd2a20050bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.199.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4f8a40-cf0c-4fc1-9251-549eb789f844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.20.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548cbcf4-7757-48f9-a275-a925cc12ff6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8771d335-db51-4bdb-9ef6-dcf9717fe9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70def91e-ed41-44e1-acfe-b7ae1209ad7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379e5b1c-4bb1-4c26-a40c-8bc80c4712c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.233.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445c055e-4cf1-4489-b082-0843607bc85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.233.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24687867-954d-403a-8792-d5f1958fe234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.234.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f55dbc6-edc7-4173-9e4c-850f5e98d00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d428c009-3557-4b11-9c03-a2a522d158fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b615149-b037-47bb-bd16-8bc4d6003d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ec91b4-c53b-4684-b6d8-ffe7f68c75b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ac2639-f9c0-4264-b564-f9a10ed9b247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1189a92d-f96c-4af0-9d21-64bbb0ae220b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f90c3b4-8a0b-4d34-b044-a2861a44e54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d737fb15-651a-423a-b10a-b9acbaf19fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526e9898-04bf-4fa5-a954-b2fe632a1b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.43.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f60576-aebc-4c84-802f-6592308e7ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.64.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2d9d92-8d35-461c-85f8-5b9c5a1610dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.69.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39519b5c-d2ed-4a22-9e4c-63456cf3bef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd32a77-8bcf-4d5b-8e06-254b5f20b8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.79.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637d7b9e-64b0-4d47-97da-924e672d4f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6639a3e-7749-41a2-a2a2-d2529447e81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add3d6bc-9540-49db-a089-b8a8ea103949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.95.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a651a2e-3765-4ffe-bd89-754e482e0c67", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.31.64.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139ca0ed-b324-4c62-b911-06b2f2c1a6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12e8567-0bcf-408b-95d4-c3c4ed80e13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.19.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b29c995-8982-4eac-bb06-ebcc135a3adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289e0048-e7b4-4e93-8bcb-c441e275d23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.27.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d02023-09d3-4535-9e8d-6706d04d96d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.32.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e90c74-35ca-4675-8374-997df5217220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.94.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721911d1-6d3f-471c-ac60-21b3fdbe3966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096adaf4-339c-47b7-8ea4-cadc85925072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.193.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbef6c3-6ccf-4947-b9c1-47a17a96e769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.210.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591499cf-26cd-4b0c-901c-0fb463fa14a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9966ed1f-a20d-4407-a474-3e64087ed0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c999fbbf-379e-4eb2-960b-262f0921bbd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423f25e1-8710-4c7a-a4d9-5d316e0396ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf43a2ae-a693-4643-8060-02b8b5a626fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7013234d-63f2-4a8c-9ade-7856e4acbd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6622cad7-6b75-4b45-868a-92f1b052e090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.220.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcecb26-dec4-45cd-9d38-5e11ae06f163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fa6f50-97f4-4959-abc6-5a360d28d98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2644ddb7-38a2-446f-b984-9596a9114850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b7c713-9c8f-40fc-9982-eb7b71395c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01838f4a-cd35-4ecc-8403-a410881ce3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.226.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da60f0d-0edc-44b7-8cb5-858420b77bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58480db8-f079-4561-be45-1e9345c7c336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac00772-020d-4932-858f-64a9ef6f527e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7326db-f565-4958-90fb-1671abe85e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b453d367-7fb8-471d-bce8-209d7cc5fc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31130405-4d9f-4faa-b1be-8b1b3c219a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6749a6c1-e425-4b19-8c1c-de3688b32c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d66a6c-f33d-4b93-8976-f633e0f61a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734d62ce-524d-41dd-a88c-a888e5fd1a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483eadf3-b736-4631-84e6-af9f7c62d558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9441f6fc-b2c0-47e8-9f71-c473f8fab13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec000e4-85ee-4fc0-8090-fa1782d8ce25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd067334-fff6-41c4-ab9f-03f2bc74d986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390d7bf9-4d14-4b30-a822-b76e8e09e719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0962b9-69e7-4664-98c3-1dc51330cd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c816ecca-e311-4a59-9bb0-e38a7271cb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f118be-2e67-4f17-b9f3-1dd32c38137b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54511b22-3155-424a-918a-0530dcacf9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feb67e0-92ab-4a28-97e1-b20971fe4828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9fb976-6cfe-49b3-abcb-8db48c4777ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df19553-140e-4dd8-baba-86e17ab7d1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f71abf-cf47-4369-9af0-94b00c94900d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf3becb-a475-4ce4-add1-03248af50e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50277521-9d95-4dfc-ad36-c0f4f96a6896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02393351-c281-420f-ab2c-f92e1e656e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432d59f2-69fe-4289-a388-24ef99d4b994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1509f819-71f5-4f1b-b4e9-ba691d29cf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9aa5b9-bc21-4ba4-8c5a-0d84c3327c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cd158f-9010-4a07-a519-1591547a672e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bf30f9-4c71-465e-93ee-4d002d0fc01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4bf84d-8d48-453f-b0ba-a224195bba60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59e3fd1-523d-49d1-ab07-3aef034ae0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44734dd3-7466-49e9-af13-2a2d30496313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba658bf-8ae7-401a-b2bd-93b15888a342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.114.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75acfbdf-0f50-4f0d-bced-d621077acb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020a7f58-549b-4d42-a7ca-c4292f6fc23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bede57-ec9b-4cb4-babf-57e6866be8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a0cb73-1203-47ea-823e-3bcd7233a2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516d0ee3-c866-4e2c-b8df-3bbc24344862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e5262c-4c07-421e-b7b3-5714d6bbac75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e1886c-ebac-4a4f-89c9-8a332d9e1f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ada51a5-564a-4d28-bb93-cd1d7c509a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f398f30e-4f53-46bb-8b69-12bf892ac954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c12c6c-9d48-47d8-b65a-e255a7f42e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5ba395-bae5-4a31-a7fd-2087c643af44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6e784c-1a50-4f1d-9c7c-bcdf40aed0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5ccc6b-9839-4c3f-9044-a5f8f970d464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea845bc7-1d95-4961-9ad0-6ee7b594b13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2add4767-ad8a-4637-850d-1aac50e411ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74aedabb-5176-4a5f-acd1-adb5d651c739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d384921-97cb-4088-8aa5-7d4cfd021ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e061ef79-7a41-4a4a-b386-112533711ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640b3842-905d-4db9-be31-2641f52ef2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ac7d44-51d7-4fd0-a628-bee6bb9cc0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7c9c73-b76c-467a-83ed-df4320ce702b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925b2e56-6bc4-44af-9a1c-c085ebee7c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57a1541-436e-42d1-9591-5b99b848e45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6e3022-61a7-4490-b1a4-cd61b07acbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe263db-a7ce-4ba4-85d8-a94186b30bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371cc435-f8e5-4ceb-8efa-937f81989d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4165247b-8a94-44f0-a652-aa2fb573d484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.186.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53056762-d40f-4f11-901a-f14c00e60ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5375bb-001a-421f-b8f1-02d37467270a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a813c68c-cef7-4e9b-aa17-70240ceab13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.197.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fd7545-089f-4ae4-9184-0fd082af5571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fdf941-f4f2-40dc-b336-be78bd2cbafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c9e4bd-658f-48f0-a040-94f43d7cc1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b9ffca-a3ba-49fc-b926-bbee1c3b1a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355825ce-e216-4c8f-9238-3eb6e7cdbe9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82211a9-366a-4928-a397-33267105ec4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.225.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4807bbdb-1b98-4ba2-99fa-d1003b2df045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.98.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cf5480-fc23-4969-9264-0a846747add8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.227.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3155df-fe5b-40e0-9842-11de8e7c691c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.234.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f07125c-bf75-4d95-aca1-12433f97fa8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.236.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e9b8e3-7dcf-4cbc-a428-3ed2fe5cb8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.100.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74919384-2e2f-481c-82b6-158f41f13964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.12.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cceb017-c4da-4c10-8d19-a9243c36a1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.18.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b30545-7389-4f28-b325-626d5a3736c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.3.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea96652b-6811-43ed-82a7-33fc66fe7ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.66.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a9690a-0348-4b01-9fb8-7759653dc0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce24f26-22e6-4adf-9df9-79edb2e864ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.225.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e63018-4617-40bc-b0a6-54d7c645ec2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61269360-88a1-4f0c-b6e3-3d13cb4ae316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.251.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e4fb43-874d-4a6d-b26a-ad264221507a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.29.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca25adb-f5c4-4439-b94d-3532f3d6c466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.89.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1eb7eeb-b646-4508-b972-c86a19990813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578fba36-2090-4281-b762-0e381ab6cb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797c090d-a821-4f4b-847b-7a3e93ab2b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8988c024-a03a-4e3b-a311-924ed7f95251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.218.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4df54e-087e-443c-b08c-378d5ea1e03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021361c0-052b-402a-97ad-0e4883a169ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.187.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788ac662-1ec0-4e0b-b204-73fded1df2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.158.31.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a651ee-6e63-4913-91ab-fe64500fe1d6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.173.65.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0387bd2-5507-4726-83e6-14bd679fe533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.237.182.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f576123-fe96-4cd5-ad6b-bb908d7e36df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.36.239.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663ab76b-bde6-4203-9a9b-614ae9b968f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.36.33.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6433ea5c-de71-4184-94f0-ea6190d2ef56", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.43.153.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76991ae9-caf6-42bb-a1e0-19799cb1a855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.47.128.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c37f7f7-de14-4ed8-8430-22f98af9953c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.47.194.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec09d80-3a0e-4de9-9412-7cd816e9412e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.47.195.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c449a3-d953-4e2d-96bc-754100b9869c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.36.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229e0fdc-a922-418a-8977-e100041b9334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89db78ec-460b-4cf9-a5cb-f2d5101e6f97", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.12.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf2b546-1fa3-4f70-b2c9-b1b58d23c058", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.173.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3757f5-a5cc-446f-9d06-cd2b1eb63621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.154.28.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25210b73-6fe6-4aa2-ae51-d9a5824f5bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.101.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b646ac-e805-428d-9013-3d6443d3f391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.204.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bc8919-ef26-428c-b12a-479688b426e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.208.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243e35ce-915b-4d54-84de-e350ee8926b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.208.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b648ea7-1437-4420-8075-6f5c78f4a2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.208.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473734b7-d9e0-4c6c-90d3-6fa9a1bdf57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.208.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e678c3de-fb38-47c5-8d1c-b0eb83393217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.183.101.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8b487a-8a55-4232-9f2c-41f1b167ba11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09f5837-4491-420f-9148-ed6a76fbbceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5df4fcb-ca1b-4c4f-aba0-9acb1f504752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28960408-1d1b-4948-a860-7c2b1fc6958d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48967888-bc5e-4059-a927-405fa1d94da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacaa09b-8635-4910-8618-19e43221c5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca15164-1b0b-4d4a-90ba-0b3ff0569150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2c0769-1747-4abf-874e-abb6a0a89310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.223.67.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ba28de-a839-4c30-9c69-60324c32fc33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c270b7a7-783a-4501-9f95-2f227b7a1a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7f3e92-ab47-40f9-9456-e7f56aec8d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.253.59.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05cd0cf-45f4-40b4-8433-34f790d6dfe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.26.101.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08c7b4d-bfcd-46fa-9525-563a98cbb563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.36.97.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f09b0f-0d74-49c7-8070-f3f11f4acfdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.45.134.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c104d1fd-1645-4832-90af-b727592896b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.45.189.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d087b090-7902-4f76-a581-7310826f7bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc534205-db83-47c6-8198-1e68ccf7d474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b140e4c9-9e34-47e2-bbbf-f013edf10b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.63.151.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3adcf20-971c-4406-a7ce-3074d2f248bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.68.133.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b2482b-eb11-46a1-b289-da76f67ba7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.8.22.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c84028-e436-4adb-a19e-0088f4511cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5998fcb7-a15a-4fd4-b8c8-744f07dde97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d630e09-d163-4195-a59f-317ac0c08961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.30.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97734b74-f1ad-4cbd-95d0-3eb815d0bda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.30.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde82ab3-8f80-4a45-8e4a-c5652a90b890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3457ad-042b-4669-8a21-dbe34cc580de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfe2b99-95f8-4c2b-bde2-cd3fc15b5f60", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.136.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f569105b-2ffd-4eaa-a39c-a4aff30218b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0c8c87-5c14-4f52-96de-a3761833353b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.81.138.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f876fa6c-0a6b-4e4c-965a-bbeee2d37693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1715666f-27ba-4598-b93d-a5f1fb5f1d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d667a9-a33e-4b9d-be88-c3ccb72d6629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83de4e43-3bf9-4cb0-beee-1fa4ad3a6f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893399de-e25b-4132-8444-44393ae8a133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.155.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa986822-f078-4e37-9271-e8136c6b1867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.235.111.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b3e030-db15-473e-ae7f-62d3bf1103a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.253.249.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838e5b86-9dfb-40ea-bdeb-d80fe8643053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0eda21-8734-4172-8562-e46db459f7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d3ff34-ff46-4222-aff6-f8067405187f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.165.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c28191-22b4-49ea-9b41-2e595704f209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.126.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8ff57a-2070-4759-890e-497fb0ce7e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.226.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ee059b-06a6-4cdf-bed1-67bcba130344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b1b966-e737-42e9-a79e-f7eedf3a6155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.222.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6729d661-5029-4aa2-97d3-9d00575445f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.177.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4a7c45-2f48-46f4-87ef-2e911fd981cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.67.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be5daf7-7b10-4545-92f5-76f1bb4ab676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.70.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b36389-2f9d-4cc3-9634-786b25be9b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ddbac2-8488-45b1-acd8-22435a576d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.34.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48b0e1f-a73e-4310-a9d2-32e19edb8047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.85.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b803cce1-e5dd-4043-8636-5207df8ffc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.91.111.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf70c9c-afe4-4b87-8ada-4577fc2a7913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.88.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3b2412-b3bd-4eec-87e6-c6f0590d8c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.89.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033d8485-f097-47af-bd2c-60e103de5154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95adc5d-1a13-46d7-9893-432fd6cd7010", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.158.35.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0190b20-4550-49b4-9fa1-6f7c27886279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88dd5ba4-1510-4928-b03e-d303a83e1ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9711c35-d5b0-408e-aebf-7a17f5473cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238c380c-b7eb-4783-8a51-13e24f077209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d12ddd-ff00-48f8-b239-09b8ae7eb25f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064a13fb-a431-46b7-858b-6732931fe5aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e000deec-af4f-4e75-9f01-b91665982230", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070a664b-7b36-448b-bd27-23611ee356c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21296485-a891-4fe3-aedd-836a00516985", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ae50a5-d6aa-42b2-ac0c-22f92ddcafeb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f90f82-af55-449c-87cc-651b0c48aebe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fba1fe-791c-41cf-8625-aaf5c57ad33f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff0428f-dac1-4dd2-b155-58a7fc86849c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31108527-3f4d-4396-8795-0f1eafabc58a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e13b2f-af19-4bf8-bf1a-8f305e2d4a34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75cc3a4-a616-423f-8815-16fb969b20cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060d4639-6ecc-460e-9134-4b40428baf2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923632a8-bf2c-4c0d-a922-2a7a8ac2c0b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88c43fd-33cd-4cc1-82d2-0003d16eae22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2103b33c-1446-44e6-8090-6e29ce2aeeb1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca4a0b9-12b7-454e-ae35-10f5f5e6ae47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496f48fd-b040-4796-aeec-cd6ccf8e1835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a6f5d1-9b51-4611-8ce7-f076eb4d528b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795aa123-0398-48a7-98e2-eafda5495190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380ab61e-201b-4fd1-b533-22a0e98a18d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.178.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d57b59e-a6d0-44c2-b3be-bd1a9aaabff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcedbcce-e9c3-4dc3-9bb4-1f9af0558e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.227.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9d86ac-a93f-4733-b963-499d3b47dd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b912354-c54b-44a2-9631-a77d1e19dff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.81.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0622c6-b5c4-4542-8b8b-345b0067ac5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b80c72-5e8f-4a6a-8226-20fb9c3a2588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.203.40.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482e6ebd-4a1b-4975-8f29-01a2eed4b687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10030aa8-71d9-42fc-9a41-0f105aa95c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.126.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5446b80-5a29-4061-961c-da5c3b9f7a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.241.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadcfde0-3938-424c-83ab-b80a8262e741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6f306f-5ef8-4563-8060-c6d5b3abb4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.252.177.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f3253e-330f-4a17-afc1-8af43e0dd97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.87.177.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4da6c8-1a5b-4fa0-9b6d-7fb6aa7d9aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.211.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a255e4e0-82b7-45cd-846a-edcf2ea66451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.248.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25338606-7cd7-4d69-99d1-f98d367bde6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.152.118.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5529f090-31b5-4cac-ab85-4d9f3167370a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.161.202.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a55ebe-eec3-4783-b5cc-883e0025b019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.9.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f6f79d-6c49-4d1a-9ae4-0f267d81f4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.51.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e08dd3-8b11-41c4-b02d-1821fe147e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.174.186.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b569e088-c6de-40a8-8d28-f8e091e7d574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.72.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0309fc-a46f-4d42-93e1-dea7583540a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.211.193.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20411340-cb13-4cc8-8378-ffe5d533b111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.33.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1093e2f9-7319-499d-b42c-2c99bd39ba7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.227.126.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7c6038-71c0-42b7-b987-3a2e91fb7c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.237.205.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce545fec-e061-4a8d-82cd-d9af273536d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.125.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cfe052-11b1-493f-a11a-4e6bf0d3cdfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.37.158.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2026d2ac-d03e-44f8-bb54-aa485a6eec25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.80.240.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39ff852-b8d9-4b73-b9c1-d1b9793e7596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.85.125.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360914e4-021a-459a-b3ae-081bab0f1088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.86.2.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61b0b33-324a-4869-96bb-ef3e33d422af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.87.12.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aace6d83-8317-4404-83db-dc04f84d4096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.89.202.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f19e59-2473-46a0-a5b1-bcadd58da2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.89.89.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdab4b4-94f4-4699-96ed-f18a24de67d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.118.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e971143e-7cfe-41fa-972c-3c9f71db47d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e6a5f0-962b-42c8-93a7-798ac43ac5ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe0865c-cb44-4936-98db-6dcaf3eee9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c33856d-ba6a-4f83-a343-5540329563ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.106.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af000d9a-23ed-42f1-955e-2f496edab01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.34.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec4dbfd-67fe-4cb0-8052-16251f41413f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.241.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982b7032-909e-4af4-a35e-393d2fd3b36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.177.78.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76edee1-3326-4d07-aa74-e80c28d200f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.81.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420b8fd7-6843-4623-a581-773cc21e01d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.69.182.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cc1851-e685-4b55-bdff-4d235e780454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.72.212.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e9ba7a-fd46-4da0-af7e-908ecb489f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.149.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01d61c5-1cc3-4a2c-bd6a-1783773290e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.149.239.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc77f01-ade5-44e3-a1c8-6ed5ba323a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.173.108.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5938c81d-f5d8-4b8c-aa90-a640d38f0701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.173.108.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf68cccf-ee9e-4431-bdde-9102459a2431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.173.109.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a805363-0468-47e3-b052-3ec22037686c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.29.20.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d9e3d4-7998-4fb9-bf95-c700378a03d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.3.237.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d26ebf6-6d0d-474c-a103-0fc088ed9fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.31.223.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93711ac-89e6-4d69-868c-8143a7197a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.7.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0d2ff2-d52c-4097-949b-2ef810beae8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.15.196.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90ac00a-a871-4261-899b-8118703c2514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.222.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ffc5c5-dbc1-46f4-bb2e-98d8306bf958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.178.250.55']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5feeec0-2607-42a2-ac4b-b0f74b248607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.185.10.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afba1323-c315-4afd-b12a-c8c20ecb3292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.186.75.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85ea7ca-6836-4ccc-8eef-e37aba74dc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.188.247.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ce67d9-c5d4-4922-a177-c3ac2baf4da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.189.62.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6cd84b-6ea0-40af-a449-13cc6a8389ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.19.240.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83dc949-3f8f-4a99-b95e-79718b6bef2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f578fc1-7438-430a-9a01-c5992daf7976", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.205.223.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b436b8d6-e3ce-4ff8-9284-19b405177833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.146.235.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c02532c-8743-4739-b552-3003950ad56f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.155.66.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63bb1d3-fe8f-4e97-b283-049b533de3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.244.199.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3693bf1c-b766-4c47-96bc-5cff00b283fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.28.134.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807f15b5-4237-427f-9663-d2f93f83d01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.50.114.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650da863-2dd7-4226-b42e-00c5b7596374", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.16.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f27c962-86ec-41da-bb4b-db6dc94ab5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.174.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e3b05d-f380-4d53-93a7-b8aa8b46643d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab585b4-9645-45c9-8a82-fdb8677a54f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad062c0-b345-4e73-8afc-acf5c488bc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae168e7-1af7-4237-955b-f5c0446ad6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.246.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e341607b-eab5-4044-b9ac-807a67e61fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.36.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d707b76d-0949-4bb7-aaca-d1609b348e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.38.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26edb818-4b2a-4a95-b1e3-d8675019a550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.227.27.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0834fe89-50a9-4aaa-bc9a-fbaed5aa992e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.89.22.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e25131-caba-4fe7-b4f8-9e9baebd1364", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.135.161.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d8a6d6-94aa-4802-afb9-cd7d21ae8c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.143.63.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce581c7-647e-4cf3-9ddd-9a1ba3d1d14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.109.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e610cf33-8ae1-4af0-81f4-6c1b1bc5145d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.124.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfcc7e1-4e08-46e4-8cc6-c7e76d7b0d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.45.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0557e75-4d97-40aa-937e-3c100d884211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.87.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0fcdbd-1ee3-4d1b-b19b-49bdf5ad3614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.111.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8db46c-862e-4469-97ae-474ea1762c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.139.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecad960-6aa8-4ba9-a67c-6ac88295aa98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e96291-2a61-4405-8a70-ca7d75d3111d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5675bfb-b807-4377-9a61-052e00cb0669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.180.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5bbf88-4463-48a0-bcbd-25b4353d7522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.24.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e558df3-1e86-4f87-bcd9-65aa1634e79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.37.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5cae34-c4d4-4d68-bdd9-a9ed809f7668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.50.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39ec2cb-e0ee-41cb-b84e-fdb8c41ad810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.59.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4be92b5-fa3f-4f05-83fa-85e5e6a4312b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.90.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f2d9d9-4e01-4d8a-b284-5b8278d08365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.91.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437f999c-f35b-417b-9348-ea941ecd4470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.97.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10822bf2-b8c0-4c2d-9386-5126d78b6f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.99.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b47c15-a730-4e9d-981c-9de342d9cb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.148.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586eacf2-4b67-4bef-aa4c-5218f3d55bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.248.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668790dc-993b-4bd6-a1ef-99e0bbf41d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99b98bc-492e-447f-9cf9-7e88b59e0cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.41.88.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d5b690-eece-4159-868a-cc7b7cc57c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0837f89-47b7-413a-954c-14b31b682cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d4a132-ccad-4391-9eab-5103b7455148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb5ea43-7873-4495-a62d-44249e266913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679a7de8-4f00-4433-9f0f-0624caad967b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fb3371-c85b-45e2-8a17-a527a80af23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e22b66-53ca-468f-813b-b32446558f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df9337a-736b-44d3-921f-fb2e3d803c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04af948c-840c-4f73-a404-7181b72c9b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a23a29e-23c1-4445-ada9-cd4868f3253e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293b76ba-709e-4f91-bf94-d8f137dc8a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1ebda3-81a5-4637-8173-c18a738dcaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1291b0f3-1e6e-4c7d-8583-90ea044ab851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1803813e-6724-42bd-999d-4c101359c3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c0c0bd-2ffc-482b-ab25-caa545305dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b792d27-5f29-429e-8ecd-67f3881ac426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056ec279-cd0d-4883-94e5-9ccad9f0639d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5ed97b-971a-4876-912e-05c5bdfdb8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38bea08-88f7-4701-b450-d7ac37e33e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea10a82-06a7-487b-809a-64c8547f9f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb31307f-a75c-4ded-b250-c447b5da608f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199b1b17-6509-477b-9288-4ceaafd28909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046d861f-badf-4fea-83d8-5506a5796b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80d3819-a636-48ae-b701-bb043698242e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc33e0d9-209e-41a3-8f9a-ef7d46c080c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49180fc-4385-4adc-8790-9ebaec850193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2854ecb1-fb25-40c4-bad9-869cab0c65f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea662542-6557-4529-8cda-5a83c6bada8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a0e465-792b-414f-9eba-830c30ec0fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cde2eb-4ed1-42ac-b5b1-20d555b3f34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5c904d-655a-4380-b4bd-42ac814226a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fde476-7727-45ef-9749-dda769a9b8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262625b8-0c87-4e8e-8fe0-6385cb5eabd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b449b9eb-0fe8-40df-94c3-014e212c5f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1944df6d-1852-40a0-861e-a9130a4f44fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c86d9a-8c55-43a9-bc06-a3202dc5aef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a19fab-d717-478a-aab6-b0e7878d5894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3e1e78-fe57-4a77-865d-e7492904c091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e022548a-c596-4373-aca8-0cfe49b266e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1ff759-7a40-4c1b-9623-0e6dbf667059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4018ba60-1796-4b1c-a61f-1788bbe7c8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b847ee79-f5b4-4ee3-8fab-38c184e30f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2be93d-af9b-4808-b08b-a85427b2c607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0fb838-4a3a-4125-8ccb-145644ad27c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6ea99f-835c-4dc2-8594-c7b35d718666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d38040-448d-4325-a2eb-e13ded238ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cfca25-ca28-44f3-8de3-6bc42f37789b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cf84f3-9e19-485a-aa03-48916c474ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd718d1-a322-4591-b009-0852088819ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7430ab-a81e-4341-be2f-a09d7a7c034e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cd9837-dab2-4fcb-b3fb-751e685aafc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7184cb16-f5de-4419-a3b0-25fac42b93c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709d412d-66d4-47fc-bd07-829478d9885f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e43057-dbec-4efe-96b6-62fba08751ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e6d948-762c-4d64-a926-7b1e1c2cee9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532b3851-48bd-4e9f-ac11-dc8dda0956a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06bf734-1e7f-4886-8cce-c15c2ff13067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a1daad-a6ec-4162-8f2b-ec3d41a9451a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55bc80b-89d8-4225-ba6f-ae956de76699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50119d15-b1ba-4111-9008-e658f98a9d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9347d88c-8496-48bd-8223-800b6bd718e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e38855-0439-4e9b-9d09-15fe863e6a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca651be4-a4f3-46cb-9702-08bbe4842949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a803f411-b76f-47f6-9515-2c75bc081e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c002be1-2c83-43cc-8d68-8f370ab11dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e7ddee-7068-40f4-94e7-d8e1e348616a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c73b4f9-a20f-4bfc-b0bd-c197c488c08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9679bc19-e91d-4a43-91c1-ca83432a3734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ecc5a0-7c3c-4941-9774-382fbe59a8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b595d4fb-0e3c-479f-a270-2e41f17113de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ade861-f536-4030-be8e-bd56d6d33b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2f6b09-117b-4309-8ff9-c23a85872aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3297d3-c445-4ef4-b707-c11cc403027e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e510c05f-2c59-4685-8cbe-e3b9a3195672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2051705-00cf-4682-9996-79b45e0bf42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84861616-bf45-41d8-a0f5-e436f61bf4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab495ea-fd91-45ca-abed-274aa72da04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75698cb2-4fb0-4af0-a82b-a84f8d19bd58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c40a181-287f-449f-8923-ead8efbe6e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406d79f0-f51b-4f46-a0d6-61ead3ed2c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5771c167-47cf-417b-a24b-b553ce29c685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae17558-e250-485c-bf25-b68360398b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758f1c4b-d600-4e44-a7f6-f70b91d653b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d77410-d365-4b83-b2d3-44ada15c78fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b06b819-d252-40c4-8642-4091f81329a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3084f76e-dfa1-45ae-a9e2-dd94377da6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d93114-8d47-4a11-884c-9b0c88478e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc1d44d-c7b1-4821-a01d-4b0336e13970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7a92c3-4a3f-4603-a980-579c7e2c0b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc83980d-eafc-4186-8d68-86090ef370c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c2b400-ac51-41da-91b0-825b325fff40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bbd772-f408-4de6-a801-54b77ff1d067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dc0ed1-ec4c-44ad-9743-228979fdd43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f476f591-dfe9-4fd6-99e2-3ae94c5e390b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70d71fb-1143-41bf-a27b-a67fe18be73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84facfd4-6f4c-4bb8-862d-abfd0a1299ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace96a6f-15f1-4e6b-b25b-02de5904bbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f50ac6-1505-4a73-b621-831b757d4e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3da6c41-89eb-4460-bf87-2e41230d7341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0ee8b4-a096-4932-95af-9b357968a152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f68b84-bce2-455e-8b84-4ac3439532b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fb7f1a-7972-4af9-82ea-5a98044e9b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc6bbe1-795d-4c77-ae90-c57e9d08735d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439dee9d-a0d1-4007-b083-2c4f3ba94322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9745fd25-a593-4fd8-bf52-e7951dd15bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36474b74-bd79-4d1b-a5ee-2c5b50e136f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45ed5cc-fe66-4943-9565-fb18f8552259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad37742e-2fce-41e4-b7e8-6f476ebda7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e229d513-206a-4841-af34-6c63f9dcad64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f10a290-b5d3-4ca5-bfee-0065846faa05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4a3ccd-9794-4998-b11a-b9b85083aa1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e944709-377c-47b0-bd9d-e83a0aff5813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeef63f-2178-4d22-be98-2b41a2288f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f4525f-49a1-49a1-a403-f026df5ff478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f435d56e-efe6-4a2e-822d-fce8e840bcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4533b3-d5e3-4767-a4b6-08cb3f843f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196c9857-0923-48e4-ae89-fa2d61e5db73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260e8dd0-b1ea-4254-a424-7fc2ad3de117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e23861-cbd4-47f7-a323-f1111f3d4a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f06712d-9cb7-4b5a-a91a-326f8725ee65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ab8c7a-bdc0-43ac-90e1-304319aa53f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb111d1-f54f-4742-b8e0-d2c7926ac1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574c8122-5fc2-440a-b112-89c2758a8c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754c22b4-d9c4-42df-8584-e7d008e554b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25691884-25b8-49ea-9f1c-8d7209e56344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37d3861-fe6a-4af1-b39d-41280145d333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccdaf3f-4a00-4b02-85c3-af336611a2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077ae754-1cd7-42a2-9d51-eb261a550147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3954e96-fbf7-4e7d-8e8a-0289a0234fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06fc5fe-68bb-4ca6-af67-651cd5717897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce92c0f-b3bf-4549-8c92-4d6634f3a478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e182f9-6bbe-4919-a6b7-f1f3a29dc60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.7.199.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96604ef-0690-4a59-a53b-0368fb44aabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.82.228.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec9312f-6d50-447d-8f96-ba7b6d413553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd8bdfe-49cb-4c73-993c-98804f8997f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ace69aa-0f16-4123-8ea9-d668e28744aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bc50fe-ba3f-4b7d-b140-71664f898264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda86333-107f-41dd-b06f-4aad0aff5717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da14683-4101-4631-b667-605fd19f82fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d81278a-c9d8-48f8-8e5b-5f8b40105add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7379fb97-5137-4189-884e-b01c1f8cf20f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f733077-c01e-4129-962d-dd3cdaec8016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486efbd4-7449-4b47-b40e-b4699fd41aa2", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c357d98-5487-48b0-80a0-4da92176a30b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9f75d7-c860-4703-b89a-bc31e686b58e", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e50aa6f-833a-42d6-802b-5335a2a24671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae78ee8-a1cb-47fe-955c-9701e9465b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c46b84-f2e4-4c7a-abd3-3518d2182de9", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9998aa74-c1c4-452a-a9b6-dd4ca4556471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86828033-4083-46ff-989e-14711d0c6dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee78b798-e363-4e76-beae-8e35fcef6d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb409ed9-4535-4c72-9a1b-a387337541d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791e06d3-3ccc-4157-a2c3-dbd898fbed8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abb8263-c715-4c78-a3ad-61e7b75013ce", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7419e28a-31af-4080-86a5-ccf85ec11438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d412f40-435b-4597-84a2-00f1c1084ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d99778-fa48-45ec-911c-c7227e2e22c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.90.20.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58242b5b-2a13-4d8a-9d83-10f0a6d2f1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.94.85.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c923965-a68d-4427-94c5-0722cdbbd7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.38.41.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a42dab1-d5da-4abb-bff8-036f87ca47f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a65923-f2f7-4869-8c98-980dff0cd891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc298b32-4ad2-4de2-ba5a-d0b9933fbd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461f9c2f-d754-4f64-b3d1-165edb70d56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569d3782-8c1f-448c-8e37-00406f941a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d0c0be-4b62-48ae-b2b0-dbd6f10515cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acccd38-3400-4304-874c-0aa7ffa76c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b482af-c153-4290-946d-7cf1934642fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56140ee4-6131-4b5b-bcb1-722acd90d563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb146de2-b853-4fee-a469-6e8a684f972e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6b8a59-53f4-49da-b1ef-af9ebd308272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3a61eb-30c8-485a-991f-94f8eebd0897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd2ccb4-e354-4263-ad70-51989b5a87cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b17685b-12b7-4773-90b6-4f919e227ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc6e0c9-92e8-4409-93c5-a52ced01b0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82420f6b-4f6e-4f69-9fd0-7dcd6bb07035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4e5b50-7078-4290-9871-b21129f9f9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216480d2-b3b4-4414-b8a8-0714bf67151e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d77623b-432c-4a87-b45e-5823ed9bcfd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b8dce0-a9e1-4dd8-8979-647ea1bc78dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5b57eb-c59f-431b-8a18-7c27c6c377a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc06994-c873-4e0c-9809-3b8fe2ea2c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04389da1-6d1b-4767-9ba8-b9ea0aa302a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d448706-7c6c-454b-bf47-6d34ff844276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b2655d-6d4d-4c73-a634-76d4bb30913b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bad009-bfa1-481d-ab32-7e6164303d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96910b64-45c7-4a87-863a-693cdfc42c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07d9b69-3eeb-4cd2-acd5-8e04a4d7a8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dabba36-667a-43a7-b397-4b1bb9993008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662a9d94-1565-4cf6-b79a-04ae1b6e7f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfb3f86-10ea-4d7e-90c2-8fd9dc74d128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1688e4-0f1a-47b5-9306-5b7795f1780d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877b847e-7650-4936-8fe0-d9342a37c2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad7e1da-023f-4cdd-91e8-57879488c18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683d850e-67ea-4ac5-b2a9-b8772062c9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e19683-0bc5-49a4-a41c-f90c5c966f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e42eeb-9896-414e-8381-9c18ad5311f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a5f327-0b2e-4627-a84f-8bd5f5cb1c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4594c72c-d48c-4e47-8c82-48ef4d21a024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df408516-28fd-417f-9c3e-80467615718b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e2adc5-64f9-4870-91b7-268cec7be3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f542cd-ddc4-466b-95cf-eb7117383cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b6b05e-e7e6-4959-b40c-92c20823e24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa199ec-7b7a-413f-ad2d-e5118ea23abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6adc02f-0db4-481e-9af0-5d990cf463ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c2bf52-c532-4096-a6d2-2ac33b31f45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c19c52c-029c-4cdf-bf5a-3651c7ecc9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab58eeb3-ce2d-4d88-92f4-59f1783b3b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c2e075-2cf8-4664-84f7-e178c366def7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bc0d22-a937-4237-aac8-9fdd5aa1a5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5b40e3-fe6e-4f56-af46-cc3d5ee00757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2162445-d4f4-4b4f-a975-35d5060d39f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce478a4-102e-4818-b544-2578fb5ad55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8a8d43-bfbd-41dc-b48f-83a4b6412955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58df593f-cbf6-4ee8-b139-6374152405c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f352628-20c4-40cb-bf3d-dea67cf7fbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b76682-d0bc-4c55-90b1-cdbbf7e60f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4d8d68-b18c-41b5-a29e-ee5124a10c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a85c18b-1632-44b7-8357-a936e90a564e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d814f8a4-af9d-4033-901f-f9ac8bf83d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c43ab3-006a-4027-b16d-1dd9aaacc36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1e5624-beee-4c38-a3fe-3c6b1612da87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea55af9-9bde-47d5-8dcf-78a9e84d5283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7ad274-112c-4bf6-b21e-9b65d5406174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6c5f06-2d97-40df-9668-03c562e81b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81fab40-aeb6-4f04-98d0-8728e58505cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a231492-75d4-432f-9ee9-94c6b8ff4085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b46163b-84ac-4568-9ee1-07d199cf918d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324b22e0-ede1-479d-a0dd-e470dcdfc683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1692cd81-68fc-40ee-8d51-25fb502fde35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3345de13-cf6b-4188-a24a-a6726c564f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33060efc-7d43-4549-9464-88799ea5500b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4e3309-cc20-4d11-89ae-0cdd00e9bd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019fbfcb-74c0-475a-8a6e-be009c331cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5d361e-5600-43fd-b89d-94d54230ae2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00a7f24-feb4-4e5f-8965-198e4a1bf1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9634f35-dbb5-46e1-8cf6-60eb52cc410a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e54d4f-9ded-44ab-8309-68ad3bc67741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c55035-aa8d-40b7-ac88-7b07aa5b7736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e48649e-7094-4b1e-a4e3-be629eba9768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eee962e-605e-4a7d-ac49-d7af02d8996d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c529ad42-f0ae-4fb3-9387-2fdba2486fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4cef2e-c7dc-4ba9-a2fc-f516cf735f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1628dd8f-0f76-4881-bb71-40f256c55368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69786c24-5c4c-44e9-be79-6583843f6f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920dd974-4f67-420c-bff8-72fd935729b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2474de-535e-495f-ab37-dfab2b864d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5070397a-1afd-43d4-b6f4-fe97f6498237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcec90f9-2862-4fe3-ad42-e9c47c222ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca5dde4-7ae5-4658-b664-4241ccde15d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede833d3-ae44-47e0-a016-d99fa96de01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c6e50e-f276-4302-93c7-8ba1c7af076e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2701e3d2-d4c2-4b05-be0a-76a3a2aef61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3498116-d3a1-4c10-bb42-e722da418844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1955fe49-d612-4178-938a-895a63daf2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca2e0b6-05b1-42f1-a23d-260473b20350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54890ab-d99f-4231-85a5-c85c2174727f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a744651-df16-4462-bede-c43ce6b9588c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7445963-bd5b-4acd-8828-023d63917d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d5288d-ed3e-4d6e-a8ad-1f2b66a08cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ea85b6-29c3-4168-a5d1-cc27bf925d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da675818-5063-446c-aa43-3bd56c975896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fab5e7-cdad-4343-80b3-271cde8b753b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ee8ff2-5f66-47e3-a9c8-efd43446890d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dbacfc-612b-4868-8cd5-7cf0b39296ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b3e921-fbc0-43eb-8820-91177d5e6469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b3c1b2-ebe3-4208-9b74-eabf54b47c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7e5b11-311e-45b7-abe6-6d54f3ac56d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca67981-9011-49ce-b000-3f906a1966fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0047addc-0547-4412-b67a-9444ee0f5926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdb7826-2987-4578-a402-926043c3db8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d510fddd-3117-40b4-962e-718e785230bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0187f67b-0a1d-4039-9608-2ef2c14da7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d51fb45-3d23-44d5-85c9-ffeb191c84ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c887be-0cdf-4fdc-9c71-4ee19291ad60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3a13ed-f3e6-4956-aeeb-c8a2b1c46c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f8015b-e79d-49e0-a766-a8f479963c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28e6489-72f1-4086-baa5-c4d3dbbcc78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8cc6c5-364b-45cd-bd06-5e4b392931f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e105a54a-cb09-4a41-a2c8-b51a442a125b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94289cb-79cd-4d29-973c-1ff984d4791d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0c3482-f691-49eb-a7e2-1a02f717717d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeb602b-4959-4938-82f5-38ca3c13b3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaa7021-bdd1-4dd5-8724-c0dba04a9614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e989003-5abb-4eb2-b35b-8af6bac3659a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2908f14-d20c-4660-83c9-059616e0912f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa07fdf-211a-4d0e-8883-ffaa558cc11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b48e03-3d27-4416-af18-50ab511f0920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b3736d-9dd7-492c-9aee-1b52af10c91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306f6b52-6818-4617-9548-57fcd4dc5caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e7c86a-201d-4743-843a-4d06e1f5a9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf5506e-a68c-4f82-b4cf-27cff3eea409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a05d3c-3270-4b1c-9cac-2de1791841aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf9b32a-d5d3-4835-866e-e8d19faf5437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d54050-2592-4f13-ab9c-10fbaef33483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3524c0-e903-45d6-967c-47277a5d6c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0be0c4-2563-4323-9228-58fdc3875a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db04b3b4-d07c-4c61-ae11-eec634df65f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068f9053-0bc0-4866-a6fc-b805fdd22ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7073c6-1fbf-4e7b-8953-c9a6fdee2c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441c6654-8253-4dc5-a08f-57325e0651f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179888a1-7dc6-4e46-b276-cbc90a9b1be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d8bb1e-197e-4593-b511-1488f6815a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc870097-36f0-46f6-8db3-b3f88461e08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc97e2f6-a4fc-4757-abf3-bc254c4c05e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0504ec8-3ec9-4a71-bfd4-ea4890aabd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511849e5-df0e-4754-8512-0cc875690ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2818e17d-faae-4a96-b24c-3394ed54d8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf76848e-50c1-4f38-a6c0-e0e82915622b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3156879-fbe7-495e-aaa2-1568260c95bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcebcb4-d8c0-4ea9-9b63-36536e6843c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde47506-cb99-4790-b738-8513281dbd22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87135d85-f795-4b4f-ba21-531f18c204d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bf9a84-4143-431d-a5db-3f8e1df59b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e81e45-b87e-4679-9fc7-8aab2a762161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab31d5ce-4942-4fc4-8231-909e8273fa84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3906c0-f4fb-48d5-88cb-7fc4b4bfb21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e941f4-6f34-4910-8460-fd7d8a6d2e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdfc38a-260d-4416-a443-57e5ca5dc5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa4bdc3-064e-4d62-bc3a-17c08b9de186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1becf4a0-ffaf-42dd-8453-4f030d309049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b628fd00-4f72-4c5b-8d8c-8a6ae120f606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca765b7-b3fa-44bf-9390-3531e03a769f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d969ca9-9e04-4acc-97f6-634f2ef96366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c6dc18-5642-4aa5-903c-27d508023abd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b26ab3d-c6bc-4c12-b8a5-e34e3527012e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534a0633-f5b1-4172-9ddc-7fdb653ac3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb28e64-96bf-4a0b-b537-abfbd549afb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd492d07-b0a6-4251-aa22-fecae5fa5fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697d6afc-f263-4d04-9955-20aecc4454c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b5afa9-2d8d-43bb-81b2-e5c7a000b3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192d2e3d-b779-48db-a0b1-3752788bbe70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921a7a96-1590-465a-95c6-68ca3a9ad9e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b70552c-65ad-4958-b9ce-bf8f45c438a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ad78e4-d70e-4c18-901f-f2fbf36c5757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675b05c7-1fb9-4edf-83fb-d24193cbe933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca08b831-bae7-4f23-8a97-a2953e9b5ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7ca4f8-04bf-4265-815c-f17a02abdf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f75ee9-0a2c-49b8-85ca-11b7fca423b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546f309a-3e6e-4230-999a-4fbfb922daa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b2b2dc-8238-4e06-96b3-cfb837192749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e64603-2a8c-458c-ae97-ac6669fb9112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e27c422-2ee3-49c0-b712-4dec90eb43d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dcbe6d-ba39-459b-9eca-73f7691862d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4719fb-5b91-417a-8e39-6758c29bd532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea03ab3-ef76-41ab-b4d5-fa700547a775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f24a9d4-85ad-464e-a152-d300717dc14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f7d353-4e0f-45f4-a130-dc9245c866ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958a8143-a183-4be1-b19f-a784962a3e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4720a0-7357-458b-aed5-cec14a2f0202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e4a8f0-8841-479c-867e-8ec0a85b4315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab2c5a9-056a-4df8-b972-9e95d35b7da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e54db6-e69f-4890-ad04-b7779879af9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.99.205.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8554c248-5419-4b54-b1a9-f56d1039f2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.116.224.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50653886-34e4-4ecf-a0d2-5e79bff731b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1810aafe-df4e-4bfe-be5b-6bef1d11f39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca7006e-7902-4ff7-892b-27921ec0871c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32830c2-ca94-4c94-854d-114bc066df09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1c8ebc-bba0-4857-acef-b81eb2fba312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9b64f1-ddcf-49f1-a4f1-cf5551d48ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e66b797-c3e0-47bf-8493-7dedc2b1426a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b26481-02f9-4bf1-ac37-e8ffdd3505c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40780051-3cca-4ecf-99c3-657437e30fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160ccf43-2871-4f16-9ae1-d43e5998eccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f36de1f-6eaa-4503-9fbe-20ef033e189a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fdf95a-e929-49bb-850c-163e13f9ddb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8fad23-6ce2-47c9-8951-b35fa7132a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498a80d5-40fa-4385-859d-0e508d3337ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4700bf2f-cb0e-4481-9e6e-83e76a6ab5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30d7e06-3b7b-4b9f-9086-900d219fd676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1ca3a2-ca07-4285-9bc5-00e69c4478f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0653ed1-0b77-48ba-9f58-f02587a610fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be935850-bcec-4e83-b291-d781bd98758a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09718174-d54e-4f3f-9684-93d2152e03c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c859ce7e-c3f6-49cd-b9aa-2667ebed149f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a809f0c2-d37b-4d77-bb24-7d58aeb5fb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2968c793-ef68-4449-beff-3981bd85c8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7376b12a-945c-4a75-87b1-e0d926cecb7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc503a07-1529-416f-ac9c-2388492aee8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f9d5d4-3164-4c4e-a0c9-44685275cf64", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4c3090-3827-488e-93b7-d418f29823f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b05b6c-9d1c-4399-afbb-a2176a4999cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67771ed-56b8-48a4-b047-a173751ef83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d675efa2-3509-4667-968a-5776a0cab582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedda0d8-befe-4e5a-80ad-9aa2bb056a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc80cf6-03eb-4768-8bd2-422383d8d55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0a2b6e-9393-4a0b-9cca-5346f100be61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c284c289-986f-4522-a398-498319bd0cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce19428-d8d0-450d-9822-3b08e36124c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee318c8-dae5-459d-8a60-044a65f13f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6577b5-8153-49e8-8cdd-c6ac03fa9768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bd343e-e0bd-4e76-83be-3f9749a5932b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2488db59-0f3a-4345-9e7e-a0d58156a174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1cc61f-dcbf-41ea-951d-46e21121bdc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661681e8-7076-431f-8624-8025db147c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2bed0d-9177-44c6-865d-476f6678bbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4d4049-71da-461f-98b3-766f49e8415a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0189be12-0df7-4386-94d0-e209ca68b43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e769e048-90ae-4f55-a941-5167efdd7b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1745976d-ebf3-4c74-ab9e-e78b3f4d9992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859f6cac-efd0-4d37-9ca7-55cbd5bdb164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf07a3e-f186-406d-aecc-b03ec34c7c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d944e06-dd28-4426-b359-411acb40ed0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cb31b3-0024-4405-8f34-3049426bfadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718ad2ea-7947-4f97-a05a-51874a59af22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ee1faa-b52f-45ae-9477-a758da41fcf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ef71cb-66c8-45b1-80a8-3e17f97210a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0323432-2eff-4184-894d-f9909ffc3cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffeda6d-dec0-4e52-8f5e-28e453e5a86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ba8ff4-3e44-4134-9292-cfa3470d363a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a73735-ca39-4b21-8cba-8ee7dde8c34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b36752-c91b-4667-a273-036b6eddf8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499a5fea-5a3d-46a3-8576-4c646ef0084c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7dc008-0c4c-4898-8239-69e6b9fff1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ec6807-82b8-41a3-a555-43a7a20d48cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9028ebdf-ff78-4b1f-8dd7-571405a482d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31de2fb-92f2-409d-82b3-abd4c93feba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed828471-93e4-48d4-ad57-bc23b7c9471d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388f99b0-8303-40d4-aed2-7d6238644735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17718fb0-3d89-457d-bb19-c131162ebc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1a1f99-bf76-4256-8310-d043d74ce33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d012a6b0-ce7c-4988-ad7b-8278f7f90ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27d3846-27e8-4671-9887-2dd2ef31f741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effc3fff-fb45-4d4f-8197-21c14283d11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fd5da4-0382-49f0-9964-7c59f561a98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f8c022-58ec-4f8c-9174-972cd35807d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7497986-349c-414f-bdef-85c31be2a140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93dcaecb-d9ea-48c7-8b1b-4722846037d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8193d4e3-bfc7-4d33-b9b7-22f2c2a43951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b79ff6-8305-4081-acc3-07c83c806b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3080f5a-31f3-48ff-ab7b-8d6ce37ad9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2137b3-bb49-4ce6-af26-7c23d8671d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1016c3c2-c77a-4009-89b5-4a8354db0b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db854c0-c462-479a-b9d2-6e8dcfff55ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a433bae0-e48b-4fe2-bdad-299a17956edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a47503-9519-4b55-a5c9-8ad6066f87b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be81b103-7018-4d69-b98c-f28c346f1a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0313a0f-39a9-4ae6-80a3-2e3837a9ad57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a4dd85-cc1a-4079-9d93-6e6c81dce08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eeea238-0308-44b8-a12b-a9c618d1a4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d152714-5318-4406-ab04-1579a8d0b15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026b829a-ed2b-4068-9a2c-5a36c333a3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82844461-b0fe-4915-a7fa-ee19a6d875ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3125e3fb-6c04-470d-8930-82ac79d52877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10876e90-fb18-40a3-b962-c314308d76b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7865a7be-d63f-46bf-bf46-0bdac69a0d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6405401-551a-4141-bde1-225bba3ed0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb314d28-3ac0-423c-8a65-6cb9ca934116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d65bb3-98f0-4d84-8910-57a64a828de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6030cef9-06f8-4921-860f-fb2949cac952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ac9137-a903-49a8-b95c-7690c3895626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1613b704-889d-4e4b-851a-5c18f5a1d33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf922f36-684a-48b1-b016-b11d0872a725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa236828-c9ec-44f3-a7fe-10cdf9ef6ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a899736-fd98-4233-b1fb-d3add087c915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05b128b-7adb-4d85-a1d2-cd0af459ab23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1e77f5-a031-42b4-92fc-b4a031d22523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1db16c1-2e60-49aa-af44-c0e3a73a0f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b96f1a-1f0c-46f6-8a5a-3c81b67703b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a8959f-ed6f-4ea5-b7e1-02edd3e986fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5507ca81-fd1f-4615-8d68-40ce6013d411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8874efcb-b300-485e-b636-3c3b314b72fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2200417-9200-4798-847e-ee016375149e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef5bbb7-e1e9-47d0-b765-e7b83acf7072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cf30e2-8f68-402c-ad21-c469ff5013d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273b507b-b865-45d1-a0c5-591af6e77e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b0174c-c173-4ca8-8f0d-9ca7e29e665f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a916fd7a-087c-477e-a73a-8cf53734463c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449521ed-0fae-4de8-bcbd-467ebf442be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ac1a43-7552-4c39-8353-58fc74a6c0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05a9f17-cc85-4ac3-a7ba-ab580c0bbf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d9b9af-59c6-45ac-bea2-27e9a0bfeeae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2552245-baea-45c8-a261-e3169094dc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78ee78a-8793-4616-84ae-8ef78c86bbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a30bf1-41e5-447e-b02a-0fb73468a437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9499b39d-8f40-44bb-906c-4f9462b53dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447ddc09-3c03-4d3c-b581-c349389fc355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66369b7a-3a03-4ee3-b8e7-b85e6e825ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d22308f-d711-4509-a167-15cc503bd066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4187e7c-2695-46e5-8bfa-577f98061c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9094a0d9-8f14-4daa-bf55-2c7367e6f8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3e80df-1d71-41cd-960d-bd35d49ba14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ceeb4d-2e42-44cb-8c3e-8d258705c2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a584c9-f6dc-4c31-ab91-6fce402635cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea006e6-62e4-427d-8560-cfab20500042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8354c8-133a-47b4-bade-b646a789af93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b00d03-d5a4-404f-9ff7-c645f6a74333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e25dec6-4c71-43a1-9bfb-769a89f32fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0e410f-7b42-499e-80ec-97da0dc31ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e2836f-f272-4641-aeb9-fc9d60975f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9a5acb-357a-4973-a7a0-70118068e077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0756f042-cea4-4662-b6a8-cddbc95efc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e305baa-ce34-4de0-8c34-1008983672e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377875fe-bda3-43f3-927a-161e946667a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d00ed19-be38-426b-84e5-95a8eb4460ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a163367-9bed-4bb4-b645-0eaf8fb3eeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3a63c9-26fc-4119-97b5-749208ac6277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b38e36e-95cb-4715-9f05-4e886f5f7d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83aadc5e-093f-495f-830b-9d2d2ecec00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e0a60e-2da3-4dd8-acc5-9865024976dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b40cf4-966d-411f-a7f1-de61390734ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15eb8b53-d08c-4e41-86fc-e84b0fa3c5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8350531-d25e-44b7-b137-88d978ad7028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24f83f9-fe4f-4a67-9dc8-d001c05ecf3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97284004-fa87-4025-bb30-8d5cb81c15f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757c28e2-afd5-4e6d-a138-d0eaca5be151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26f24a1-dece-4cd0-ac19-dedf747cf3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961d7ed2-71aa-41d8-aa46-3cabf1aa1dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4535c39-0aa2-4c81-a92b-3e49d49d7c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d767b59f-3065-42a4-b779-d565f41c0f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a8083a-4b06-44f4-816e-0680c5ee1704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4063e63-4927-4b51-864c-17a760d345d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56814650-0b79-4810-a492-7b24d31f9b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fb6dc3-da36-44d0-9d67-74a0990b01b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9cc4df-c049-444e-b02a-7bd30bf50bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f01d82-474e-4493-805c-912637bb60da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e6bb9d-67a1-4afb-814a-1bb8918e76f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5814bfd-5c5c-4697-9219-e3744ade2e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d718da-776b-4602-b9a7-2b147f4f62a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78e7536-658a-448e-94a7-d8caef4f575c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf806bb-df1c-40cc-bf9f-cc8f232ba98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a87cc6-b747-42c0-a9ee-5ea6ef1de268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f770137-6704-48c8-bea6-17503939d282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ef3c14-43d5-4e62-b080-3bd7f21f268e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac97f35-3cce-4bf2-b1f5-647ffa707c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2655e72-6d89-4983-8698-29a6a890a94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ce0066-5d6a-47b2-b874-125ebc14cea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbb46f7-a2db-434e-9307-0694c59dff64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8481a7d6-cdf5-4fde-9cbe-f06ba988cb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06bbb24-4a10-4592-a9eb-6c382dc48353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e102de95-0dbd-42d5-a895-80ec9b355cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7a4fe9-98c0-4171-9dbd-031fc5b5ca05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef430d4-89bf-4ab1-a8b6-b90cb39bcb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57961cf-ce0e-4c81-b0dc-dced13c1d539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871e0b3f-5b6f-404f-9d19-df911a69a197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a18a55-70de-4c66-9556-87149016dca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db4eb46-2a73-4f58-b38a-b2c469039638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b1cff2-de43-4fc5-8857-6a70be4176b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb1c6f2-6993-4973-9684-489915e99747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa030371-8eb3-4290-82a9-734c5f161b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12f7ac3-9666-4f40-a69a-bc8827e91693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fc590f-cdc4-4b71-b917-0b0998d4f702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b89a207-74cd-449b-8b04-eb2f1e04d859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4195b60f-816c-483d-a5a2-4c104d990c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c368f6a-86b8-4aa1-9e37-c4279e552fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8a9418-ad2d-43db-923d-95bccbbeaaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bba98d-0b6a-42f3-901f-1c6947f06f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5859273-e8e0-4ea3-8a29-3879102e29fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2fd315-c44a-4c0e-99bc-3689da1ba3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2be426-46ae-44b8-a219-a364bbe54a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deb2b24-7920-40ef-9406-3ae70a8d2f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde2dd70-0b41-4eeb-99bf-7e8c1f5494f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fc2b37-74bd-4f8b-8874-df0f7b1a5424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb3e377-0136-4527-ba33-4195e8c52b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e8bb96-827f-453c-8a11-12de6a0a6540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c453b3-aa6c-4871-883d-5ce0a13c51c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07d4ccd-2449-45bf-a7a7-cb2d72398a97", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.137.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8507260c-e8cc-4bef-bbb9-8d02f345483f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.198.225.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c116e0-1ae1-40b3-b547-4c2daeb7bbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5f78b9-906a-4b88-b99e-58eada4de283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd00e1d-1ae5-423b-8bbc-678a204cc727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d832676a-c210-44cb-8aab-e75846d5a6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b648e0d-3b85-44eb-b98d-b7708e0e199c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769d6812-a1ce-4e58-8dcb-4d5e152723db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f53217-ce67-43bc-8bdc-69ff2726e878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa4b59e-c91f-4e74-b378-69a539bbe5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2857ae59-a629-4982-9053-1e6331e0787f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b28580-a8e5-42ae-a31f-d617e60f93b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b51435-2054-4f95-9cbe-f43133d2d6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ba83f4-a493-4d5a-ac63-dbd342ce9ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.9.160.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1f3568-5909-457b-8700-ee6797c64e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.90.98.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3574ead6-008b-4a7f-95be-9223930c5a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.102.7.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8f8a14-ef43-4f57-a0f8-903da2e32a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.163.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5025c2-0a02-41e3-b8d1-c4440828b90b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.171.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19f9bba-d144-42ec-9c55-250fd66f5a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.182.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1da833-004e-4a54-ac8c-f2e4d52d4c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.169.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec03f7a3-c5c4-48d3-af1e-c3d6c45c5e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.161.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e0bd33-a655-478d-af26-ef032c7f46f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.221.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693ef3ea-46f9-4dd9-880d-4cf072b97cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dcfe8d-aa64-438d-9c2d-ae7d6881c114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.234.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f951f288-21f4-4622-ab7e-620eb4662b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.65.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5c84da-93eb-4dcf-8112-40464e71f0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.230.223.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39faaaf-ef0f-4c94-a58a-e622c86841ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.37.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abff08d-91de-4300-9868-61113885e0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.52.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b4bc37-26ec-4dd5-9522-6637cfe1beee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.52.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b805a7-ae71-4a83-a3b4-4e48f0e74b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.52.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9259efb2-fb4a-414e-98b8-91170ef441de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.57.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d72224-250f-4024-9f07-75428a686c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.62.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbef068-59e9-4f3f-9d71-70a0127a949e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.63.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3b625a-1253-4649-a6fa-7b12d303c02d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c7e749-015b-4b31-8471-524cab4a0e69", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.97.130.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c164433f-2412-4722-8d37-39ee0ada2573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.115.180.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92da37e-9b31-47b0-aa36-1aa7ccd841bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.124.82.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7110388-ab21-4b6b-8dbe-490ef8d563c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.207.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011f7c49-a768-4efb-96c7-9e89260e4ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.212.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1342bff5-06fb-4d3d-8e5d-49e133170206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff55ae0-9b91-49cb-a61c-7dca02c9340e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b75fb57-bbfc-4e4c-82c6-5fc0186e6c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae23344-5a6d-4dd8-b484-ef53a6c6534a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.33.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0978ba1-de8b-4770-b99c-3e1c211b4910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.92.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2f4ea8-a0f3-4a78-aa16-9b8851ef0a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.92.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20748b75-3c31-429d-84e3-926137093500", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.4.83.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be334b1f-7067-4c07-8083-e2a38f224f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.57.172.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4453e3a6-4bb9-4cff-bd14-48611bbbcaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.59.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc2e788-4fcd-4970-81d0-f5df79b6628b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.73.187.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456ea0fb-38b8-417a-b6ca-b62a2666a127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.31.116.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbc1df2-f3a9-4fa8-b978-ed15510f705e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.54.182.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39ca46b-6a94-4799-8c5f-5439c85db34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.167.39.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e35c1b-8c31-4da4-8341-3f1d98610df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b617d329-4cfc-42bb-b79c-d0637e8c75ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d512c4c-9d95-43ab-9fc4-f335aa94e8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82c7fbf-7316-42d9-b7c3-a344953c5e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd13576-f5fb-4fa0-86ad-9e1259ab1b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1cc2c6-b97f-4c0b-8510-7c36dbaabd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410d1359-d4f7-4611-aac0-4a5760c390bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2ed60b-8d66-4056-b896-a35fcb9f5148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fb00ff-cd52-42b4-b611-def6e0932c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0ea89a-8c05-47f9-a07e-4c28d609b9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8418ae57-46dd-4dea-9d65-bcefac61e356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7a293c-90ff-4fde-9238-1d06364b9efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20618a2-6feb-44c8-872d-c2269d077127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef63ba16-a6c7-4671-8c4e-82f81f79d8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2f01aa-2b7f-4c07-b15f-e8ac213933d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b152c2-681d-46e2-b54c-9d7f20202eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2408bb6f-2646-40fd-b4c2-8a3cb053544a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820fb19d-19bf-405c-a921-53bb11eb4895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aaea35-7980-4d0a-8ecd-1bda3e1bf79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.182.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b913b8dd-c0b8-4e85-b97d-191740e14952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9444bdc2-97e8-4fc6-acab-32ed41729614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.151.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f86751b-9cad-4e01-8cd6-64ba97198782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.43.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5513300-48ad-45e1-9fe6-1ba83fbc25a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.194.227.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9feb56-0296-459e-b569-1fac1ddaa5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.33.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51647547-cc29-45ed-bef8-956870961035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.27.80.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e1a57b-7877-460d-9538-e3e880f36aca", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.44.30.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fba19b-8505-40f3-afc2-e1c8b555531a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.47.208.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5a2b51-dadb-4bdf-b45b-114203db0722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.52.96.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e45c45-f198-4121-8bf6-854106770fab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.56.118.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c84aa7a-3f39-4db4-acce-7b03d4aace64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.90.84.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c08d1f-b23a-4164-90a7-3219f3d651d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.120.65.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868ce47a-f147-494d-ab85-f2991563f7d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.134.168.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a596702-5dfa-4afd-b151-f2303bce665d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.204.137.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a64394-eaf1-4c44-943f-e77416a08dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.118.63.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12222302-389d-4616-80d2-688f397c29d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74284bd-b4a7-419f-b488-12bea20afb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.91.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e69cb29-59a3-4d19-8235-2e9180fc136b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.140.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f20e96-c228-47b9-ace3-dc06f3925662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9afa6b8-e1e1-4ab6-ab43-b501f29ebcce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f891f108-a194-4ec3-812d-fe9f87fba283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45505856-f8de-4354-adeb-a900544683a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adb4b30-4109-4ad9-bc72-c3861a22ce4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17539207-18c0-4efd-a930-ee3c4ae60695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bbb023-8ff9-4842-bd19-b779770a8615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c195a08-3a55-4301-8bcf-363b65682085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.105.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ee6758-ffa6-4e54-990b-108807a5f6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.174.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0341b4-42a1-4c4f-9131-27d41ec64bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.46.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0764189b-87ab-41c2-bf9b-acbacf68de9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.69.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a0a476-2e40-41ad-a2d1-9a48f111e247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.72.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a7653b-9bad-46d9-a5c2-30d7028204db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d41fa7e-cec8-4e06-a493-0d9aece55af9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.228.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e5379f-929e-4df9-885a-e6f9d192813f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.230.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddbdecb-4f91-4f1b-99be-e8eddd8afdb0", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b9f82e-6308-4457-8db0-9855dd5f4203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c94d1e-d5bc-4365-9edc-ebe5edd6fa10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da464555-4529-4a33-9c11-c0f191441731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7ea5a5-706f-40c5-b0a9-bd8611ed05f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc61950c-c7e6-4c40-b2ce-fa85185b1a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df0745d-9527-4892-9c5b-83e6ac283e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135f6d82-e0a6-45be-95c9-35eae2835da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6398454-6846-4adf-a0cb-b4901242c9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdee836a-97f1-46c0-8d43-a109a72ced0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4162a758-1960-4500-ad18-7dedab8e3d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8979516-b372-43bd-8ff1-e0f4bb944fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4821cc-e777-41b7-bb99-1407d326a28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd34767-482a-4eec-b1f1-f90046e066fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2538b184-efd6-4892-96de-4bbe0442df9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105f46b3-b3b1-41ac-8f54-26ff1df01871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e983b67-ce42-4324-8772-62017ec624df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c405d8-0dac-47ea-9ff4-14a2fd7c4f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469b3fd7-1041-4f11-83d9-f68e0869e2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92aa74c-6d62-4112-b67a-a2ff90f315cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f09c352-8540-4982-b902-3f8e0361168b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0943ad34-6cea-44a0-a096-37d6bf652471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba252ecb-7867-4379-8d01-3644a3548f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21379404-ffa7-4933-983d-f5f7e3c2faea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a331c108-0786-4287-86ab-92f588366953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fee0db5-1fd5-400c-8e08-8ea9f321fba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20008fda-151c-4839-9bd7-e6ee9819133f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f8dba7-99a9-47eb-9a91-98b6838c1862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.109.100.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc32ff68-9fd4-4984-8424-f239c0ce3463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.136.103.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97229615-cfee-4768-ab18-731893bb9656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.177.39.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62d10c6-feda-406b-a603-1d7df36dafac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.39.119.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f0f9da-4ba2-41b6-a9e9-67d92f36818d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.94.234.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c43ef3-b684-4128-b156-ae1e8aec370a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.11.116.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdca559b-40e0-4061-b97c-1cf15e523eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.244.47.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada93438-605d-4aed-ad06-7fc9cf5b940e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00aa1a4-7945-4b9f-9eb2-88e8035cbe0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.161']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c4116b-fabd-45ae-96ac-a8b4926a43a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cea1fd-85ae-445f-9dcc-287096200328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f70648-c876-4e88-b8a2-d3e20694852b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b912b9-852e-4265-a8a3-39b26b964873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5d6de3-f4e0-4b46-abed-57571499bca4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731a876e-71c3-4c08-a678-ef971131f134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9fd0b9-ebb6-4cba-afe1-5aaeb36ae945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7919d5cd-a34c-478c-9b06-48197ed34068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.65.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786de24c-a8c2-4d77-87a5-4497a4125ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedc05d9-f4cf-4351-9dc6-3717976045ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.77.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73916ada-5a75-42fd-b803-e0c9fcb0ec5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef7c8a0-09e1-4e71-bafa-45a8c16977ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5243de-b44d-4bb2-9ce8-a37cd5b1282d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd797f2a-09b4-4726-b3e0-183fc199033a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec829e1-aa97-4f46-9062-12ec7e459297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.75.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a4ac8e-9f85-4220-97d1-b7d82da25745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150c4b6c-df80-437f-9d2c-21f1180dfea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16345386-0463-48b6-b209-8094a93dc765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e1db00-6955-43ef-ad04-517890eb68b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78de5d86-cd8c-4b8b-a6ea-49fc88df322f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d07f8ee-5c90-49e2-9203-dd6253d2f0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02a9c90-e5dc-403d-93cb-cbb5329ae7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab16853-0dc6-4e1b-94ed-f6a2bc2fcc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ab3736-6158-4087-b495-6f72acd5e23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177c8045-97d4-4bdf-8309-b7ae1e8cab94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6745ed-17a4-441f-872d-514fb41e09d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69ca266-7b26-48f2-8629-a31a9db63144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e4bd9f-0037-4142-95e3-1ed26f7bc3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.155.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f8990d-f789-4729-9167-b6ff14b8a683", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.155.65.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be23eea9-8db6-43c7-b17b-1c81059b3acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.177.193.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9746ee87-ff28-4f60-b008-977eaa5bb916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.180.55.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471c4e83-9196-4d2f-a04a-9af1f5b28cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.184.89.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f931d71-ecdd-4b75-927c-f10af999a1ae", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.211.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4136c550-3677-4249-803b-244c7c5eb852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.46.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ca5470-760e-48f1-986d-326859c9fcd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.40.177.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b66f6b8-402f-436b-8de0-15f1071e0110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.47.4.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e835cd-2f86-4b15-b27c-688fff284b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.106.203.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e65ae36-562b-4312-865b-4bff12d60bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cd8a4a-aacd-47ad-9f99-135b0a601606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d179e3f2-677b-41e7-a1b3-517d7db85f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5375163-e750-42b3-aae3-b84b271c122b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87407ec1-3595-459b-95de-3c1783172464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1538d3a8-a4b4-4180-a2c3-4b5796d32bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cbe1744-251d-4282-8f67-8c12c2412bdf", "relationship_type": "indicates", "source_ref": "indicator--1538d3a8-a4b4-4180-a2c3-4b5796d32bd4", "target_ref": "vulnerability--797a26ec-0907-4b56-a235-47cc083e7136", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9185b9-be42-4ccc-acce-cc861488b69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c268035d-51f6-46dd-88ac-b389b6269098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc093d4f-7a06-4f1e-bdb2-aa556748ea1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74c279c-37e3-469b-a922-4619058e8f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dce61c-9eaf-4e1f-a026-bb35d0b225b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15874436-aada-4bdf-8665-8414beb26e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a05bcd-68a1-4ce6-8297-5e29531aa874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d355ad8-b30b-4527-90a0-1b62b04a1aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5b5590-a5b4-414b-b981-67d21e8825f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d59e41-686b-407a-86db-3f8e152be1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9f2573-521b-4fcb-8f48-54ec4579a939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba157d0-715c-4da7-9003-c237401033ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e6a165-1e0b-422d-bd2d-bfd5d88d10f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caefac22-0711-4a00-aaab-9b6e12665285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9131f1-af54-40ce-851e-b9a9d8ca5b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07f1ed1-c182-4b07-ac37-563407a7a06b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.177.153.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913e0075-42b3-45fc-a2b5-92a74bcccd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.177.164.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de695a3-29e6-48a7-9c6a-faa201c926a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.190.144.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e343c08-e99b-4419-aaac-8c38d17cc082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.34.194.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1010df6-5b6e-4a7c-8a4c-0611419e0d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.7.192.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d784bed4-6bbb-4452-8d4c-8df3102aaedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.72.91.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad174f13-9770-4444-bc96-ff7fdf61d19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.91.177.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b81f60-dbc7-4478-8826-73776420bfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.239.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20929ee6-c0ec-4ab6-95e1-327b88f4e913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010d211a-1f45-4c30-827b-b94028fb2e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014af5a7-5871-4c02-a385-b89ccd4c99b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b48052-bcbc-41a7-9ea9-ea7066a0a1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41fbb97-b120-4ce3-920b-56bc339d9c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.110.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8e303f-a3c1-4eb0-baf4-42c06230d252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.112.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cba5e66-c7c8-456b-a90c-2e07a105260b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.113.102']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2884dc-8061-493a-a9f7-5581c08a27f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf896b0a-59e1-4c88-918a-5951b108f96f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f6c0de-a980-4940-962d-4e3ce5c65c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ab0417-26d9-4231-b2f0-0e420ed593e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.196.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961c5343-d373-4581-bf16-38f1c4459865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca256775-fa69-4aaa-ac3b-bd8e11575eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d92ce80-c82f-46bc-b102-921d81deb6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.212.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55b845f-2a4c-4e2b-9e98-52d772222a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b25312c-a1f4-4a4a-9509-fb6ca6db79d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.232.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3955b6-f4c4-4118-9040-b581a598c309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.234.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a744037-70a1-46e0-8257-6ffcba4b7916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.236.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c9ffbe-e403-4b20-821e-8e0593dd28ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a688fb-b8c1-4bd7-9191-e8a8e9d926ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.68.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7054744d-c8a1-4101-b868-d274be55aec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.70.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19338671-8e94-427f-9eec-36d766597fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.75.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6638bf4-4526-44f5-9c6b-b04346178b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.76.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edb7a38-4a45-4126-a530-8f648e641d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.80.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06dd707-18b1-4076-b668-fe3735544bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.97.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3977452e-2923-49e4-951f-f3c86a0e23b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.123.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dec528-2ebb-40cf-8185-acb74ad933d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.246.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051d928a-5600-4572-b7b6-8e08a32ecd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.0.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c5e803-775d-4a33-920e-423f7e9f2bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e373ba59-83bc-45f1-a11b-69a137eebd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.138.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec35d47d-0b39-4d6a-a56c-aa20b4670f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.145.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0e8abc-d3d5-4b60-b439-76f315265404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.150.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203649c5-2b79-4b94-bff0-ce00bc5435d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.157.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634d8ec6-1615-43fa-8c6b-7fa97c2d4e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.165.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02978d9e-f808-48f5-9dc7-15fd4be73492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.19.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78794ec6-1fdd-4031-9d59-6ae5b2ac3143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78696990-4092-43a1-bd58-5fb27cbf4e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e02df1-43e2-4003-af27-bcda68682f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052f37ee-afd3-42c9-8365-8c2722d25713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.26.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df6fb28-7461-4aef-8a14-33361c2307e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.36.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059a6b58-d02a-4079-a867-cdaa55e73a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cd0547-85be-4a24-a286-7cf851e6821a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8129e0f3-cbd2-4def-9633-348b7292be8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba8fca1-8788-4549-bf72-d0ce97be4813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.4.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2510a63-e6cc-401c-9672-5b36541904d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d5b02c-379a-4879-a26b-5d849eb88278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf4bf36-a48b-4509-909a-3c50dcf01624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b33cfa-e901-4e12-ac52-501193ab7941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4ec456-3306-4d97-9d13-d50a7760b86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e550de-43b0-4217-a32d-057021bc87e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc201297-7f41-405c-b043-c154dc18971b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d7baec-9cb2-485f-b1ed-0deb235f65fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fcbdd5-b8c8-472d-82d5-ea6561f9c41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4c262b-5c46-4946-8923-06fece7611d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b4261-1ea9-4a33-92d6-2137d6f5ba50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5743944-3a8f-40be-ae57-45d2b489f3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c03240-073e-4a90-a097-eb6b4f4b076f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be1da20-e83d-4679-8abf-a4790f8fc07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262a81eb-492e-43ae-9f7d-72e0d5a9c856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3fd319-74ce-4b67-9608-304ef745aa0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54138574-24fb-4e5f-a932-70e9557f0a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e41135-a26e-49a4-a0c2-847550b0c56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2964f748-e3d0-435b-99fe-eb89c7505edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.97']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648bf750-8523-456f-ab21-bfa43581160e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.99']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4caf3ec9-e755-4a0d-9dbd-3d10e320baec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f7a1dd-e717-4cb2-ade8-a77bd62657e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce8325c-5da7-4bf1-8be3-e7f6a8ca54e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa68f252-d390-4046-bbab-f8d0d9d31e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d31c14-a9a5-4b82-98b7-3d7cbfeb187f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6901695-d567-4809-930d-9ee3574d6573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a455ef-f1ca-4164-9e46-2bf0a074a155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd71d5c5-33ac-46e8-9f5e-621af1e5e2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f74290d-8177-4c69-a954-a5e1eecd8b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66f50c3-41a5-4b90-899e-c1847cda6c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44351e39-bd20-41a5-8dfd-62ce67ce273f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4229dc-2b83-4be2-a748-1b40885dfac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa76331b-0e51-4173-a326-3c50da12811c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b65db6d-0f71-42fc-a9a4-41fab15e840b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.63']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372138cc-da4b-4d2a-a10d-f8ac05d9add7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d057b77-b810-4eab-8a22-72c8188eeb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a86b970-39ec-46dd-a06f-169ad1759790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04c61e0-8417-41aa-b390-6827011c51f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1baf453-1dcc-491e-a491-02db2d74fcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cdb916-0dd9-416d-82c6-ec8e021a4e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.57']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57193965-9602-4a31-8d41-14e00b7cca3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26350822-27bc-4137-a09e-959f7cee4382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8132efdd-f4e8-4606-bf9a-2706d369acd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2478847a-c09f-43f4-b3d8-f087ff5f1e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b742aeb2-f739-4ac1-9f42-cabb75c04f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e64bd2-570d-4f5a-937f-767c0da77dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed64e8dc-5919-4ac3-acd2-40b323674a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed0ec44-161c-4b63-b004-f35a7e677861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f434b3-e4f6-4026-baca-0578b1b94f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc495a66-1bec-413b-96eb-d891677861c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f49fa0-bb23-4f3b-a8e4-32d50d4bb438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc25f550-750d-4246-a082-d0d0f3d0d6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c6412b-c7fd-4214-b6b8-a8c1c2043641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d4045b-06ab-484d-89cb-f5666c331e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11df16d-2c79-43af-b041-7c7982e8b18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b436190-d0a2-4c0c-b907-ff2fbee72a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d090a9f6-0714-4073-855f-2ab20d38eb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a561f9-822f-4788-b7a9-9e2dbecd51d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39d2c7b-daf3-445f-8e74-7d32d91c4523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf09ec0a-bb12-4dc3-b874-1c410464a528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee75086a-ffb7-4d03-bcd4-bc11be48ae9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780f98b0-60b6-41ad-8d53-5caaa1687be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7912d0cd-a1e3-4ac9-808b-dcdc9c71e0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d940767b-c51f-4a0e-bf51-ed04136b1167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0206c3af-c5a3-44d4-8f68-2714b6c6a22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa30623-cbf1-4628-9f93-d20532fdcda1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.218.193.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054356aa-d8f0-4742-947e-b12ffeefc0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.126.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76796890-7f09-4b15-872c-df2daeb03982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.233.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8b819f-56bf-48ac-9a6a-e28f77907d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.79.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01995df7-bb1e-4b49-acb1-84791091e45c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.84.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de97844-09fc-4339-82a4-816aa8d4de4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.188.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0845cc-7a7d-4123-b9ca-65399c1e9432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.13.153.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69b6a9a-b748-4216-8e57-befe6c89ca0e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.241.222.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97afdcb8-58c4-4533-884c-a270043f12c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.242.59.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957d4a58-fb75-40f4-ab80-1b856fc8fb9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.44.170.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0650c60e-ea2f-4e8f-ad28-8e861da46aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.66.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7084974f-b97d-4d01-8837-790598bf0bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce83885-5c2c-4880-8d6d-712b9c827eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada54597-e1c6-4594-93c5-66902368bd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.37.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0a7da2-ee7b-4592-ab29-d1d843465fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac7311d-b560-431a-84b9-ffaa50d31736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f4edf1-5403-4192-87a8-043fdf2e2bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75db60f-199f-4143-ac3d-5d9f1afeb5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dd51b2-00bf-419a-9ac7-a1033a15ad30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34509212-5444-4e6e-88b5-e38d4f927b57", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ba7b8e-cf4f-4157-a319-ff349b92523c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6312fc79-cf4d-408b-bb21-069f9ea846da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad37bb8-c896-41c3-8828-5e9ff2785243", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8659f419-c110-432d-bb64-f0abd76ebd47", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14439996-3ba0-4336-aa61-be4d708be2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df57cce-4442-40ed-af0c-5ede3156c637", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f4315d-0242-4449-935c-dcb8e50610fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2d2de7-9e27-4619-8702-295404e856ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d748c0f5-32fd-4e80-8079-afc1e83131bf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec2d6c0-9476-4089-b87e-fccb86130d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac0c028-4156-4134-bcea-760be26c91f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d001ca15-4524-4884-b38c-67460a89deef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f384237f-eaa2-449c-aa87-c2d1241ae807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b673cf-ee8d-4c6f-8ff9-b29cd58cae46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b588ac-8c95-46f5-86fa-8648958ec23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc76b9e-edf3-4337-b2b5-9fade3efd326", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.106.205.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21bc6d3-92f4-4f2a-b8b1-9b965d7fd8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.133.142.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179b488f-1fd0-44c6-acf2-c9094b4793e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.163.131.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23c8844-9ba2-4d9a-ab1f-478581877b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.171.10.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d0315f-aa67-4e2f-83c7-c63076f20e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e194b7-ca88-4ef3-b528-d7db66a54d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.211.72.167']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ec6ef8-ecb9-4f7a-b4f4-c0a51029ff59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.213.152.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2f2255-30c6-47ba-a8f0-f203753f5c11", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.218.164.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0953d72c-b764-4843-89ad-f26c9bfff630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.232.41.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f61b2e-b0c7-4e34-9d27-31bc1726468b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.8.5.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dbee06-3431-437f-a56c-f15b2725c355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.90.225.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60677083-cea9-48c9-951b-03cae5c38b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.153.246.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0297d8a-1ed6-403f-bc0a-6fa7a6ebc88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.167.8.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb2938f-1aa8-433e-a407-3a52e825e151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.19.59.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c648dc7-73f4-4dc3-9f08-85a68e5bc32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.200.135.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac73341-3a07-4d5c-9e51-bb77bd8d475e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.208.22.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195a0cb5-6fdb-4a1b-89e9-b7edaae4581a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.222.153.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f03e64b-0da3-4432-b734-6711dd9d1b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.62.163.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84a0158-4f4b-44a3-9041-baabca3caed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.118.88.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b805af-7bc6-4b19-9850-183ed91d23ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.218.174.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c32140-3e4a-4a5e-b068-2632cd5f0c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.224.167.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c80893-a5e5-4ae7-82aa-9e5a5539a70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.239.7.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd5f9be-53d5-4635-8895-09ea4542a7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.172.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55339dce-75ad-4abd-993b-7c36fdb2e285", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.51.0.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ea59dd-b7d0-429e-a295-88c7f037b501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a414638-dcbe-4523-930a-0761eb17f20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.71.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f338c12-7879-4e48-998f-036db9d54b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.8.158.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846a78ae-176c-4096-bf41-18eb8aab3a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.94.112.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a5bb21-6ae6-490c-97ac-3f55b104baf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.197.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55b924d-ad3c-4e1b-ba86-c35a3f847f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dd5a2c-a6af-4b74-b9b0-2fff774304fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.187.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31a6016-c7cb-4c65-9208-7a25d0632ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.120.81.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26daa55-36c2-488f-9fd4-99c20d4ebc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.148.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd86335f-c621-4d98-9f88-ec05e099ac93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.137.53.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c7d57f-8fbe-47e5-a006-147abaa16453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.14.25.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a572ea-3e04-4300-be6a-8edd0213730d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.159.210.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58245ce6-3f84-4f2e-ac2f-0be31234465a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.198.247.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a68f88-26a7-469d-bbf6-c588de1cf16b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6056b40-f399-44ed-89bc-cc8aac87223b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd15bfc6-3ec0-4c04-be88-368394d3cbd1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e38c1e-ec68-4390-84f7-d0b59dbd8325", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30065d88-6121-4055-9085-6eb3b65099e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a202c97e-e2b1-445c-b52b-d712335a6411", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1548054-fa6d-4a14-aab4-a83ded5c8b30", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2021-31207. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--620a1d08-041e-4c43-87ea-329baa626e62", "relationship_type": "indicates", "source_ref": "indicator--b1548054-fa6d-4a14-aab4-a83ded5c8b30", "target_ref": "vulnerability--5d4d7749-dff6-40b1-9895-49482c613731", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a611c9-7b57-4fd3-ba6d-532ed6b95926", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e2edd5-209c-467f-b645-ad90d80460e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3667984-fb15-4cee-9c28-8a8c032eca9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfce54df-fa3d-4264-9cec-c612875b084e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fce2843-d603-4735-99af-90821308568d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d554db-e5fa-4508-8a2b-9cca3a80db2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc49c47f-d5f9-4af9-937a-c3b684877276", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3cba1b-53ed-49e0-8fcf-f87cbe701622", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a205d14-413c-4a81-8a38-7b1910466063", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc1f772-0623-4d63-b0ac-22bf886d0234", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa893355-981c-4293-b8ef-401c4f875f42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1581cf2e-137d-464f-85a1-bd8b9d98b4ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5060cab6-3ab1-4931-bbed-3ac86ac60aba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffea90c5-3b73-4c3b-aae1-d578eff4a762", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2073de-cde4-4aaf-a95f-081c9a952fec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a360344-57a5-43ae-b083-611f80f25c13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a214e89-3988-4de7-b892-eb015d55c865", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2d77ea-bfdd-4892-8706-12285018e6ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c58d4bd-8495-451d-9209-919b4908fe93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0c3f24-8389-48ef-bd5c-2dc7dd42b618", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2362ed82-3e83-4b43-a8d3-7ca69755ed76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32f1985-55fa-4464-900e-13c88ff553ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.181.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2820acd-7e68-4a62-8e91-6abfd89f16a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.219.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7ed4df-bfdd-4fe1-aeca-279e159d6544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c90e1e9-9503-443b-9279-3d10d0cac286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4231c75b-7a8e-494c-93d4-93bce080caf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcda254-f008-4da5-900b-48c6674f443c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc7eefd-38c1-4571-a35b-b593bcf17cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec2d9b2-960f-4f3e-839c-745e0797b6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2ed212-c297-4e80-b47c-3c45ed79b619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460b622b-0f11-40d3-b99f-e4a1e264eee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11faa91a-4fc5-4eec-b595-67ea3fad7b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64fd5ed-77aa-4023-acde-0b121f7be9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1e341c-e3c2-49fc-8e2c-9d0a53f70239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecdba41-4d78-4a9e-8d52-7a3a5c3e0212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfa9dd2-3279-4f40-83e2-572bb0443e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7953d65-d8b9-45b6-a35d-3156872feb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf0701a-4465-4068-ad29-120c7e512408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32eb966-5aa5-48ba-84df-7c141f75d174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea5d727-1241-4d36-b673-c19bda39e615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd77bba-72ec-4d3c-b8aa-c07fa0b68db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bc678b-fe93-43e4-a99b-fe7d58169418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e275ad-4492-4661-a7b9-14ad794e39d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087da470-251e-4710-898a-5a00b3dac6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dd0519-f757-4e36-86a8-971688baf5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f906627-b979-49b6-a821-9cd0157edc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417c7729-9ef2-4665-9685-3ad152c9d0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786275a2-517b-470f-984f-d12702aab91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b1e7f1-b063-4611-81e6-cdb24f91ff05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32df4d4-580e-47a7-b8dd-026d960fb0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0f1e2b-1c7a-4be9-ad2d-6832d532bcf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d420182-e9ee-4af2-8a9f-4c4c223ab6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3f5034-75e2-401f-bd73-d3a6dfd78f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4468ca-ddea-4f27-8815-7c495df43257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eff2a33-a1c9-48f9-8224-7090b69f87ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9064f581-f64e-44a4-a658-8f4030b1530f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95cae88-1716-4f14-aa33-6e76f2fbb5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e89e528-dc62-4e8e-a99f-b3f166b9684a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a23594b-8689-4891-8fc0-4c1b30b124c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cf487b-610e-4d8d-89e9-c5e9196cb575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f8a58c-4400-428b-b5ca-5fbfbf84266f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea50ee4-fa40-4662-8e8b-d8ecb37c0a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aace1b78-2803-4320-85e7-44cdb00931bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd9ba36-77df-4f9b-994c-c0f662a419b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c459fad1-7e1a-4767-8e65-1c56b8d5759f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a579f2-0709-40db-9346-67dbd7ea723c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7372eacf-1a22-47b1-9a89-5c50acd701a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2466acc7-0bfd-409f-98d6-e90aabbafdea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef85139-c680-4e31-8eaf-9ca1d2234975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6452ae80-c891-46ab-85ed-eb278bf42910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7777ef-6080-4a26-b3bd-947bb39f7e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a91e766-245d-447e-a204-265248430eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73868c0f-f4c3-4ec3-a49b-a829494786ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44454c83-67d1-4664-abd5-6522b1e682fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc861ec-83d2-423b-a4f3-7ffa3ade15ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6813e67-1c69-427d-98d9-d82bbe26aa98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5eb8cc8-fea5-4d0b-b313-112378b35208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70400fb-e1b9-4e34-83ca-452e215f3216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b8d391-cc7b-4ef8-a532-fc8541dd5b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393582c9-cdcc-4bfa-85dc-66f91a75f12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.147.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ccccb0-eaae-44c8-b96d-87983ad80055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767cc543-7f71-4ac7-a388-09c535d8b240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.25.211.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d1852f-e55a-4a63-87a7-fd39de9f7f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.99.117.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa570604-7547-48bd-8b76-e1513c1683ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.106.74.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93425cff-35c8-4d75-9d43-4bccd47373f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31d1d1a-77e6-4dc9-ab96-a544ef7a7880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f737b9-5874-4c33-a0db-d2d0cc812a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e03244-4773-402f-8dfd-6b05f99e7e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.65.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd435bf-e821-4b84-8d71-e5812315f847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.124.177.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b04b59-4961-4186-a279-9801695b0ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.127.226.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd20cf8-f589-46db-a6d8-7ab486ffe20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.179.102.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fee53b-7608-4ff3-b69f-dafb6df0e64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.22.58.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490956b2-5a19-4204-ad30-e8e7e772488b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.52.52.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a777be-be83-4764-8122-424ec757947d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe936a8b-9ac7-4a61-b58a-6b83f3233315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5d105a-ad0b-4807-ab4a-39dadfad7b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6ed8bf-e460-486f-9d26-f11dfb6857bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1e826f-9fee-4273-84d8-5f1a48ec2bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbb1e57-6937-4019-a3b1-1f8a9d127534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b7737e-cab7-41f8-8257-4410c2a30906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a64fed2-573e-42e8-8c47-24ec7e5fe47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafea083-8c85-484d-a015-513aad6b1231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.108.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cbd5cc-01a8-4a64-aa8c-6fb61aba60d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f14f63-928f-4ac4-b3c9-acccec1af13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d087880f-ed39-4c40-90bd-ee6919e27321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc715be-a2c2-4877-b658-b873b72eee98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88820da-f13b-462c-aeb7-9463b1edf6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.40']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65e83aa-e5c4-4e34-96cb-6658cbddb2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03abbca8-c5e6-41c9-b516-87a0f3ee4434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.56']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764e3e47-120f-45a6-b386-ba4157bac9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7653f4d5-414a-48f0-95c9-67c6ecb6e0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680e72d4-7b2b-4dc1-820f-722793fb0aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad577f3-2410-413c-9cb1-fd6443222ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bc7fe0-d2fb-4bbf-8b9f-5499aeca6f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01834a6-a111-4bdc-a06b-dcd03a8fd96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.220.197.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9af6998-b6ee-46b1-8565-890fd7a35cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afc9264-ea91-4ca8-9bb5-1261e2e3bbb3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981cd2ce-81da-4c5e-b49d-af28db4b93a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0ba8c6-842c-42f7-a30c-3041537bf1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ed8d0c-10a0-45bc-8ab6-792a4e75ca9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f257a2-9e31-4e22-bae5-c5675cc1eef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.240.96.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9dc550-5cc1-4484-bf2d-959b8020973c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af72942-1f88-42d8-81ca-9263b234595b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcc42cb-086a-4ee5-a82a-0bcf98c58419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae1d667-ef62-44ef-94fd-d6a4fa14da3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200f9141-5855-4590-ac33-8633ccc71e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.81.60']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bed2a3-3dd8-429c-9db7-670b09dfa762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.70.227.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c05c08-5a2c-4bbb-b447-9cc9631e46f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.135.73.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b0f1b8-f9e4-4e13-b41c-89a48e976d0a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.147.30.59']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bebdf76-7d5c-4c1c-8a4e-d530a8ac8994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.202.190.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8759a0-3d66-4579-bb11-34e82534f900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.202.190.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92322824-d0da-478a-9966-79225e8998c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171309ea-ec13-4402-b6ed-3c41ab11dfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ce4e54-c732-4dde-8721-d253228a8ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.192']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0fdb80-c806-4335-aacb-6b29cd2b001c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77da48c-c41c-4410-8f84-2822f439d2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b1cb13-f044-42b0-b425-959d3cd1e0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.251.48.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0028aea5-a4ba-44b9-aa8f-f741ac45b8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.88.191.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97a7eca-cbc7-465f-840b-8f1fad305363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.99.193.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87942bda-04cc-458d-a4b0-980380885064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.130.37.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6e5c76-4269-440a-bc03-7b26c9c8bb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.139.124.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca03daab-a5bd-4a34-847c-32ce59bbb387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.145.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94764874-ecc5-4560-b64f-f8ca3efdd438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.124.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868b5fe5-25fc-4e60-94d8-195c74c7d0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.185.81.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066f12d6-23a1-42aa-80b5-fb0535609ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.187.171.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a476cd-a63b-4fa2-ad87-f8fa963ffd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.187.80.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63efb31c-34b6-4e5c-95f0-4b4dc2e81c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1def01f2-87f0-454c-902d-327450bb450e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.53']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9ac2aa-4c0a-4c44-b7ed-185a4d377e0b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8fa957-5414-4fb3-84dd-77c8f61ec048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6848a2-79f5-49bf-a400-89a3cc0aba65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a64c022-1fa7-4d36-92c4-754ccb0fba68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a47c15-11d4-436c-889c-14d96c3e9d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cba2d51-755d-4d8f-8e61-2599e4cd24c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.61']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb636095-4f23-4563-9e3e-8d24ab41efa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef160cbb-c0af-4470-8688-45784895adc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73c80e4-d5dd-426c-b99d-3faa8225bfce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3e821a-9f45-4f58-b5ae-c93ee4c3edba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.116.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc2f859-cf84-4bd4-b621-3e2a7256912f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.117.103']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9751fa0e-a40b-4284-b997-8ad2ccf513ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.117.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3b7a2d-9162-47eb-9344-75f610f2b21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.38.96.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2946a8de-e269-4fd7-9a5b-115e046510c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.42.231.160']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff01120-caac-486d-89d1-81d13dc25d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.132.47']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cb6c1a-2100-41ae-a6fb-af4de77fa124", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.133.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1da978d-e33a-4b9f-8fb8-7c278982c321", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.133.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def2f398-c579-4273-853c-e945aad23e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.134.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a07553-11fe-4075-87e4-d5f15265a110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.135.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff1e269-f45b-4fd0-924b-5f0949989ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.135.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04aec4e-d4e9-4a11-a132-cb797e3258f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.12.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6ae000-0cf1-4612-b9a0-5cc3f5d2f1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.12.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b09c46-3a7e-438b-b6ce-f307b6281f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.12.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e57531-32e8-4c5f-9a18-0a06dfc4215f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.13.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28acbe0d-6108-48d3-b889-2e3a9bf81e96", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.46.100.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaea48c-a6bf-43a5-a0ac-2df9057d363c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.46.101.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61a78e7-a276-41cb-ae3f-72f3b01660dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70088ee-8ec5-4f2a-98d8-4d4ef3975533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.54']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b259496-8353-425e-95c7-8cbc5287e9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7892d456-28e8-4245-950b-271b7932aa17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.167.243.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cd1818-86cd-45a5-b2e3-4dced201d8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a38c0b-ff1f-4acf-89a4-6a43987aa7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fead3b-8f2a-4cf8-aac4-641270852601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d709ec-ca1a-417c-98c6-2a38d06e2a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c2c50f-4217-46fc-8744-97529c8e902d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5a10b9-3798-49e4-9891-94a7b6c8495d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019cd3fa-b87c-4d19-b7ff-8f31519089a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e9b9e8-7de7-4391-908c-e88bc74083dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efc0a1f-9cae-42b4-b909-c5c63e449bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587d04c0-8168-44b8-a405-1567b66e9509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44b35ba-2e4d-4971-8bea-3ffe62d1fe60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19294452-ae0e-456e-b7a2-a3916770486e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b113116d-b2b1-4fb2-874f-de1a3faadc15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d4306b-38bd-4cb9-9f90-c4d91593e87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.162']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55302464-14c6-4940-9817-47b48ffc7261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.176']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1c421f-38d8-4b41-b6f8-8090693820d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84cb923e-f1d6-4d22-80d5-8cb9afd93f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2269a92f-c6bb-44ed-86ed-03a44e7a059e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e471e49-a8b8-496f-b830-0f242cf3e820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda439a3-113a-4a1b-a1cf-69f6de0addbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746f6f0a-fbb5-48f9-be89-5a4a29ee4806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe5fea0-0b49-460f-a566-944dbda8bd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edd00bc-c8f0-42c9-bc0c-494abaf6419e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb1ed5c-fd97-48c4-8e50-5ec8e7bf6144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ae5124-3c77-4741-b9f7-41846cbd0794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3944b63e-6de4-4a17-88e9-0b3d95149b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b058c201-213e-40f2-9d06-d84340b599f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac4be61-098a-4bb2-b5d2-eb9788cea827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13908696-9fca-4930-8e57-65582061aa52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd87c63-7eef-4be4-b488-1dc17d41969d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100b3a94-2b9b-4683-8a6c-f92ccaa0c507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51de9d38-b3ce-400b-b86d-1d6074c07b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc89db94-9104-4bf2-b7e2-67bee34b6995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30addc5f-f171-4fec-9f40-296b0ec51d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2049903a-8fc3-4ad9-aea9-6c5f47c4e3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac939fb-3027-4994-af50-3dbe81350f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359a9bfd-b52e-4979-ba04-b64302435446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851cf464-4765-4e16-93ab-ce515f1cc8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c7c1e8-e9df-4678-aea3-21bed77bc3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.216']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f5c6b3-7acc-4c94-9a00-5d4ed070ecab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7d6daa-ee92-4593-835c-0b34962a7333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f34b29-ba67-4052-97c5-9354e447c341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ffabad-6d35-454b-b534-45a0607ab95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.220']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6170f3-fdd5-4e32-9c09-c83c8a15c739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1c9f1e-e6c1-42d3-9eb2-cbb530a94602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.222']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbfd604-bc08-4ac0-b20d-3b17da49a9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ac7f01-f1ca-4b7c-bcec-eb2af1272d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962544c8-b2c6-4a9b-94e6-6b3ee69965b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.32']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b03ec7-ba32-4d1c-b175-45386ed5a040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c55fc6-9a89-4e94-bdfb-4e9a5e2945ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0a0380-0a4a-4617-938f-29b6f71738cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a711ce-27c3-43aa-a532-d8e239cfdb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17157e5e-1a13-498c-8d61-7f55c98d55ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12885583-798f-49d8-bfb0-02294720206e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55da7574-64e5-4d34-aa01-8c3b0ac736f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09580c8-7a65-474d-b3ba-c2d5dd67d07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a538f27-9a4e-4dec-aa86-430ca7711f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd0f50c-5b13-4349-b295-77c01ddf1669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6754f2f4-408b-4fa4-9a09-24f9ef1929b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015dbd9f-3a1a-4a4b-85a7-66292f56cdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26f410f-13d9-493e-a149-a13a41828167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98d1b1a-f9b6-4cb4-a29b-4a68e2ffa722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6c33d0-78c3-4008-a364-6f59cb1fb091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c19915-5383-4518-b8da-edd2cdac23dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34aabb08-9351-45bf-81fc-a849c02c3fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.204.122.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3f35b2-d456-4d34-96f4-7eea4ed7a95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.197.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8578f0-4d5a-4327-af25-ab116b118d09", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.210.169.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b851e356-0cf3-492a-becf-b030e1eb0823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.101']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c891aa86-aacd-46cf-9782-bf11d693b40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.112.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649da84d-46ad-44aa-bddf-6e7dc9c34a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.219.62.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e970d413-a1fb-4d02-9ddc-415d558a896b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.219.63.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa758a8-78ed-4dc1-9849-80c2e6878341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.69.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965e0aea-4121-4d1d-a4b5-719e370f2890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073374fa-90d1-4e31-87af-fa6c08f91fb3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919eb422-9aad-4756-bb42-60c1a4d584a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.225.4.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69a02c7-4836-4d58-bf9c-d4f871c21c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d26dc6-f2dc-4754-95d3-80d0c44295ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d41759e-9dc2-4766-9a1a-046ad60a70b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b1ab96-36a7-4592-ab51-1053c04a4f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554c2eaa-5f5a-4ec9-a70f-69f2dcc9cf81", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b4c823-a3d1-48a4-80c3-2d5d2693de72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b24e35-9ead-4da5-a01b-df95d26bda82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.120']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c003c025-295c-44a6-8e9f-cfd374194bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d786fa-604b-47d2-9049-24417b9a7e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.122']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a467cb-1c73-47b1-924b-e3b473389f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8358b830-fd43-46f5-a387-27ce641898ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.124']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c4884f-1d6a-49eb-8429-b21515df92e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030b6d2f-1d66-43da-b087-5db5d05fcb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.126']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f157014-5229-4f34-bb4a-1ea567d94d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce13016-6e0e-4cdb-b026-c1c7ab20dbf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b962677b-ae04-46a9-ba82-76cd5395f0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69508d51-19e7-4a51-a269-7a007fac9a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e114ff-620b-4e8f-9a9f-36c190f3e4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973f1a98-ae4d-4fa6-b36f-045e24b93b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bce1e6-2d37-4c2e-bfd0-9b89ff3373f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37be4e84-b6f7-4806-a0ba-1b7718b362b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159672e3-06cb-49b5-b4d4-c28ae7b2c103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a8240f-f7a1-498d-a65b-e20752d48039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af274cc0-832d-44b4-8781-4d5992302083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670f6614-4508-48df-a38f-0f3ceffe7423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe5bc73-4694-419a-8ef4-24d2c05c2713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b93764a-98ec-4f25-b47d-1fa8ad8e0dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35934ee0-52de-45b5-951e-714c30fa70c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd39ab8-4070-4a9a-a344-5083c887eb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62cd12b-69c7-4da9-a0d8-ad0b70effb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98244d55-5770-4f18-9e76-91b837962b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9debc42-10b5-432e-87a9-50efcec8144c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eea2c35-cf21-4539-9b69-8cf2cc627042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f03b3f-af39-4e47-8a90-acd1715c8641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890df18d-bc27-45f3-8e15-088020b95e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.16']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62cf8a3-5e9d-4fef-bca6-396f30cfae51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec02087-1966-4ffc-a9e6-c147077105a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfcd341-3026-4c9b-bbe6-658c66f227aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1300d2-c0eb-4387-8e15-bc0c71c2f25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda89919-6a29-45a6-8112-2919c99592d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.184']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797b4e4d-f424-4e69-8a73-ff2c27ad2187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31d16ec-af02-4520-97fe-a3ababdbe378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab614e27-acfd-4793-9588-a04f87375f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf37e205-9ec5-46e6-aaf4-8c75d3240add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a479b8ba-3516-4c60-b814-804c95f8ac84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be87a28b-ef2e-44b2-a3f9-17e8e9e17768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef74eb1c-738a-4955-ab94-9b177d91dce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.190']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d76c892-f0ef-4775-9d05-ab8ab35140cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c48b57-d53e-44fa-82ec-a1a47d4e916b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f634f2f9-0662-498b-8cc1-273cfa43ee35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a197f50-b572-4e0b-8607-88deb82b169f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b619903-a5af-4ede-ad44-9b4ef9032463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d925e305-c48e-4763-89b5-85adb2f45b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a74c6b-6fd0-4c22-9662-d95617b27a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108b034a-0f00-476e-b49f-4cffadd8b05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c800230-d97e-4c6a-a9ef-a3f14d87fb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796d3c0e-3192-4868-a624-b5949b73a3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7d0890-4b4c-4971-b734-d10c526fc60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9debf63-63a6-48d7-8985-740d41f1b64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0166a02-33ee-4019-9c1b-546c931a14d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27476028-d42a-4ea3-ba18-ca0806dd0d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db85b52-c52f-4321-97f0-c3531296c095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c76e377-516b-4f61-815e-ce2e9786d789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fae3093-4026-4228-bde0-aa94adbd1042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0411616-77e3-4c27-b7d1-d1f0d1ea4301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1f2f05-75c5-4554-b601-5b19b1c995bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5faedd63-6b75-4126-b3db-7e8324daf89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007cd5a0-3be7-4c95-a16b-e8f4b2b8497a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1014bec8-c9ae-4743-865e-fd232d357e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39ee871-37e0-4667-935f-8bcc37bb6c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fc45e1-3891-4828-b7fd-1fe6c844a66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4467059f-fb1a-4322-908e-87169ed0a010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.24']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19add7c4-25d9-43d2-b20e-8b9de7d1b3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9799d0-b7b9-4077-9a19-425bf1025de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaaa5590-2f31-4eeb-8073-aa7e34c1db7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70e3705-199f-4642-b0e0-80a5494d99ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d3f63e-e0cf-488a-9953-0b65678c5be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25765016-392a-45cb-97bd-ff717e68133d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89467593-316a-49e3-9241-76e7b08f3ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3841956-69e1-4f9e-b52e-2281061861b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494ac264-1bfb-4e76-a095-46d03cada9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3302eb2-539b-411d-81c9-2bbe19cbf37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac4b45f-2ec0-48d4-aebb-84338a5cda26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db49d6f3-8acd-4097-bde6-4ea88bf64ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa076a11-e032-4820-b26b-caefe0f0ec75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.28']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e1ccfb-a6c0-4a08-9c73-be3c58883437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f55bcae-e90f-4575-8603-e574fa21eb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25390bc3-4144-469b-9bbe-1b1924d2d519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43713b71-88a3-4999-94f0-59e88b74cb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b1ff0e-b2fd-4229-b388-a6b6084a072d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea463cf3-1853-42e0-9380-093e9dec17d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03b1e65-ecc4-4438-a14e-36ad92bb2734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffd573c-d438-428b-8e79-621d6eb5e185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4b8765-04b4-46ac-9cc4-b37d21786124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.52']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205e4222-4814-4e63-b01b-2115a20c9983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e921d8a0-27c5-4d0a-916c-919f25599233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27ede08-d48a-4573-8156-9f0bfb7f1401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe8878e-0390-4888-98f6-fc28fee88bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.88']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb13528-3b60-433a-9cbf-2107a08bc5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a70ee1-f80f-4ba3-b642-b3a350b59e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29d164a-8e99-470f-8b56-2cf97a1a2d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.90']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088813b2-4b94-4d4d-9d56-4fa293dada2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b76476-3722-49c2-a183-de9332699084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.92']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b3cc5c-cbc0-4e3a-a9dc-a5dd0b6e958c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d96bed-c04d-441a-8865-b1250dddfb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.94']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468ebd28-afaa-4a4b-848c-dcf9c57dd2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bcdaa4-4c70-4efc-836e-28444e7d3447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.0']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334385fc-b55f-4a43-bf25-2c7b24fe67cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e335c9-07fa-477d-bd4b-bfe0ffe4ddba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f856729-2486-4a24-940f-96cc20c415d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.104']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50e0bb4-6d02-4ce7-a9b2-653513e43daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c23cc6f-7ff6-45da-b383-d8714feb5f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0200e6-f465-48b4-bb83-11c4a4c60273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6781fd67-2b56-482b-9bb2-b05b86f37c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.108']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aad49ef-0ee6-42fa-aa0b-1f827b204313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8155a075-b3e9-4808-bccc-7f5b0ab53cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923cfe87-59bf-4ecb-9e4e-d5b96d4b75f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.110']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb09ea4-5dce-4926-ad2a-0a241d373d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a34b58e-9632-4789-baa2-7b8fd0dfe019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.112']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f10061-5b60-4953-b441-ff6804f804e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3f90b9-c83c-4996-b4e1-e8e9193f0922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.114']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b6a217-3a56-44b0-938c-18794b8aea46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3ad909-fd1e-4073-ad59-dbbcd160d653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.116']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6501ba-ef8f-4ca8-879f-23a1ceb01824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e77eb7a-6a0b-4a9e-b24a-8dfb629e9e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.118']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51860224-4118-4725-b9c0-e3fcf9c60f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f371553e-63b1-4f97-bdac-bf3ad2b04f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a253a7b-f1b1-4e4f-bb2c-86c64a953d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.128']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bc2639-961d-45e5-abf0-cb72dcad74f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f127fba7-df66-4e53-b7ae-c74120a87806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d901be81-161d-438a-b35e-03d6babe6be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d27a416-219a-47c5-9c12-a61898887f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82467411-909f-4e50-8426-3c7fd49d9ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babc11ef-981a-458e-a18a-c276ab9f4c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6b0cd0-0a53-4488-a60a-341940116134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.134']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd69efb-f711-4f2f-99b7-cba639777e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fef52e5-42c2-4d65-a938-f3e69592a4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.136']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27699cc-e727-4d01-a16c-006fa72497c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531e096d-be58-4525-95e3-d80fd85ee495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.138']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14eca7ad-8acc-456b-956d-903526083287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f793aded-9185-418d-8118-48e8a5d1b2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.14']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d25aa8-2e47-4615-8fe3-27e6180a7c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.140']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a060b516-a4cc-4dcd-b193-99a89b7b7009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd23b4f7-2773-4370-8fff-b9bfaaff69ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.142']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87769e28-2f43-4d81-b436-fe3071d02568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f086d6-b2b0-441a-adf7-263d27281218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc14b29b-d982-4642-85ff-e9c0c19a33cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df78e50-b236-4c8f-aae2-513d3f759e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.146']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc11080-d222-4054-bc24-e0eb6ea5e70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1c9038-d7db-438d-bbb5-8e2386a7a0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ffdad2-bf0f-4734-b465-465a7c4e0a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5c43fb-7e30-49a2-abcc-c2758b3e24b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4f7d68-ec27-43b3-8f6a-dfc376d9e3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb347ced-2e00-48a7-8ed1-faf6b1bec56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3e8800-aba4-4a72-997c-e7b89b97e22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00371f3f-b3c1-492c-aa22-acb21ae25091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86014902-7bd7-40c6-a91a-9d39dd809e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c087593-7f53-457b-a5c7-75f5427d99e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa09c18-e13f-4c83-aef7-295af724dbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.156']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15f1dc4-13ac-4698-8754-3311bc30d9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a845ee-6af3-41e7-a39e-fdbe7cfa4117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.158']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57abc4b7-20d7-444c-8112-4f6928a0c7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11225de-074b-4820-bbf1-a5e1e03b2297", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82ad22e-2ca3-4c37-ac7b-eebc1a5aefcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.168']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f3bbf4-290d-401f-97f4-ffabbbeb2c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c0dcac-0480-4b97-b74a-797ca37add41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.170']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f78a285-156d-47fc-84e0-bc4b0f020299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f4e1c6-1622-4554-b199-bfdcb525d87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.172']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a005d3df-659f-47e7-8b1b-961dfebee485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98253fa-189c-4721-b6f5-701cefb08b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7d5d26-a795-4afd-96eb-63bbaa097a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d698f1e4-b407-4cf2-a562-5aeb62784f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57023e76-652b-4851-8094-f42f6bc308f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe1fdb3-a4d0-4fc0-9bc4-7e68560bc89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.2']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea15dad-9958-40d0-ac07-328a7a7f215a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.200']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0de554-c03d-4a54-b826-59ff5b9ffb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9426b314-c1cb-4398-8271-573283babf95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.202']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa0c9ff-8bc2-4e6b-b0cd-3658bfeedf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef05eb11-34e3-465a-b76d-511bedfd9bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.204']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab07be2-2129-4a14-8ca5-d57e98e65a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d984c8ca-8e65-4651-8e59-bb95c50e217d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.206']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affb063e-f4f1-4ec0-a263-47c015c436e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba365646-ae7a-4277-8c8b-5634da7aaae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.208']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189a49da-c963-41c0-a836-297d0f9f2573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5c1521-762b-4857-aec8-9f1fb3ce78d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.210']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a56d4b8-b47a-4f52-9b71-ca5d4beb7458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb84c841-fb99-4761-8aa5-f857c7d73095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c353e0b5-ed99-4b37-b726-af78090180ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8b21b2-e2b0-4da7-8485-e14f27aabd72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.214']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5bde95-6779-4f2d-ba9c-81b2d00bb448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e07e3e-61c3-4c36-bbbd-0d597e0faca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713b7384-5cef-4514-a3b3-7e87191a7117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.224']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe65294-90fe-47be-a8f9-8f6b47552cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf7a7fc-1a5b-4301-b703-15c1351d1040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.226']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1deff4aa-1472-41b6-b497-2a140df9af00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb5e9b4-976d-4c25-8914-c3ae65d291c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.228']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32b2b66-0019-4f44-9083-c9ad11bd7ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901883f2-220d-42ee-a773-1462159bfaf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.230']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa09781-857c-4072-b62b-ca1cca1195f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46515e4-f8a4-4cb1-a89b-87a34217c3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.232']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d54a16d-b2a4-4987-8ecf-192fc2d25e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd261864-82aa-4ad3-94bb-a1ebf8c6b9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cfd95a-8aae-4a47-a804-f740964777a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc9e2b6-bf3f-42b8-8565-444e968408e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c40bba-8b1c-4efb-98eb-8fbcb3bae6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5321ed63-ea9c-4c6b-bf43-1e32757350c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.238']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c957a25d-5898-4575-a459-1d1621bc5796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8610fd18-8378-49ff-bd02-4bcce7361312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.240']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dfa960-0208-4891-9df2-78e0b2908801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c6b45a-9e47-44cf-b966-84330415b0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.242']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279c86b9-ac75-41a2-8496-8092ca3a9eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e56f540-475c-4c25-910d-fe74b02fa0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.244']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c97b7f-1811-419a-809b-1165d21496f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1317f3ff-2a04-4836-82d9-866d389b3e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6188869-57ed-49f2-ade8-4a7363b7aec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df74aec-778a-4a24-8d4d-f2de9b6ba798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249d21e5-6873-4d30-b9b9-c1a6801b909e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8878f3-53fc-45de-97a2-b422883d14af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43df72ed-32fa-4be5-b738-25835238de3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadda6b2-d070-4416-ad11-d7e7a1db947f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.252']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622c2cd2-37c5-4257-9138-110aa8d7bee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3741e9-7ce8-4eab-87ab-92e5e5e2783a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e617b8-b01d-4736-9672-fed698f606c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd6a53e-b443-48f0-8ec7-23d86a9aaf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffc5cd4-b3fc-47ba-80a8-7a7ed02897cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39185c4d-0c74-45a5-a132-797cedce0bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8453ad4-4bf4-4c71-b61d-28868467114b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e741bf-7a61-4ecb-bb02-fc3993eec954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.6']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db25f04-a0dd-483c-8bd8-01030a7bc8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.64']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbfdf0a-a7a9-487e-853d-f4039c858802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6231de-005f-48d9-a26b-8f9fb0f2094c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcd7956-33ca-41ab-8d25-615399cbadba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d507f19a-ba16-4d04-8b74-38f1f220a0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.68']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329d792b-ed44-4221-ae44-b94c48091df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97bc994-0df6-48f6-a39f-f9a63841e8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b1ef33-8287-49e0-bdd7-07be09470d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.70']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc15bc0-6a4b-4d2c-b0bb-06b9e75f6ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a467ce5-547f-4abd-9cc8-5ae54a99c61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.72']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0910191-56cf-4dd1-9bd3-7ddf327545f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77055c55-1d11-4ac9-8a06-9504b91234c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d049c81-fbc8-4906-95dc-6c4598dd8ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea01c5b-96ca-4689-b89e-1eda7305c13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.76']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63017a7-15d4-4fbb-a379-3ef75a726103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab88f47-d9ca-4666-8a33-0a6211862661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.78']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083c7c00-c18c-4835-a2a0-5c5ab7ae50f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff57b8f-d503-4ad8-a2a5-9d0414d80907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.8']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace27b9a-2de4-445b-871d-af12e03a4398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.80']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed09b82e-7dbb-4750-aca0-a81f976c318e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee1d592-211c-4fcd-b19d-48cd08958b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5084a10-4a35-4ae8-bd08-1995432caf05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6416173d-40b6-4050-857a-eb5824e0e1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.84']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355d148e-0e71-45f9-9bb2-ccf6a8391def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5b0866-9cfd-426b-ad81-61ec8be94b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.86']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c6bba7-fa4d-4743-8f3b-1f73920405f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b560635-c8cf-4479-9d3f-1bf5fe58cd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf417d2-25d8-4a3f-9549-4247d064ea5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.239.9']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadf6bfd-4ab2-484e-99fd-2e086c2bd49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d8f78b-363c-4430-a033-ffa5a8f9c18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.24.1.201']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8508c2e-61d3-45e1-a8c4-706bb3128c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.80.192.95']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c675d71e-0b0d-4273-8044-cb9404f94b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.240.82']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe9e877-56f8-4bfb-b539-a514cdc17b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.97.2.30']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a47ef1-7b4d-45f0-aaa3-cd682d556d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.80.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d39124-9e85-4c5c-ae27-7437e9813192", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726f39ee-4d14-44d5-aae9-ffd51c7bbe7e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.196']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f1838c-d447-4f11-93f2-4f2d62926464", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.197']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2ac2a4-cd21-47cb-8a45-2552461543f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.23']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df54b290-189a-4d8e-82c5-092b81735fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.235']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb7e1b1-57d3-4295-9e0c-925e8a398efa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcb6791-af71-417e-a8c8-fe1b128d4e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef0acdf-9a33-4348-921c-823597e816ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.154.95.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656c2abf-b81c-43cd-a066-9e4ba14e2136", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.138.58']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c117526c-9736-42ae-8afa-dec1c1f7aaf8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.245.125.18']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c179cd-8025-48fc-85b1-61c642b70857", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.33.220.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b614c2-d2c6-43ce-b7f4-1db2ca133787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.61.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f64b5d-efb0-4933-948a-b4afc5d8d31e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.54.231.203']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9156a5c9-de14-418b-8cf4-01882c0f916a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.145']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36310503-bd8c-447e-ba1b-1c6a71119edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.180']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ec8509-6f92-40cf-9f78-53c51ae802c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.181']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dd17b0-0982-4d90-85ef-6be2064e2b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.182']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30881583-18d9-43aa-b5cc-b3750424a6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.22']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07010f68-071c-4e33-8fbc-66f445d11a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c2463d-a9d7-4fa0-bba6-4e2cf5a07f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.64.230.254']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6842553-1f3e-4d65-a132-234f8c955245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.62']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a85378-71bd-4398-b006-5d8b3bee2815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442474c0-fff7-4d60-bf7e-f0ffdff3b803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a102b623-7b44-4a52-a291-b2b92958e212", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.42']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bb17d3-bdf5-4f06-a0d6-fb9099bc9bc0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.46']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0729d0-4a97-4ceb-84a4-4f9b3d2c1b79", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.50']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a9941d-91d7-4ddd-9f67-b9aea441600e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5478cdfe-78ad-4525-aede-ee68fc70737e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4366305e-b7d0-4b62-96f4-5325c61dcc0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.183.94.195']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3b8c45-91e2-43f9-bc57-d3b68c53de57", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.228.187.149']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d45ffc-4738-428d-867d-015bc7468cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.125']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46eaf883-acad-4a1a-b3a0-0f84a383fcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9ba682-df6e-4715-a8c5-11461d21173c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a33778c-53a0-494f-a91b-3aea1367d91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.152.27']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ae90ea-3acc-48f8-b3ac-e562c79891a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.158.61.100']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04baee9d-f7d6-4835-94a2-7d8cf31d721d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.198.4.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0947096f-8424-4b43-bd48-3ec95cc8b8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.20.251.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40627f82-f54b-4827-a30d-82fa60224d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.187.179']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b56779-4eb7-4837-af03-78acadf6b658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3a159a-2271-477e-9300-e63d587f7141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.106']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39cd663-c8e3-4f47-8a59-1de7218fd7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.107']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1644ba19-68cf-4893-9e2d-18b672ce53f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809687bb-819d-4055-9369-764bde0ec042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.37']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ce33d9-b9c6-48e0-b3f5-a2b0fa647867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.38']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec67533-e8b4-42df-ac5e-e9ddeb6d5014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.232.40.89']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186d28ba-44a4-480d-a36b-aceafd8c85dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.250.61.10']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059f07ef-ef4a-48c5-a162-eba1875590c0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f710d00-6d80-4940-abcf-927cf91ccae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.246']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f484e9-6e0b-4e73-b2a2-ba8129832c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.29.124.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eee88f4-ead8-4d20-935f-5810550237e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.43.11.19']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8692bfb-ce89-4e62-94b0-34e15aaa03ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.49.211.148']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20ccd54-27e0-43d8-909b-de5327b93aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.51.120.49']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325e5577-a965-4446-b4c0-a2a1e0c9794f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.75.71.186']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639b92c8-a69a-4dfd-b526-4ff52654ee0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.99.91.188']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227e28a8-24eb-48dc-b10c-b93b1bed74ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.168.164.241']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c405b495-a942-48a5-b964-1d832bf15c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.236.159']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cf3962-2920-4a76-8128-70d7be05c5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.52.233']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1629150-7784-4b96-9868-2a38979f32d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.55.77']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc945f5-415d-4f43-acdf-0dde34ef4c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba307cf-9dec-4cc5-aeb8-8f86fee41b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.46.140.31']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec0dddd-e1c3-48a5-88f1-71fbb41151f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.47.113.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656e88bf-ccc9-4a36-888f-43a598aa36c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.244.163']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794c6673-34f8-405d-a795-8de35cdbfcc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.244.164']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fb22ec-47cb-4ce3-bad5-5f98ce061bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.94.37.26']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68595821-114c-496a-914f-7c17f40b62b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.104.20']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8d6b09-fbee-4842-8bee-d462dc26265c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.152.236']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c2a21e-e739-4d68-b45d-d95066accf5e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.153.174']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd1fb1f-f9f8-47ce-b141-352addcccee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.215']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2feb8b44-a63b-4508-900c-afbb078d4595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.218']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1490a14-e7cb-48fe-8b3e-a370f17fe419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.175.154']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532e70d8-12d4-49c8-bbc8-7c8e35eb6aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.53.232.39']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30174e84-5197-41b1-b9c5-b3e60daeed8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.8.116.34']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89954a80-aa68-4c80-93ae-f168b9589b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.130']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5e828e-7b9c-4e1f-a0e4-e16548c7852a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.132']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e5438f-3761-43a5-8110-e7a6f874c106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.133']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975c6ea0-f1ad-4343-ba59-a700f8bf1c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e765f1a6-6452-4a65-bacb-6187f8467b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa58d417-adb0-4279-85e8-815335e541a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.207.212']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110273a2-2f85-4715-a469-7b0dc57096b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.255.24.4']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3b1750-ec25-4981-a919-c30b6a0767c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.32.80.234']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0663448-225e-406a-ba2d-930d7fd5728a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.16.166']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08039933-a051-4851-b259-1cba93eed4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.81.205.36']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a0f0b3-5282-4ba7-81b8-2531ca3d1e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.81.60.48']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6899609a-8c87-4a77-a2cb-6ae8ce718149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.84.188.17']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76f44f3-7686-47f8-b46a-b4263d446972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.94.27.155']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3de2eb-6f68-4bbd-bcc4-89d5e94526c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.254.97.67']", "pattern_type": "stix", "valid_from": "2026-05-12T00:00:00.000Z", "valid_until": "2026-06-11T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-12-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b159dd-7dcc-400d-8e60-7589e265e0d4", "sighting_of_ref": "indicator--421503b7-04d2-40e4-a88d-5d74f8792256", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c019e97-0a40-433b-9928-503928dbe157", "sighting_of_ref": "indicator--2dd7a6c3-50e8-4aeb-ab37-d78e8bee41dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a179808-eef5-41ac-9976-5fdb5d9e14a1", "sighting_of_ref": "indicator--e522927e-ef5c-49ca-aa12-34339d305b25", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9949129-9bfa-477a-8a1b-951f98f53c65", "sighting_of_ref": "indicator--c88a1854-afa6-4b98-9f33-cc9d5cca6752", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c578eda5-9258-4a60-b0d8-07931cf26d99", "sighting_of_ref": "indicator--71ce5542-c9a2-4578-a858-8d2a2be97c66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd27ed2c-bec1-41c2-b47d-9bdb3f7a4f6a", "sighting_of_ref": "indicator--e694af50-ec69-43a7-a39a-a03f1ebbeeee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dce13a-45f4-4a92-a0da-be731ffc971b", "sighting_of_ref": "indicator--4d1abb71-d017-40bf-a19b-b6a60c33c1e8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f58fb8a-e187-4b77-b839-e5f385f80f0d", "sighting_of_ref": "indicator--5cbf08e7-3965-48e9-8cde-1e8fca4e9cfa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9057e91a-fc3a-4707-a513-39ac3fb10380", "sighting_of_ref": "indicator--5cbf08e7-3965-48e9-8cde-1e8fca4e9cfa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b45a2a-ad64-405a-8d8c-069ff23edc92", "sighting_of_ref": "indicator--d489a2a3-93db-45a3-ab42-0a76f3e575a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a94907-a788-45d0-a4ab-84cb853fd8f8", "sighting_of_ref": "indicator--d489a2a3-93db-45a3-ab42-0a76f3e575a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d43893-879d-4c1d-ad94-0756d10ff296", "sighting_of_ref": "indicator--1b55fcec-a55d-4723-9881-4dbbbfc0bbeb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac524c4e-f8e9-43fc-971a-cc218b962827", "sighting_of_ref": "indicator--6a64fe10-0191-4f58-b671-dc8e27920879", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b618b2-8753-4b28-bbd7-16d728f776a4", "sighting_of_ref": "indicator--cdf1f1d6-fd55-4ed2-abf8-0592908b0576", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0678eb-a225-435d-a741-306e127ab7c7", "sighting_of_ref": "indicator--92d219c5-0df1-4d4b-8d15-51f84e727096", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d3573f-3eaf-4af4-942c-c6ef9450bd6d", "sighting_of_ref": "indicator--2475bca1-a844-41e0-8473-30060e9d9a6c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcaf7c2-1b0d-4bdf-b6b0-3a57adfcb3f3", "sighting_of_ref": "indicator--836c6acf-d379-4d7a-9fb8-21575c8f0159", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d272dc6-42ca-4885-8907-0cdacc5129eb", "sighting_of_ref": "indicator--68636d55-52d1-4ef9-8701-1f03be59d586", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f515af17-72a1-46bb-8255-02893567e9de", "sighting_of_ref": "indicator--43ae9474-4c52-44a1-aac7-1b0fc54934bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481d4b76-72dd-4838-b96d-a272432d7c67", "sighting_of_ref": "indicator--8b52b525-3190-4713-8f4a-1b57fe65eb45", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1f9bde-4493-4660-bc96-9034b2ec0f50", "sighting_of_ref": "indicator--8c1ccbe9-4b04-4325-94ca-cb24969f8fa9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0fa94c-4cf2-444d-a703-16296d51ee78", "sighting_of_ref": "indicator--0dfe5a3a-792a-4e29-a060-7b708d3b7630", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02adfa8f-9f19-4a00-b626-e5cded4afd95", "sighting_of_ref": "indicator--0efa39e5-30fd-4561-b987-ed82547717bd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33ec697-834f-4e82-b61f-2c587a29be03", "sighting_of_ref": "indicator--5994a44c-1676-4193-bfa1-b2ecf55406e9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf728e5d-6597-4d0a-8ef0-e8e6768d519c", "sighting_of_ref": "indicator--c93a3e85-26c7-4881-b077-8dbf62463ed0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb8bf27-57a7-4a1e-ae64-c917f94b4469", "sighting_of_ref": "indicator--9764b966-90b9-400f-8a9b-88f2d855b86d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd117e6-1695-484f-9cb5-02ca921cb36b", "sighting_of_ref": "indicator--48ac7ab9-45ff-4ed7-989f-cfe1c8434fe0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a795193a-8bb1-4cb4-87d8-78ec1568ae3a", "sighting_of_ref": "indicator--fb5b06e2-6dab-47b2-a6ec-d4359a6710e9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08f3bdf-930b-4b0f-aaf0-3c450361361b", "sighting_of_ref": "indicator--d3143bdf-2a72-4d71-933b-db85abed3399", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c74216-3b35-4b52-94ff-4f252c90a9a1", "sighting_of_ref": "indicator--3a65d743-425b-44f9-a3fc-8ed4b5a10d45", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b09a607-9a7e-4b09-91ed-2574c77ed67c", "sighting_of_ref": "indicator--f7df882c-9c25-4f4d-bd81-6e94b6674496", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff880eb-b1c6-4c44-979f-4a822803395a", "sighting_of_ref": "indicator--c23200a3-ed88-4cd4-8a92-5239d6bef97c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d0e336-15a2-445a-a272-e7ad118289ec", "sighting_of_ref": "indicator--d5cf73d3-9105-4733-917f-42f7f033ca99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a925110-c22d-44b6-882c-ff2b8f880ca2", "sighting_of_ref": "indicator--c5e65dce-0c75-4dc5-b523-c4486c103fdb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da10708c-22bd-42de-b103-c9ee0783c0a2", "sighting_of_ref": "indicator--2e8a6689-7725-4a24-a832-1f319de7750d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63b9899-eff2-4d39-82be-cb14daac2ac3", "sighting_of_ref": "indicator--231aedae-dbc6-45d4-9782-16722eba36e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110cf124-65be-4674-966d-efaaf6e18459", "sighting_of_ref": "indicator--231aedae-dbc6-45d4-9782-16722eba36e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0046c0-4434-4de6-9f9e-717f4259d353", "sighting_of_ref": "indicator--d43a1e0b-d6a1-45cb-92ef-6ba0b84ecf2e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539d3d04-b837-408b-b577-fd5e189b928e", "sighting_of_ref": "indicator--fb564c21-3f42-4aae-a6ba-47635814afa6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f906fab-fc6e-42fe-a773-2029139eec8d", "sighting_of_ref": "indicator--5ac142eb-6523-4962-9244-65378d6bbc0b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91b52ea-d672-453e-8f70-228044368822", "sighting_of_ref": "indicator--ec7b4ca5-cf06-40fc-b306-c2742f70991d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f6c0d3-1b83-447f-aa33-24eba9f78269", "sighting_of_ref": "indicator--b3e33342-6041-44db-a3b4-f1eace92fb5a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4659e20a-2803-44f7-8f89-b96dac5eeebd", "sighting_of_ref": "indicator--916bd4e8-4631-4f04-9c99-aa74d2c956c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b29eb78-e026-4242-87df-60ddc0856a9b", "sighting_of_ref": "indicator--2dd3025e-741b-4e8d-831d-6e2843fcf244", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18807b37-3ba1-4619-be14-55e2b664cdcd", "sighting_of_ref": "indicator--2dd3025e-741b-4e8d-831d-6e2843fcf244", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12685f0-0695-4099-90a3-f3cd4d2806d5", "sighting_of_ref": "indicator--65f41b2e-451c-48f2-bdf2-b0860440a4d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de50e910-daf2-41c3-b3ad-5235e35e5607", "sighting_of_ref": "indicator--75d2c1ed-2b91-44cc-b149-4c44e5019011", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63bac93-21e1-4c07-974b-f5ccfd8bed87", "sighting_of_ref": "indicator--f50cc0f4-6813-4049-b041-a5c01ccc7996", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a1f675-ed86-418f-b57e-62ae7c22e90e", "sighting_of_ref": "indicator--ce038d30-fbaa-454f-80ad-c24f584ce6a4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ef9123-554e-4720-beb8-b455d3057fdb", "sighting_of_ref": "indicator--c8b3fb03-b862-4677-97c4-76841b8743bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f381cf95-e7b3-418d-be3b-20db996926f1", "sighting_of_ref": "indicator--c8b3fb03-b862-4677-97c4-76841b8743bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32b9a87-2439-49b8-b2b4-adb361de3717", "sighting_of_ref": "indicator--8d073193-b9a4-4d70-92e2-a42e60735da0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9444fce4-5e28-4848-8e0d-6d7db4dc29b7", "sighting_of_ref": "indicator--0752178b-4991-4334-b3b1-0d3d87ad3cac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedba252-3c52-4a4a-bd90-45ca5ce0cd3e", "sighting_of_ref": "indicator--c8cbbf79-465f-4ed6-8c24-97b1642bfcbb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6906cefb-7779-481e-bd97-9d1ae958c264", "sighting_of_ref": "indicator--e6778196-c88e-4107-9cf4-e0195a43d2eb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f17d35-9938-47d1-a17b-da68fc057506", "sighting_of_ref": "indicator--1720fc72-8bd0-47fc-b030-c0f95a6d6c86", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde4a554-2d8f-44d4-9e30-d827faddfbc9", "sighting_of_ref": "indicator--b61bc646-0c11-4708-a7c3-af8cb2c52979", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93763bff-54e2-4e1a-897e-2bf8449fe9c8", "sighting_of_ref": "indicator--b61bc646-0c11-4708-a7c3-af8cb2c52979", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cdb07e-bd00-40d9-9698-171ee2ccef11", "sighting_of_ref": "indicator--6e157c22-d6f5-47ac-9044-8b208ea08c2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cb92d5-5f93-4c4f-a6fd-37db3375d49d", "sighting_of_ref": "indicator--6e157c22-d6f5-47ac-9044-8b208ea08c2f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825d6017-ce80-4676-828c-bb0a9c214b0f", "sighting_of_ref": "indicator--ea918fff-01ce-48c5-9033-b2ec7ff48e56", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67f4bc6-49e8-4dd1-9913-b163a9a43fe0", "sighting_of_ref": "indicator--f9756eff-1067-4eeb-8d78-047ead4df5cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc47059-f0eb-4496-a892-290bae2550b7", "sighting_of_ref": "indicator--2d36ad8b-b268-4af0-837d-53ca81c0aa49", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17f7504-6ca2-47ff-bb1a-90ff4dce1cc1", "sighting_of_ref": "indicator--4dbcbff8-f526-4701-ba4d-6d36fe987a53", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59c4aee-83ac-4106-b705-e3e66f68d34a", "sighting_of_ref": "indicator--438a8f44-790b-4979-9150-7ecc70a73c5e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25389a6f-8fee-4081-b2e4-32af195274fb", "sighting_of_ref": "indicator--f98d2280-b0f1-4dcd-be62-88757c25a8ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a59355-177d-40e0-a135-bf8291130506", "sighting_of_ref": "indicator--3604fcc5-314e-4bc1-9aa8-159fb10afa2b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5e51ac-5cdd-4424-bb0e-c685e14c209c", "sighting_of_ref": "indicator--ac8b2fb6-1049-4361-86a1-58db9224bf75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc74a852-322b-4cc2-9d82-423e12257748", "sighting_of_ref": "indicator--d48eca4b-0a7a-46db-80aa-2714ee6a4025", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ef2fd5-4c7a-49a4-9591-3ccc89610314", "sighting_of_ref": "indicator--c83e8e68-2d8b-4297-a41d-9ea0f206f8f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff9707e-ead4-4898-b913-be1ebc7a9d22", "sighting_of_ref": "indicator--78796d5e-32f5-4d11-bf7e-5147ad019d03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d86d98-5480-4b1e-9c81-42f3848cce6e", "sighting_of_ref": "indicator--78796d5e-32f5-4d11-bf7e-5147ad019d03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1a0199-b4ec-410e-82a9-7de876754bec", "sighting_of_ref": "indicator--3012fe8f-0063-4292-a214-dfae807aaf95", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10be9803-e4c1-403c-b294-4f6e14037cea", "sighting_of_ref": "indicator--4f2f9ce3-1c1e-4d94-a1e8-259037a148e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459ee186-4819-4166-899a-35b91b9be80e", "sighting_of_ref": "indicator--4f2f9ce3-1c1e-4d94-a1e8-259037a148e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7f9496-926f-4c0a-98ca-dce6ee0142b4", "sighting_of_ref": "indicator--1974ecad-fc83-4557-b378-f41c90681a3c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416232df-6721-4ae0-bedd-3c34f003b71d", "sighting_of_ref": "indicator--1974ecad-fc83-4557-b378-f41c90681a3c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d652a76-fd46-4fbb-993e-63598099d957", "sighting_of_ref": "indicator--96574e42-68ef-43f8-88ef-6d513cb178fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d1c5e7-4fd6-4e1c-93a5-4be67d25f0a3", "sighting_of_ref": "indicator--5fa105e3-1c49-40f4-9dbb-6da77ec1f98b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677ff530-94f0-4d00-9fbc-78b3e9ad5fb1", "sighting_of_ref": "indicator--aea27b6d-7a14-43cc-8973-22434c1682f7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a33eb5a-72dc-4569-bc7c-36b032645142", "sighting_of_ref": "indicator--aea27b6d-7a14-43cc-8973-22434c1682f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8b8dcb-c9f8-4502-9d3f-db6d3dd90e38", "sighting_of_ref": "indicator--cf761f5a-3b0c-4a6b-9e5f-2166852e9c73", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1482e7e-edb4-4754-bd34-8232e805ba8c", "sighting_of_ref": "indicator--cf761f5a-3b0c-4a6b-9e5f-2166852e9c73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692a88f7-6cd0-4311-a1a7-bf54891939c7", "sighting_of_ref": "indicator--e50d0dfb-3f37-4606-adba-fea6c856d698", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2697bff-cfde-4029-8448-e24bc8d1f9bf", "sighting_of_ref": "indicator--e53c5c1e-28c0-4cde-a67b-6e33591a16c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76142a7-f131-4fba-93f5-d10f911ff42b", "sighting_of_ref": "indicator--e53c5c1e-28c0-4cde-a67b-6e33591a16c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e1dae4-578a-4699-ae67-36dbecbea906", "sighting_of_ref": "indicator--78149728-7519-4b5c-a5ff-1a1e2e0a133f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677f1bb1-51b4-4061-8f2b-de837ec4d968", "sighting_of_ref": "indicator--78149728-7519-4b5c-a5ff-1a1e2e0a133f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01276e15-ea6d-4470-98b5-c35ca2173ebb", "sighting_of_ref": "indicator--4531934b-920f-44e7-b1bb-f73c7db171d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90396a3-7f26-4dd2-9a76-4aea4bd99523", "sighting_of_ref": "indicator--db45600d-4c6f-4a44-bfe6-173556cdbfcb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94c119c-ae4c-413c-9666-2e8c43894a89", "sighting_of_ref": "indicator--962bc7b5-cf65-4725-8a91-21ddd66596d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a4dec2-c423-4175-ac00-f98b8c78e464", "sighting_of_ref": "indicator--10eb304d-0338-4c04-ac9a-9d365efc3c87", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc2fed5-ab5a-42bb-ac4d-d874780afa18", "sighting_of_ref": "indicator--dc196f7c-b61e-4b3d-a116-4a80c8a3ae5f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f122304-783b-4d4c-b55d-f9f11178e9cc", "sighting_of_ref": "indicator--589dbf02-59bf-4318-bee8-d400b3ce8283", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aee2307-43ae-40ee-8a11-883a2d121c33", "sighting_of_ref": "indicator--6fd833df-e9d9-4e60-9bc4-abe965b698b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64460273-5fdc-4e86-982d-df70fe4d412c", "sighting_of_ref": "indicator--e18c2132-eb12-4fe7-a071-0c92b4153a4e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865c569b-45a3-4e43-829b-155444ab548b", "sighting_of_ref": "indicator--e18c2132-eb12-4fe7-a071-0c92b4153a4e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be07ef9e-4ee7-442a-af83-3ca416e27891", "sighting_of_ref": "indicator--80c80853-ec98-4584-8b8c-0648dc5f8521", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f83dee0-602f-4d0d-9d39-2aacefc20922", "sighting_of_ref": "indicator--a1a7f0f6-3a05-46ee-8619-014538e0d70e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e253fbd-ee23-48f2-ac78-645e347e8fc6", "sighting_of_ref": "indicator--3a45c7cd-d8da-42ac-bc1a-6281b0dadbd3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c66281-e663-4b07-b9ce-44ea16501881", "sighting_of_ref": "indicator--74191c27-7742-4d64-a0b4-bc54021b5c3c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e718e3-d85e-47dd-8a62-7ddbd558f62b", "sighting_of_ref": "indicator--f26615ad-27d1-4b33-bb7e-6cc953d14437", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dec82dc-89b8-44cb-be68-c0720c925daf", "sighting_of_ref": "indicator--c99d7909-5899-462f-a2dc-4d2810e85b5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be29bae-5375-471d-a93d-9fbb694038d2", "sighting_of_ref": "indicator--3d36bd3c-e176-4e9c-961c-a9d3ce94f87d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8dc33f-ba88-4d63-a20b-266b0b64db16", "sighting_of_ref": "indicator--1f099d73-38d3-4c89-abbe-ef00951b2575", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a16a3d-f041-497c-b757-de1cb881777c", "sighting_of_ref": "indicator--1283d98f-82fe-4089-b595-5331fff12606", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cd5612-84a0-4bc3-9ef4-ee7c2e4744a8", "sighting_of_ref": "indicator--7c943929-7ae5-40ba-b1fa-5f0f5638adb6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a045973-d35c-4c3f-a05c-0ed93e884010", "sighting_of_ref": "indicator--81ad8cad-1911-434c-9701-37f678f95a2b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366de9e9-b5fd-439d-bd8f-4e1960cc9122", "sighting_of_ref": "indicator--81ad8cad-1911-434c-9701-37f678f95a2b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82f4125-1ecc-4b44-a2f0-91e721d9d5d1", "sighting_of_ref": "indicator--1765a263-b4e6-4e66-a9a2-d7dd9da0c1d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ba18c6-eab5-4252-bed1-84621c893494", "sighting_of_ref": "indicator--b473a560-a97d-438e-b5b0-45ce42ce293f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fec1b9-e3e5-4997-b683-8baf1427ddfa", "sighting_of_ref": "indicator--8c1ebd8e-dc12-438a-9319-4a20c8b53114", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42ce0fe-2457-48da-babc-0b740db17843", "sighting_of_ref": "indicator--a9990ac1-142b-41f1-9398-355915ad93ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649c3a44-bc0c-4913-9adf-f25f88560e3e", "sighting_of_ref": "indicator--0e599941-7b2c-494b-83f0-0d9459df00ca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb91848b-66ad-44e6-9f86-56136a3ff2b4", "sighting_of_ref": "indicator--dc08ebba-f27b-43c8-b2a9-98d6a29b1251", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5350427d-42b5-480b-bdff-5f6e2cf811d4", "sighting_of_ref": "indicator--2d0e2cf6-0596-4b03-b5bf-c4e331a1bb40", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce2ac53-7ae0-4a52-a92f-a2f240100ec0", "sighting_of_ref": "indicator--bf2584e9-f11e-41b1-99ec-2e8a7558b62f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab08765-130d-41a5-982a-771e4e5c93a9", "sighting_of_ref": "indicator--afcc32d1-c693-4233-9ca1-e13d5561f09d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e850a8-522e-43ac-8ef3-da87af1e4e63", "sighting_of_ref": "indicator--376dce45-717c-471c-b117-369bf25cddf2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cc87b0-c9c5-40e4-b2ee-f23be69e7c35", "sighting_of_ref": "indicator--c7d42c1f-6ed2-4531-aa7d-6378792eea8e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1dc430-5b50-4fdb-875f-72beaf38dd19", "sighting_of_ref": "indicator--2dcab3ae-02e0-46b4-9859-f69b7b0522dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ef553f-a726-4fd7-88be-5f239fd4dc9f", "sighting_of_ref": "indicator--1953b00f-39e4-45f7-9adc-b65aa47f74bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b7b55f-cee5-4399-b835-fa35ce319148", "sighting_of_ref": "indicator--f29c4196-0242-46aa-a7f9-49cbe9b8de43", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30abb873-3a7a-4806-ab5d-258658262cc0", "sighting_of_ref": "indicator--f29c4196-0242-46aa-a7f9-49cbe9b8de43", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7d392f-af73-4158-8241-749741534e44", "sighting_of_ref": "indicator--27b8c6d2-d063-4a34-836f-93704de973ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b13aedd-3a2c-48ee-a5be-44d0cbd9cfe3", "sighting_of_ref": "indicator--7a723655-778b-469b-a6fc-b10d13fbeff2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b10908-aa14-4369-8f93-3873f268c487", "sighting_of_ref": "indicator--aaae2238-c723-4c9b-b201-18b28f89c033", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266f5cdc-088d-4745-a138-700a0a3960a9", "sighting_of_ref": "indicator--0152c07a-65e5-4cd8-ad27-8a70ff952496", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa41691-b645-408f-8a98-4211d1076689", "sighting_of_ref": "indicator--dd45cd31-b00c-49a7-ac5e-bb57024ddf35", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df097e11-73ef-4a0b-86e2-1d0360cd00bc", "sighting_of_ref": "indicator--49c968a3-dc01-424c-94c4-9d54916d281e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ecf847-2b37-4b79-9f28-cccc76f10822", "sighting_of_ref": "indicator--b348c32b-c9f9-4341-b270-91fb7759a42a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ea8458-a5bf-4797-a104-f8865fd392fa", "sighting_of_ref": "indicator--c9cf87da-db63-4aa8-9b27-cdb0dfd1f0df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579799d4-8d71-4f57-8af3-31ecf773eb08", "sighting_of_ref": "indicator--0426ead8-b00d-4e31-8051-76160fa12482", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331dfd47-8ce8-4569-8710-256f20405e56", "sighting_of_ref": "indicator--44e97ef2-f30b-4655-bd6d-4f32afe52da6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a77adeb-1029-4d54-80dc-f8deeca630fa", "sighting_of_ref": "indicator--44e97ef2-f30b-4655-bd6d-4f32afe52da6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3cc56b-8352-4e2d-8e45-352df1e5024b", "sighting_of_ref": "indicator--16fb2451-0657-4244-80e7-7e2f0f7cd47a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237831e9-a6ee-4beb-82fc-0849765529a5", "sighting_of_ref": "indicator--6ea3a439-e625-4d94-a978-628766b62390", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b058f43-98ed-4896-8152-e574f05dfa43", "sighting_of_ref": "indicator--14c78a7c-2e17-4e4a-9b5d-fb9d4cdda875", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4b51de-0f49-4144-921d-f728f83e3a70", "sighting_of_ref": "indicator--45e81c67-11f2-4061-b2de-b8a267cd387f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c86a35-4a5b-415f-8c81-ba16e1adc832", "sighting_of_ref": "indicator--f9df837a-9c75-40a4-a4e7-0df237491406", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868866fe-ed1c-4eb0-97f9-aff8dbf1b746", "sighting_of_ref": "indicator--913af565-f8f5-40ad-8668-41a82d9865c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbc0586-0485-4b0c-81b1-b00f33ac98b3", "sighting_of_ref": "indicator--165552c5-70b4-4e7a-a015-68db97e3d0f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fede1b9a-893c-4a40-a8e1-2562e827f421", "sighting_of_ref": "indicator--cfd45812-affe-4fab-bd24-b2b5c174d394", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be38db1-9cd0-4f65-aa40-add11e4a9685", "sighting_of_ref": "indicator--92c763f0-57e2-4e2c-a575-8a8244c5d1c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbe59c2-8af3-4ec9-95e2-61839f57c9e0", "sighting_of_ref": "indicator--208ab660-3314-4a2e-aa6a-9eac2d831dde", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6631c5d-8946-4b3a-85ac-b9e267356432", "sighting_of_ref": "indicator--345e29b1-c353-4aaf-8397-ff45c6954118", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0d0c83-2746-4816-9086-66aa8c09e17d", "sighting_of_ref": "indicator--8037ece2-9f4b-46cf-8b75-dd7573995cfa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08656fb-39c5-4be4-b83a-023ae679cfd6", "sighting_of_ref": "indicator--41bdc94a-af95-4e73-9321-05bdc43cb039", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9932b10a-6779-47e7-aa8b-f39bf56b8df4", "sighting_of_ref": "indicator--1a0055e3-1ad1-480f-b90e-a21fdc713c2c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccabdf6e-8962-4222-98b2-f715f2f6fb76", "sighting_of_ref": "indicator--ce1a4f47-f441-45ba-ae34-375201669414", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aa6f3a-7066-4f8b-8fa6-d9831e5aae3b", "sighting_of_ref": "indicator--4672e7d9-6074-4a0f-8e87-bd47c4ac80ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7b1971-9840-49f0-a866-d5ffd7fd460a", "sighting_of_ref": "indicator--40fedc05-b481-4442-bfdd-86e488517fc2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6ceca4-ba6c-4834-9308-8772378b0dd9", "sighting_of_ref": "indicator--78946bbb-5121-47fa-8962-d5d6dd2cea08", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25b352e-5de7-458a-aae7-f467dd2af9c5", "sighting_of_ref": "indicator--b5ea6d1a-776b-48f1-83b3-247941f3542e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada29070-962a-4884-9a13-43e23026f00a", "sighting_of_ref": "indicator--aa0565f3-5f49-4824-b687-c060f5290877", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7b04e9-be7d-48b7-9142-2d5c52b99dc4", "sighting_of_ref": "indicator--c9768be5-9121-4f51-a014-71371e70ed8e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e8d9f2-27f4-4fac-84de-89f9a2fa8fb7", "sighting_of_ref": "indicator--c9768be5-9121-4f51-a014-71371e70ed8e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8030fac4-2e57-4b1e-a272-faba0dfeafe4", "sighting_of_ref": "indicator--71f38e05-2415-4fd1-b76a-a0153eb87766", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419608a1-8134-414d-9e02-122a1a4294b9", "sighting_of_ref": "indicator--731e7d1c-0527-4624-96a4-8447be98f944", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3688ffb9-c42c-4a7b-8539-0c57b87862bc", "sighting_of_ref": "indicator--7210d0f2-3749-4248-ab52-8167a0cf383a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a27c3c-e014-4730-8a9d-9f24d8c14c2c", "sighting_of_ref": "indicator--2f11c5cf-9c2b-4f31-83e4-8145378117a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a9ff30-182f-4593-879b-b4501075d783", "sighting_of_ref": "indicator--ec2b5f0b-de0f-4761-9e09-3228404463ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29ccef3-511c-4fd7-8c98-d3e530bf952f", "sighting_of_ref": "indicator--ec2b5f0b-de0f-4761-9e09-3228404463ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3916bc6-9545-4c8a-a98d-79011c3b9191", "sighting_of_ref": "indicator--bc355a96-1131-4b5c-b08b-3adb141f57ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3af134-2b54-4d60-a301-ebca51fcdf86", "sighting_of_ref": "indicator--195a9e42-ecbb-45cd-b10e-2fdc2b3104ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d750ca3a-9448-480b-b94d-66e2634b9301", "sighting_of_ref": "indicator--017e81ed-ca32-49d4-b407-27a70f9e8b67", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e365dc-c873-49fe-9bfc-d7ae26839a13", "sighting_of_ref": "indicator--8ce5587e-2dc3-4500-95db-6174a5531254", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c544ce-27b7-4a67-a155-daf9be683606", "sighting_of_ref": "indicator--8ce5587e-2dc3-4500-95db-6174a5531254", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd2b780-a856-4f94-9554-a9287d41e588", "sighting_of_ref": "indicator--aa6a3be0-443a-468b-a82a-0a87092baca6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82778608-d5af-47e4-bc8e-bedc394a7a28", "sighting_of_ref": "indicator--5b91f300-9339-4170-9ec5-459463fcda23", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd40cb19-4e08-4e47-b740-188525e0c353", "sighting_of_ref": "indicator--6022d8ce-bc9c-45a7-89bb-6439796ec2cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9459fe01-03f9-43c0-8c3f-345ccabbf91b", "sighting_of_ref": "indicator--68d2b8a6-18df-4b16-b1fd-bd77c633b8e8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81695fb1-2b4b-4d53-ae4a-e7bca14ef859", "sighting_of_ref": "indicator--7a903950-5ba1-4ce6-8fff-951aabc39a25", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25b5e50-63b2-4bae-a977-f22713c1b04a", "sighting_of_ref": "indicator--cbfb7f5e-68a6-4625-9ddf-3bd683b9f1d0", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81ac55b-1ed6-4d5b-8952-661beb19b2af", "sighting_of_ref": "indicator--9e8d3a92-9ed9-4578-a35a-686bfe9783e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74638d42-9e53-4cea-b16e-732ab0a9b9f0", "sighting_of_ref": "indicator--1ecd621e-205c-4f0a-96c2-c4574d5bc2e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409052a9-f671-40e0-b679-d9711f66af57", "sighting_of_ref": "indicator--1ecd621e-205c-4f0a-96c2-c4574d5bc2e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2facb553-2834-4ba1-bf81-2a7c916142a0", "sighting_of_ref": "indicator--a9e703e5-2cda-48b4-9c64-fc534e952b8f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a343f9d2-cecf-4229-b039-dc34f29dc61e", "sighting_of_ref": "indicator--82e1f9ad-0b4a-4529-873c-fbb48680ce52", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47650612-9573-4017-8ad6-67512c1296aa", "sighting_of_ref": "indicator--c7422364-fb24-46ec-a989-46ad5ff7546c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fca1ed4-a093-4721-b75f-2d829ebeec7d", "sighting_of_ref": "indicator--1d62c5a3-cb94-4185-bf9f-ea96cc3511ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d6a38d-ae7a-4cfe-9a0a-f37330ebd395", "sighting_of_ref": "indicator--2b2b6336-819f-476a-8fcf-addb3ab72391", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af64c28-df7c-4692-85e7-7ad3aa288c84", "sighting_of_ref": "indicator--7fce97e5-fa76-4c72-8284-f4608617e5e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59396413-1909-46b0-a7b0-8d641cfad0f9", "sighting_of_ref": "indicator--9fa160a8-06f5-4fc7-8112-b0c2235248b0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf639bc-aed9-4fb5-a181-274d14881e1d", "sighting_of_ref": "indicator--164e4c72-4e33-463a-87c4-aa1e445692cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3125bd25-c1f8-404f-91c0-60d233fe7e29", "sighting_of_ref": "indicator--5a4fbb8c-ba87-4f90-9838-22f3e4de22bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d876fb-6dbe-4c27-9de0-2a467094a8f1", "sighting_of_ref": "indicator--5a4fbb8c-ba87-4f90-9838-22f3e4de22bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957e8d44-54eb-4f6f-990e-086a4bb53eb9", "sighting_of_ref": "indicator--7dee036c-1a6d-4454-a6fb-8379d874006a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a2f773-94ea-41c5-963a-7666139b3afd", "sighting_of_ref": "indicator--845b1be3-5935-4323-81d5-9b5b03a4394b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b592b514-04f8-4acd-aac1-60c59d14f4eb", "sighting_of_ref": "indicator--845b1be3-5935-4323-81d5-9b5b03a4394b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eac9213-1949-4299-b6e2-1aa974d1c628", "sighting_of_ref": "indicator--0780a548-2d24-44ab-9343-67cc0ca40fe3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5c9da0-3388-46e1-a593-cef8d7c2d945", "sighting_of_ref": "indicator--0780a548-2d24-44ab-9343-67cc0ca40fe3", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d86112-96f7-443a-8c7f-410b44e20c8e", "sighting_of_ref": "indicator--f9966f8d-48c5-482a-bfa4-6819518e4184", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7373840c-8a8c-4c81-9d7b-1418623ee2fb", "sighting_of_ref": "indicator--c5451ed2-a131-4294-b0ef-e8789f716b9a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60967a2b-66cd-4421-ba81-ef48b8898793", "sighting_of_ref": "indicator--b38263a1-d98a-4924-a22d-337a13be54b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772a250a-e0e6-438a-b437-e7f7d2605359", "sighting_of_ref": "indicator--b323bc3e-5047-4502-9700-26b3f57c0a6a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eb5487-1264-4cb9-929a-b72d92926ca9", "sighting_of_ref": "indicator--0d4a12f4-2f6c-4f65-8f32-5b52b64fc4a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8223e7-e68c-4f2d-ba94-6f5098c1098e", "sighting_of_ref": "indicator--0d4a12f4-2f6c-4f65-8f32-5b52b64fc4a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ee9f2c-0347-4dd3-8ad5-aa92296eebe3", "sighting_of_ref": "indicator--2aad540e-eb25-4e80-bb7f-2c7986d8f848", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3c9a19-2371-4b8a-95b5-dbd0f4c78047", "sighting_of_ref": "indicator--2aad540e-eb25-4e80-bb7f-2c7986d8f848", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96096c2a-1002-4003-84bd-8448f2ed1246", "sighting_of_ref": "indicator--9f8a45fc-02a3-4e06-9e9a-7345ea6663c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a9d058-5ae5-4b1d-9a6b-34d4238f623e", "sighting_of_ref": "indicator--521fd691-070f-4211-9603-dcea3be012e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ee8b05-47ff-41a4-b1b7-8f80c158c356", "sighting_of_ref": "indicator--9bbed5bd-13c4-4480-a0de-ca521a53eb37", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b573e56b-dbd9-49a6-a9b8-939977d58103", "sighting_of_ref": "indicator--19419a37-e41a-4758-932f-a77c8bf4634d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ead2b6e-a194-45d8-9eb4-4cd77937390b", "sighting_of_ref": "indicator--77b71051-9c96-4705-b631-bf60fe3d9aa3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538ec146-e725-46bc-a1d0-7db3568fb4fc", "sighting_of_ref": "indicator--c3bab8d6-d346-4eef-9268-7bcd0d459a5d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f95d539-b295-49da-805d-d40676a7e454", "sighting_of_ref": "indicator--783a366b-314e-4f29-b347-3f3752ca2146", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1477d5d3-ebad-4836-88a3-60cce1b4563b", "sighting_of_ref": "indicator--9b0cd228-70b0-45a6-89c4-4b3920573990", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b88a7ab-666a-4944-acb9-87d1e8d147bf", "sighting_of_ref": "indicator--55ddbe99-a0e9-4894-8da3-ec7ed6e2767c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaab8356-35a3-4606-a796-eaa1aa38a6bd", "sighting_of_ref": "indicator--23ee7582-5a09-428f-8608-a20194968ee8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16305cd4-daf1-487b-b405-2d7ce24f4a6b", "sighting_of_ref": "indicator--afd75131-5c91-4267-92aa-41d7e3c14911", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb5c7e1-95c0-4051-9560-f6a7e21f1852", "sighting_of_ref": "indicator--66ece56a-d31e-40d1-aaac-ca5af83dc39c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745e1ec3-adc2-4313-b955-6969fb73304d", "sighting_of_ref": "indicator--3d5c824e-ea34-499e-a27e-a665d1875701", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022cfe84-79d4-4fe1-bfc6-1b23b66aeafd", "sighting_of_ref": "indicator--169b566d-cbb0-4527-b176-ba0bb6396df9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be4c305-4ff4-4b69-b52a-6db14077ff88", "sighting_of_ref": "indicator--72cb6ac3-625f-4b88-80d8-cf856a8a0daf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9862fa7b-90b4-41da-a1e0-0721e4d1e41c", "sighting_of_ref": "indicator--a807bae5-bd99-4270-85d4-3f167758f6d9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17fa7b0-4082-426d-86bc-b09368c97dfc", "sighting_of_ref": "indicator--88897eed-d1c7-41f5-bd89-79dd18501c63", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4741ea-5d7d-44de-8290-a07593d6663e", "sighting_of_ref": "indicator--88897eed-d1c7-41f5-bd89-79dd18501c63", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca4b8bf-2c16-4688-a618-009fc73f7b9f", "sighting_of_ref": "indicator--bbc5ea51-fd62-449f-ad21-318d2ecda6ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ac8f12-6397-4d17-b23a-51d72428eb4f", "sighting_of_ref": "indicator--c845241a-e58a-4353-8790-b0e0a9596c70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a1805d-efae-43dc-9d23-55fb76d8241e", "sighting_of_ref": "indicator--c845241a-e58a-4353-8790-b0e0a9596c70", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e299821-52af-46f4-96bd-f9a0060c24da", "sighting_of_ref": "indicator--4911a6eb-bfac-4bec-9260-d09ca06f8393", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a963418e-c491-4a2d-9931-e9d7434a6aa3", "sighting_of_ref": "indicator--4911a6eb-bfac-4bec-9260-d09ca06f8393", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef5c4b1-0938-49ee-a2e4-145c0fa17bad", "sighting_of_ref": "indicator--9d5723fe-bf3d-43e7-97ee-b54dca2b80da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8a7991-2cfb-497a-855b-a85b2178bfa9", "sighting_of_ref": "indicator--201da877-08f3-4c55-9092-dc74d37d78a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548f7938-001e-4089-b2cb-fea96df9e1e3", "sighting_of_ref": "indicator--f53b326c-b515-4b59-b4aa-bc55e5f16384", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fe1221-04c5-4c9c-98cc-57c2e3041286", "sighting_of_ref": "indicator--aafb3ae6-1d95-485d-af0b-cf1e3dcfe923", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f127d27-d517-4030-a0b9-1cf0e393739f", "sighting_of_ref": "indicator--ce7c837c-8884-40b6-91de-9a4cda62aafb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c0b68b-8ffc-4a44-9aa4-f23933e13dec", "sighting_of_ref": "indicator--4b4da251-ce18-4d85-9312-25eb311db827", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0e023f-a7cd-4b9b-a7da-01bfcd399c3f", "sighting_of_ref": "indicator--1096c35c-740e-4163-a287-a37c4d5d4657", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c5c4c6-f46d-41f2-aed8-7e0b4c552858", "sighting_of_ref": "indicator--1096c35c-740e-4163-a287-a37c4d5d4657", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69214895-7821-412b-b27c-e9dee071e030", "sighting_of_ref": "indicator--b932682e-d5c1-4394-899a-43202f10274b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472a963c-451a-4164-ab79-e24eb90d283f", "sighting_of_ref": "indicator--b932682e-d5c1-4394-899a-43202f10274b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0d7f9a-1ff1-47bb-b8e4-943655ab531a", "sighting_of_ref": "indicator--2a07d489-ce4c-432f-9c22-17f25dfdd2a7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e38ae5-b8ad-404b-be2f-c5c905ae814b", "sighting_of_ref": "indicator--2a07d489-ce4c-432f-9c22-17f25dfdd2a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f513200d-cf09-4a73-bfb7-66fe51c99666", "sighting_of_ref": "indicator--8e797d74-3cbb-45cc-9369-d420930b8d10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f257fe-3e6a-42b5-86fc-4862cef87adc", "sighting_of_ref": "indicator--0e4a22eb-9829-42ef-bff7-7ca992c8b1ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73e9bf0-f92c-4039-a96b-9cd7ca9800b9", "sighting_of_ref": "indicator--1e9b4f9f-862a-45cf-881d-03a5459df27c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1081927d-de73-47e4-92ed-30c61ea83908", "sighting_of_ref": "indicator--315c42cc-ed28-40f8-a510-df6632f57fa5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3364a4bf-348e-409c-8604-25da4159a38e", "sighting_of_ref": "indicator--ff99ddbe-1abe-49fa-9487-a194daf1cb50", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4138822f-5c09-401a-a23b-0f0b4743947c", "sighting_of_ref": "indicator--682f3e06-337c-42bc-8c96-02b5805185a8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ac152f-6c12-46a6-8130-63785b5ef687", "sighting_of_ref": "indicator--f7a90ded-a9d2-47f2-b74e-4b42ce45a133", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254f0fa7-6380-493d-a417-f3b9f972a34a", "sighting_of_ref": "indicator--299a9e37-4458-45ec-bef1-5a9f3f1a1cbc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2449abb-7fed-48af-8a83-4a649c510422", "sighting_of_ref": "indicator--f913a9ab-5284-4dbb-b3f3-ea732e31c9b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51873368-fcf6-4f61-9143-00a5455e8940", "sighting_of_ref": "indicator--a6a974a2-73c5-42f6-bf28-b25b30eeaf4d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c665df2-2b82-4588-bc16-dd274bdb42a4", "sighting_of_ref": "indicator--06eb2bee-1c5d-4739-a24a-2944152aa98a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decf5905-bd6d-4077-af2e-a28d763b4471", "sighting_of_ref": "indicator--6a4b613e-0530-438d-8af5-687d5e10436f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d658f86c-a6f8-4322-9cbc-425dc302bcf5", "sighting_of_ref": "indicator--132fa1d1-c7aa-4fb0-9a9d-908a24b28aae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2e3e9b-46c2-4fe9-9732-fb37cdb722e4", "sighting_of_ref": "indicator--3ef891bf-bcfa-4a83-9af8-8e89b30883c6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d7cd80-c488-45a5-94af-aa6b64846947", "sighting_of_ref": "indicator--8ac7dc72-19cc-4895-884d-6ade9c0b9b2b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb35ca2-c7bc-46ab-b41b-efa1b34e3f90", "sighting_of_ref": "indicator--1ff20a39-1e58-4654-8fc8-1bcb579f8a47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb70ac11-5277-499c-91b8-815aad66d5c7", "sighting_of_ref": "indicator--46211fa2-bf78-468c-97c7-f76fff36d5ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ade2ac-e155-4111-9e1b-a1436fede16a", "sighting_of_ref": "indicator--7a067458-36da-408e-a6a4-b76834824224", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd93b5a1-c3e4-47ee-ac85-6b9c4db6e222", "sighting_of_ref": "indicator--46e6cda1-1f00-4b10-a6ca-5d13057084b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16288af-5ea2-47cf-86cf-7258bfb438a9", "sighting_of_ref": "indicator--46e6cda1-1f00-4b10-a6ca-5d13057084b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036239aa-08ff-4565-9cfa-6884156050ac", "sighting_of_ref": "indicator--83608d68-b552-4a59-82e0-72384ce841bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ba9e34-27de-4fd5-a841-f00dd1a651fa", "sighting_of_ref": "indicator--3db03ba2-f230-4e48-9a15-d59e3788f313", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a87b83-0113-4596-a7c7-f7451ef8304c", "sighting_of_ref": "indicator--d499088c-76c2-4e39-919e-4e4b2cd4c91a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f59fcd7-281c-4f46-baa6-d46334e7f0b0", "sighting_of_ref": "indicator--6849c0f5-a6cc-489a-9802-485b0b6b483a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c06b47-811a-4020-8a41-d0ff929a429f", "sighting_of_ref": "indicator--1fcc5056-cdec-437d-a4df-6cdfb06a715a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0466bd1e-2a78-420c-be69-fc79237cc1b3", "sighting_of_ref": "indicator--1fcc5056-cdec-437d-a4df-6cdfb06a715a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f39a32-df3a-4a23-a7df-69451bdf825b", "sighting_of_ref": "indicator--d441646d-d758-417a-83c8-f9a47f01ee8e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3027a7d5-8a93-4ba7-906d-967be97da705", "sighting_of_ref": "indicator--06c67e75-1751-4fb8-a098-f512177f07a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d11b11-448b-4ce3-b27d-de1ae13f31f9", "sighting_of_ref": "indicator--06c67e75-1751-4fb8-a098-f512177f07a3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193c6d8d-64f0-4abc-977d-1be391de7cc5", "sighting_of_ref": "indicator--cdd019a2-d887-4849-984d-c5e28253982b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25f8371-73a5-41db-854d-d5687ba5f516", "sighting_of_ref": "indicator--cdd019a2-d887-4849-984d-c5e28253982b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eee292a-a8fc-4f18-9294-08e4f2c4dc93", "sighting_of_ref": "indicator--076b7301-7c12-4457-b86c-b309333ec296", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1ef501-722a-4b0b-a9d7-92c22b976f80", "sighting_of_ref": "indicator--094cb239-6c51-450c-8763-a7bf4a30477f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351cd836-37f6-4025-8cc4-57c0a8007985", "sighting_of_ref": "indicator--094cb239-6c51-450c-8763-a7bf4a30477f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb93bcbd-7ea8-4285-9e1c-7e4a9a1ddd7a", "sighting_of_ref": "indicator--da3b5e00-7332-4248-b945-4c5155a68fc1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1a889b-07c2-48bf-8787-ac9d843421ef", "sighting_of_ref": "indicator--da3b5e00-7332-4248-b945-4c5155a68fc1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec810d05-bc9f-4d17-b9ec-24169b62d292", "sighting_of_ref": "indicator--bd317b4e-f534-45cc-82d3-3bf6d30aa833", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a2b823-bf6a-4f92-ab32-fe10a07d1a8a", "sighting_of_ref": "indicator--bd317b4e-f534-45cc-82d3-3bf6d30aa833", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4398e1-c23b-4996-8ea2-065b572ef9d3", "sighting_of_ref": "indicator--4628dc47-ba89-4ee3-9200-55f95d38e773", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03201242-b09b-44de-a628-a44b1dd31ef0", "sighting_of_ref": "indicator--f83d7110-3642-4a81-9700-d5fc5592f87a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5af5dc-02c9-48be-8546-9eae14e5284b", "sighting_of_ref": "indicator--ccd5a277-6110-436c-8a5a-4571f4fa3d87", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15feea5-4c75-43d0-8f5c-9367f630f028", "sighting_of_ref": "indicator--90d43c73-846d-41b6-b983-1b40f55221a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eb2c98-54a5-4997-bb49-b6f648f2520d", "sighting_of_ref": "indicator--cc15ede5-2a5f-486a-ab65-abb8cfa87e4f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056147af-7694-4e18-ba7d-e702f0205416", "sighting_of_ref": "indicator--c96f70b7-bd46-495a-9054-c40193abe545", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0246dcb-3c47-4bbc-bc5a-d7cf5fce34f3", "sighting_of_ref": "indicator--a1225554-f10a-4f43-86ef-57eeaf150dc8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6a18e5-66db-448e-a7f8-0590004a064d", "sighting_of_ref": "indicator--3dfa2034-16c9-4971-8e8f-cf9f6cd996bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1078fe0-11f3-435c-8a59-a76371dda2a2", "sighting_of_ref": "indicator--c4b874f6-c791-4c2b-9a32-559eacac5d10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5444f999-f474-42ab-9abd-56f379339355", "sighting_of_ref": "indicator--3fbe94f4-c8cb-4a30-84c6-e61d1423c48d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69db3a36-cca9-46da-b767-eb851d6f41ea", "sighting_of_ref": "indicator--f7c0339d-64ef-42a0-8f24-de055e48e373", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2cbf0f-d3d9-482b-8f51-78917dfb2972", "sighting_of_ref": "indicator--6b949c62-075e-42a0-bd64-ce3cb5f5f915", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ba17d9-70d6-4135-a6f8-7d25a37c2b29", "sighting_of_ref": "indicator--f3960e35-4094-4c05-94ac-5cf5f06bd235", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7ac7ef-9ccb-4595-bb93-9ce528e89442", "sighting_of_ref": "indicator--eead1396-d979-4113-8e3c-79ad1dc6e064", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b313fd85-6f38-454e-8540-0af600f0d56e", "sighting_of_ref": "indicator--8cc419b7-308b-4ecb-bbed-3077a0c6fe3b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf4ccd9-7fc2-4c83-9c40-e784dacbe7f2", "sighting_of_ref": "indicator--d4641fe3-1514-4995-bb80-7673b52cb069", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e7db02-6204-4d63-bc93-56f626f612d1", "sighting_of_ref": "indicator--627f4513-d1ce-4c9c-8d9d-a93abaf6cbe8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70de7c9c-7c1b-41b8-a3a4-24caaca6fc1d", "sighting_of_ref": "indicator--bbb02d74-b5b2-4173-824b-088aea76dff3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d932bfb9-2ee9-414a-9ac7-3648f2490bf5", "sighting_of_ref": "indicator--10f03e83-a0a8-4b47-9349-4dfd45a3d18f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1959b2e3-7f82-4d07-946c-6c98c1ac4556", "sighting_of_ref": "indicator--12cafbde-62f1-4f39-85e9-043820d9210a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e248a829-c81a-4fdf-b147-7e89ebe28636", "sighting_of_ref": "indicator--5d431709-17b9-4896-b117-5667e410bc6f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf5b535-1655-48cd-9a21-9e7577a59529", "sighting_of_ref": "indicator--7d14a237-adac-4e31-a61e-3e5623680210", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf58092e-b688-4fa0-aec9-674c663931d2", "sighting_of_ref": "indicator--3cace0b7-2373-4c5b-ba51-6e5ddcfea4eb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a28aa6b-9012-480e-b1d8-89f9322727c4", "sighting_of_ref": "indicator--48fa69e0-2ebf-4c45-8c9c-9a99bce16615", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa934c6-447c-4e1c-99d7-245fcbd7e7c7", "sighting_of_ref": "indicator--1e108e8a-393a-4713-8bb5-a3acb0cde501", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273c8fc0-1063-4290-a65f-f37da91917cc", "sighting_of_ref": "indicator--df944048-d2c3-454c-8da6-2af1481429a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70699b1-8c7d-4f66-bcf1-67ff4eb89a9d", "sighting_of_ref": "indicator--92fce964-0ccc-43b8-b055-3d70d2ca38eb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4066b71a-54ee-4c9a-9bc3-20ab0f636fa4", "sighting_of_ref": "indicator--cca2ec88-dfa6-4ed5-9c0f-166e76b9994d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f32f34-0011-4139-917d-691a1a01d94f", "sighting_of_ref": "indicator--c0351f01-a527-43ed-aa21-5b7bafa8c66d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11401fbd-57dd-4462-9109-ad439dde898a", "sighting_of_ref": "indicator--0625ffc5-bc2d-4d66-804b-b47d6eb3e112", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8cb664-34d1-48e4-b79b-fc1189967acd", "sighting_of_ref": "indicator--d9d01a7c-b086-4878-8845-80d23de96556", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088d4666-5fa4-4933-b87a-e74576157ed1", "sighting_of_ref": "indicator--9a6743d7-8da6-4022-a760-053d353e33d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774e7b2f-f8ac-410b-9758-dc4cef6fe249", "sighting_of_ref": "indicator--aafa569f-4276-45b6-a291-ce0c6718c20e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b00d776-3444-411d-942b-4cfb51106ffc", "sighting_of_ref": "indicator--cd26d393-2ecc-40f7-b8e4-38810ba568f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5631b6e-b8af-49a9-a025-f2d19a5c8029", "sighting_of_ref": "indicator--26367869-0901-4de6-b76f-46c084e873c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fac226-1580-432f-94ec-624083f0dafe", "sighting_of_ref": "indicator--67074f0b-a6ca-4fc4-bb54-363187af2ead", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764b54dd-be49-4b7a-b036-2d9583e0eaa1", "sighting_of_ref": "indicator--b71b81f2-0f6f-4869-bafb-d6b1b5b0f00f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af88aeb3-e135-4381-ae35-58f8c6fc4553", "sighting_of_ref": "indicator--301415da-901d-4b1b-8b26-decb142001bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fb1bee-af38-47a8-8c7d-05f2adf07228", "sighting_of_ref": "indicator--621e2227-6dd8-4d9a-bb2a-d613c19659d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae431315-fab7-42d5-b5d9-ec3aee63d713", "sighting_of_ref": "indicator--b17085d8-9a4f-4a02-860d-9fd3b5adfdeb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b35cec4-1be7-4e16-ad9c-f4ddfb432a13", "sighting_of_ref": "indicator--0afcfcbb-2dc7-4ac0-8375-955689004094", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e1aeec-0250-404a-8814-ae92592619cb", "sighting_of_ref": "indicator--e7bcf6e9-b882-44b6-b3e8-88cc3d86c5ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fbaf90-3a9d-432a-a95f-8263fac59fed", "sighting_of_ref": "indicator--8f1749b8-0788-41d3-9422-87bde96580d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4d8717-3784-41e3-b418-18c7bc29fb3f", "sighting_of_ref": "indicator--60107acc-e8b8-42a8-95aa-1ce706d104da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148c525a-47c2-4fc5-8e17-546a5c8218ca", "sighting_of_ref": "indicator--f3490cdc-b437-4ffa-a3e0-c4e54584eec9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7a4b5e-b955-468a-b8a3-8739eaa506d7", "sighting_of_ref": "indicator--7b2f89db-08a5-48e5-9006-1302e458f673", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6ef114-db6f-4992-bdf5-0a1f4d3fac35", "sighting_of_ref": "indicator--e706718e-3c78-460c-9e79-3d0ac8f9ba6a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee7a576-f830-40b4-9f67-6e3d5863f135", "sighting_of_ref": "indicator--313e20a4-4ef4-462f-a495-8ec89acf8415", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b7f6af-5012-456a-8e61-4f15c9229f91", "sighting_of_ref": "indicator--618476bf-f51d-44a3-8b1f-a85626d74ddd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3b4089-8284-4b2f-8118-c937d756e660", "sighting_of_ref": "indicator--0746e9a4-679e-4312-b242-4c4b4efa23f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ada266-3d75-405d-8d4d-44d8f9c25666", "sighting_of_ref": "indicator--8b9af0ad-d37d-4c84-969c-b9d34d4593b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0774c8a-f434-487f-adeb-992e49270b00", "sighting_of_ref": "indicator--c1e3602b-4981-4938-b8e6-eb99f5c2d242", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc215f4-20a2-43cb-bfb7-61fe9b009f26", "sighting_of_ref": "indicator--281d9a9a-6776-44a1-9b4e-cc859545115e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec53251-cb59-4ff3-820e-335b0457ce4c", "sighting_of_ref": "indicator--281d9a9a-6776-44a1-9b4e-cc859545115e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9571308e-58e0-4e3a-9fb4-917c7a6bd504", "sighting_of_ref": "indicator--cb1d00fb-f319-4f20-9e47-2dbb050c7b2e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f12bfc-5266-4277-b8a2-d466a07110d2", "sighting_of_ref": "indicator--ae62eaab-85e4-4343-bc6e-583265ddb923", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3626fa-1261-4733-b887-cf58b645afe9", "sighting_of_ref": "indicator--08efcb41-e02e-44a8-8492-31fa5152490d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4810f327-ff79-420f-a176-3d6a5a11e0c0", "sighting_of_ref": "indicator--60acb51e-dd40-4581-aec4-1717921c2fbb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85b963f-705d-4a62-be56-7560cc53f574", "sighting_of_ref": "indicator--2f92e53d-dc13-40cd-950d-2c71dc6a7967", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32cee0d-77b1-4982-82b2-cd39d51796b6", "sighting_of_ref": "indicator--8e72c31c-6d31-42dc-8ee1-2873b71808a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78573565-bfb4-4061-b85a-9643117209dc", "sighting_of_ref": "indicator--0a8fb2e2-db6f-4d29-8dbf-ac29d1bcd346", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24a13bc-b590-4bec-8bf6-65c657b58224", "sighting_of_ref": "indicator--6bb694ae-6280-4cc3-aeee-d617921b1ed1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cb34de-6b58-4c79-ae06-b419eb5a526f", "sighting_of_ref": "indicator--b9b1f1d2-b464-4c47-a2a4-c5d2118dad88", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eead572-b747-4466-b299-d7f17aeebf40", "sighting_of_ref": "indicator--b9b1f1d2-b464-4c47-a2a4-c5d2118dad88", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad8f8a6-937c-4867-990e-043be1f29ad6", "sighting_of_ref": "indicator--32615630-d5c0-46ef-8c8f-1623e70fe035", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a2edb8-c9c6-473d-bcaa-daa7260ce59f", "sighting_of_ref": "indicator--24fc260a-2009-4333-a004-c89bbef45f50", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4c8ced-3201-4bbb-98be-02fac7f2e229", "sighting_of_ref": "indicator--6f5ef361-4b96-4e96-9215-59f42ed9312c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4418f0ab-5c01-4d76-8e0d-1257b9c4583b", "sighting_of_ref": "indicator--675b10b9-1ce1-4623-b361-8478e8584627", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4634c7-156a-4d3c-b63b-7519ce3f5e5a", "sighting_of_ref": "indicator--5a6c2af3-526f-4fe1-bbcc-6bb6fa84e84c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ac5404-91dc-4df2-9daf-debca3ece031", "sighting_of_ref": "indicator--5a6c2af3-526f-4fe1-bbcc-6bb6fa84e84c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef73cc02-8fb8-41fc-8633-a37a3fbb41a2", "sighting_of_ref": "indicator--5a772e3c-8815-406b-baa4-e4e957f5afff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29275521-5cce-4793-94fd-357b089bc694", "sighting_of_ref": "indicator--d065db70-c244-48c9-8137-07cf08a61fe9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06615f5-77f6-46f5-a5d8-57b6c0917a89", "sighting_of_ref": "indicator--4d62a860-3f34-493e-8964-658ce13e40e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2aa365-d3b0-4984-b16f-570899b1da50", "sighting_of_ref": "indicator--2dcb710a-cb45-4b73-ab34-eed0ef82bab5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7418997-48f3-4eb9-be15-ebb4a2196d51", "sighting_of_ref": "indicator--7ef3c1b6-09be-4db2-a538-52a9b70b1fe5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0396d184-a546-40c7-a0fe-834a1888bf1a", "sighting_of_ref": "indicator--7ef3c1b6-09be-4db2-a538-52a9b70b1fe5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a10581-36eb-4b3b-b939-397af8f78712", "sighting_of_ref": "indicator--809bd1be-2cff-466b-bc95-b8af6df5ed58", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f486ab03-b7b1-49ef-a078-ec216cb99219", "sighting_of_ref": "indicator--26ec4cb0-7bf4-4dd9-ad3c-e2e1fa69270e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72770dd-d50e-476f-9a43-6861860ae888", "sighting_of_ref": "indicator--86202621-1c60-4ef8-8ec1-eeed3d116106", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcd540b-5afa-418d-8adc-99d8e0485359", "sighting_of_ref": "indicator--ab14d7f6-3589-4fe1-9360-2a1347326435", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc8f64d-209a-4976-94c8-9133d9eddc8f", "sighting_of_ref": "indicator--482e31b7-ae70-47f9-94de-eba25ec7d3ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c98019-2e9f-4266-a098-86e587bc6841", "sighting_of_ref": "indicator--2412e4b9-ff03-4359-8466-4e1cc1455928", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6be83c1-4549-4841-a2fc-668bdffa8f95", "sighting_of_ref": "indicator--240cab36-d70d-4245-9405-405e4e96a15b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96c458e-f470-4442-a81e-5f0d4a19f8c9", "sighting_of_ref": "indicator--e295f6c7-6e35-417c-9b92-95b0550c2d48", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18cea51-a3ba-49d9-ad00-d2180624b7b5", "sighting_of_ref": "indicator--0d382bc9-68a9-42fc-b2f8-2f3226d895d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced145ab-10a9-4edf-b670-bc6abb2f7c94", "sighting_of_ref": "indicator--e5472a30-4f9d-4c19-a4a0-8a7948ee8caa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f736dc-c84a-4ba4-860f-77a8f2827089", "sighting_of_ref": "indicator--781fea25-0299-4fbb-8d73-63b45c3eda76", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1e0893-2c90-4446-b184-d9d365a4e130", "sighting_of_ref": "indicator--5ebe2ed0-31d5-4bde-9a74-27d306806397", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9275d9a-2822-496d-b437-559794f6c954", "sighting_of_ref": "indicator--cf7be003-37c2-4ce5-9f19-5677e569a939", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f571b45-815e-4100-8818-bb5a1101290e", "sighting_of_ref": "indicator--9eb5211a-d53a-45c2-a31f-12d1ce827d4a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0401b33a-e027-46df-94cd-24c5f0b1bba3", "sighting_of_ref": "indicator--d35eca1b-6243-4333-ae15-23da2cbfde6f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3db9565-f2a1-4dbd-8c7d-10f376c0278b", "sighting_of_ref": "indicator--e9a42858-cf59-459b-bcf3-cf176e47506a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ba379a-122a-4935-a3b0-76aacbffb9e6", "sighting_of_ref": "indicator--e9a42858-cf59-459b-bcf3-cf176e47506a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7f5f0e-d07c-4d03-aa64-f6cbb04d4e38", "sighting_of_ref": "indicator--c0222e55-7904-44f1-b317-867c47bfef41", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69986e73-dcea-4cf3-95bc-917b3c44ff72", "sighting_of_ref": "indicator--ee5fb93d-27cb-4583-b436-ef4554e41980", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49fccfd-b978-4f51-a1f6-56a3f6dec549", "sighting_of_ref": "indicator--e93b5be7-8f23-4970-a567-ce4c3090dbe5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e391ed4a-d81f-412e-910a-dbff4e321dd1", "sighting_of_ref": "indicator--dd159ac1-0782-42d0-a434-562a9e6d89f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b5715a-93b2-4e31-a947-8d1554b20424", "sighting_of_ref": "indicator--dd159ac1-0782-42d0-a434-562a9e6d89f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218766ac-b1dd-4bcd-87a2-66091493e035", "sighting_of_ref": "indicator--2f1c3236-276f-461c-b329-1671cde2229e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bae541-7de5-472a-9bc6-1570b37079a3", "sighting_of_ref": "indicator--1767897b-6cd2-4ef9-8af4-4fdd0433f816", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe91e9b6-de1e-4ce8-b8ca-4c4f789d3e28", "sighting_of_ref": "indicator--1767897b-6cd2-4ef9-8af4-4fdd0433f816", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88856d46-cc46-41e3-aca7-c3c09e1fb0b1", "sighting_of_ref": "indicator--5174265b-29be-46d4-a6b4-b624dfce83ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1086c2a-50fc-4fb0-98eb-cc33d9a55fe1", "sighting_of_ref": "indicator--9bde35e1-2f8b-4145-ae93-853cd497fbaa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f0e51a-f28d-428f-a3c0-4dee955a81f7", "sighting_of_ref": "indicator--e853b19d-91c1-4f2e-9c26-c0c43bf92001", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deaee51e-1c0f-4a31-9bcf-3cac3505593f", "sighting_of_ref": "indicator--45aca171-3622-4c26-8027-d7d67504d3a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861a4901-6274-45b0-b26f-150a6df6c4a1", "sighting_of_ref": "indicator--279f1966-ad72-4673-875a-3cbd2e0b063f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8079556-f98f-4fc8-82a3-19dcaccf3f8a", "sighting_of_ref": "indicator--c85d0d92-c998-4adc-ab04-1e35818aea19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65169206-6e57-4693-b980-7c285990a4cc", "sighting_of_ref": "indicator--a6b83b94-9ab8-4d62-bc71-75c0beff61aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c23d3d-e27f-44cf-8e45-d79fe08af193", "sighting_of_ref": "indicator--d75f799c-5ef9-4031-9fbe-fb768ef1287a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4037a9df-3dc9-463d-8c18-8ce6c72e6d28", "sighting_of_ref": "indicator--14c171d3-219f-40b5-b567-082817dba70d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aadd8f8-d4e8-4a68-aac4-ec891a4b7b0a", "sighting_of_ref": "indicator--7552f152-32aa-4fb9-96b2-64730ab7b726", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236787b2-b65f-43bc-b668-58944945864b", "sighting_of_ref": "indicator--6e00cc29-a5cd-441f-b309-4b47340aa67e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f752318-150e-4812-afb4-6bdd17bf70a0", "sighting_of_ref": "indicator--8365ec7f-3281-49d3-bf96-cff9f46f5b57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6114756e-8dec-46b9-a5ec-231ebed85633", "sighting_of_ref": "indicator--a0015a27-86f7-4596-ab2d-36e408b0071d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ebc7d2-28dc-4805-83f6-48acb75ba75d", "sighting_of_ref": "indicator--a0015a27-86f7-4596-ab2d-36e408b0071d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe38bfd9-7643-4c3b-95ac-138170dfe735", "sighting_of_ref": "indicator--dad965be-f5ac-4c04-a8b4-8010faa2fa92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0086bc37-f64a-485e-a286-523b3c31e27c", "sighting_of_ref": "indicator--dad965be-f5ac-4c04-a8b4-8010faa2fa92", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4f802e-6f3f-4467-ba54-4f02ad73db5d", "sighting_of_ref": "indicator--a1b46bac-754f-4acf-a64a-055018a24741", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f0b0e2-3b5c-4e47-b6ad-31d522b55418", "sighting_of_ref": "indicator--a1b46bac-754f-4acf-a64a-055018a24741", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546ba189-9695-4064-8b2a-5bbfaafe6d6d", "sighting_of_ref": "indicator--323474df-5420-4f82-975c-fe9f57252627", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28231454-b38a-475a-85ad-587da0e776b5", "sighting_of_ref": "indicator--323474df-5420-4f82-975c-fe9f57252627", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5b7a85-ebf4-4cec-8e73-078073a0afa1", "sighting_of_ref": "indicator--94d8e92b-033f-406d-92c3-1967ecdb3f5f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587b44af-d7c2-4d98-9752-59c166aa27e1", "sighting_of_ref": "indicator--94d8e92b-033f-406d-92c3-1967ecdb3f5f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c9ddff-e06e-41c5-b8e3-9db7fb83db45", "sighting_of_ref": "indicator--86f6a14c-f51f-4b6d-83c0-aab8cc565501", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeee859-131a-4bcb-8288-effa155dc4d6", "sighting_of_ref": "indicator--e9de1ea6-655f-44db-9b55-f912fac92726", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85405e61-a338-414f-91e2-6e1c828fad00", "sighting_of_ref": "indicator--84660be8-a09e-4d43-b9de-2d23610a75da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440dde54-d74d-4376-9a9e-669b90b084df", "sighting_of_ref": "indicator--aa47c92b-f5df-420f-82d8-1f7c5330b613", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc00ba7-8e9b-4062-bd1e-6036ab66305b", "sighting_of_ref": "indicator--63ad4246-fe16-4079-88ab-6e32b4775b3d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4582cd91-080b-4dbb-bed4-704910c5034d", "sighting_of_ref": "indicator--e02c5ddb-121b-47cc-b59c-0ae8531f8c18", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56902d3-db69-4788-911d-3886d5de749f", "sighting_of_ref": "indicator--d34f9f91-75a5-4836-88ee-ce7fff7ebe3d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c6954c-881b-4fea-841d-f7befbadc6c6", "sighting_of_ref": "indicator--3da61797-0c2e-4a96-9b25-9fbbc2469826", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d84862-48b3-4930-8e94-9d57d8d3c190", "sighting_of_ref": "indicator--9ec3149e-5b74-4d7f-be62-f778432da0d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53975c87-91cf-42b7-84a8-fad05605b473", "sighting_of_ref": "indicator--5a3746c6-371c-474e-8b9e-1363e05faf30", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eb4b5c-5787-44e1-99bd-c9f4eb9f7a42", "sighting_of_ref": "indicator--d5478cc5-3d79-438d-9a77-424b6e02bfac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291d07b3-7478-4e77-8c35-4247598b7970", "sighting_of_ref": "indicator--d5478cc5-3d79-438d-9a77-424b6e02bfac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3547ef4-9dda-4bd8-a0c2-bfa8fca39457", "sighting_of_ref": "indicator--dd5da718-e20f-4e3f-b030-7f0b29683c5f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce35be7c-3104-4a34-b1da-8a861e5880f2", "sighting_of_ref": "indicator--dd5da718-e20f-4e3f-b030-7f0b29683c5f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac74c26e-290f-43a0-87f3-026d942d06a1", "sighting_of_ref": "indicator--bb075a33-c956-489c-86dd-ede0a9776f39", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfb2e62-e723-4bf2-9082-dd3577af8b79", "sighting_of_ref": "indicator--69a89f1e-f2b6-4a46-a704-a9d536d72aa7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5938b5-df2c-4d21-827a-e7b1d4f19ddf", "sighting_of_ref": "indicator--9b61b925-92f0-4e8b-8957-abdb1f2792ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac68d72a-c122-4425-979f-da5d56c0838f", "sighting_of_ref": "indicator--19097d9d-b7f5-43bd-b7f6-7d21e6ec4b55", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96183d4-2fb6-4650-99a4-b3bcb3f427e8", "sighting_of_ref": "indicator--e5e3f888-5cfe-43ed-bce6-99f2ac754f48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91b90ef-afc4-42f0-add2-8f97e166290e", "sighting_of_ref": "indicator--05c1170e-d024-4a49-abf4-ebcfedfd2494", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483842b3-eeaf-4de4-a00a-49d8172c0784", "sighting_of_ref": "indicator--8aee9ec8-d26c-462f-a4a2-6e178300aaf6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5b6bdc-1c73-46f6-8a11-da9165c557be", "sighting_of_ref": "indicator--9e9eb8aa-cfdc-42c8-9350-badf63db7829", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358974e8-e3c1-4d44-addf-af8b835e8efe", "sighting_of_ref": "indicator--29ad81b3-e63a-40a8-ac17-e93e3d332af9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fec0f5-7d8e-466c-90ba-a727897b1243", "sighting_of_ref": "indicator--4bf7bf1e-c1d2-4f9b-9c96-b050abb26bfc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbb343f-752e-40ea-b633-2a733e9aab43", "sighting_of_ref": "indicator--ebd4e097-8e09-43b4-b203-b5ccdeeef2e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94bd755-63f8-40d2-911d-0c668b67f038", "sighting_of_ref": "indicator--9b3126c5-5918-4e5c-a36c-ee9e1b34c316", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a25cd6-fb1b-46c4-bb99-729cdf9ee55e", "sighting_of_ref": "indicator--0bdf19fc-6054-46b1-8df2-24ba35bf3147", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc2b118-56d1-49cd-9997-ae0326fe7e17", "sighting_of_ref": "indicator--212b273e-efc2-4e8b-ba76-e0202259819f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d15a2ac-4518-44fd-95d9-a41ee3dcb3fc", "sighting_of_ref": "indicator--6f44df1d-57b0-43e6-b601-779661d864df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411bee0e-8fc9-41b4-8fac-248f6f025259", "sighting_of_ref": "indicator--a512a74b-5e64-41da-87b7-3bbed1b9744d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ff53af-6229-4c25-96d0-cac584476945", "sighting_of_ref": "indicator--6cb24bce-b931-4e5c-8b61-b49c5425a6af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b15885-1006-4560-9979-e16e9fe0d1cf", "sighting_of_ref": "indicator--a00a67e4-d5bb-4e17-8147-3a1f005b0592", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bee891-2f46-4d2c-b126-d4464765ac1d", "sighting_of_ref": "indicator--ba649abb-20d3-449b-9cb3-ec888970243a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ae07c4-b715-429c-835f-5ffd8c7534f0", "sighting_of_ref": "indicator--5a43ae31-70d7-43f0-9d31-f229a6d7ed8c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c157f6cb-4529-4b91-b1f9-5646f5ac8f8b", "sighting_of_ref": "indicator--47ee2587-6f73-4cee-9254-24963174b75a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a37db84-173a-488c-9f23-95e0408a8964", "sighting_of_ref": "indicator--1295d1fa-d950-40eb-a91b-94d6f0286bc7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1330a5dc-49cb-48e2-acc6-ba9354e63e24", "sighting_of_ref": "indicator--53e99bbc-775d-4e1b-ab4b-54d78119d49e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824c4808-10d1-404f-a223-1ede7a73e5f7", "sighting_of_ref": "indicator--db017044-997b-430b-afb6-0c0e64adf949", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd0339e-c22f-40fa-b46b-cf8659a78a0e", "sighting_of_ref": "indicator--176d911d-07d8-47e7-bfe1-4087f5de49dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13250572-0592-4f2d-bb4b-1ef804830b0a", "sighting_of_ref": "indicator--d0099fd2-d92b-4103-b359-c757d2a3da94", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c744174-8be6-4912-a6e0-58ee5067913d", "sighting_of_ref": "indicator--c6a75ba3-1a2a-4b85-b427-a8285a98c723", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5a1fb0-10bd-42ae-b324-7eb252f555d2", "sighting_of_ref": "indicator--4cf1ca4b-650b-46d0-bb80-8f75747dd884", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea8c13f-6967-44ff-8c54-d3ea6d96816c", "sighting_of_ref": "indicator--5fd96fd2-defe-4338-858d-ad97ea9e98f4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a593485-0ab4-4755-9f0c-560a69681920", "sighting_of_ref": "indicator--64f7ad0e-db6c-4cee-ae74-c5c3f8243b03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3a65f6-41a3-411c-8a56-93e0499bf396", "sighting_of_ref": "indicator--c967864b-8d3d-41c9-8a88-b0ee75a66972", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf80191-0925-48a9-8384-c05ad37e5994", "sighting_of_ref": "indicator--707efa5b-f0c9-4cb5-a9af-731c2496429b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc4a014-05dd-48ce-b2fe-245cd3baebb8", "sighting_of_ref": "indicator--f6664ec5-c91e-4c8f-be76-04f856f5d589", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c35136b-ef79-4d54-8c56-aa8ca40ba267", "sighting_of_ref": "indicator--7507d1a4-40e4-4e5b-be73-5a9015ce98e0", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f508d465-1208-4b09-a4e5-74ad73ce76e3", "sighting_of_ref": "indicator--9d4ef82d-5861-4fda-b8e9-c3b309b0b993", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198ebaf5-59a3-4881-a1ae-1deb8d98be56", "sighting_of_ref": "indicator--aa4c62fb-5628-4866-bf06-97a1228ae9e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10324c25-bc16-428c-b4cf-519aa41eb7fc", "sighting_of_ref": "indicator--329d3c6c-b91a-4a6a-bfb3-022dfdd7657b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5394b51-cce6-4927-acff-bc1ef6a14cb6", "sighting_of_ref": "indicator--4e477790-bc88-4cf1-a65a-bae8017c3887", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4761fd-1c92-4d70-bf6e-0949aee10398", "sighting_of_ref": "indicator--2a0f5cc6-43c9-4357-a7ef-3049f66e7492", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec43accd-7ad0-4ace-bd96-2b604c50a88b", "sighting_of_ref": "indicator--52b02020-663a-43c2-a2e0-09a9a9de9a32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9913912-d340-4a25-af95-a84a0518b094", "sighting_of_ref": "indicator--517b1d2b-f325-4b90-800a-1b24785efbea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7557779-ef50-4287-8ca9-cc99c61a853b", "sighting_of_ref": "indicator--5fd3d46d-05cb-4532-948d-3ae6429b782d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2ba7ea-1302-4004-b469-1bf99ae65240", "sighting_of_ref": "indicator--48efd246-d76d-4572-adad-216cf51a43c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02840b6-be79-4913-a0ed-3018a084e168", "sighting_of_ref": "indicator--ad4fd896-1ad2-41dd-b245-e8f14ba2e403", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be910be-506f-4d4e-8e72-05362ef4bdcc", "sighting_of_ref": "indicator--cd1b2b7a-1a8d-4d69-8bc0-e3ac99b1b59e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d974cab-b8f5-4128-8c52-6d7255235da4", "sighting_of_ref": "indicator--2fb75fce-bf60-4a5d-8c51-87164d4e1562", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3508244f-15d7-47cd-b152-ef87579cb62c", "sighting_of_ref": "indicator--065b91c6-1e98-4ba6-b1c0-098949a6f899", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37ad819-7740-4c15-a785-dd8cb64470aa", "sighting_of_ref": "indicator--57704c77-407f-49f8-a8f0-5ca565a8da29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3ea930-db40-4895-8d3b-775ba9aeb3d4", "sighting_of_ref": "indicator--e07b8164-7582-4dd4-9e40-0097df98a0f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71626a7-c800-4eb3-ac2f-63389c17dbe1", "sighting_of_ref": "indicator--f728046e-d4d2-4fab-b0fb-f4627531a687", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e15ae2f-95ef-4232-aa18-ad381c6b73d4", "sighting_of_ref": "indicator--3ca045d5-00d3-40b6-88e1-c70d00620b10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0ed293-03be-4759-bafb-7679e8b284de", "sighting_of_ref": "indicator--817a26fd-bf96-4214-b9b8-c1c7aff5a69f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977a927b-ed90-45c9-9bf9-5926f46381bc", "sighting_of_ref": "indicator--817a26fd-bf96-4214-b9b8-c1c7aff5a69f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c70b24-278a-4266-9129-e7a9b6b82e27", "sighting_of_ref": "indicator--e86d6a4e-56e9-428a-8d1b-ad381f6f2fcf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a66bfe-9207-41fa-8333-56c1d6d0fc71", "sighting_of_ref": "indicator--41f564ef-ade3-4666-aa22-634210037eac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6da1c7b-e692-4306-9417-ea9e834d7957", "sighting_of_ref": "indicator--b9064118-6b78-4454-8a28-dc93ff8eeddd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6b2aea-c561-4243-bcb3-8286868d6231", "sighting_of_ref": "indicator--ad6585b6-9bcf-44bd-b48f-8a4b63a0e9f5", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecfdc8c-d13c-4fb3-9511-57a6653192c6", "sighting_of_ref": "indicator--48993342-8c7d-485f-85cd-f24ac90b847e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b4dc65-f67f-4319-ada7-37aed5e07a28", "sighting_of_ref": "indicator--44beca7e-65de-4bb5-9e7a-587645b6aae6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9787cf37-4682-47ba-9be2-83dcc8638187", "sighting_of_ref": "indicator--f5ced2cd-58e2-4527-b512-01ecea31734c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58761375-b41b-458e-937c-83b48957567f", "sighting_of_ref": "indicator--e2e1bc1a-fb35-41d3-88a0-ff8c010c8dc2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc9b141-20a2-4785-95b1-99939ea5416f", "sighting_of_ref": "indicator--aeb0f30e-159d-4269-8865-dd6d749b4fa8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b978dd-4de3-41ad-ae0c-1963bf397dd2", "sighting_of_ref": "indicator--cc83e5d5-9393-4d38-8ef8-f087a93b90ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1999faad-93e4-4901-8ca4-ac79a10c2e46", "sighting_of_ref": "indicator--885e2722-a106-475a-9301-15af922cf254", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8764bfb-206c-4341-87c2-ca5d94161de7", "sighting_of_ref": "indicator--442c8e7c-7911-4bc1-ab3c-3b574ab9ae3c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106f431b-1619-481a-92c0-6c61fe9dbc50", "sighting_of_ref": "indicator--b9766c83-04d8-4ebe-bf1b-ca0f9d3beea0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee10bb59-9915-429a-933b-9057d297b53c", "sighting_of_ref": "indicator--8ef233bb-f36b-4239-8890-6a790e371d99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15a61da-07a6-45b0-af4b-9b69102b9921", "sighting_of_ref": "indicator--0683c07e-ef54-4f2f-9f71-16e7b54bbe3b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b540e1-7185-426d-8ea4-98cf085a6cc2", "sighting_of_ref": "indicator--47c7f9d3-c431-4de3-89c6-0425f473fb0b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce40dba-91f3-4067-85b7-5137380c5aca", "sighting_of_ref": "indicator--3d8fee75-2b77-4ebf-949b-98be1ccc6489", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e03749e-c5da-4687-adfe-210fb833a11b", "sighting_of_ref": "indicator--0c7d17c7-ff97-4af7-b20b-800a23488c24", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f183e1e-b77f-455c-93f7-1d454dc609e3", "sighting_of_ref": "indicator--0c7d17c7-ff97-4af7-b20b-800a23488c24", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821f84cc-0a89-4685-8ed3-3ee90eb1dea9", "sighting_of_ref": "indicator--72ece80e-565e-4fcf-8e4c-a76497b1d547", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e43066-1266-4027-ad89-3955133d4b17", "sighting_of_ref": "indicator--db848011-0fcb-4f1d-87bf-c5becebfc817", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427a00c0-253f-4206-892e-fdf9a1f35c57", "sighting_of_ref": "indicator--b7b89fb9-75db-4f07-822d-041aaafae116", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b19c529-f5c3-4d27-b52a-acecd94d0600", "sighting_of_ref": "indicator--322de091-c2a9-4301-ab9c-309150187387", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbdaeece-8b49-4b92-99fe-7361384908fc", "sighting_of_ref": "indicator--f7895338-cd09-48e8-9c9b-21e77bc7bb04", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2c4722-0ae5-4f55-8702-5e7ea7c1adde", "sighting_of_ref": "indicator--f7895338-cd09-48e8-9c9b-21e77bc7bb04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f19be9-50ee-4737-be7a-118b877d7a52", "sighting_of_ref": "indicator--07d91ea9-cc13-4795-9e4e-68055d3b1c54", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9957b3-2d13-4384-9f13-5fc3f320ecfe", "sighting_of_ref": "indicator--d8500c41-4ac2-49c9-ab06-1f0dfa5fa2ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eafccf3-e887-40ff-ac33-790eba099dfa", "sighting_of_ref": "indicator--32fc1d4e-3603-4c8d-a6ce-129352373231", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d88f55-28d1-4c5f-8706-3e8b9f1d7ded", "sighting_of_ref": "indicator--cb7b8efd-d629-4569-9101-bef4725f17c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32976234-1e3b-4338-94b1-a1acb895433d", "sighting_of_ref": "indicator--3202fa10-0b7c-44eb-8bac-5b28dc0be16b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf07b7b-d616-4502-b01a-252af7a7d657", "sighting_of_ref": "indicator--bb50aad3-24b1-45d0-b857-702f493c82c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada7d2e5-591c-4366-a211-1cbf8b5192e6", "sighting_of_ref": "indicator--3d1a8fae-b916-4e20-b86e-5d1850145b6b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac46bec-38e3-4e04-904c-ffa780ae406e", "sighting_of_ref": "indicator--718a48e5-dd0d-4175-bb49-1c3ec06158d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84a4c73-76f6-40c6-b63a-d733f47d7622", "sighting_of_ref": "indicator--a2a317a0-0df1-443f-8072-dbc0cbb69ef4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652a2251-dfe0-4d01-b35a-3677c13624c6", "sighting_of_ref": "indicator--cf647166-0b7d-4daf-8d63-4db959b3b49a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c1b3fe-d0d7-4cfa-b930-798897899b45", "sighting_of_ref": "indicator--cf647166-0b7d-4daf-8d63-4db959b3b49a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9054c34c-d728-4fac-87c0-3bc18892532b", "sighting_of_ref": "indicator--9ff2ea27-0d66-4904-8e57-a0fbc50db624", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbf6e56-bc84-459c-9a81-29f8486ae7d2", "sighting_of_ref": "indicator--90dce0f1-7dbb-4717-b48f-93f7903dfe4b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cb6b3b-afae-426b-878d-da4176d00957", "sighting_of_ref": "indicator--799cba71-b89a-4500-883d-c859bad05d4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cd8476-0137-4057-aadc-51120a79a430", "sighting_of_ref": "indicator--d4232fb1-6217-4cc0-be2d-28e4b1da14c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514be9e3-cda5-4a58-b458-a4dd001c7f8a", "sighting_of_ref": "indicator--3ff32e11-1190-48a2-8abf-28181a42079b", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7b9968-54a8-480c-b080-0cc887880ac6", "sighting_of_ref": "indicator--24ae16e3-7e0e-4b30-aaed-af7969837561", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15685015-fb29-455e-8d84-662a4334c849", "sighting_of_ref": "indicator--9d6a97bb-e931-4855-8f6e-a362fe390948", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6233a0ae-4c78-4460-9fda-338e3d6e0934", "sighting_of_ref": "indicator--9d6a97bb-e931-4855-8f6e-a362fe390948", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6ec51c-9f52-4aeb-af33-5ff2d343ba69", "sighting_of_ref": "indicator--e3ceddee-13c3-4426-996c-851bbb083a57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b528f9d-8a29-49ee-aed6-6ad02599b934", "sighting_of_ref": "indicator--39a3144b-fdf6-46fe-86ea-119d6519fa8a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed278b8b-81c7-4708-9d5d-b33ef574ae8c", "sighting_of_ref": "indicator--13adb916-03ee-4302-8263-1548ef870b78", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0780a62-e588-4d1d-b87d-47283f396ccd", "sighting_of_ref": "indicator--13adb916-03ee-4302-8263-1548ef870b78", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064673dd-dc96-4213-9a86-3bc96746991d", "sighting_of_ref": "indicator--a61a3515-c549-44a8-afff-ee7dd19a68ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38e2805-51e5-4ca1-9cfc-2d315e708fab", "sighting_of_ref": "indicator--da7e3219-e9bc-4f8c-b4f6-ad5bc86ea6c8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54da5e2-0f38-41e2-8286-7b800ff1a13e", "sighting_of_ref": "indicator--da7e3219-e9bc-4f8c-b4f6-ad5bc86ea6c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a79455d-8686-4519-908e-f10b1426e835", "sighting_of_ref": "indicator--d4d66ec3-4912-4169-951a-0d2fc3e82c31", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2e2948-948a-4e51-a35c-d3189497e97b", "sighting_of_ref": "indicator--bbea46e8-d0fd-4c3e-97a0-8dea549c78ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f489ef24-c3f3-4382-9a2b-96c88cd23a80", "sighting_of_ref": "indicator--bbea46e8-d0fd-4c3e-97a0-8dea549c78ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de18de72-2172-43b0-8582-621777d0de8e", "sighting_of_ref": "indicator--be8e94b2-778e-4667-88cc-c103447bcd1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f6e807-db32-4da5-96bf-80c6798585ee", "sighting_of_ref": "indicator--be8e94b2-778e-4667-88cc-c103447bcd1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01134cd-3207-4396-bd16-42e44ddd2dc5", "sighting_of_ref": "indicator--ec72ad24-6dcb-45b7-b8bb-1db6d5ddc883", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6562b125-f4a5-461a-9b6f-721c86503c9f", "sighting_of_ref": "indicator--7323f123-b1fe-4c0e-96e0-f4a404188a37", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f401f2-8650-4b04-a8b6-3f08f7cc0390", "sighting_of_ref": "indicator--7323f123-b1fe-4c0e-96e0-f4a404188a37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2820ccbf-2c99-4c0f-8ffd-057f48f550af", "sighting_of_ref": "indicator--e66df2b1-8720-4c48-9217-8570423d03ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebad96f4-7e33-4940-9463-a48eec5c561c", "sighting_of_ref": "indicator--e66df2b1-8720-4c48-9217-8570423d03ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3abbb8e-0c55-4365-9ece-90a59bbf2f04", "sighting_of_ref": "indicator--6376a6be-5f7a-45e0-bafc-81e71c139740", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c14497-d48a-40d6-b074-97892a958d86", "sighting_of_ref": "indicator--6376a6be-5f7a-45e0-bafc-81e71c139740", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f28f17-473d-4886-b7be-9ce4041cf1f6", "sighting_of_ref": "indicator--f90761b7-530c-4f42-a993-d25d3ac74a71", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70f4f52-22d8-40b3-b8a0-3fc8f530a1ab", "sighting_of_ref": "indicator--512481ea-21ea-472c-bbf6-429eb7d4c8ac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab61a89-e9a4-4860-a872-dc941825d990", "sighting_of_ref": "indicator--d8345d13-d829-4343-9704-cf4f57c0100f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02b83f2-2a79-44dc-880e-c7bdb3fa1290", "sighting_of_ref": "indicator--0d9b2d32-07c7-4cdd-9130-641b057c86e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc2daba-4faf-4563-aac6-68a28b6fcd6a", "sighting_of_ref": "indicator--0d9b2d32-07c7-4cdd-9130-641b057c86e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdf5b5e-2f24-4542-a280-57f10ce465f7", "sighting_of_ref": "indicator--58445139-5393-45d4-839a-cfd238a463dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d760f04-f7d0-43d6-bc64-ee15f6906c86", "sighting_of_ref": "indicator--58445139-5393-45d4-839a-cfd238a463dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06832126-03c9-4e14-8253-8d35258f91c2", "sighting_of_ref": "indicator--226e81a1-77a3-4c29-af96-6153a8c44345", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2d4b27-5a3c-44b7-96f7-264a1f49d3ed", "sighting_of_ref": "indicator--6316633d-4e7c-436d-b3c2-ee265b32c292", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c310c0f-1365-4df9-9bcc-6ba2774532a4", "sighting_of_ref": "indicator--6316633d-4e7c-436d-b3c2-ee265b32c292", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bd22fe-2ea9-4a7f-8d7a-ea29ab189b1a", "sighting_of_ref": "indicator--00fcdae3-1f69-4ec8-925d-981f6f96cd19", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82eb707-492b-4eef-abbf-cec3040abb20", "sighting_of_ref": "indicator--00fcdae3-1f69-4ec8-925d-981f6f96cd19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc14681-9b17-4ff9-a7f2-30a760b50927", "sighting_of_ref": "indicator--face8044-1079-400f-88b1-105f99c509d0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188ccda7-04f2-4eba-8e27-566a87e64ba7", "sighting_of_ref": "indicator--bcdcb596-dc3e-43c1-8fdd-573d5e22e40c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79004922-5ce0-4f2d-a72c-8966af299aec", "sighting_of_ref": "indicator--942a43bc-1010-440d-9dfd-d2e3725b0949", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad645dc-bf81-4fd0-8b25-d13a26ab57bc", "sighting_of_ref": "indicator--9f6bf1be-cf1a-48ac-a094-29b4df657976", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529c951e-bed9-468f-9ceb-e8f4f0441848", "sighting_of_ref": "indicator--0a24995e-4559-43f1-bcff-8a4070ad2cf0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5235f3a4-737a-425d-9fac-a49732078d3a", "sighting_of_ref": "indicator--0a24995e-4559-43f1-bcff-8a4070ad2cf0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b212bc67-ea68-4795-b3f7-9d74ba87c899", "sighting_of_ref": "indicator--43232d13-4d46-470b-b505-d25a26ca7ff7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fb23a0-3d3b-4734-80b8-182f19570850", "sighting_of_ref": "indicator--f124efec-4585-4ba4-91a8-e023b1b348ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa99bc1-f6dd-4f94-9c3b-23ce139ff720", "sighting_of_ref": "indicator--cf086957-d9bc-4cfa-8469-76238ae16cb0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1029936a-d65e-4b43-ae3a-0e7ffa81c018", "sighting_of_ref": "indicator--8184253f-f77b-4383-a75b-92f17e5c7fb0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0089f95f-49b8-4244-a42f-00a8b376be34", "sighting_of_ref": "indicator--8184253f-f77b-4383-a75b-92f17e5c7fb0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9efe633-8dde-4342-a437-0323ff30db4f", "sighting_of_ref": "indicator--cc5c7e7b-3b38-42a7-bb08-5bc864121e35", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33731351-f74e-458e-817d-13275ec0ffd3", "sighting_of_ref": "indicator--0ef1dfc7-bf6c-4838-9d00-4ffc54c92a2e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5fde91-0964-40a3-8b8f-0253e8aad5a4", "sighting_of_ref": "indicator--fdec03f3-b10a-427f-889e-7693cb829734", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8985e1a-ec72-4fe5-b904-3f38801ada6e", "sighting_of_ref": "indicator--440659e9-147f-457f-a5c2-3728d77d9428", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cd87ab-05af-4318-a462-5d9b40328e0d", "sighting_of_ref": "indicator--72500bd3-6ce1-42c8-9614-8b3942fb1363", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8da6c48-ae61-4b2b-a960-282006476e02", "sighting_of_ref": "indicator--adf6f794-9717-460d-bec2-7aa809a515ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4587411d-c37e-43e8-ad86-6551001d9443", "sighting_of_ref": "indicator--adf6f794-9717-460d-bec2-7aa809a515ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc057f3d-3782-4fb0-ba0e-07f08b0f10ad", "sighting_of_ref": "indicator--60734f8c-e43d-4838-aa39-25ad547288ac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d04dca8-a3ff-4fbf-af28-af73b05aea5a", "sighting_of_ref": "indicator--decb30e0-eedc-4456-b9ad-d4eca346e4e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e308318-6080-4103-a2cf-6d76167a5f5f", "sighting_of_ref": "indicator--decb30e0-eedc-4456-b9ad-d4eca346e4e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c89536-805d-41eb-b7c6-8f3da7c130cd", "sighting_of_ref": "indicator--7fcff355-c21a-4adb-ae34-b338d6e48de4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fbb1b6-033e-4bcb-9d25-f1a08ae2bbc9", "sighting_of_ref": "indicator--7fcff355-c21a-4adb-ae34-b338d6e48de4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ea5ceb-0153-42b6-9ab7-ec909c07cb6e", "sighting_of_ref": "indicator--752e5440-586a-4814-afab-7b3960b6c757", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38c19b9-517d-4929-a17d-9f70544e9ccc", "sighting_of_ref": "indicator--00760fd8-b500-4ac2-9f26-f850289ba7d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c057b7b-cff7-41cc-8b4f-aa9c13b55f3a", "sighting_of_ref": "indicator--00760fd8-b500-4ac2-9f26-f850289ba7d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add5e58e-f142-4d88-9559-38fb2ce54334", "sighting_of_ref": "indicator--74b57307-87c8-4a98-b566-71758a705d8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689ab89a-c2e7-4183-b841-bf6f921555f0", "sighting_of_ref": "indicator--2e1a8a28-8fe1-429f-87c1-b7313f9e5f04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522e04d5-be70-4320-b2b3-22f1c5a1ea56", "sighting_of_ref": "indicator--77234214-6d4a-44d3-9175-7ed668265773", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec1b88b-0e79-45b6-9e96-159473906aad", "sighting_of_ref": "indicator--4962c200-987e-4d5c-ac59-25fa6d04560a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa5084d-9220-4615-b172-65789f87744b", "sighting_of_ref": "indicator--8ae0194c-9605-4135-b2bd-8d3f03c1b5ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843ea547-1917-4660-94bd-73fe76b89cb4", "sighting_of_ref": "indicator--8ae0194c-9605-4135-b2bd-8d3f03c1b5ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc795206-8002-46c7-92ba-0767b57f4601", "sighting_of_ref": "indicator--987b8716-8719-451c-818a-a7e9e7fa9c81", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de223602-164b-4504-b28c-ad4a307b68e2", "sighting_of_ref": "indicator--365fa600-d51c-4712-bf88-e00f9b2beb96", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30bcf2f-e217-4d32-9cc9-e18cd093799d", "sighting_of_ref": "indicator--7870c93b-e8e8-4e2d-8d83-98ed5ba74c44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df19210f-e57c-4324-814e-784e57cd73c6", "sighting_of_ref": "indicator--5e67b7c5-ee68-421d-9ade-0774172fac23", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64f866a-2314-4bd2-824b-637bec939a9a", "sighting_of_ref": "indicator--79e7a1cd-4250-4554-91f5-396168a1ec30", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b20d61-d2fa-48de-85b0-d4aef04b5112", "sighting_of_ref": "indicator--e217fd01-e86d-44a5-9961-c170233dcefd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f53dbb-e015-4105-b43e-9ae2585456da", "sighting_of_ref": "indicator--f58eb7bd-7372-4857-bf75-51f7713835af", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0052663d-faf8-4c37-b1eb-d89545358e3c", "sighting_of_ref": "indicator--05d8d71c-0f38-499e-bdf8-d6878e5a5e5f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000a8c9e-7d57-4478-bce9-45ab02e0e9fa", "sighting_of_ref": "indicator--62eb6c1d-465f-4b46-9ec6-0c7ab9811e4b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcece34-d915-4b86-856c-519b75a7cdbc", "sighting_of_ref": "indicator--13084c01-5ee4-4d76-a542-66c85b6a581b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c328ee-946e-4f67-9ae9-c14f17306d41", "sighting_of_ref": "indicator--1c4e4b95-6c76-4250-bcaf-311171ec2f09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed0d35f-9fd3-4391-9084-80a124071803", "sighting_of_ref": "indicator--b6996d28-c3e7-4985-9a2c-d0f860772926", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cbc05a-efe8-4da3-9919-e272740b5284", "sighting_of_ref": "indicator--b6996d28-c3e7-4985-9a2c-d0f860772926", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c9230b-86e4-4bf3-9c06-a5c26dabaf98", "sighting_of_ref": "indicator--fd85d1a0-d4a2-4fc2-b55e-8de91d59dedd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05401411-424a-4be6-b249-b1dec08f0d2d", "sighting_of_ref": "indicator--9b698795-9c84-4f7b-b800-e7946e53f943", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f90f9e-f54b-43cb-b05b-848f7652487b", "sighting_of_ref": "indicator--02c77c2b-af4b-4e8d-b903-22c8d46c97ab", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcefc8c-a66b-4931-9f6b-50639a1e7ff8", "sighting_of_ref": "indicator--8abf7139-8ce4-4ea3-bf39-11aa546e0032", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ed3b64-753a-4e73-9918-d99e116043f3", "sighting_of_ref": "indicator--85fd94a3-0b8b-44f8-9582-df1d889e66ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f65608-8a10-475b-aca5-32cba0f0d62f", "sighting_of_ref": "indicator--d2eb8940-d0dc-4082-932c-99b64eb2b5ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e287d2f2-5ad6-43b8-bf33-760cd0fedd09", "sighting_of_ref": "indicator--925301d3-991b-4784-bfa8-7af73d2148c1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129e3b49-bd32-4a64-b774-f79a548f4fd8", "sighting_of_ref": "indicator--7da030ee-9217-42eb-8b65-552b99f753b3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9b3c01-406d-4eb2-bc57-71bc5d89bbf8", "sighting_of_ref": "indicator--aa7493ac-3c48-4f55-9ad1-308d2f1cc88e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a69f5e-a5a1-46ee-b4f9-96fa1dfabee2", "sighting_of_ref": "indicator--e174f5d6-afe9-4f18-8022-e3282bf9fc4a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6bc4bc-4e90-42c5-932d-5bc061a7c995", "sighting_of_ref": "indicator--05c25a2b-a13d-4959-b867-267ab35c0dbd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72574053-b135-49d2-91c6-1ecef3107ff5", "sighting_of_ref": "indicator--837a1d4a-1ad2-43b4-bf99-d1d5e3eb12ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d03c242-1f69-4524-8188-026f22419690", "sighting_of_ref": "indicator--837a1d4a-1ad2-43b4-bf99-d1d5e3eb12ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a319a1-e299-4889-84ac-abdee341ed32", "sighting_of_ref": "indicator--95c4cb1b-029d-48bd-8fe6-9f1e4a3ebabe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f73e30-1e40-43cf-afdc-5154975cc8af", "sighting_of_ref": "indicator--bcf1e87e-01ba-4c8f-bcb3-7411a2a4dcc3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b405fa40-caae-4e30-a6b4-ee6259e08c26", "sighting_of_ref": "indicator--b99324f0-e1b3-417b-a462-9d07151996ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38516df6-f2ee-41b9-a77c-258b6f1a6d77", "sighting_of_ref": "indicator--0a0b9f5a-b40c-42b9-8a10-7a692274358f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dabceb-6125-41e1-85c5-2d1484ddb32c", "sighting_of_ref": "indicator--5a7faf50-d474-4733-9a90-8fa3439fc80b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8269fab4-f231-4b28-8cd5-1692a7c69a59", "sighting_of_ref": "indicator--5a7faf50-d474-4733-9a90-8fa3439fc80b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8c7fce-3500-4ef7-8e08-22d7a2834285", "sighting_of_ref": "indicator--2f086382-b5c1-4607-be2a-f9cc9c6ea0d0", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027cbdbc-0dd5-4571-b22e-71b5ad9fbe60", "sighting_of_ref": "indicator--b3945ee0-a763-41ec-a21a-b44194122647", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6986599a-5dcb-46db-be2d-1490e3611647", "sighting_of_ref": "indicator--f0da878d-ea09-4c9b-808d-c45dbac4e732", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45440b94-1a11-4f3b-91c5-fad56d026210", "sighting_of_ref": "indicator--8677565e-ca21-4c83-8e85-286c1b0a55e3", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7683e72d-5304-415b-b8f1-8b7eb236c3f4", "sighting_of_ref": "indicator--0a30f507-0629-49da-85f0-ca4092b8c395", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067583c1-4a9d-4b19-bae6-7b3db1389daa", "sighting_of_ref": "indicator--d5d1f019-7a28-4948-8073-57c19bcf470f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22731857-3bb6-4a35-89a8-848c9c5e779e", "sighting_of_ref": "indicator--47138300-feff-4329-8a92-a7ba5514b585", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f2f5d5-fa4c-4b18-92cb-dbab43d16071", "sighting_of_ref": "indicator--076f8e39-776b-4a99-9575-2a8cc790a9b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56cd3df-f51a-4a39-ab1b-beaee9223f82", "sighting_of_ref": "indicator--03d0657e-9cbe-46fa-a0ba-ee745a985443", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b96d121-55c9-4692-b5df-db38f48b178b", "sighting_of_ref": "indicator--5a478452-8315-4160-a32a-474a5ad5b08a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95b2f16-2403-4499-bd30-85850fbfa040", "sighting_of_ref": "indicator--12b9df5a-656e-4e23-abbb-e1ff9425865e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68554ac3-5124-4c45-87a0-cf7358c3b010", "sighting_of_ref": "indicator--6e1adbda-5fe3-4690-8ef2-051c96506ed9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4464e2e3-e12f-42b7-beb9-8f88f07c4eee", "sighting_of_ref": "indicator--75420769-54c7-4034-b7f0-49cb89cda981", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1517b14c-32bd-41da-88f7-20ef89629541", "sighting_of_ref": "indicator--037d0f01-f7e7-4e66-a994-a57ee36aa50f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa457a2a-6e91-48d6-bb9b-ab7820f15246", "sighting_of_ref": "indicator--bb022eba-7ddb-4be1-b136-cfcca66ebe68", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe6c984-1954-4787-907e-7d151cde1204", "sighting_of_ref": "indicator--e661c371-9699-40e8-b2d0-978b08e3999a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e4fe81-9383-4aee-8050-c543856e7158", "sighting_of_ref": "indicator--6440f43a-9ccf-4860-b65b-8ffc120cd68e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4764061-1f7f-45f0-a130-f6693d2b67b2", "sighting_of_ref": "indicator--d90a30bc-a1e4-44c8-b64d-8a77a110954c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ca0d89-4b37-46f0-ae34-33e4f11fe824", "sighting_of_ref": "indicator--6a09108b-80bf-4fa5-9f5f-921345b27d85", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b01f508-09ef-4662-b2d4-613f80547cdb", "sighting_of_ref": "indicator--2f81b42d-aed5-4a7f-a3f4-4659e6f940ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a533b8de-cb71-4d51-8465-f0ab217e61b5", "sighting_of_ref": "indicator--652aaedf-e1ad-48d5-9083-9082d09f6f42", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236af534-b220-4138-96b2-9c7e6c08cf1e", "sighting_of_ref": "indicator--8809bf87-cdbc-4f77-98d9-9335b94112f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e5cffe-c5e2-4859-af2e-1b649cb94d00", "sighting_of_ref": "indicator--db1e1c3b-9d88-4548-a031-f822ad7ac598", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e88ad57-b6dc-43dc-91c3-75405164f43a", "sighting_of_ref": "indicator--bd27c751-af04-4b6c-8559-95a634db964d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63403e65-3284-4be9-9ee1-f35a0ab3b1e5", "sighting_of_ref": "indicator--ae1233ae-399e-4df0-babf-4ad7f82dc451", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a4894a-f931-4516-b220-1a6481423079", "sighting_of_ref": "indicator--b9ef6b8b-60e2-4f28-8328-3448ef7bb8e8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647e6af3-e6ed-4597-8560-97c3d58233c1", "sighting_of_ref": "indicator--0fdfd262-1663-428c-9d81-7cbca261bc44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c0eea0-ff63-49d9-8cea-85348221f839", "sighting_of_ref": "indicator--4b69051d-ed80-4011-af83-f21c5a60c252", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f550db-21c2-40ca-9b67-c3d80bea9d4f", "sighting_of_ref": "indicator--cecaacf3-a922-4b5c-90e2-2dd54ba57242", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7779ea3a-b2a9-4cb7-a0ab-e71ee1a97a44", "sighting_of_ref": "indicator--9a633ef7-3447-4161-bb3f-eeca97f15199", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84eb554-d8a8-451b-8143-90190fe5186d", "sighting_of_ref": "indicator--9a633ef7-3447-4161-bb3f-eeca97f15199", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d09e1d9-a582-4447-bd73-68158dfb8525", "sighting_of_ref": "indicator--3b4bc921-91b2-4edf-95b9-0a3658533d88", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ca8d6a-ca21-462e-bc4a-06250d95464e", "sighting_of_ref": "indicator--3b4bc921-91b2-4edf-95b9-0a3658533d88", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3a9a02-8042-42e0-bafb-fbbb06fcadb5", "sighting_of_ref": "indicator--9bbd9992-6d76-42f9-ba5b-fe3bc6d88deb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81b3e9d-ef07-4009-b59c-62df11660bcc", "sighting_of_ref": "indicator--9bbd9992-6d76-42f9-ba5b-fe3bc6d88deb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e96c20-accb-4bd1-ab92-ac8733ffbce4", "sighting_of_ref": "indicator--1d3d9f61-6b09-48b1-9afe-16ba6dc31117", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a54321a-0651-4f4f-b45b-03e14133089d", "sighting_of_ref": "indicator--1d3d9f61-6b09-48b1-9afe-16ba6dc31117", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b6ca9d-cf41-44c1-982f-26b2cda55c1c", "sighting_of_ref": "indicator--a7ebccea-0c7b-4cf1-b402-1b47f21915b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dc5b62-7ad3-492f-a482-5c6e025e9ff9", "sighting_of_ref": "indicator--ecd3bab1-734c-47fd-b9b5-ef1d0a5535d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89c128e-55c8-4021-8464-d798fd0f37b9", "sighting_of_ref": "indicator--26964524-0c95-4555-af26-b4f97acd0c6b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc31d02c-82fd-4dcb-bdbc-0e61077716f6", "sighting_of_ref": "indicator--8ddbf6f7-af25-42eb-b15d-25e2396dd138", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9711516b-35c5-417c-8101-7593433fb685", "sighting_of_ref": "indicator--c7235082-cb64-4cb9-8a7a-a6540fffcaeb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f043f40-a9ea-464e-bbe8-b0ad46e21574", "sighting_of_ref": "indicator--2dfdbda4-ecc4-43e1-9592-504d35a17e97", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbdda0b-c33d-4cb8-9084-ee4700f82d85", "sighting_of_ref": "indicator--4760c635-3c92-4989-862e-f2dce45dfc1c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba5cb3e-b8cc-4b51-b281-f5a3b2bcac30", "sighting_of_ref": "indicator--4760c635-3c92-4989-862e-f2dce45dfc1c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239b2f1d-be62-411e-bf08-f40202f9bb82", "sighting_of_ref": "indicator--b955eb42-7bc9-44ae-aae2-54744470b397", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d27f1d9-45e9-4efc-80d7-710a44c418f0", "sighting_of_ref": "indicator--84e9df69-403d-44f7-9e67-06e52b39511f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dddcfdd-0123-4698-9b89-d5f2b2f23443", "sighting_of_ref": "indicator--84e9df69-403d-44f7-9e67-06e52b39511f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307e38d9-b33f-4c28-9701-6c79dbcdda73", "sighting_of_ref": "indicator--e83b9e4a-2752-46a6-a364-78d26272794c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bce0d22-bbbf-4ba1-88fd-64b65b34b7cd", "sighting_of_ref": "indicator--e83b9e4a-2752-46a6-a364-78d26272794c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f2c07d-6e9f-494c-8aef-8a143a04c3fd", "sighting_of_ref": "indicator--e0286ff6-5b0b-4f9a-8d66-6365146328e5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45216526-08bd-4d2f-ac58-ce00f6ff665e", "sighting_of_ref": "indicator--390d9378-f0e9-462f-8194-3b4a73acbb4b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1b0f87-193a-4e09-a289-80713d67b8bf", "sighting_of_ref": "indicator--f3c32eb8-5c1b-4dd6-b56f-a573c1aded37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ebbf68-fc5f-493c-9f82-3099a9a69ad5", "sighting_of_ref": "indicator--0fa70cbb-a11f-4e3a-819e-3ded72662624", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47483298-3e7e-4727-bbc3-88f17cce44ff", "sighting_of_ref": "indicator--1e08a159-6beb-4c18-b96e-4c088d2697f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f1bdcc-5be3-4dcd-ada1-d0e8fc84bd7e", "sighting_of_ref": "indicator--419d24f4-6351-425c-8e5e-e579a8586125", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46c3744-94fb-4374-979a-866332849aee", "sighting_of_ref": "indicator--fb59f73b-2e99-433a-91ee-b804beaf9cec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0320bc16-1cb7-4411-bf3c-5e7e172d548d", "sighting_of_ref": "indicator--343d44e5-f720-4d84-b318-6dff21a04770", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572210d4-bf9d-4232-9618-392643ae1dce", "sighting_of_ref": "indicator--ad3dfd38-e611-4a5c-ab5d-a05ed77500dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f421892-3b7a-433f-9bd3-7e7f04f4eb12", "sighting_of_ref": "indicator--89e09ba3-002c-4452-a403-e35b6d6ade10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7195380-c349-45bc-9643-4da0867cad85", "sighting_of_ref": "indicator--c184c795-22bb-44ea-8c1d-a51181fbf42d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f77e994-ec02-4f7c-9458-a744a4a2f705", "sighting_of_ref": "indicator--180642e5-f281-45b4-8929-ad8cf5175ac8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee0683b-9bd3-48e8-b5e1-a1c66048d1ec", "sighting_of_ref": "indicator--3468e668-cf1d-4fe1-8996-5df3e7e63198", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bd3807-06d6-448a-b335-33524b194119", "sighting_of_ref": "indicator--7700696d-2337-481e-b942-df5130a2a77d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd36ef3-0925-4dd3-a08e-b5c4c0c59dd6", "sighting_of_ref": "indicator--97eea3ef-b223-437f-9374-a5c579289e06", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4ca91f-211f-4a73-8705-c7ae91dfa53d", "sighting_of_ref": "indicator--7a6452ca-8b38-4826-9dad-b967e9528358", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11ecc0b-ad1e-4797-b35d-1c3d0e66ae8a", "sighting_of_ref": "indicator--7a6452ca-8b38-4826-9dad-b967e9528358", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc03cf8-0279-410b-ac5f-51c6ce324bb5", "sighting_of_ref": "indicator--3421289c-b0e5-4d16-a134-489c9a5e761b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b29861a-97b2-43e6-9e8a-9c208188bcd7", "sighting_of_ref": "indicator--e799cf7b-4493-450e-901b-ce71ea38adf6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7a620a-3508-466c-a6f6-1846ef46887c", "sighting_of_ref": "indicator--e799cf7b-4493-450e-901b-ce71ea38adf6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6d9c52-cf6a-4fc7-94ec-e649ce9a51f1", "sighting_of_ref": "indicator--7dbdacc2-ee63-4e06-a26c-8e5e369e9f65", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf0206f-7344-4f8f-ae28-04f6d283929e", "sighting_of_ref": "indicator--6e43bb6e-d832-483a-99f1-c20faf6939e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fbe4a0-f312-407e-b955-ca3eca9a9633", "sighting_of_ref": "indicator--f2bdb9a4-ecee-44ef-bc50-38a62401cb19", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e353a7cb-bbd7-4d4f-aaf8-21f532346bf8", "sighting_of_ref": "indicator--39aada7f-ac67-48f8-ac6d-e0e984fab4dd", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c165b3a9-1180-44fe-aad5-4df25773fc39", "sighting_of_ref": "indicator--5a6a6289-4fed-4ec2-b205-93e00325511d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977a8e45-70dd-478b-8a83-72dfe30933bb", "sighting_of_ref": "indicator--5a6a6289-4fed-4ec2-b205-93e00325511d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae99985-471b-49a0-975e-f5b49511d600", "sighting_of_ref": "indicator--4d5b4f34-080d-45fb-845c-fa61ad3ec4d9", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee5d372-02e7-4b84-8ace-6966d863fc84", "sighting_of_ref": "indicator--53d6f98d-69f2-456c-9444-7e901ea9199d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328d09fb-0f1b-475c-b692-01a88138c79d", "sighting_of_ref": "indicator--aa91900b-6c37-4c43-9734-47b429a7120a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f60a6b-7713-4adb-9c6a-6c4d82fa8e3f", "sighting_of_ref": "indicator--e4a69643-2811-42e5-838f-3b971575f2da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09b54c0-e0d1-4af2-96bd-2a998502036b", "sighting_of_ref": "indicator--a7b3a57a-e85f-4e5b-9ee9-7b404fd81a73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78b8bed-991b-4d16-8284-3733167c9c95", "sighting_of_ref": "indicator--c5201384-bb45-497e-af30-aaf0e814f3be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ac7eb8-ebeb-4b8e-b870-982d1cee1182", "sighting_of_ref": "indicator--959c87fe-2a32-401f-9a65-8e9d91fe44a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1b1503-f84b-41ea-951f-30649d4b813e", "sighting_of_ref": "indicator--e5f1a042-60df-44f7-80eb-bae55b2cb2a4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f27480-e548-4066-adee-1db0943b8a49", "sighting_of_ref": "indicator--bea785c6-60c2-4932-882d-e8fea919a210", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4ed159-e070-4488-acf0-f69900362f64", "sighting_of_ref": "indicator--0ffe3c01-7915-4e57-9e91-68049cdd8c76", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799b5abe-5a89-4ab6-9e5a-5ddd987f6073", "sighting_of_ref": "indicator--8defe1fc-5c66-4ba9-9f4f-ea483643c133", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6de853-b4e1-44f2-a4f9-3170975832bc", "sighting_of_ref": "indicator--8defe1fc-5c66-4ba9-9f4f-ea483643c133", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd1c5e1-9f1b-4e3b-ae6b-f3dbf4ddff5a", "sighting_of_ref": "indicator--a7365a69-0b66-4523-81e5-019429804f58", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d43097d-2b79-4bb4-9ca9-4e70542c75d8", "sighting_of_ref": "indicator--887286b6-9696-4086-833d-cb413ac890fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efac5e38-264a-44ad-95c6-a3b848a0e24f", "sighting_of_ref": "indicator--5a369f14-8b80-426f-885e-f72f12f66447", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f121f21-c93a-41ec-a2f0-3f0bc08ca226", "sighting_of_ref": "indicator--f4dda615-101b-427f-bdb3-15806995ea3f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e8d952-eebc-4bc4-b28b-cba5721fcc62", "sighting_of_ref": "indicator--8b5355f0-0b4d-441f-b5c9-99d25e27073e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fd1501-6894-4fe5-8c40-30b772721ff9", "sighting_of_ref": "indicator--f4ca9e69-652a-4476-8288-a63dd72b0d19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d3fb49-7071-48c5-b2ff-6ecf53652d0c", "sighting_of_ref": "indicator--4cdc9ce9-9186-404b-b3ac-f8ffc2a1530a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5528c86-fa4d-4f30-ba8c-8fc64c045498", "sighting_of_ref": "indicator--e6fe5597-bc35-497e-8947-34fcf820e22f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3be61d-1454-4009-8565-319351de68d3", "sighting_of_ref": "indicator--c8f6187b-c451-4fb3-a184-6996801bfdbc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66fdf4c-44f2-4eaa-9b0a-c5056dd2f3f0", "sighting_of_ref": "indicator--8228226f-9281-415d-ae0c-27351ee226b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a872ed4-435c-4735-869c-09c6abe8c6a6", "sighting_of_ref": "indicator--c54e4cb8-2da6-4d6a-8ef6-c3629cbfdf50", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60f1093-af6a-4430-b59f-4c5e2866bf2e", "sighting_of_ref": "indicator--c54e4cb8-2da6-4d6a-8ef6-c3629cbfdf50", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b5fcf5-9ed8-49d8-9bd1-1fe03ef3d5b3", "sighting_of_ref": "indicator--c9ec992a-bfbd-4e31-9ed4-2bf40e9588a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc360f1-b9a9-4cf9-aa16-6776b66b318c", "sighting_of_ref": "indicator--8ac9685f-48c4-46ab-9759-5a6f40a70e36", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d894f78-7b10-4a23-9c1a-5a5e59d61dcb", "sighting_of_ref": "indicator--8ac9685f-48c4-46ab-9759-5a6f40a70e36", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d48864-ebdc-4557-a1f4-9bd90cd52dfd", "sighting_of_ref": "indicator--77a2e154-8ff7-4e1e-8768-9d83e33ec240", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f766702-e4ee-4887-874f-bb61e27df39c", "sighting_of_ref": "indicator--9c863915-25d3-477f-b289-f40f244a4a59", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b763b291-2179-47fc-81b9-62ac9737608f", "sighting_of_ref": "indicator--07bded74-487c-40b1-9618-dec0358d8e5e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c99613-b4e8-48c6-9092-30ddfe39660f", "sighting_of_ref": "indicator--fa9f9262-6b65-438f-9427-defb5a3af138", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9deeb1b2-61bb-4eb1-83e0-bf6786e408fd", "sighting_of_ref": "indicator--1f247bc5-9495-4e42-bcbf-1ff89e8659f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b349e9a-c4d9-4886-aaa2-b6ba967980fb", "sighting_of_ref": "indicator--1f247bc5-9495-4e42-bcbf-1ff89e8659f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0633a18-e2e3-47b3-bfee-ab7e1a814a15", "sighting_of_ref": "indicator--83e013f0-74e4-4cb0-95c1-caa3d2bfce3b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065edb16-d658-4265-8498-e0bd8bb861f7", "sighting_of_ref": "indicator--8e43862d-0f64-4007-bd88-953d5a9934bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bf63a7-4a67-431e-9632-ae65bc173fd9", "sighting_of_ref": "indicator--029ea951-738b-47c8-8a15-2cb5cb7fbee9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58859432-02f0-469e-93be-29b5a9986ac4", "sighting_of_ref": "indicator--029ea951-738b-47c8-8a15-2cb5cb7fbee9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9be12f-a816-43f8-ba5c-b2580865aa20", "sighting_of_ref": "indicator--949ae134-9f9c-4681-98f6-39980a62cd9c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff02387-2d19-4cf0-bcee-341d0b61671c", "sighting_of_ref": "indicator--684f9f8b-3234-417f-9c61-da57070042f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb80eaba-f1c5-43db-9cf1-353815fc1106", "sighting_of_ref": "indicator--5ad8383a-951c-49ff-a540-c7b414e0441f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d356cd38-1b41-4339-a0f0-c1c53e39a2a8", "sighting_of_ref": "indicator--f70128e5-d0b5-406a-be8f-7bf95cc260d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef70e99-bc20-4b7e-a12a-0e0b25c31bfa", "sighting_of_ref": "indicator--54b6e203-b395-4137-8fc4-c103684a72e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d2839b-cdc2-431f-bd53-c2352fdedbee", "sighting_of_ref": "indicator--9ba69522-c829-47da-98ac-77af49f0d343", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848526b3-52d3-4351-a0cd-7dda17bcda1c", "sighting_of_ref": "indicator--94c7c974-9492-47f0-9a66-183010267c90", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91326f7-5617-4e54-8efc-195559d8a689", "sighting_of_ref": "indicator--a495523b-ce69-4695-91ef-85bf1592f440", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a665664-68ec-452a-8bca-e915eeb5b78e", "sighting_of_ref": "indicator--9ca1a3b4-0dde-4936-9dea-520a55bccb0c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fe2b0c-2743-4a77-9ff4-79b7a9e1d745", "sighting_of_ref": "indicator--ce3997c9-1733-4e78-badc-ef5c45aedb39", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92aa92e4-984e-4f5c-8ad0-12bb2b86e221", "sighting_of_ref": "indicator--c2ef2dbd-4e53-46b7-aabd-a1a8c18db5e0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191348c3-4ef3-4cc4-8197-46e23609ac27", "sighting_of_ref": "indicator--72f9a119-bc28-4928-9916-6b71cab15a62", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc141d5-312f-4fc0-befe-0fef2f07fb72", "sighting_of_ref": "indicator--8fd1503b-76ed-444c-9c96-8206856fed32", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d02305-272c-43e3-8edb-1ee63f4c5d34", "sighting_of_ref": "indicator--8fd1503b-76ed-444c-9c96-8206856fed32", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc4781f-9f7c-4c20-908d-b165136f5d02", "sighting_of_ref": "indicator--01e94a50-2afc-4856-ac70-4882f57db3b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1d12ca-7d78-49ac-a8f2-80169b35ce17", "sighting_of_ref": "indicator--7177eef4-8e8f-45cf-8f23-4404cb1a808c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab765d55-6b05-4134-8b9e-81c70e2813d7", "sighting_of_ref": "indicator--2c6654be-f398-4d9c-a1c4-fa264852a667", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f803ec19-3b2b-44e4-913f-91d3a64119bc", "sighting_of_ref": "indicator--52eb4d28-a7a2-4352-9c00-2cd9860716b0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b81941-5fee-41f7-ae62-79eeb1d92296", "sighting_of_ref": "indicator--6bcd589b-be52-45e5-bd88-dede60a949fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a95248-a04f-40c5-9551-3c5e5109cda0", "sighting_of_ref": "indicator--cd1e89d1-3d07-40fc-af13-f5f8bbefd9bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354423e1-a4ae-4ae0-9da1-64ab0c665f93", "sighting_of_ref": "indicator--3ce1f891-6f2c-417c-ac35-84080a142817", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fc3f9c-7e04-4e53-948d-6d74eb0340b2", "sighting_of_ref": "indicator--ebf45b4b-2aef-4afa-80b9-0dd6f67e5615", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01918d42-e02b-440a-a379-27dea9819603", "sighting_of_ref": "indicator--db046ba7-45af-48f3-8538-3fac50507742", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe20b487-a1b8-4560-a5d4-0e9bea513262", "sighting_of_ref": "indicator--db046ba7-45af-48f3-8538-3fac50507742", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61e9194-9ece-498c-9a0e-e8628abeb6f7", "sighting_of_ref": "indicator--c25ee681-3780-4b90-bb26-19d87afbdb8b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d19e4f9-8833-4599-b271-45149d76ebba", "sighting_of_ref": "indicator--c25ee681-3780-4b90-bb26-19d87afbdb8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c78ef8-4714-41c3-be0b-6a955a98fa99", "sighting_of_ref": "indicator--1c7e7c5c-0a73-416c-b7b5-cddc3b7cbfb1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd436cd-78ec-417b-88ea-11c96e35d680", "sighting_of_ref": "indicator--1c7e7c5c-0a73-416c-b7b5-cddc3b7cbfb1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23768faf-a315-4c28-b290-a0792a58b0e2", "sighting_of_ref": "indicator--5f195af2-d235-4baf-9d0a-85a7b600584f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb9cba0-159b-4411-800c-be71d5027c23", "sighting_of_ref": "indicator--8a1929fe-f5bd-4dd8-9cce-9c4e2f5db0e6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0939e06-4727-4868-a349-7c85f60d6928", "sighting_of_ref": "indicator--befd64c1-3203-4ffe-99da-4e50eb0d114f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb512f0-6c7d-45c9-ac50-a956079b2eac", "sighting_of_ref": "indicator--493c8d17-f18b-4a5f-8c78-222652ff34c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54ae8a5-27ad-45dc-aab6-7c8b229d9429", "sighting_of_ref": "indicator--196b3b64-c468-4e85-b934-ba283f1b96c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227966bd-2793-4854-8084-51f7d88a4a41", "sighting_of_ref": "indicator--45913cd0-d988-46e3-97da-1d7c7c801a9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa0a149-fe82-4ca9-b1ae-ec77d330c6f0", "sighting_of_ref": "indicator--117c7a4f-5f4a-4994-b8c6-041bd8dff9ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb51cf4-136d-45c5-85b7-916db0a94ea0", "sighting_of_ref": "indicator--1dba7fb4-9c39-4cdc-b237-0d956507ff12", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f962aa68-ed4a-4811-ab64-1d1394933f2f", "sighting_of_ref": "indicator--7aca4d3d-4ce9-4fe1-8ccf-184c205c558b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb87cfb-aab7-4b59-9e5f-7432323200f1", "sighting_of_ref": "indicator--dfed70cd-1695-4277-9c30-620db207e10f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54e1fe9-547d-4d6b-93b1-570037117e75", "sighting_of_ref": "indicator--4e3c1b99-b2c8-4640-ade7-70b00772af56", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8149e456-13a5-4326-ae58-c2096617bac3", "sighting_of_ref": "indicator--9ee5e086-3d3a-4a6c-9dcd-99c1824f9171", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d765ca2c-c28b-498f-8256-966e963c2242", "sighting_of_ref": "indicator--9ee5e086-3d3a-4a6c-9dcd-99c1824f9171", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fce8a3-33c1-44ad-9134-401b15f8af21", "sighting_of_ref": "indicator--1a00b0f8-cda3-4584-9858-01769ae52517", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cd82ce-67af-419b-a567-e919dbc2317c", "sighting_of_ref": "indicator--bd18b23f-2bf4-41f9-88e8-24a01ffb5a6a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa38a9a-9150-499d-a792-219ddf552349", "sighting_of_ref": "indicator--85cabe33-849a-4ac0-9b2e-1c174e53a1ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649abcb3-9be0-495e-87f8-4ca8676f4dd3", "sighting_of_ref": "indicator--e176327b-f044-4e2b-b974-b8f6f6413013", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cf12ea-3110-4ec7-bf12-0aefa39fc8d6", "sighting_of_ref": "indicator--cd1c585d-fe43-4068-bdff-2e74a97a879d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69f6cee-a77f-4746-98f2-817b81f5d9a1", "sighting_of_ref": "indicator--fd2d637a-baa9-4ba6-83d1-f5bcd190bf21", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237ee635-0284-4b27-ac63-f1a0f02c7ff3", "sighting_of_ref": "indicator--dc162fe1-cff1-4401-a5b9-fd9450393c82", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0caafef-934b-4212-8c05-4e6451547543", "sighting_of_ref": "indicator--9683b2dc-8c88-4078-a3cd-4bc5cd0e6540", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e906784-6e18-407b-ad32-95c123b3205d", "sighting_of_ref": "indicator--20b64d39-5e2a-4495-b561-3cc170775353", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0689eeba-1aa7-4ab4-ab05-1437eda1498c", "sighting_of_ref": "indicator--a3f96135-0b3b-404a-8bf6-653d085363bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa29cc6-9f9e-4019-a2c9-a3bbb6914d9f", "sighting_of_ref": "indicator--cee630f8-9fa2-4afe-939f-415217e09ebf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc094f3-11af-4e3d-a58b-d70c90672c21", "sighting_of_ref": "indicator--cee630f8-9fa2-4afe-939f-415217e09ebf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dbe2c4-179e-446c-a266-75f4319f9f11", "sighting_of_ref": "indicator--55807860-4240-415c-917e-4c447220fdf2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d0c7bb-ab8f-417e-aba1-1b71935f8490", "sighting_of_ref": "indicator--94964874-064f-4bee-80bf-720fe061d59d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243fc91c-b753-4c5d-941d-fb2f452db3a6", "sighting_of_ref": "indicator--8c0e9e3a-17d9-4775-9475-fa8ac04f1435", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c2e985-552d-427e-9287-1f17c3d99019", "sighting_of_ref": "indicator--86e08d0f-bcd7-4c7a-96bc-8b857d898987", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a97f10b-c87b-4a0f-bd11-8f8d5d49c7e8", "sighting_of_ref": "indicator--49211c6b-6112-43ed-9f1d-578508dc52f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34469cbc-26a0-4f0a-9805-1a150da8ed18", "sighting_of_ref": "indicator--e6fd0618-2b77-447c-9300-fdd9ff3d453e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba005b6-4667-417d-bacd-bac2deda82cb", "sighting_of_ref": "indicator--50658566-edbf-4e58-ad1a-559e0849d0a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bf6683-a5b8-4aae-80fb-d030e1dc9b9d", "sighting_of_ref": "indicator--0d86ea70-136a-48ed-a16f-0c7f18b0d3da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d277a3f8-4eff-4d77-8156-b52c8d7c6dfc", "sighting_of_ref": "indicator--b7ad0f09-e7ab-4779-91bb-f6e5f61dd419", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6b89ac-d297-4ba7-acdb-21bd2b5bfcee", "sighting_of_ref": "indicator--83d03c47-586c-4f45-9821-8ef57d6893bd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bc0851-e6fb-484f-b428-180d52a145a8", "sighting_of_ref": "indicator--4ed7509b-e2b2-492c-ab69-94c9056ba739", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54ecc30-97b9-41c4-abdf-ac1c7b5be3c8", "sighting_of_ref": "indicator--d1c2dddc-2d09-444e-80c4-8081df415095", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9721534b-f97a-4909-b4c6-6bfc1487b128", "sighting_of_ref": "indicator--d1b68b72-7454-43a0-ae46-7987f4cac6c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c506a9d-8d28-4c88-8390-3a6fb22ccb40", "sighting_of_ref": "indicator--8cc5248c-7045-4730-83b9-ecae2a27700d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b3ebd1-163c-4fbe-b516-55366cf93b8b", "sighting_of_ref": "indicator--cb7a6fc0-833a-4168-90ea-898c6bd0e359", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f78749-8717-48fa-a263-9e154e042746", "sighting_of_ref": "indicator--1c2230fa-0b0d-4e1f-ba8a-e1c81379f30e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05907225-f851-4468-8173-58fe54a7b8b9", "sighting_of_ref": "indicator--1c941be7-0d50-4159-96a5-f7ced3720aed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be6f080-2bff-4bbc-9f07-36714fd47dbe", "sighting_of_ref": "indicator--89fc61e3-ed0d-4fbe-8de7-0394ebd222f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b2d082-af20-4498-90c6-ddd6f185cfc7", "sighting_of_ref": "indicator--28a2bf43-9b9c-415c-a6c0-ee3710e64901", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b7eb84-b2dc-4cd7-bba4-896fcd3a2779", "sighting_of_ref": "indicator--3fdaab45-a849-4c0a-9f81-a08f058643e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4089bb8-ed8b-4330-9201-a7edcaddf78b", "sighting_of_ref": "indicator--283a8c5f-3db1-4e0a-a65e-9baca33083e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49ad9f1-4b97-47cf-8c39-a72f1583814b", "sighting_of_ref": "indicator--283a8c5f-3db1-4e0a-a65e-9baca33083e6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2981328-ea26-4d37-9cbf-3fdbab453341", "sighting_of_ref": "indicator--9797f061-1ebd-40af-bdd9-95c73db3147e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2679bc7a-c4dd-44c0-83c8-1bb565e0e7a5", "sighting_of_ref": "indicator--c7093a73-1d7c-4e74-bde9-5b4f15c3fa81", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde4678c-9c30-4993-85c7-7031f858d541", "sighting_of_ref": "indicator--eb8dd19d-91f7-4730-9353-aa6463598988", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fdcc3f-7214-476b-89b0-4f0b204f7c40", "sighting_of_ref": "indicator--88d2db4c-b1e6-4b1d-9516-02a37d1404ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d30933-d38f-4f73-ac50-85a4b91a07cf", "sighting_of_ref": "indicator--44813ff9-7cf2-42ac-a75e-42269196fbed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020e2c4e-fef2-418e-bef4-8c142cbdc608", "sighting_of_ref": "indicator--5c881e16-0d33-4ad0-b6ea-ed1809f2cf48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd99582-393e-438a-b7e5-24538ec89833", "sighting_of_ref": "indicator--d6490d6a-e77a-4194-a890-a07399e04289", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8c10e8-fb61-4ffb-acec-956914b3f3aa", "sighting_of_ref": "indicator--48445ab8-7bc6-4008-b597-6489c747b6a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdbc23d-8c9c-40e5-9d85-26039c4a25fb", "sighting_of_ref": "indicator--48445ab8-7bc6-4008-b597-6489c747b6a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08008e5c-9f9e-4978-a841-e666f0833718", "sighting_of_ref": "indicator--c4e335e2-2a1e-455a-b89f-1660b37b2747", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e708d5fb-3d77-471f-931c-0b66bd8f1af4", "sighting_of_ref": "indicator--cedab35c-c81e-4ac5-9dad-57742e95c834", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468f2098-ee0d-4711-8fdb-cdd646e1baac", "sighting_of_ref": "indicator--d87e16be-d790-49d6-9879-cbfe1ef74eff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9889a462-72e2-4b62-b5f1-a1093c0f6da2", "sighting_of_ref": "indicator--7ca2761b-c3f4-4db1-88c5-15cf48cd92c6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4ce419-df7e-4ae5-8e40-9044366ce538", "sighting_of_ref": "indicator--f34c8efc-8e11-4588-b2db-dac26cf9bc50", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3e9b3e-c291-477a-8ed5-4815acc6c511", "sighting_of_ref": "indicator--e6e43d9c-5ce1-499e-99c9-4271519deb7c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd982a4a-d1a4-4f73-8b31-222887aa4fa2", "sighting_of_ref": "indicator--bc1f618d-c7da-4ac4-a3a7-dd80965de98a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6bcbf4-13a8-43d5-9e86-6a4bfb21e976", "sighting_of_ref": "indicator--93acbdc4-12f0-4cdc-b6ca-4212e66b1504", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dc976f-d3eb-4b61-bbb4-6b14fc157f9b", "sighting_of_ref": "indicator--bff1bbec-2440-44d9-9c15-ccf0db7bb0bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae45e05-dd4e-4056-8980-957b25c3a622", "sighting_of_ref": "indicator--bff1bbec-2440-44d9-9c15-ccf0db7bb0bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b61c77-f341-4d87-98a5-49efb9e09d19", "sighting_of_ref": "indicator--21a414a4-7a31-482d-82dc-49a5830d9bb6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53206564-d96f-4d9b-9586-bbe50e240e76", "sighting_of_ref": "indicator--cb46ac16-84c1-4d65-8a07-df8ee6162a24", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b4048a-285f-46c8-b6ef-6326550248bb", "sighting_of_ref": "indicator--29e99daa-dad4-4702-8023-223ec2fd4c04", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2393960c-035a-4afa-afdc-a2a745ea955c", "sighting_of_ref": "indicator--29e99daa-dad4-4702-8023-223ec2fd4c04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea581c67-30bf-4fbb-a763-71a390825c56", "sighting_of_ref": "indicator--72966c15-c0a5-448d-81ed-2f1f71e6b25e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9225421-fda9-47fb-8456-2371ce672fcc", "sighting_of_ref": "indicator--9e938e4c-3d7f-41ab-a0e9-79a6d62ed906", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5569e598-2ddb-4dbf-b645-3a736cc81d23", "sighting_of_ref": "indicator--5b1796d5-7d35-4a3e-9232-d399b4216d5b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baac131-d3db-46a9-a5b2-ab9a3883d50f", "sighting_of_ref": "indicator--5b1796d5-7d35-4a3e-9232-d399b4216d5b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a376baa-02bb-4790-8b41-ac094ad012bf", "sighting_of_ref": "indicator--4788c155-feae-4efd-85d6-95262af8778f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58ea860-9490-4c5a-a83e-0d883823bc4e", "sighting_of_ref": "indicator--0d165179-83e9-4be3-a766-456b2cd94db4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419a7b0b-b2c1-4e02-bcd6-330eec6d4490", "sighting_of_ref": "indicator--fe10078d-1fe5-4e0c-a464-2d7d884848f6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ffc122-93fd-4889-be88-3de9ea712d9d", "sighting_of_ref": "indicator--383d34ec-b407-432a-a9ef-782f05e87243", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3d34b5-b372-4eb4-b8ba-af51cecdaa12", "sighting_of_ref": "indicator--7cabbcd4-e0a1-4a4d-9941-0257cf30e361", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece71b31-da45-46f0-9cef-81469c619c8a", "sighting_of_ref": "indicator--a252bb7d-6c73-42c6-9877-00c77b061495", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f622cf82-4f78-4aac-8cbe-4890e54efcda", "sighting_of_ref": "indicator--743bb20a-e85f-4821-b456-790967b49760", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a7da47-a701-487b-b9a6-1585d07aedfb", "sighting_of_ref": "indicator--f85c06e8-1c7f-4f6f-8aaf-1e938f9d811c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82af23f8-a492-4bbe-becd-56459e78d52a", "sighting_of_ref": "indicator--5ec1a1c6-c853-4cdc-9532-2bb43ec0165e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260f0c36-e305-4a52-9473-090752823075", "sighting_of_ref": "indicator--17983f06-2224-41ee-9816-5e439be1b54d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec56442-75d9-4637-af60-51f39b69e51e", "sighting_of_ref": "indicator--82b97adc-deac-4ac5-a1f0-594632d44f4e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eada5b6-0934-4b61-a0c9-f2369fabf919", "sighting_of_ref": "indicator--868d3019-5574-44c4-9c60-221338436daf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e73a4a-40f9-475a-beed-348ade0856c0", "sighting_of_ref": "indicator--868d3019-5574-44c4-9c60-221338436daf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fd04ec-df06-417d-9a65-9d7d353f9fb2", "sighting_of_ref": "indicator--ee91b892-d012-4f3f-a132-a7e7abf92dfe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed04d07d-c1e3-4f0c-a0e1-0714030487fd", "sighting_of_ref": "indicator--1136d494-8bac-4395-9588-4124ddcca1d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cb63c9-6329-4a7c-a148-e102dc226bd4", "sighting_of_ref": "indicator--3f1bd45d-dd13-4e0f-a977-6faeac40f984", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d25ffae-241e-4556-879f-c23d812006b5", "sighting_of_ref": "indicator--b525ed68-f7d9-4296-8ec9-204602f0d69e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c526aaca-0207-4cf8-95fc-d26b72b68561", "sighting_of_ref": "indicator--180dddbb-58b0-4fae-91eb-f0f2b6420cc1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1879671-c151-44e9-82bd-44f3aba24a61", "sighting_of_ref": "indicator--22eb1050-0f08-44ba-b3a4-bc1b6eba5bef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e4f69e-26c6-48ad-97b5-12b44319611e", "sighting_of_ref": "indicator--b078efc4-cc9c-43d6-8acc-ec3d5310caae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d043bb41-b5f1-4476-876b-83db113c5595", "sighting_of_ref": "indicator--982da711-f0fb-49ed-8fc4-b9d490eb59d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54540986-7159-43ee-ae01-2bafa9db3e6f", "sighting_of_ref": "indicator--2a524019-d730-459a-b493-bf1e4a8261f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2d79c9-ebb3-4f24-b76d-7e6f3d47d818", "sighting_of_ref": "indicator--a4252acd-d4e6-4d3f-8084-8e285a960695", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d4e0d6-21b7-4c5b-909c-eca5c3d2ae0b", "sighting_of_ref": "indicator--49122005-c8f8-49d2-beeb-edb243b4fc38", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9cffd9-08ce-4651-8fbe-fc92ca35cc86", "sighting_of_ref": "indicator--af3648f6-016b-40ed-9e6a-1ce750013d59", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bd78f5-772d-4edb-9ba0-51ffd275ae22", "sighting_of_ref": "indicator--241461b0-2625-4ad5-8b63-486c2633ca95", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc04519-3391-4b61-85eb-966c83f5cc77", "sighting_of_ref": "indicator--001b4430-b6cf-44fe-838f-55a39e291589", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592b756a-f036-4cb7-aed4-77b7da359825", "sighting_of_ref": "indicator--bab2f9e6-579a-4c6e-b87e-2247b754d905", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73dcf55-c22e-4188-9eda-830830141cc6", "sighting_of_ref": "indicator--fddee682-c728-4526-9c7a-630283f1b4a7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05d6d39-216d-45cd-ad4c-92ac6e4a057b", "sighting_of_ref": "indicator--a560bada-6096-4a62-8e19-b1592a1f4562", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656853dc-0d04-47a4-9d1c-a4072aaee8dd", "sighting_of_ref": "indicator--13638813-8c1e-4bcc-ac64-2e51260e8c5c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65360306-1e11-483f-94cf-c374137c2f49", "sighting_of_ref": "indicator--8d4349b0-0c2b-499b-b278-4c9bba4098b0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3d411c-1639-4365-8eee-52223601ea82", "sighting_of_ref": "indicator--a0b7a26d-22bf-4a5f-8882-6b9b45812449", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd4ada8-ed24-42bf-b703-2c2359afa0ce", "sighting_of_ref": "indicator--4aebc60a-5ae1-49eb-a29e-7f964b82959e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9c4189-44bd-4a0a-b05a-7d9a9348087e", "sighting_of_ref": "indicator--3b588e02-99f1-482d-8c77-34cf825fa56c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa5d956-5b4e-42c3-8abc-ecaed60affc2", "sighting_of_ref": "indicator--1077eb90-fe49-4c90-9287-d3e2a80690ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa85f8ce-61f4-4f89-b223-81a3166c8e6e", "sighting_of_ref": "indicator--a073f1c2-4d61-4dec-b297-78f0de73ce7c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813bf69d-0a68-49de-a89e-070cf2c5f761", "sighting_of_ref": "indicator--7e2f2ef5-d0d3-4d99-a5ce-bbd9ba5f5ac8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b32d340-ecfb-4fa4-84b2-8dadd7fd598a", "sighting_of_ref": "indicator--b36b0f96-9990-443e-a7a9-4c9cd3fd32da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0142a1cd-12a1-4374-af81-f3d1c48f8d65", "sighting_of_ref": "indicator--b36b0f96-9990-443e-a7a9-4c9cd3fd32da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb91125-5ece-46d7-9dc8-553b1ad72074", "sighting_of_ref": "indicator--2471d463-d97f-45e6-93cc-845e95b5ac8b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfedd20e-2da9-4a2b-b516-f65a18277064", "sighting_of_ref": "indicator--8aed3413-a85d-4a36-ab03-2532fcb6998a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187157be-a9a1-45ec-8ea3-067c6b538c56", "sighting_of_ref": "indicator--4a6bcf8c-da45-4f57-b272-818e9969b8fd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d039267e-d2fb-419b-b712-a28e66f3dbfb", "sighting_of_ref": "indicator--f23cb687-c11f-4401-98ad-784ffaf1df03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f850a1-cf5a-4ef5-be08-6e3896e31560", "sighting_of_ref": "indicator--f1799826-029a-4994-9bb7-56d163e6811f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fed7c74-3734-4b33-abd0-77867b35574b", "sighting_of_ref": "indicator--f1799826-029a-4994-9bb7-56d163e6811f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f3d041-df4b-4dac-a054-d38b22b1d811", "sighting_of_ref": "indicator--ee7d04fa-a368-4f5b-aa73-b1a183fc6cfa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4cb57c-795e-448d-88cf-7a46ba48b290", "sighting_of_ref": "indicator--ee7d04fa-a368-4f5b-aa73-b1a183fc6cfa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92280752-d425-492c-8afb-16bf52a75174", "sighting_of_ref": "indicator--f1538060-216a-4420-b5d6-bf2d47944272", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11625f1d-e996-4689-9b0a-621b7a52cd0b", "sighting_of_ref": "indicator--f1538060-216a-4420-b5d6-bf2d47944272", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1082fb0-0db7-4ec1-b9c5-01a97d7cc4bc", "sighting_of_ref": "indicator--65141417-7766-484d-97a2-d76bd223c4a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7d4ab3-4e86-4228-a3fa-3478014f4d39", "sighting_of_ref": "indicator--65141417-7766-484d-97a2-d76bd223c4a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a6d3d7-8f88-49f8-bfc7-f33b04b53dfd", "sighting_of_ref": "indicator--4b700c66-d646-4221-902d-42ef26277540", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1164d1b6-a4f1-4dce-bf5f-0c17192076b7", "sighting_of_ref": "indicator--4b700c66-d646-4221-902d-42ef26277540", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad7905d-ca1f-4d5a-9e0a-177c85606bff", "sighting_of_ref": "indicator--d6b97b0f-254a-4001-a12a-09f959897a00", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6897c2ab-3ba0-4315-ab3e-83ce20b09fba", "sighting_of_ref": "indicator--c5d49197-7c83-4eec-8735-91adebbeda7e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502b2238-1d81-49a8-97e3-c253bc7b15e6", "sighting_of_ref": "indicator--eae322f0-31b2-4f75-af6e-c2a1920b9dd3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748c4919-d206-4bd1-b199-28164a9487ba", "sighting_of_ref": "indicator--53162a58-33ad-4b7a-89fa-6a3d2dcb0f81", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9031ad-ca87-4582-a580-b3c3b14d1a67", "sighting_of_ref": "indicator--a782bb62-66bd-4545-82b5-d02ac904c259", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e87ced4-9694-4dd8-b083-4ffd20a5e417", "sighting_of_ref": "indicator--1bffef8e-7ff4-4727-b8dc-f43e7886696d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31066e5-fe42-4879-95b6-f6e54c8c2aed", "sighting_of_ref": "indicator--1bffef8e-7ff4-4727-b8dc-f43e7886696d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf76fcc8-f756-4e51-bb26-3527f6261a6e", "sighting_of_ref": "indicator--d8127674-67c9-4a36-9f97-0fa44eb6ff2d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c61c23e-1b4f-4176-868f-f3f81cd23dee", "sighting_of_ref": "indicator--d8127674-67c9-4a36-9f97-0fa44eb6ff2d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51531a3-55d7-4088-b881-dcbff4a0c147", "sighting_of_ref": "indicator--93f36e7e-c9ff-4b53-80a9-e0bcd0992e3b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0174b700-abe6-464b-943b-c43ef416dc40", "sighting_of_ref": "indicator--f8e14a04-993a-4382-a94b-25b821e6c072", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20563a46-2ba2-4388-831f-dc5f62c1386e", "sighting_of_ref": "indicator--f8e14a04-993a-4382-a94b-25b821e6c072", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c96934c-b818-42e8-a3f5-3345c6ea82bf", "sighting_of_ref": "indicator--c1407220-6ec9-443b-8f9f-34e1c1447886", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a5c60b-216b-4e49-8afe-1921be3e3a1d", "sighting_of_ref": "indicator--014bca20-802a-465e-ad61-3459c31c3e8f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bf270f-c399-43d3-b7c0-eeb51bf1c621", "sighting_of_ref": "indicator--a265fa35-1819-4889-b00c-f236151eb674", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e45a98-cfec-4546-a470-be8f9d8cd7e4", "sighting_of_ref": "indicator--41294e9f-471c-4cac-b05d-462e334cf162", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76282ab-8bb9-4f29-833f-101dca01447b", "sighting_of_ref": "indicator--2a249eba-3506-452d-a0e1-c0ebd08ad0dd", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb88f56-d8f4-4bd1-8adb-608b6ab555d7", "sighting_of_ref": "indicator--c0927e16-2142-417b-8a41-27da022d2d6b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3e11ce-7861-4014-a91c-26f8acbbc69d", "sighting_of_ref": "indicator--1b41ea1c-2c84-4dd0-8c69-cab385e65f52", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb8d832-8753-4f06-9890-1effd10d3af7", "sighting_of_ref": "indicator--da82d9da-50e0-4980-a7d7-1086144005c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c73401-5dfa-4b05-b9b4-3c315a7aedb1", "sighting_of_ref": "indicator--31e68fea-b93a-4df1-8bb0-8bbfaa84d77d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa1cb38-5eae-4683-a91c-b05a7cf1f64e", "sighting_of_ref": "indicator--17543ce1-a7b8-4222-9deb-0cd14a4e20f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9633e5-f143-466e-a1c1-ad4550e79232", "sighting_of_ref": "indicator--43205fd6-5dd9-4d8d-85ee-3320955f15ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e5219d-9ec1-4c7f-bdc4-64641ee1b3f2", "sighting_of_ref": "indicator--a8016a13-0a98-4abc-a649-848581ae32cb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e962adb1-76cf-4969-8fed-505e195d8997", "sighting_of_ref": "indicator--8a4682cf-92a1-40db-b9a4-f1a3d09b1781", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a281d801-2ca6-42fc-bf1b-91db62cc46df", "sighting_of_ref": "indicator--284d0089-95eb-4bfd-99bd-a4afdcfd9d4b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71bee62-750d-4435-b9c8-0506f21e3325", "sighting_of_ref": "indicator--81538f1f-c3ba-4f56-836d-9dec2d60c7e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24d47bb-4d1d-41d5-a618-074784da8ce3", "sighting_of_ref": "indicator--88bc5b75-832f-42af-86e6-205e65288119", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19763dd-0220-4e09-b52c-8f596a1c3811", "sighting_of_ref": "indicator--88bc5b75-832f-42af-86e6-205e65288119", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1551a8-ffd2-4141-8ce4-0887c68588e8", "sighting_of_ref": "indicator--7eaec518-b858-44b1-b805-07b254b45f6d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb0d23f-7b09-43a3-9d1e-6535cdaf4fb1", "sighting_of_ref": "indicator--95d514c3-15c7-4fc6-95eb-cb518efd9b11", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7cc5f9-ab2f-429f-ba61-dd4918cc4b83", "sighting_of_ref": "indicator--62c8ea4f-523b-41a6-8190-e717354bd218", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ead267f-1df0-4aa3-bb07-7e28a9362f0c", "sighting_of_ref": "indicator--135cc5d9-24a0-400e-b551-72ae4c30497e", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3afa0a-79db-4f89-a2b4-e5162f945574", "sighting_of_ref": "indicator--245353c9-ff4f-46d6-a6a8-b978f97882ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e38e8b7-f840-4a4a-ab2f-4b36b6ef9494", "sighting_of_ref": "indicator--06b088d2-39db-4df8-937d-a4ee38ec7425", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d527b93f-b5c8-447a-b68a-59146f9aae48", "sighting_of_ref": "indicator--66734ed9-6692-4862-a44d-b70ed6b9b10a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f0d484-03ef-4371-b1bb-93b44f26594f", "sighting_of_ref": "indicator--b1481cad-2267-45d7-b52f-2d80348cdd9e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e149bc7f-2fcb-4cce-814e-b49946599d20", "sighting_of_ref": "indicator--2016a1c1-dd4e-4e5a-9215-0528c8204dae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c39b3d-b856-4cc6-8b73-019f7004b56b", "sighting_of_ref": "indicator--07b6290b-1c49-40f6-b0ae-76003804ce4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea848bd2-4409-444d-8ed1-531266738f14", "sighting_of_ref": "indicator--677ba37a-bd0c-4d56-8924-515118a7a3b3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f2e484-11f8-455b-ad10-3c317c07317e", "sighting_of_ref": "indicator--b4c01fd8-2b19-43cd-ae75-69132167f0b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f806ef-878b-43e0-b6fc-de73cbe38dd2", "sighting_of_ref": "indicator--9d1d0d33-41b2-4379-a4e8-5ff2e6d50ec3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3ea96e-97c5-4800-a5fc-48e744f0ca93", "sighting_of_ref": "indicator--92e71724-336a-4d4f-abee-8764da588318", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7793a48-2eed-45f7-b4c2-c3af4f9dbc4c", "sighting_of_ref": "indicator--8ccddd57-6a6d-4414-b36d-834f62a21c69", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7e39ee-15cf-47ff-816b-01dec042983b", "sighting_of_ref": "indicator--29264db8-fa32-4662-8251-07216633f303", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da91b9d0-aaf4-4dba-a035-2352a1524aee", "sighting_of_ref": "indicator--c3a7586a-73b1-4e84-b82a-fc9b2b739807", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677fd677-b82b-4678-b732-e1ec37efc675", "sighting_of_ref": "indicator--c3a7586a-73b1-4e84-b82a-fc9b2b739807", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc66a7a-261f-4529-9391-65bd40c74cf9", "sighting_of_ref": "indicator--67028e48-6f0d-43f8-b490-9e80efbf9934", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ac660c-ea26-455b-8173-988410b9bf1e", "sighting_of_ref": "indicator--4f469f41-2122-4922-b8cc-2e8f55060da7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1103ca16-50b8-4641-9e32-fd56e60b3508", "sighting_of_ref": "indicator--844da32b-060e-4234-8f27-6b42138e5896", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d74c92f-bb7f-4032-b5db-2241f76d3046", "sighting_of_ref": "indicator--c9437b6b-fcc3-4900-9851-790c092ecc4f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfb8b19-fa66-4c85-b4b6-e3345bcec035", "sighting_of_ref": "indicator--bf1ed8c3-e632-4d9d-9ef3-02e5a4685692", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9cd8cc-0ad8-40d0-a086-e27391f3a840", "sighting_of_ref": "indicator--62981c72-5120-4e62-a441-5c80c84bd9ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd6b6b8-3f43-401e-90f4-a9b2b2b5f6e2", "sighting_of_ref": "indicator--6ddd8f9d-a8a7-49ab-af11-2320bb7eca09", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc9b15f-70ce-458d-b3d0-9c82484929c8", "sighting_of_ref": "indicator--18aacbbc-4e8c-4b38-999a-608918794c0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c5ff6f-87be-4375-a481-faaec8121f4a", "sighting_of_ref": "indicator--8f7049f5-941d-4137-93e0-2318c252ccca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e1c910-5ab1-48e9-aa9d-5118b405e312", "sighting_of_ref": "indicator--08fd5fc3-996d-45ce-8ee4-b95b7f4da9c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4067895-a255-4376-84f5-d55e62c30315", "sighting_of_ref": "indicator--ee14acb0-7c91-4a22-8278-77dcc3828ca0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db1b5e4-714e-494f-8dfe-3c164d1ddf4d", "sighting_of_ref": "indicator--718a2b4f-f033-4718-bba7-d48e98b4b8c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a17ef6-bfbf-4673-88c6-b0963aacb592", "sighting_of_ref": "indicator--7a59a252-303a-4c25-99a3-ac988c3871df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d4cd3d-4fe0-4dc7-8afb-1dd432d258e3", "sighting_of_ref": "indicator--6ca28cfc-8fbe-48c4-8101-2db98d31551f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c150fb-a50a-4496-a5c3-2f380b4822f1", "sighting_of_ref": "indicator--71e66285-87bf-4fac-b548-c8ce80e2c745", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5041ce66-ce36-43d9-a4c7-278c22b7fb3d", "sighting_of_ref": "indicator--1ff912b4-fc1a-47a3-b985-83928b8a5e14", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0b0448-e061-4497-948b-d2c2cf83da38", "sighting_of_ref": "indicator--25e91013-5fc3-47a7-8a15-151659b1d9b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46c9093-f327-4f7e-88d2-a80677f99df6", "sighting_of_ref": "indicator--bdf24816-d9b4-4f41-8478-5bff1476bc66", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bbc72d-e121-4d0e-9bc6-aba04968d712", "sighting_of_ref": "indicator--0d831bbf-9b43-4ec1-8351-e29e86595b57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb109c4-9589-4ddc-8f95-427046abcd20", "sighting_of_ref": "indicator--0d831bbf-9b43-4ec1-8351-e29e86595b57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f39fb1-3441-4612-938b-1934b01bf25d", "sighting_of_ref": "indicator--b624e55e-96da-4366-941c-3c849fb7bbd8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0131d031-cb7a-4d1e-a664-8575535033ca", "sighting_of_ref": "indicator--4f19bbeb-5113-49b6-b208-0bf2174b7454", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f8fe1f-ef68-45df-b09c-d2b9202cb713", "sighting_of_ref": "indicator--b87c4a53-6a3f-4001-8b08-4429f9ff4582", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20837d9-0db1-4f29-8e2a-0244de8e66d3", "sighting_of_ref": "indicator--db46f6e1-6cc1-40ed-9abb-d25a89f69cf9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cf81e9-cd53-42f4-befa-73830d76bff3", "sighting_of_ref": "indicator--db46f6e1-6cc1-40ed-9abb-d25a89f69cf9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accf71dc-e543-45df-a839-c5f218e58232", "sighting_of_ref": "indicator--573bfcfa-6ff1-4b76-b24f-8565023f1d22", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2df60d4-0971-4e87-81fd-dafaa5d73a56", "sighting_of_ref": "indicator--573bfcfa-6ff1-4b76-b24f-8565023f1d22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0110b96-77f0-4b26-9f67-541e2b39c7e8", "sighting_of_ref": "indicator--e8aed473-0956-4151-b5f9-5ce0d487c3c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e061494c-3fc6-477e-86eb-c34b4eb195a4", "sighting_of_ref": "indicator--e8aed473-0956-4151-b5f9-5ce0d487c3c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d2c983-1fd7-4ec3-a3b2-e91c15f251b0", "sighting_of_ref": "indicator--b2eb5e73-0aff-4714-bc35-f18f0d23f6eb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fdd7c8-abee-42df-8254-609ceaf4dc7d", "sighting_of_ref": "indicator--b2eb5e73-0aff-4714-bc35-f18f0d23f6eb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a95695-a281-4382-bed2-e5eef4051db7", "sighting_of_ref": "indicator--60f44645-c4d9-4ae9-af29-0237d4245c1d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee0eae5-4ba3-4a7e-af90-0ca6539d8123", "sighting_of_ref": "indicator--5c2a834a-e99c-4b5a-bac1-db27bea54dd1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63663565-7c2e-4683-82ba-3c0e6b3699db", "sighting_of_ref": "indicator--5c2a834a-e99c-4b5a-bac1-db27bea54dd1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab9ce2e-6a5d-4c3a-afdc-296cb6d43d9a", "sighting_of_ref": "indicator--e930813b-f8bb-4d2e-ae7b-005d4167e1fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1329788e-a75d-464b-8e55-a0dcbcb10460", "sighting_of_ref": "indicator--5fe4c9ec-0dc5-4394-8d8c-01e87ae3575b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598f717a-b107-4a42-b904-cc9d259928ae", "sighting_of_ref": "indicator--10d48179-9d34-4c07-917d-e7bf771af624", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7b3c0e-9fd8-46bf-bfb7-ab0e9e45fbf8", "sighting_of_ref": "indicator--10d48179-9d34-4c07-917d-e7bf771af624", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8e5c4f-6c03-4152-b41b-aa24e832afd4", "sighting_of_ref": "indicator--1d520354-89a4-43c3-a4c2-52426ff3723d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f636ec-99b6-4270-90c5-bb7ef54b63b0", "sighting_of_ref": "indicator--39762a3d-c523-4bb6-b817-eba48f7db6bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3262717-1ff7-48c8-8dee-7c611598daac", "sighting_of_ref": "indicator--7b295970-8a86-4a5a-809f-68d9ad182941", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee4f7f0-5aec-4ec6-8fb0-27dc3b0112fc", "sighting_of_ref": "indicator--ba233761-eaa0-45b6-b5e9-7ab925f0d977", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b52157-834d-43d6-8d04-5f2abcf7c5aa", "sighting_of_ref": "indicator--d870ed11-f157-4e4c-b7db-64001dd369a3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785864f8-33a4-49b8-8f63-fd382beb5b33", "sighting_of_ref": "indicator--35ab256f-db09-4432-8b7b-db5f2e0a570f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f751f09-b432-41e0-9742-229d30653269", "sighting_of_ref": "indicator--2380dd50-b5a9-4bc2-afa0-bb78ea03f344", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c09074-e71a-4174-bc56-782de34cff2a", "sighting_of_ref": "indicator--2380dd50-b5a9-4bc2-afa0-bb78ea03f344", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b356a1-6f75-4323-b307-390f2d5da1be", "sighting_of_ref": "indicator--231a1a02-3d2f-4367-b568-7f2dbb4a2d99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55a29e7-747b-4ede-b832-57efa4fc631c", "sighting_of_ref": "indicator--dd546d37-029f-4ab5-b8c9-72e25ef13781", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6181aa-4173-4535-ac10-718da3f43bb8", "sighting_of_ref": "indicator--fd749663-1a98-4895-a76f-1386d33ccf75", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f60822-8fbd-4890-a975-9a9e085ea6b8", "sighting_of_ref": "indicator--f48a3b0a-77a9-41c4-ba1e-7c8789591600", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec706adb-25be-4d08-aff4-c7d73cc91017", "sighting_of_ref": "indicator--998475c6-17ad-4816-9dd1-2f4a121d2d2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c2f7f3-77be-4251-a843-a1d329904309", "sighting_of_ref": "indicator--7f694598-673b-4054-9dfc-ef7aaecbc65d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18256aa5-6031-4855-8d12-5e324c15a7b0", "sighting_of_ref": "indicator--48d14b99-663f-44e7-aac7-6b09fc812f99", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c73df2-2abb-414d-92c2-65e6d89ae8a0", "sighting_of_ref": "indicator--1cd23e58-b180-4509-b9a4-7671ebd078ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523a7dc7-d4e2-45e2-b232-7ac75d4e4218", "sighting_of_ref": "indicator--353f84b3-7f75-4109-8866-40e18bd2bf52", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14ea54e-e79f-446c-9624-93c2ba0d9613", "sighting_of_ref": "indicator--64e267e6-2904-4dfc-9d7e-7f7e5069c60b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35436d5-e231-45bd-bdc5-0096b109e61f", "sighting_of_ref": "indicator--053ca900-4fd8-42b7-8181-8ba509f65d43", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e164a1b6-7ca4-43b6-a0df-b87ddc646584", "sighting_of_ref": "indicator--3dbc5b3c-c2db-45ad-8ceb-ffafc8ffa5f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f35963a-131c-4180-b080-ffd0aaec6167", "sighting_of_ref": "indicator--4227bb80-bd10-4d80-b9ed-a8f0d46e3ca9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa52714a-48b9-4d29-8d50-8bb222688313", "sighting_of_ref": "indicator--b04c7b3c-c0e5-4a11-bdac-5064504cf006", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f9f072-3f27-4862-b580-6ea9269f36e6", "sighting_of_ref": "indicator--d9528441-8389-4274-876a-0aa2d89dbfb3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933483b3-1429-4704-9a83-75690c5f7897", "sighting_of_ref": "indicator--d9528441-8389-4274-876a-0aa2d89dbfb3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7b73ee-b90f-44f3-9b57-3e89d9ae3aee", "sighting_of_ref": "indicator--7af7404d-1a05-4e5a-8e97-ad01f5642658", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a83f061-5e0f-41d8-b2e7-4287cd31be68", "sighting_of_ref": "indicator--7af7404d-1a05-4e5a-8e97-ad01f5642658", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96cb98f-db72-421d-be30-db2bab2a283d", "sighting_of_ref": "indicator--b93b02ac-17b9-4852-be7a-ed2cb3a528e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ebf27a-d5e0-4ac6-a13f-648cb42c9986", "sighting_of_ref": "indicator--b93b02ac-17b9-4852-be7a-ed2cb3a528e8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf22fc8-9eeb-4b9e-af11-c1a6c089ff77", "sighting_of_ref": "indicator--a2ee5e69-b995-4256-932c-8c30fb05ef94", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ca5dea-0327-42b5-b834-6e7cc9bce75b", "sighting_of_ref": "indicator--a2ee5e69-b995-4256-932c-8c30fb05ef94", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb981af-4928-419b-8e67-022d592f1829", "sighting_of_ref": "indicator--5e657e2a-5456-4cfd-a59d-6a969bc98b16", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f612c5-cd02-4bd2-b34a-3da1e33a69cd", "sighting_of_ref": "indicator--5e657e2a-5456-4cfd-a59d-6a969bc98b16", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67e70e1-a871-4480-afcb-9e4698d452a1", "sighting_of_ref": "indicator--2cbfec43-3bcb-4ba2-a044-fea21b90c82a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a4ed5d-433d-48dd-b5a6-4ce2250ef5c7", "sighting_of_ref": "indicator--2cbfec43-3bcb-4ba2-a044-fea21b90c82a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e3afd0-c4ca-4eed-85a4-d3e13a09303a", "sighting_of_ref": "indicator--2d5286c3-e4a3-43e1-a90f-c6a5a52eff45", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95e3a8e-5985-4403-834b-76010b5a3796", "sighting_of_ref": "indicator--2d5286c3-e4a3-43e1-a90f-c6a5a52eff45", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cdd2a8-1218-446f-9c73-2376c38c9db8", "sighting_of_ref": "indicator--ac2e835d-852b-40a6-9af5-20ebbbc6a9cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a425dab-747a-4fe8-be98-0df581893376", "sighting_of_ref": "indicator--ac2e835d-852b-40a6-9af5-20ebbbc6a9cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53f41c9-8d28-4abe-8b60-eff86c308e27", "sighting_of_ref": "indicator--f6840a56-9042-4cbf-88f8-7183de5eedfa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0e8067-bffa-4c68-8578-6a01ae8f5295", "sighting_of_ref": "indicator--f6840a56-9042-4cbf-88f8-7183de5eedfa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d450267f-f39b-4d7f-a806-7a134d00beed", "sighting_of_ref": "indicator--508cfced-7670-4e16-a88d-35003d374693", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1375fc03-5bd3-493b-a00c-b8dcf35689a2", "sighting_of_ref": "indicator--508cfced-7670-4e16-a88d-35003d374693", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168f5e8b-a95c-4d94-a293-0c113e1e6f83", "sighting_of_ref": "indicator--6e909dd0-ecbc-4431-bdaa-0d57861fed66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716dc2a4-ed03-42ad-b235-5bbe1ddfb2c7", "sighting_of_ref": "indicator--6e909dd0-ecbc-4431-bdaa-0d57861fed66", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ca7817-e40c-43e9-9be8-355ec276da19", "sighting_of_ref": "indicator--06862efe-32ba-4118-89af-d0f417f088e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191c33f4-201d-4a2c-9d38-0d02be9e600d", "sighting_of_ref": "indicator--06862efe-32ba-4118-89af-d0f417f088e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed426ace-8bf6-470f-a28e-555177b83784", "sighting_of_ref": "indicator--744cd332-c0cc-4dce-a132-bf0820edf786", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4884f025-018a-46e8-82c3-2f3f560d0139", "sighting_of_ref": "indicator--744cd332-c0cc-4dce-a132-bf0820edf786", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5c1652-7aeb-4445-92a5-ec47436be83e", "sighting_of_ref": "indicator--1b4be072-a8a9-4b04-9430-b935db6f5699", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa0c39f-84b9-4fd5-9b7c-2fa18d380dd8", "sighting_of_ref": "indicator--1b4be072-a8a9-4b04-9430-b935db6f5699", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812e79e9-7f73-4fcf-8762-54c9f934284b", "sighting_of_ref": "indicator--c0a63e32-7b8d-4528-8368-9cf2fb3f555e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d4000a-1142-4a9f-8468-3e933b16c2d9", "sighting_of_ref": "indicator--c0a63e32-7b8d-4528-8368-9cf2fb3f555e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1b7542-8081-4a08-a387-79f852f37c66", "sighting_of_ref": "indicator--4bafbd6b-a984-4a36-877e-b78f0a310e89", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f787b037-27e7-4901-b388-f44a929b6af6", "sighting_of_ref": "indicator--4bafbd6b-a984-4a36-877e-b78f0a310e89", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c34c6e-3169-48a8-b8d8-99df89e358ec", "sighting_of_ref": "indicator--b0572135-595b-4896-807b-9bb52b07eb57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bccf60-9826-41b8-b078-8ca5cd04e368", "sighting_of_ref": "indicator--b0572135-595b-4896-807b-9bb52b07eb57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0aee276-4501-404f-bf23-dbd181e0678a", "sighting_of_ref": "indicator--7ea745bf-3bbc-444c-9443-360ff698785b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753f5642-40c9-487d-8245-cd6905329359", "sighting_of_ref": "indicator--7ea745bf-3bbc-444c-9443-360ff698785b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4447d228-d39d-4ee4-aa85-bfdfd7092ad4", "sighting_of_ref": "indicator--dac7d7b0-130c-41cf-910e-d74060a480c6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c818420-282b-4202-aa50-6a29b1bf4fa1", "sighting_of_ref": "indicator--dac7d7b0-130c-41cf-910e-d74060a480c6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70da5a83-ff18-48e1-81d7-07665634a4fd", "sighting_of_ref": "indicator--0ae9c156-ee3a-4960-a2d9-582049292d6a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7fbc5b-b884-44a7-88f0-13c9176c6b34", "sighting_of_ref": "indicator--0ae9c156-ee3a-4960-a2d9-582049292d6a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85eba51f-7e33-4107-9892-52f1cafef1d5", "sighting_of_ref": "indicator--f48cab88-12d6-497c-97dc-a0595f69147f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cdb2e3-777a-4fbd-a0d8-f397f751179d", "sighting_of_ref": "indicator--f48cab88-12d6-497c-97dc-a0595f69147f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93da042c-7abc-4553-a4cf-836c6b1e6d05", "sighting_of_ref": "indicator--ec174abe-1ffc-4b69-9045-0fe6fd0b18a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa0edcf-dec5-431f-8d21-0571372c27aa", "sighting_of_ref": "indicator--80a58781-f401-4924-b6df-7b5c26d258bd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e6578d-5b97-4ab7-9ef6-a97f2b1474f3", "sighting_of_ref": "indicator--88e7630e-1e2f-45a0-93c7-96434819b9c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3249467-45ec-4e9b-b4c0-06d9c731adf1", "sighting_of_ref": "indicator--fdc80fb7-d921-4754-a9a2-d8118b13c465", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bf583b-3f09-468a-82a7-9ed19b25be0e", "sighting_of_ref": "indicator--fdc80fb7-d921-4754-a9a2-d8118b13c465", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93386465-a4bd-4397-b2dc-03b3a9003bf8", "sighting_of_ref": "indicator--ae6b4d1d-c702-42d1-a5eb-c85ee3204304", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a145a87-147a-453f-ac08-2f292b18b239", "sighting_of_ref": "indicator--b4ca75ce-6054-4e9a-a1c5-c1f3e884a767", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c013233e-62e5-4ff1-a572-5bd6995984fb", "sighting_of_ref": "indicator--61d0cb76-9113-4da2-9ff9-11c160ccc54a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec2e526-ca28-4cee-9336-ab1517cac3dd", "sighting_of_ref": "indicator--2cb7e4ab-58bf-4798-9245-e5b8196f78d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db985280-e7b3-476f-a27b-601a2743b802", "sighting_of_ref": "indicator--2550c09c-c40a-4f27-8970-7261d7d8f6b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb0324b-b059-42ce-a75c-e67f5aa3e69a", "sighting_of_ref": "indicator--2550c09c-c40a-4f27-8970-7261d7d8f6b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec10c737-aca6-4e81-ab20-7871377a27d4", "sighting_of_ref": "indicator--f1f90b9e-7dba-4738-9f7c-9711cd18217b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e2d9ba-11e1-4039-a848-89efad81b95a", "sighting_of_ref": "indicator--8df99acd-db02-45a2-ba53-8a3397494e00", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec712d3d-90f4-475a-850a-331d3fd5066c", "sighting_of_ref": "indicator--4c41b5cd-fb28-45f3-87c8-a9e13c51a603", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55de1714-22e7-4f3a-886b-ae8592cc784b", "sighting_of_ref": "indicator--af97867e-4dad-432f-81fa-d0b0f3a8fee3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87a2f09-5740-439a-b201-0ae9375d766d", "sighting_of_ref": "indicator--a116d18d-3d79-490c-a61a-be10c567c988", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b29cbe-9c22-462e-aa67-e0869655279e", "sighting_of_ref": "indicator--4d2f4899-68eb-4363-ad05-c2bfd84b89ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ae40d9-2249-4239-9df4-55a491bdf7fd", "sighting_of_ref": "indicator--cfc94714-9545-45b8-af64-54d3a2aab01a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ad5d66-068e-4f76-ae96-a2fc242fc180", "sighting_of_ref": "indicator--e35a0af4-2e66-487b-aded-9ba66db0e248", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b73992-f3ad-49c9-bd96-fa973eb03796", "sighting_of_ref": "indicator--b813965d-b43a-4cfa-9d8c-c70352c43592", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a58b20-d61b-4ca7-93ef-2e119f2cce63", "sighting_of_ref": "indicator--1c0bcb60-d960-4347-9bdc-121162e61302", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb56e42-4606-4fd1-9a29-b5f177779fe8", "sighting_of_ref": "indicator--6c50dae1-8e0a-4938-a32a-e649cb1e3e2f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb588de-73fd-4aa8-9330-7863037cf433", "sighting_of_ref": "indicator--4119fc5a-96fe-4f0f-9535-09a6dc23bdeb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a77b09-11cc-4a60-a8b6-6e2e7336ef9b", "sighting_of_ref": "indicator--4044f4c8-bcce-49a0-b529-15c9cbf7712e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acc5657-6675-4682-a299-fcff700978b6", "sighting_of_ref": "indicator--e2e8a7a7-36ff-4ab2-b990-226708387a0b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d79c49-86ec-41b8-82e3-449cf4be2940", "sighting_of_ref": "indicator--d603c90f-ad7b-4056-9e7b-a3f9cd3a8175", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629b752c-9b82-4af3-b1aa-7c5d45a0efa8", "sighting_of_ref": "indicator--a9013d83-649a-4618-8c10-c8dd1d593116", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4af3b3b-465f-4014-bfbd-7c7f51afc7df", "sighting_of_ref": "indicator--56ef2753-2560-45c8-bde0-1bb0b430dc2e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f6a7af-3496-4a89-bdbc-0ae52fd8e755", "sighting_of_ref": "indicator--adece832-da6d-4114-b9ee-ffaf3f2ed676", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3eaf4cc-0333-489e-bec5-d5d43b070f83", "sighting_of_ref": "indicator--a6b4a63f-6357-4cbd-aacd-b442f35528e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abc0746-5f5a-4042-8993-4665f913f7ab", "sighting_of_ref": "indicator--b5a012c9-67d2-4e35-8db0-7af181633141", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bf86b7-8ffd-476e-896c-ee9f5f64bad3", "sighting_of_ref": "indicator--d1b5a4b2-ac37-4f24-894e-a153ad10fd2e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba4dd22-90b0-4b3c-a0f9-67763824a962", "sighting_of_ref": "indicator--845e0286-d9be-4aac-acc0-5036e2de7728", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7d9231-7097-46e8-96d3-ea3d41aa17a7", "sighting_of_ref": "indicator--8f9f139e-b81e-4c6f-b231-5a852f0e3b9c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771b376d-67bd-4e10-a1b3-7ca61595fdfe", "sighting_of_ref": "indicator--8f9f139e-b81e-4c6f-b231-5a852f0e3b9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c44732-853c-43ca-951e-13a200d8a063", "sighting_of_ref": "indicator--ca1b38d8-7c93-478e-8e34-2bf3d97a4eaf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3471072d-787d-4fb7-aaa3-b72ca526c423", "sighting_of_ref": "indicator--ca1b38d8-7c93-478e-8e34-2bf3d97a4eaf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476121e9-2046-4bd9-8d98-06f223f1bd65", "sighting_of_ref": "indicator--64b7511a-b447-4db1-9e96-ba43040870d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181009e6-57cf-4fab-a6a8-7e051b5b4de9", "sighting_of_ref": "indicator--64b7511a-b447-4db1-9e96-ba43040870d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91979635-7af5-46d0-a378-6222032b05a3", "sighting_of_ref": "indicator--c5d8352a-5c48-45f6-9313-b06010286ab0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c85e1c-ffce-44f2-b7f3-c88c72146c86", "sighting_of_ref": "indicator--951c8053-e770-40d5-9ccc-4bee99afe775", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542b2661-0cf0-486f-ac7c-e68ddb9ebdec", "sighting_of_ref": "indicator--951c8053-e770-40d5-9ccc-4bee99afe775", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd02934-fa2f-4e1d-a7b5-c24ab69a3aa2", "sighting_of_ref": "indicator--d5924def-b72b-4e76-885b-1d686879ce01", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a91ce8-ea62-4342-a9ea-742afad9076e", "sighting_of_ref": "indicator--cee2c80b-6f54-4f57-87cf-afa9ff0f1ed4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a71cfc2-7cf4-4deb-87cc-59df7499f942", "sighting_of_ref": "indicator--f9c775fd-d473-414d-b742-b86a0d92b9d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2dc459-8064-41e2-972a-f751bc558362", "sighting_of_ref": "indicator--85417c3d-6fb2-446b-ac7e-c734d404277f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e556de3a-7dde-4b9e-b5d6-5e240c331e77", "sighting_of_ref": "indicator--fb351fa7-2264-4e1e-8c86-276ec4f6916a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce244d8-4de4-4ef0-ad68-0430c1a9d25a", "sighting_of_ref": "indicator--fb351fa7-2264-4e1e-8c86-276ec4f6916a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef536c9-150c-4280-b340-dc5168d5d2f2", "sighting_of_ref": "indicator--94382a42-79e6-4fb6-8e82-f1cbc5aa154f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6496f3bb-b214-4a96-aa83-f8666b5e8356", "sighting_of_ref": "indicator--36582f0f-ec1f-4519-9263-3702cfa93a3f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7ef470-5c0b-4543-96a8-a2d293aa9455", "sighting_of_ref": "indicator--36582f0f-ec1f-4519-9263-3702cfa93a3f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fe7946-a5b7-4a4c-bf26-2066d5d92581", "sighting_of_ref": "indicator--9046116e-dad3-40d7-ace3-625c21301663", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5821495-23b9-4e9f-81d0-e2ef117623dd", "sighting_of_ref": "indicator--fdf69a1e-f0fb-4040-9ea4-c3538676b84e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ad40e8-0ba6-4d61-b2ca-2cd1bff1baee", "sighting_of_ref": "indicator--a8060c38-b466-4586-bb3c-bfa0948db465", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae216d1-a531-4f50-93aa-3f39df91e41d", "sighting_of_ref": "indicator--be33fe66-deec-4438-9170-220129537502", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a736ea-ce18-45a6-8b24-a71eab9caa03", "sighting_of_ref": "indicator--ebab5647-69bf-4ab2-93a1-8972a41e2f7d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96798ab-8837-40e0-89e9-7f5e8a6292e8", "sighting_of_ref": "indicator--a8aa4800-2db2-4c1a-911c-b973569eda71", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd62db19-24a8-45f9-93bc-5877dc6e27ae", "sighting_of_ref": "indicator--23d57725-0c01-4576-9564-c21f8395ee82", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d3d60d-a7b9-4c85-acb1-c3ce3d6b7878", "sighting_of_ref": "indicator--0f618e22-84f4-44cd-a7f9-ce2128d86525", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4026d41b-3161-48ea-b2b2-6d46aaf1bb03", "sighting_of_ref": "indicator--5bee08eb-da37-4281-bc4c-978bbb9c7f74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9beb694d-e7ee-4e09-ad97-3a74e9d79b51", "sighting_of_ref": "indicator--b995ce01-7032-4cfc-8ee5-7e289efa6ac0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959d0844-c588-4a11-97a5-2793b9e01a8e", "sighting_of_ref": "indicator--51a4fc7e-c5b6-4445-b070-e8c38da8a4ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55c6d6d-d95b-469c-a934-efb683e026ea", "sighting_of_ref": "indicator--527efe7d-4331-4037-8f63-61e8881e48b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4865c7a-2799-47e9-92b0-0a131b64a375", "sighting_of_ref": "indicator--52795d3c-c469-4f6d-8814-a5769310c6f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f921718d-4fd3-423e-84ca-28f774f2359d", "sighting_of_ref": "indicator--91da636d-875c-409c-b1a5-b494a57cd244", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdf439f-bb95-4dc6-bb01-83f09fc734ab", "sighting_of_ref": "indicator--71aa8da4-acb0-4cf8-9b36-c8e61bdf1f67", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6109adfc-06fe-49ab-8dd6-8d60e8ce4b2e", "sighting_of_ref": "indicator--71aa8da4-acb0-4cf8-9b36-c8e61bdf1f67", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c725aa2-4273-41d7-a47e-cb6ef60e945a", "sighting_of_ref": "indicator--8ff867b5-e950-4437-97ff-4b42e72ff20b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc2329f-7893-4133-8b77-138e06bfd2d0", "sighting_of_ref": "indicator--a5dd5368-de95-43a2-b4aa-b31541188487", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4a455b-ff48-444c-9a11-edb8fc3ace40", "sighting_of_ref": "indicator--a5dd5368-de95-43a2-b4aa-b31541188487", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94e1242-a864-43c5-b5f1-443a8121f1a7", "sighting_of_ref": "indicator--1072a01f-fb7f-4205-a00f-0f62c371f410", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6736b300-c881-4fe7-9d0a-60c546ac33ac", "sighting_of_ref": "indicator--1072a01f-fb7f-4205-a00f-0f62c371f410", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4379a7-dd81-4449-bcbe-5a00e5f97232", "sighting_of_ref": "indicator--5c3e1adc-9462-41d0-8d9c-310a60eef184", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529d5827-06a2-4c4e-a8a0-4cad17e26d1f", "sighting_of_ref": "indicator--020d63bd-5597-4014-b778-a8f7bf174860", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ec7219-a5bc-410f-bde2-06ddab29a2eb", "sighting_of_ref": "indicator--f27db961-1c43-4837-a974-c6c057fcd6de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9f6800-5c2b-443c-a2d4-2d9f1276a240", "sighting_of_ref": "indicator--baf5b01f-41c5-47f1-87bf-3558c5a4ad10", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29430ecf-33e3-4c02-8d4f-552c57fcb27f", "sighting_of_ref": "indicator--baf5b01f-41c5-47f1-87bf-3558c5a4ad10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd9d832-1308-466e-9ac4-e31834d3385b", "sighting_of_ref": "indicator--786af464-cd51-4881-914f-ed18aa26353b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b635801-95cb-4d6e-9ac6-cbaf2dc7090f", "sighting_of_ref": "indicator--bc376a31-782e-4d2c-9a78-e46cc661cb81", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a725bbcd-d2e6-42d0-8f2a-0a7190085a39", "sighting_of_ref": "indicator--0792c59e-e72f-4217-91fc-094b4e821e17", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3893b62-e9a6-45c5-b4b3-09fb36688f59", "sighting_of_ref": "indicator--d33ac832-4e8e-4c31-9d55-236078636991", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfeef46-1c5c-4654-9ae7-27c25efc95fa", "sighting_of_ref": "indicator--d33ac832-4e8e-4c31-9d55-236078636991", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ddcf2f-7afd-425a-821e-3c594a57f4c9", "sighting_of_ref": "indicator--1e943a48-0a97-440e-bc6f-bd3c2247caac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fc6191-acf0-4fd4-a0b5-34e7a6e66e3e", "sighting_of_ref": "indicator--4eb87e64-d583-41d4-951f-b61d46eff36f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f6dc5e-e6de-4291-8f21-078ab2abab9a", "sighting_of_ref": "indicator--62ae46f5-8f02-4c86-8302-f36c988e92b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc89034-dd84-4b4e-9192-b051b5fbb957", "sighting_of_ref": "indicator--62ae46f5-8f02-4c86-8302-f36c988e92b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac579ce6-43a6-4543-b5ac-fe5ba621d171", "sighting_of_ref": "indicator--e5f5dfa6-9619-4045-ab55-20e4e104ee4a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbfb28d-21d9-4dc9-8cd9-f7e0ac375b50", "sighting_of_ref": "indicator--e5f5dfa6-9619-4045-ab55-20e4e104ee4a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e166d855-a42d-4832-912b-12d0944dfb7d", "sighting_of_ref": "indicator--4449cb6a-1836-453b-a343-9a52c3df43b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a457a161-f48f-46e3-8a25-1e26157d906a", "sighting_of_ref": "indicator--4449cb6a-1836-453b-a343-9a52c3df43b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2914236d-4e51-40ed-b03e-c6b067de8c47", "sighting_of_ref": "indicator--7fa40598-7518-420a-8b66-bb21950d7ddc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa74d24e-e77f-447b-9ab7-a84db0bb4814", "sighting_of_ref": "indicator--5942288c-a47b-40c3-b711-9bfe3dde1a4c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f846ecf-3902-46be-8e9b-e588014cad24", "sighting_of_ref": "indicator--5942288c-a47b-40c3-b711-9bfe3dde1a4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e1b429-e8a3-42e1-b754-a00c1d7dfeec", "sighting_of_ref": "indicator--afcc0358-9a48-4563-bb25-6549db6b385a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59aa40d2-bb60-4308-9763-5cafce5ddd8a", "sighting_of_ref": "indicator--bd9a2ec5-b891-4cc8-8634-95e8b4c775df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f88d005-bf6b-47aa-898c-b5b67c216465", "sighting_of_ref": "indicator--bd9a2ec5-b891-4cc8-8634-95e8b4c775df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8440c4ad-0f58-4156-ae05-17dfa42aec41", "sighting_of_ref": "indicator--dd1f3a48-43cc-40ba-b944-f2c2bcaa2ee2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f097e617-3a0c-4c39-8702-2a1b9bd6dae1", "sighting_of_ref": "indicator--dd1f3a48-43cc-40ba-b944-f2c2bcaa2ee2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f01d978-04d2-4787-b7ad-4385ce479596", "sighting_of_ref": "indicator--08b3b089-c6f0-4cf0-b38e-4f760f745780", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9309e45e-acbd-49f7-90be-0d0e5e3e4299", "sighting_of_ref": "indicator--08b3b089-c6f0-4cf0-b38e-4f760f745780", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6e46d3-0a13-48a9-a54e-57ea75d041a4", "sighting_of_ref": "indicator--651ce90e-a83c-4a92-9dd6-5da179cacdbc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9eba6d-076c-4eb6-934f-ed8deb3c1eca", "sighting_of_ref": "indicator--651ce90e-a83c-4a92-9dd6-5da179cacdbc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958b75ab-f760-411a-b8a5-6debd2ba3e14", "sighting_of_ref": "indicator--e39bd1e4-1dca-48bd-930b-e6c360e3e8a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e9206e-7ca9-446c-b33e-9d01dd084a34", "sighting_of_ref": "indicator--cdb2f794-01c8-47cb-b204-d229d53a71a8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896ec647-a08d-4802-a994-4e6d092002c7", "sighting_of_ref": "indicator--ca26666b-6a06-496d-8f5a-42d66dc5bf5a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e234d0-18b0-4984-9697-a2b2094b25b7", "sighting_of_ref": "indicator--80c37233-1da2-47df-81ff-836524e06d93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced9156e-eac1-4de6-a640-e45ba3f116fc", "sighting_of_ref": "indicator--80c37233-1da2-47df-81ff-836524e06d93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e3b1fb-581b-48c8-b742-2bdde1ee0a74", "sighting_of_ref": "indicator--15bd430a-071b-4ee2-8d68-49859aaab877", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5371869-2eb4-4aad-8807-99fd622b59aa", "sighting_of_ref": "indicator--b1b015c3-c828-424b-aa41-9902047eab31", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11899f3e-2dfb-4139-a527-dc5038963e10", "sighting_of_ref": "indicator--b1b015c3-c828-424b-aa41-9902047eab31", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7baaef-9d83-4c23-bc7e-2d0be11303be", "sighting_of_ref": "indicator--d0f4c0bc-d4cb-4c54-93c6-067c68da1186", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f306f0c-c926-494f-84dd-267d62a616e9", "sighting_of_ref": "indicator--c7060c05-c59d-48e8-ab0f-2dd236578985", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87267ed-6acf-41dd-9105-d82deb269cdd", "sighting_of_ref": "indicator--a1973957-5566-470c-b6a1-dc2014bc45b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b72743f-130c-4da7-ae98-da087324b1ac", "sighting_of_ref": "indicator--8ec39233-1282-4223-a6db-d59ab911c217", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55bdce8-4d03-4811-b745-9f992454151d", "sighting_of_ref": "indicator--8ec39233-1282-4223-a6db-d59ab911c217", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e37f63-ea65-4d18-b5c9-eece3bfc9170", "sighting_of_ref": "indicator--a20a309e-cd85-46da-9516-5b6b10b4a28b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e97c66-5ad8-4c4b-bb87-bb80ef774f21", "sighting_of_ref": "indicator--17cd3103-0d01-4727-bb0d-618b74046528", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc72f5a-d3a0-4d9c-998f-8f213ad1e00e", "sighting_of_ref": "indicator--f5285ec2-5c55-46e1-b616-b0c08a459025", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1fedc4-2205-4d4d-b75b-4cf414f56add", "sighting_of_ref": "indicator--ac7d227b-0370-411a-8bef-c0185d667a5c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0877831c-8113-483c-914f-4c49cab3ae98", "sighting_of_ref": "indicator--ccb2fc5c-6b40-4464-b9ea-6dbfeb3d46d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b60006-b7f6-4e88-952f-433b7c821961", "sighting_of_ref": "indicator--36a711ce-4c4c-439f-9374-03468cf055de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b66f77-ae23-47c7-821b-d2402343e3f2", "sighting_of_ref": "indicator--36a711ce-4c4c-439f-9374-03468cf055de", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d935301d-fd50-4141-b86d-f774db2f8d7e", "sighting_of_ref": "indicator--611d813f-b635-4329-93be-b4e4e9414c2d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d775f72d-bad3-4c27-94f0-97774bf1767e", "sighting_of_ref": "indicator--a1bcc1a3-0edd-44fa-8d96-330feff08df4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6e6ce5-fca2-41ea-8338-e0f2f57fa512", "sighting_of_ref": "indicator--c394a363-3f6b-44b3-9dd1-cb4e4997844b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c262d06-730d-403c-95cf-298de1d0c273", "sighting_of_ref": "indicator--c394a363-3f6b-44b3-9dd1-cb4e4997844b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9a02a9-ce00-4b04-807d-02eeba4420e0", "sighting_of_ref": "indicator--e3e3f791-c30b-4a5f-beef-abfad8ee5048", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c90167-4889-4c68-b95d-bae3e5e4e997", "sighting_of_ref": "indicator--19ae6f51-bf48-49eb-8549-799cee3dc862", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba70929-ac0b-404c-b43f-6ed517c0e53c", "sighting_of_ref": "indicator--363e78ae-b971-4338-a5be-9347dad5224e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee8f0c1-9b8e-41d6-8ecf-a5fb42e31d1f", "sighting_of_ref": "indicator--0b667c9b-16b0-4342-8840-fa9752fbbb0e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde1ec20-6c6b-423a-beb2-a4eba5a712d2", "sighting_of_ref": "indicator--8e2bb394-5516-4713-8156-810ec0a7631f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b96878-56f2-4e74-bed5-7995888e5d9b", "sighting_of_ref": "indicator--8e2bb394-5516-4713-8156-810ec0a7631f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489bc772-5633-4df5-aeb8-bdc4f7b214d4", "sighting_of_ref": "indicator--5715c023-640e-4f93-9f60-d72a6ae2712a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92513905-a519-4ceb-881c-e6da539de978", "sighting_of_ref": "indicator--802996ba-3f41-4206-8783-29d6a4575594", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6308e8ca-71b9-4113-b4ca-370048dbb34a", "sighting_of_ref": "indicator--dcb80456-ad47-436a-852c-50af064a6fb4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65aa2bf-1ab0-49ad-9a6d-d36eb234031a", "sighting_of_ref": "indicator--9eab9f14-9be5-4aea-8e62-bcba8c09096b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352da323-0fb1-415b-ab54-a8c92889245f", "sighting_of_ref": "indicator--0591607b-e0a2-4193-be8e-4048dffe4b4f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f388a57-4b55-41a6-bf69-a0d4074ac4d3", "sighting_of_ref": "indicator--968da910-8838-4039-8b1f-07181fb32f3b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef34e2fc-d157-469d-a96e-071a184abb92", "sighting_of_ref": "indicator--b6fe0725-06bb-4244-aeec-e03ef8f6148e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4382958-4060-4bb0-99b2-1f98cc3ca4e0", "sighting_of_ref": "indicator--1a4ea1ed-6312-490c-aac6-9435a56568cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a6acca-918f-4493-972e-5e57c8ae3c52", "sighting_of_ref": "indicator--1a4ea1ed-6312-490c-aac6-9435a56568cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d53586-d642-4a53-8376-e383194f6f42", "sighting_of_ref": "indicator--3c997c34-220a-4643-a34e-a57ff2664f93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decb9d49-375a-4ecb-8c10-9c3c1bd94043", "sighting_of_ref": "indicator--21d0ab18-2dad-403a-adab-e6faff6575a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9d0b7a-3e71-40bb-a0c2-f28ae4524fe8", "sighting_of_ref": "indicator--6804bb01-4e34-44c9-b852-2c3b2630c530", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b88061-efb2-4a78-8b6a-84c6f2e6bed9", "sighting_of_ref": "indicator--ae7d9cb0-59cd-4358-8cc2-bc2b4ce690a8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8988e2d5-2660-4995-9368-ec0d60f6895a", "sighting_of_ref": "indicator--ae7d9cb0-59cd-4358-8cc2-bc2b4ce690a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904d7d67-7972-4150-9bff-387c730b8b5e", "sighting_of_ref": "indicator--874d3dac-ede8-4bb7-b92d-f80889a2edf2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110d181f-e007-4d11-ad3d-d9debcb6c09a", "sighting_of_ref": "indicator--874d3dac-ede8-4bb7-b92d-f80889a2edf2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c289b72e-f943-4895-8152-599daac9175c", "sighting_of_ref": "indicator--ab3f7132-56c7-4c05-9ec0-5eb3f99ee218", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37a2082-49a4-464b-a62d-8d047d858aa1", "sighting_of_ref": "indicator--ab3f7132-56c7-4c05-9ec0-5eb3f99ee218", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e81427-a505-4d6b-9c10-e4f5e607b5f7", "sighting_of_ref": "indicator--ca9108bd-e907-460a-9c93-06cfaa1c9bdc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d8db01-0cbb-4a45-8e6e-cd1efa0c3caf", "sighting_of_ref": "indicator--14db4159-d79c-473c-9cc0-e990f2a43eba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfe9601-41dc-4012-b333-38a9dc2fcb99", "sighting_of_ref": "indicator--2855fda8-028f-4ea3-ab0f-47f266a6c737", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400aabcf-327d-4c6f-b661-d10e06dbc05f", "sighting_of_ref": "indicator--da336a26-b695-4e4a-af29-bd26bfc6968c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff87d01-a485-4999-9019-8cb08a9c9c2b", "sighting_of_ref": "indicator--6ac1a0ca-83bf-42a9-80f7-3123e9062276", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac24783-f075-4458-bf2e-b6b9153e85bb", "sighting_of_ref": "indicator--6ac1a0ca-83bf-42a9-80f7-3123e9062276", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb34513-c550-4e0e-8129-121d23d027b2", "sighting_of_ref": "indicator--f7d0eff9-1ad2-4d3b-9c15-73a40e2ee153", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33751200-290d-4a36-a111-8447aa06c7b7", "sighting_of_ref": "indicator--f7d0eff9-1ad2-4d3b-9c15-73a40e2ee153", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1622076e-71c2-4a0c-b3c3-61ee025a9d0c", "sighting_of_ref": "indicator--7af00263-94b5-4468-b5e0-f7f61989b0b0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a758fe6-0f07-4df8-ad78-d90c6a687818", "sighting_of_ref": "indicator--4233d006-686e-44b6-8ada-edca523cb52e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f10d988-4f7f-4cfd-9b5a-5a4854bed0f9", "sighting_of_ref": "indicator--3ed4e7be-0867-445e-8838-9f15054752b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062c6d02-c9ce-441f-82f9-d721e0d9f967", "sighting_of_ref": "indicator--3ed4e7be-0867-445e-8838-9f15054752b2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfeaa431-49e4-4364-9097-2ca69b744c2e", "sighting_of_ref": "indicator--71430b44-b8a9-4dce-9850-5483874f80bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0317a401-e3ff-4a33-86e9-824923084cfa", "sighting_of_ref": "indicator--80c8c2fc-814a-4db5-958e-c64a7dc3e341", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea05ecc-208a-4c03-8cdc-ad922c1d145f", "sighting_of_ref": "indicator--2223f17f-4ee2-4b05-8427-2cf693c94d96", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8423104b-4eeb-4a93-a27f-30719a622f25", "sighting_of_ref": "indicator--e582aa92-c412-4b4f-8a13-bf56404b2ace", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da17eb6e-bb83-42e2-9cf4-c707b33c58e4", "sighting_of_ref": "indicator--37e57100-4ca3-4eba-8fd6-c322058238f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaef825-be7f-463c-bdea-a44fe132fd67", "sighting_of_ref": "indicator--c0b49c1f-b309-4ad7-a807-8232cf6d0c35", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171c5bdc-5d7b-4979-9b4a-5a02c31ec48e", "sighting_of_ref": "indicator--c0b49c1f-b309-4ad7-a807-8232cf6d0c35", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21b667e-c748-4559-bf72-6e82c408c4b8", "sighting_of_ref": "indicator--9ff97117-e4d8-49e2-8a47-91db17055761", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02383ce-8d05-4c7f-89b9-bc8ba74fc0e6", "sighting_of_ref": "indicator--3308b266-4e0a-42e8-b3b0-846ecca1f9e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da54f93-6292-49bb-88f1-c3a5b78becde", "sighting_of_ref": "indicator--3308b266-4e0a-42e8-b3b0-846ecca1f9e6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a554b5ca-fc63-4f11-a520-eac7b6746864", "sighting_of_ref": "indicator--f6fffaf6-a39e-4247-9249-1c6dddecd561", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d3aa3e-c605-48b2-a106-4fa63ca33367", "sighting_of_ref": "indicator--c171c4ce-f17a-4a1f-b58b-67d795b5fad8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3563e027-5f53-4654-8669-a3196fe0659d", "sighting_of_ref": "indicator--c171c4ce-f17a-4a1f-b58b-67d795b5fad8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fa29ec-41b2-4864-ad91-f45a11efdbc6", "sighting_of_ref": "indicator--2741b605-38fd-41a7-96af-36db6cc2cb3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742e5d4f-14be-41f3-9c2c-694b2282374f", "sighting_of_ref": "indicator--2741b605-38fd-41a7-96af-36db6cc2cb3c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4603378-ba19-4eb8-9498-32ef394e15b2", "sighting_of_ref": "indicator--2741b605-38fd-41a7-96af-36db6cc2cb3c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc59df9f-9e2b-483e-a918-1b4667dc9278", "sighting_of_ref": "indicator--2288320a-dbde-4403-9867-fb0feb003ab2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bf1670-ebaf-4442-be9f-ed6573586d1c", "sighting_of_ref": "indicator--25a3925c-1f9d-486a-bbef-b00068d7bfcb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad22c1c-93e6-4281-8bf2-78cd142a2dcd", "sighting_of_ref": "indicator--8ca25481-6618-453c-97f4-1ffb3ce16476", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7100266-d66f-4201-b005-16786659b463", "sighting_of_ref": "indicator--5cf1ad4e-9643-4843-a7ea-f9044d3c12e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f0eb35-dc6b-40b4-9c06-e654d66e0c3d", "sighting_of_ref": "indicator--5cf1ad4e-9643-4843-a7ea-f9044d3c12e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a6386e-6bd8-4379-abf1-f478808f0776", "sighting_of_ref": "indicator--418177f0-a6f3-415f-a6f5-f41cac3ca2e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280f88af-c3f6-49c0-8158-d53920e69328", "sighting_of_ref": "indicator--fa0b6df1-913f-4c7a-ac2a-b4940bcc962a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ff87a0-d4f0-4693-ab26-093650fd3535", "sighting_of_ref": "indicator--ab869b1d-12c5-4d54-adc4-272ee271cfd3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adb22ab-6f5f-498d-8570-d6289830c1f9", "sighting_of_ref": "indicator--30723bc6-2946-4735-b24e-3dfa60727233", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490db519-7d41-481d-8e07-c84fec4ccd6a", "sighting_of_ref": "indicator--243b6f2e-5ba7-442a-8ec4-ae93685025ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171c190a-96ef-44ae-98cf-af54960fdea6", "sighting_of_ref": "indicator--de8fa358-0259-4d0e-80b3-446d349a3a60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bed8ad4-a760-4fbc-bba6-adf8af9baf5f", "sighting_of_ref": "indicator--78ae2bf9-5edc-4ee7-811d-3d19a1601ed4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7169f71-3b23-4214-bf10-b7aba1345126", "sighting_of_ref": "indicator--95e1ec48-6c16-414a-8391-83da1e9abdb9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8565d3fe-e95b-4f0a-aca5-49b9285a2c4d", "sighting_of_ref": "indicator--27f1ccea-bd3f-44d8-85ef-481347fd0807", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb41441-a0fc-4d65-bb59-4a7182abc766", "sighting_of_ref": "indicator--2a68f221-b493-409d-b376-e60dfdc2d90f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d068e5-6de6-4f7b-8b31-1d704f1ddaf5", "sighting_of_ref": "indicator--eb86a137-0e18-4d38-83ad-c2f9b24c3801", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1038f2a1-b83c-49b9-821e-c67ca34f2946", "sighting_of_ref": "indicator--b58c9d7c-ebc4-4e6b-8d21-0e852b6deb74", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eecb61-79b9-4ec2-b9a1-e53632e27e50", "sighting_of_ref": "indicator--b58c9d7c-ebc4-4e6b-8d21-0e852b6deb74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d850cf3-f966-4bd0-b68e-c5b6e6608a0b", "sighting_of_ref": "indicator--83d6dbc7-4d90-4647-a685-9b257892abb7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf360e83-a379-4aa0-847c-d8690448b594", "sighting_of_ref": "indicator--4d757c32-ee6b-4b3a-a6b0-7549da3c9cd0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e47a72a-2e69-40e5-ba3d-6c5ed7dd2240", "sighting_of_ref": "indicator--a1c79c4f-d833-4275-9cb7-12477320299f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950fac09-1e10-4c02-8509-7dad73a939d3", "sighting_of_ref": "indicator--3ff9fb55-0944-43b1-a52e-ed6a1bffa6ac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ccf1c7-5cbf-4f93-97ef-288dc4ae4a0a", "sighting_of_ref": "indicator--3ff9fb55-0944-43b1-a52e-ed6a1bffa6ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0be33c-d6e9-4f0a-ad93-44adadb9f59a", "sighting_of_ref": "indicator--b8e1e6e8-eec9-49ed-862e-ff380f28987b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e570c456-00d5-4d1f-a03c-4db0c7bf9c69", "sighting_of_ref": "indicator--b5008133-a041-4487-95ff-795e7c534573", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4906299-41b6-43f7-bae4-516dafe71a89", "sighting_of_ref": "indicator--cd104074-4160-40f9-bc1f-36df3fd4c958", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5902e8-b031-45e0-8550-d02960d5c6a5", "sighting_of_ref": "indicator--cd104074-4160-40f9-bc1f-36df3fd4c958", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c73a05-65a8-457d-99c2-3b03a5b9d3d1", "sighting_of_ref": "indicator--41a1cf77-5065-4a06-9862-28e3d857397b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11745068-ecd5-4d0e-81e8-a62a9555aede", "sighting_of_ref": "indicator--38e715d1-5b42-4d9b-b10d-a5e4bd4e28ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf2a1a0-08b0-4daf-a866-6b0f9b0789ad", "sighting_of_ref": "indicator--9dc8be7c-0489-4fb6-a66b-7025c9e513f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8987e2ed-633b-4b08-b51f-e05ddd0a0ff2", "sighting_of_ref": "indicator--9dc8be7c-0489-4fb6-a66b-7025c9e513f6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdccc770-2ff0-413c-900a-fc12c9db69c0", "sighting_of_ref": "indicator--e7b1a8f8-5f0d-471f-8fe6-368d47a6c55a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535af9cb-9883-4bec-a2e2-0f6b6ea886d4", "sighting_of_ref": "indicator--91d68b87-732f-4f15-be55-d1d9dfc728e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76bbcb5-ee3d-459b-ab6b-26f39a40bb1f", "sighting_of_ref": "indicator--f626b90c-6f26-439e-99b6-c9eff3866485", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d308da0-33d5-41e0-89ba-a032e532a478", "sighting_of_ref": "indicator--c5060338-2e81-4626-8d1d-2ae447e802b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace76655-601e-4727-beb6-7bf8ecaf8c21", "sighting_of_ref": "indicator--8037a13a-1c61-41da-b740-204d412aa632", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eabaa05-90dd-4de5-8f21-5a4a08058f79", "sighting_of_ref": "indicator--8a72906d-72be-4931-94b9-fea92a53d773", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ef5693-48c8-46de-9b70-077d9b8485dc", "sighting_of_ref": "indicator--8a72906d-72be-4931-94b9-fea92a53d773", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909b5f60-6eeb-45b9-a33d-54cbf4f124e5", "sighting_of_ref": "indicator--366e0705-e5e5-4664-91a2-e9b4dee47516", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358eb950-a41a-435f-aab0-6eecbf879242", "sighting_of_ref": "indicator--366e0705-e5e5-4664-91a2-e9b4dee47516", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f266f32-f79c-4977-9cb8-0980ad06ae1c", "sighting_of_ref": "indicator--46718f71-8fb2-4e55-bed6-6668ef0a8f03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec79e489-4571-4e08-b44f-f1c3a329f1bb", "sighting_of_ref": "indicator--c96082d6-0aec-4ccc-a33e-9f723820c8cb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e611ff1-9e93-4377-a02b-960e64dc70d1", "sighting_of_ref": "indicator--093570da-a151-4555-8b08-d28cd1b99912", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdf4630-f2c9-4be2-b7f3-6f4d7937970e", "sighting_of_ref": "indicator--37f8d7f8-eb29-4e69-b321-448e38011803", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865ec8d8-1644-4842-a2f5-6b8858832217", "sighting_of_ref": "indicator--37f8d7f8-eb29-4e69-b321-448e38011803", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882233fe-818d-4e79-b38c-9c8f63275f1e", "sighting_of_ref": "indicator--2861c48e-60a5-4ab3-9fc2-e33aeff9ec16", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9635a4-111c-4c87-acc5-43bbb3e1a90c", "sighting_of_ref": "indicator--f7192757-729d-40c6-b7fe-500e03f06038", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af40f5f1-78ea-44b0-926f-4097f6964cb3", "sighting_of_ref": "indicator--127d8f31-8bb8-40e7-ac50-277e9beaf993", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45671e4b-b784-4add-9d61-b97fedde81e6", "sighting_of_ref": "indicator--f5b55b5e-7ed7-40ff-870e-dc1db96e0a2a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634ffd68-69d6-4562-a91b-5a3bb010328f", "sighting_of_ref": "indicator--660ad77c-af4f-4434-93e5-741a49cf0314", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa56815c-0818-4f0a-bbec-51751c01ce87", "sighting_of_ref": "indicator--180729f4-ddd5-49ac-8d5d-146223c1853d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb040434-219f-4ad2-b466-b55649b48c84", "sighting_of_ref": "indicator--180729f4-ddd5-49ac-8d5d-146223c1853d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef0e5ac-51f5-474e-bb13-0291f1ca660d", "sighting_of_ref": "indicator--144725ef-4fe7-4ae2-93ec-7bdb3d3b2841", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f603b86-84ab-4258-9608-5b30245ad7a7", "sighting_of_ref": "indicator--ef4dc238-d04e-4000-9bd6-2322ae548f62", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4d3290-8d11-4f4a-9978-ceb28f6f1f15", "sighting_of_ref": "indicator--7ae3723f-76e0-40ca-9a0a-fcac2ca02093", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03a20e7-a2a7-43e5-bd7b-5bdd1f4e96a2", "sighting_of_ref": "indicator--7ae3723f-76e0-40ca-9a0a-fcac2ca02093", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c88d23-6d9d-479b-8b45-193af1183111", "sighting_of_ref": "indicator--dbb222ab-c914-4ecc-aac2-1998e6a4f344", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59842148-f0cb-43c0-a364-29566ebdf960", "sighting_of_ref": "indicator--e7103986-ba65-4d9a-bb87-80fc16c0718d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93a69e5-5729-4949-98b5-ea301693d52d", "sighting_of_ref": "indicator--e7103986-ba65-4d9a-bb87-80fc16c0718d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796fba25-a78c-4cec-8ee1-b60e843ef425", "sighting_of_ref": "indicator--719288ba-1abc-4e43-8f3a-eca330ac9fcd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3da943-2245-4975-aa3d-d0f5329f6a5c", "sighting_of_ref": "indicator--719288ba-1abc-4e43-8f3a-eca330ac9fcd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb49b14c-1b3f-4c06-ab5e-3763bc53039e", "sighting_of_ref": "indicator--40637e72-2582-49c0-8644-b210df077611", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9706e722-a36e-4875-963c-906d01f8148e", "sighting_of_ref": "indicator--40637e72-2582-49c0-8644-b210df077611", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c0404f-8305-48af-9607-7ce4908341bc", "sighting_of_ref": "indicator--cfc92276-e715-4f95-95d6-7c96af8dba81", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e0f1c1-99f0-46b3-acdb-23abc2901a3f", "sighting_of_ref": "indicator--75cf5610-448f-43cc-a42a-46ddab9d504a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f485d1b4-e953-4b8a-8fcf-4d800e17df21", "sighting_of_ref": "indicator--59fb43ab-3b38-4079-9f10-2f6647b555a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b455e4-766e-4d38-9bbb-6c5cd94e7996", "sighting_of_ref": "indicator--414a0ba8-e60d-4b85-a4ab-369dae5883d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ed5379-5fd4-4dc1-8515-30f3b85f5804", "sighting_of_ref": "indicator--7991cf18-01cf-434a-85c2-7afb4b8b7bea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8103566-958d-4e35-bb48-50feff84e1ea", "sighting_of_ref": "indicator--fc5688b8-b3fe-45cd-bcf5-980318b3c0f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e115829-1c0e-4a4a-99d0-948b36b12758", "sighting_of_ref": "indicator--fc5688b8-b3fe-45cd-bcf5-980318b3c0f6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1c3b07-3094-49d9-a570-6d2cfbc77597", "sighting_of_ref": "indicator--c54322c8-84c7-47d1-b31c-5a28f13cca3f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73663ff-7dca-48bb-9bfc-6ae7c1ae7d7d", "sighting_of_ref": "indicator--43839641-1a96-4c73-ad67-053e7761e7cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47198b4a-2d8a-4b42-9aec-466288e986e1", "sighting_of_ref": "indicator--06336a46-7c5b-44a7-bd8e-9ad3c4e5e771", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e82020d-37f5-4f54-bc3a-670482de9854", "sighting_of_ref": "indicator--a5030957-5923-4fa6-8428-a5a7dd7e40ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e49c84-08f0-4b9e-b0b1-7cedc16f6373", "sighting_of_ref": "indicator--4ba047ff-78f2-4306-9217-3480bddab771", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8788b6d9-7adb-486c-a0b4-237afb1efa5c", "sighting_of_ref": "indicator--460c14db-9278-412f-bf8c-e405f60ac70b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a32216b-069e-4c24-bf0c-6439ff602257", "sighting_of_ref": "indicator--d42638ff-d3be-46b5-8437-b4fd28270a8a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffdc2b6-01ad-45aa-9114-7eef2cf8eded", "sighting_of_ref": "indicator--1188611e-c056-41d1-85cc-28659b9e92d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db2e7a1-81d5-42d8-8a83-0ea52f2c7224", "sighting_of_ref": "indicator--9f4a9e53-6044-48e2-9ac6-1889c9a49871", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98178036-00c5-4db4-b283-d418d43b7323", "sighting_of_ref": "indicator--3c8d5726-00d6-426a-931e-02d9f5005a0c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6746dfd-07a1-4e69-86bb-5678c0056bae", "sighting_of_ref": "indicator--3c8d5726-00d6-426a-931e-02d9f5005a0c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c7c17f-ae69-4315-90ff-99ee126d1a5a", "sighting_of_ref": "indicator--622213d2-49fd-46e3-9336-32785c0703f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae2024f-08fd-418c-a9d4-cc6519e01a62", "sighting_of_ref": "indicator--101adc96-25f7-481f-88ee-501f1dc67341", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453f413d-a140-42b7-9c83-e652897d63ca", "sighting_of_ref": "indicator--101adc96-25f7-481f-88ee-501f1dc67341", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9f582e-e0d8-45e1-ad3f-079c09818d44", "sighting_of_ref": "indicator--633c8753-f7d8-4f16-b3f8-b49355668f51", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d746cade-64e6-4d76-81d5-c79cc5863b5e", "sighting_of_ref": "indicator--633c8753-f7d8-4f16-b3f8-b49355668f51", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f308015c-87c9-42ad-83a9-55a91328558b", "sighting_of_ref": "indicator--3a40f7f9-d389-4a08-b6be-063cb58caf0b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52016f9f-cdb6-4f02-830f-84863aa2ec46", "sighting_of_ref": "indicator--f12afd49-fdd1-43f9-934c-1c17c542fa53", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74d442b-b020-4486-9cfe-e6d528066718", "sighting_of_ref": "indicator--15a64197-e759-468e-99c1-90ba50923b49", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ba156d-8342-4569-b82d-884a5d1a0126", "sighting_of_ref": "indicator--15a64197-e759-468e-99c1-90ba50923b49", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a575c5-4e85-4c8e-9d31-d5b0bf64c047", "sighting_of_ref": "indicator--356b1c32-37b0-48f0-9d3d-321873e5378f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f37d78-f392-48d0-9f35-698298225449", "sighting_of_ref": "indicator--356b1c32-37b0-48f0-9d3d-321873e5378f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dec2cc3-1ff3-4107-ac8c-75c68d427107", "sighting_of_ref": "indicator--f38c8ddc-aa97-4dd9-a593-58a129b70c75", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea7c697-6606-4bbd-91e3-2f864088b233", "sighting_of_ref": "indicator--f38c8ddc-aa97-4dd9-a593-58a129b70c75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a10d18c-ec03-4e1f-b14a-3cd0532928c5", "sighting_of_ref": "indicator--d6dce7a4-8222-4985-8f2d-5a2a761c5d64", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b52cef-aa2f-486d-ab35-62878e0a4270", "sighting_of_ref": "indicator--7d6b10cc-14c0-4f69-a37e-b5528c791cad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413db2de-eb67-4116-87ea-b7e769104d0d", "sighting_of_ref": "indicator--7d6b10cc-14c0-4f69-a37e-b5528c791cad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3313ae-1cf6-4c31-9371-8953a2933098", "sighting_of_ref": "indicator--808de0a1-660c-416f-b2fc-826067d5edc4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e7659c-49ca-40ad-84d0-a11f2ddc83d3", "sighting_of_ref": "indicator--808de0a1-660c-416f-b2fc-826067d5edc4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a1d99e-5cc4-444d-96ae-fdffef79aa7f", "sighting_of_ref": "indicator--83ed4579-53b3-4b41-ad4b-95ad3d700712", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a76c7d-380b-4999-b728-58e7610c7eac", "sighting_of_ref": "indicator--73a0fb4f-472a-4a52-aaa1-f4c99cd4ea9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effb085c-2918-4156-93ec-cdbcb71465e1", "sighting_of_ref": "indicator--4e13ecef-121b-46cb-b53f-507f94f5fb19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13711dcf-5aaa-4f28-8a4b-67634bf31a4a", "sighting_of_ref": "indicator--d6c72d87-c3ea-4c3e-b8c3-b29dda78f3dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67724208-7ea0-4b9c-b802-e93e7253ee89", "sighting_of_ref": "indicator--d6c72d87-c3ea-4c3e-b8c3-b29dda78f3dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fac831-fe63-4fd6-b711-16bbb724cc8d", "sighting_of_ref": "indicator--ce05c73f-d856-4c02-8bf5-2c8b955bb3ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8886440-76a5-401a-a813-e41825f979a3", "sighting_of_ref": "indicator--9fcec2a8-e8c7-43d9-bad4-29c2faa4204d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420bf413-bb52-4766-b296-3587c2b3aa68", "sighting_of_ref": "indicator--587a7f4a-4fd6-436a-b52d-cb030708c679", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e827adc9-a868-49cd-b992-50f0a4d17682", "sighting_of_ref": "indicator--1f34f19b-fdb2-4fc0-9ad9-14243e3abe82", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee30522-eb86-4e16-b44f-4ab478b24ea8", "sighting_of_ref": "indicator--75cfc783-1a0a-4346-badd-fb633201b424", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05b1349-f8b3-49df-8808-db31a5a3034e", "sighting_of_ref": "indicator--9292f74e-6fbf-4dea-9198-899c1b9f63e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f430bff5-18df-4235-a8d3-aebab4d65c4f", "sighting_of_ref": "indicator--9292f74e-6fbf-4dea-9198-899c1b9f63e4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f41adb6-6883-4cab-a359-f33102fb577a", "sighting_of_ref": "indicator--f5dcb431-808b-4bf2-8424-ba719ffb88b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bd5fcd-ea47-4ee8-bc54-0e7f2be52efe", "sighting_of_ref": "indicator--601a5de1-9483-4eb5-9bcd-8d22f96fb4da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97c21e8-fb9f-4551-8544-56dfa5c0bd3a", "sighting_of_ref": "indicator--4e359abd-b158-42c2-b3a4-d024395e6d66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2d209c-4436-4d24-9a08-63a4132870a8", "sighting_of_ref": "indicator--4e359abd-b158-42c2-b3a4-d024395e6d66", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326d3c24-88cf-4903-9b9d-a154e7591241", "sighting_of_ref": "indicator--119e44c8-bfd9-4e2c-a8d1-bedf17cd26a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd7b49c-ee46-4861-be67-96d749a30de4", "sighting_of_ref": "indicator--fe2206cf-9816-4deb-b8e3-625e79cd3fd1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf08aa94-1d70-4187-8193-9119db414a19", "sighting_of_ref": "indicator--9ad0baaa-ec25-4a6f-9c7c-fcc94758a88e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2b09c5-e5c4-45fb-a9c3-9fe1d821f93c", "sighting_of_ref": "indicator--9ad0baaa-ec25-4a6f-9c7c-fcc94758a88e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0445a8-0522-4093-99bd-d3f114c12d50", "sighting_of_ref": "indicator--8827cace-7fa3-43b8-a09e-c85c973a009f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f639b800-015a-4071-8d48-cb9eb933aa3b", "sighting_of_ref": "indicator--ccd94f3c-961f-4406-a090-534e7925aac8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46df221-7860-4611-8e22-3adb0d461941", "sighting_of_ref": "indicator--573415a9-79bd-429b-8cb7-5efa1d90423b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4dc92d-9aaa-4968-85a4-6ba1722cd953", "sighting_of_ref": "indicator--573415a9-79bd-429b-8cb7-5efa1d90423b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd6c28e-bd7e-497b-b87c-b0327ed7eaf8", "sighting_of_ref": "indicator--0efb7bb7-b896-463e-934a-76ce385ea43a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6909e2-3864-4400-9605-d8bce1c4172f", "sighting_of_ref": "indicator--7c2b9f3d-d150-4166-9a47-6d168c951f61", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea36195-67db-421d-be37-91d270da9f7e", "sighting_of_ref": "indicator--42e14df9-733c-4308-8b98-73815a48c3da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24951443-e5db-4af1-a470-b0b3a02309ed", "sighting_of_ref": "indicator--42e14df9-733c-4308-8b98-73815a48c3da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b819f58-1a85-4de3-8db6-827774276cf7", "sighting_of_ref": "indicator--8b2229ef-1149-4154-b763-8ac0df5560ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ed381b-2628-45f0-a0ce-ceaeecceb4b9", "sighting_of_ref": "indicator--66f304f7-1878-4d50-98c4-b6d1024d1c98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aaf0e8c-4a73-4086-b867-9c9292ce0412", "sighting_of_ref": "indicator--d97fcd43-bf27-4b96-87b4-cd6553e8e78b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cef506-cbf6-4580-80be-0f3f4aafca8e", "sighting_of_ref": "indicator--d97fcd43-bf27-4b96-87b4-cd6553e8e78b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b13ac4-8264-406a-b092-3694ca1fc72e", "sighting_of_ref": "indicator--00d43ebb-610c-42ce-a5d7-b1bdc926ae86", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfa2ffa-22d2-4217-b23a-db0c481af8d4", "sighting_of_ref": "indicator--46459eac-0d29-4117-a91f-d4ff6dbbeda2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729e0bc2-2a07-4ea1-9a8c-968a6a57f862", "sighting_of_ref": "indicator--c504c9d1-8015-4835-bde1-0403ef714f30", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decba7b7-80ce-4421-a4e3-e22e50ba5bcf", "sighting_of_ref": "indicator--f0d986e5-d783-4582-8a48-2972643ac926", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bffa74-8e4e-4b24-b83c-3a4cf2af5ae2", "sighting_of_ref": "indicator--f17d2b83-93ec-48ea-8b54-b4875b9b17a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f013b6ab-41df-4614-8d35-7c6ffc401e6e", "sighting_of_ref": "indicator--f17d2b83-93ec-48ea-8b54-b4875b9b17a3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3863873c-3f04-4a42-a9e3-0735254e2833", "sighting_of_ref": "indicator--eae9b4f4-bb2a-4112-bcce-dc0943f2a92c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8380f9cf-0a0a-4343-b778-b82d133ffaa0", "sighting_of_ref": "indicator--44fcb0cb-ffaf-4d21-a8dc-47b62ee63785", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469e1e4d-c075-428c-8d97-7fd423c5da78", "sighting_of_ref": "indicator--44fcb0cb-ffaf-4d21-a8dc-47b62ee63785", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4a4121-6523-485f-af92-582d9e4947c0", "sighting_of_ref": "indicator--dfff5516-903c-4515-aa31-10dfbc5d0db7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216680b9-15bb-44c0-a917-a6aa2cb812b9", "sighting_of_ref": "indicator--dfff5516-903c-4515-aa31-10dfbc5d0db7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89dcfed-13d7-4ca2-b891-1d012b104f7d", "sighting_of_ref": "indicator--9f681595-58f0-48cb-997b-0882a1b756d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ec4179-edc7-4443-a2d3-d93d8dbe261d", "sighting_of_ref": "indicator--7765ed3b-67c3-4db5-be43-f2773a94b124", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83989698-25a8-4ad2-9b4a-81e0923efd49", "sighting_of_ref": "indicator--a4c136e6-7796-40ca-a4fa-d1fe00918c0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdbe8d3-ddac-4189-a03a-be36dd5a3c28", "sighting_of_ref": "indicator--761d3b29-93a4-4c88-86d7-be636d9ad35c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0f652b-ef6e-491e-83bd-e7753900a5e9", "sighting_of_ref": "indicator--3b6419e9-e2d2-4716-8135-36f32d14d893", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dd7039-2cea-4262-91e3-be03d9d0c2e9", "sighting_of_ref": "indicator--3f115310-6a79-4be0-86db-f6a226de2f1f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597dbbcc-6bf3-461a-9193-7bda560a6e25", "sighting_of_ref": "indicator--07f0b7ac-47b9-4a76-8f30-b125c40ffab9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6336b9e-7d47-4786-b3c7-ac57a7284b36", "sighting_of_ref": "indicator--45b75fa3-4a9f-4d34-aff2-df3e6c247c8a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0179b16-9e5a-4a23-8f69-73683399eceb", "sighting_of_ref": "indicator--23d6b7fb-cc15-46c3-aecd-3d8f13ee16be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92162606-5c58-4eb2-b9d1-f637aacb4e7e", "sighting_of_ref": "indicator--23d6b7fb-cc15-46c3-aecd-3d8f13ee16be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6afc20-effb-4258-bc7f-577610390f37", "sighting_of_ref": "indicator--236f3698-f683-4997-b3cb-a9d85b84f4b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad39108d-084b-4cf6-a5d7-0167bf81e4b3", "sighting_of_ref": "indicator--236f3698-f683-4997-b3cb-a9d85b84f4b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792f6435-d878-449b-b193-24d5b98796da", "sighting_of_ref": "indicator--38c8a6de-d3e3-41a1-9b17-29474df5e835", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7886a44-db90-4aed-ac8e-18d2342cb863", "sighting_of_ref": "indicator--67e44edf-45dc-446e-9a93-70505b34bf8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e53715-55f2-4ec2-b6d3-2d71fb50dabc", "sighting_of_ref": "indicator--cc98a914-d1ed-4f7d-b196-bfce8d63b388", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5772a7b5-bb62-452c-a147-f1d2da2fbb49", "sighting_of_ref": "indicator--cfe0156f-3fff-4409-8789-3fdd7e8dc481", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ca73b9-f9fe-4778-9c23-acbe66879163", "sighting_of_ref": "indicator--058545da-f340-4af1-b6bf-bdae080a61bd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3966c9-4384-45c3-84a5-6a0bfbb86d7e", "sighting_of_ref": "indicator--4db15401-a0a9-4c87-b8d5-c8701c9ac694", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437825f9-8340-4f17-bb45-1afe23c1250f", "sighting_of_ref": "indicator--4db15401-a0a9-4c87-b8d5-c8701c9ac694", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd53621-3986-4d53-8aa2-c2939fd80b9a", "sighting_of_ref": "indicator--f96c9c01-99b0-4c0a-b22c-1813cf7d4a5e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff8df92-da46-4cfe-98f6-e0d22f72bc3d", "sighting_of_ref": "indicator--ed2d9732-1d39-40e2-8907-ab29fe3b7076", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872607cc-d8d9-47ec-9b82-f91dc64fb107", "sighting_of_ref": "indicator--71b89637-225a-4842-8c3f-aacbaf63ab76", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5e34c7-d325-400f-bcc0-18dc379417a0", "sighting_of_ref": "indicator--9b2f5610-abdb-4c5f-91ed-123aac4a8ae7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270542cd-df5a-493d-8c12-4d1be264fef6", "sighting_of_ref": "indicator--9b2f5610-abdb-4c5f-91ed-123aac4a8ae7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af81ba85-cd2e-44f5-94a2-625514de1e8f", "sighting_of_ref": "indicator--21e0d83f-650f-4a21-a2eb-081ceefa0cd7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c826afa-b68d-420c-a34e-e8ce7fa994ce", "sighting_of_ref": "indicator--b3c533ff-47a1-4f5f-8380-fb74b020ba7e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622c3b48-4d27-475a-a42f-10a2a7298190", "sighting_of_ref": "indicator--0198f7c8-ecbf-49c0-971b-aa3fe131ade1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a1284a-5e3c-4fe5-b895-e57706f2f0c3", "sighting_of_ref": "indicator--0198f7c8-ecbf-49c0-971b-aa3fe131ade1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab06da3-66ff-4af4-968b-7058dff7191a", "sighting_of_ref": "indicator--89f81ce0-025a-4602-98a8-858197b330c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64735016-f75c-44f8-bf06-0dc9c2138da2", "sighting_of_ref": "indicator--bed01e8d-de86-4c63-87d2-1944fa9d56f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da6e388-8be1-491f-858f-c599f8f73054", "sighting_of_ref": "indicator--6a1d9658-a961-4c3e-b2f2-1b1debe91610", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180f0d84-2d12-478f-89e2-cfa27c0d6d59", "sighting_of_ref": "indicator--7ab108f4-5a31-46d9-bc28-ff1fb467f962", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36290f9-0822-47b6-8189-bff2facfff99", "sighting_of_ref": "indicator--12ddc5cb-bcde-4f38-bfa5-da0946201335", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1e20e6-c634-404a-94bd-b40a0b26c47e", "sighting_of_ref": "indicator--b40acce9-0ee2-434b-adad-9675e62b551b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32844cc8-91f9-4121-8896-e7c1b1c51b63", "sighting_of_ref": "indicator--4c2f0d14-c708-48c6-845e-367a412c97a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad65331a-a3bf-4b43-96b7-b5e55df36c7c", "sighting_of_ref": "indicator--ebd9a7ba-22a2-457a-a503-c9494f1064b3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f45309-7390-4372-80b0-c18d35579b7d", "sighting_of_ref": "indicator--ebd9a7ba-22a2-457a-a503-c9494f1064b3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b691478f-a277-4881-aae5-ba5ac1d222db", "sighting_of_ref": "indicator--5e4263da-5bb3-4148-8ee8-1e1c7a5ff9b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fc748a-8932-4779-b071-740c3534349c", "sighting_of_ref": "indicator--944d88a0-fbb4-42ad-a4e5-a02840776044", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a1bae4-4cbc-495e-9c72-3f22158f08d7", "sighting_of_ref": "indicator--26a43d24-1477-4522-87f7-c602982aa336", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08abc23-0768-4f9e-ad86-06582df216f5", "sighting_of_ref": "indicator--8e5f1e51-0b36-45ac-a96c-1d4eaf3f07d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b4159e-11b5-44a9-b024-831e3b8c3089", "sighting_of_ref": "indicator--5ddd007c-8b6b-4895-a66a-9d76aec9d3ab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12110f0e-78b4-4035-bc5d-e877f182e3ce", "sighting_of_ref": "indicator--ee0757f6-60a8-42e6-ae57-eb644539c89e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb100671-4346-459f-9188-e2cd0bb9e20f", "sighting_of_ref": "indicator--7118f0c0-285e-4104-a5e4-3a5060b721c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a5c4db-6b12-4f47-b10d-282924bf1e7b", "sighting_of_ref": "indicator--e7c6d0fa-2575-45a9-93d4-02d49b10a0b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a854f1-ead6-4628-8436-a310fe869b80", "sighting_of_ref": "indicator--47a26657-ca7a-4b8f-b3c1-99316840f6c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8991d19-de7b-466f-ac1b-56f2ab3145bf", "sighting_of_ref": "indicator--39bc0f97-c969-4113-96e3-73a442862b81", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fd6fb7-24d6-41e2-93ea-f51007e71883", "sighting_of_ref": "indicator--15132d9e-10a1-40c0-8fe9-5f6fd5e1f975", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1121b4ba-11b3-4b81-a6d1-efb4a135548d", "sighting_of_ref": "indicator--15132d9e-10a1-40c0-8fe9-5f6fd5e1f975", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d758cc-a2d9-4fe7-a054-1c6a60797afc", "sighting_of_ref": "indicator--a14f4876-cbac-47ee-9b2b-dafd38297b16", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a3d8aa-235a-4713-857d-33cb0695c829", "sighting_of_ref": "indicator--ff4c3409-9a73-45b7-adcd-c7dfcc4245a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeacf33f-ba38-4404-944d-b93d595c2392", "sighting_of_ref": "indicator--ff4c3409-9a73-45b7-adcd-c7dfcc4245a3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dedc691-1f85-4bbe-9b8b-69e11f5d83fc", "sighting_of_ref": "indicator--236eba2b-23ae-4d24-b36d-1f457a38d38d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7543b909-ed77-4751-a827-5b3a0f7d4c9c", "sighting_of_ref": "indicator--5b9ec39f-8b15-4593-a0d1-d305c5cfb72b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585fa327-d63b-45c5-9f1a-696f55275d56", "sighting_of_ref": "indicator--f3609c6f-5f66-44fb-bf57-6fc81eb0dee0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3741d47-2f43-441d-b27a-b54bc9991ae7", "sighting_of_ref": "indicator--3106da86-9890-4963-9fd2-0b5297105467", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d02532c-5c2b-4329-b0d2-ac545d4bcafd", "sighting_of_ref": "indicator--708d9423-a6bd-4096-bbb0-15173137fea2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e05d9b4-eaa0-4911-9a87-278d22282217", "sighting_of_ref": "indicator--9f9261b0-644a-4d55-a260-7f43f5b3fb2d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c158cfab-c8ab-4979-91f7-6321de58404e", "sighting_of_ref": "indicator--cddc03cb-7ca2-4054-9bde-a6f45db367de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bfbb61-41e6-47ef-9652-3896c85b0b9e", "sighting_of_ref": "indicator--30e72e6b-0609-486e-acd0-4b6dc9b17d81", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08ab423-6e4e-4d1e-b355-7f24f1fb5c3b", "sighting_of_ref": "indicator--f7edc2f3-67cb-4338-9d41-ea02125ac127", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0aec4c-76e6-4df0-93f1-4aa84699b316", "sighting_of_ref": "indicator--5964487c-4230-4654-a816-71d753b15003", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded25d7d-5e27-4045-a47e-594db5f16f11", "sighting_of_ref": "indicator--54a4d1d0-6bc7-4521-b419-3272cbe52587", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7c5eb0-b1b9-4ebc-8c43-94c81a1a5da7", "sighting_of_ref": "indicator--e94a6801-24fd-4e6e-b469-d38184600808", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e9688a-7d26-4d21-b41b-b22df70968d1", "sighting_of_ref": "indicator--153f1f86-2fec-4971-801f-4dbeecb033d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1855fe5e-45b8-4c11-8283-ad9f9300d177", "sighting_of_ref": "indicator--dcd3fb6a-4e69-423f-bc76-3793ea5beea6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d1cfff-36bb-4eef-ab9c-e81738c85fec", "sighting_of_ref": "indicator--e498ce3a-43b1-48f4-8efa-fcff22100989", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67edab21-4319-49f3-9235-0fe382555751", "sighting_of_ref": "indicator--17a1304b-b141-469d-b377-2c813a727c55", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca722ced-b7bb-457d-acd1-c57580a57bed", "sighting_of_ref": "indicator--3897f723-5751-44bc-8586-32cd68dd0600", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfe96ed-f282-43df-a60a-71d1f97ce104", "sighting_of_ref": "indicator--01e3ba6e-7467-48cc-966d-6a23d0357e24", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f9a6d0-63fb-4cb4-98c6-fe39f732cc1d", "sighting_of_ref": "indicator--6b3783d9-5018-4cc9-91a2-a722fecdcf21", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5349c924-3713-45c7-b491-1c835b6ff789", "sighting_of_ref": "indicator--f9356c53-61ea-45a1-8e3f-0d0f2f025665", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1082ce5-7435-42a6-b446-306e0912a49c", "sighting_of_ref": "indicator--cd899262-e7e3-4899-a9df-1beb9341186f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4a1ea1-9bfc-4c44-b06f-3794a7edd3fe", "sighting_of_ref": "indicator--c7c1c814-60bf-44dc-a10e-930896481cfe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e2d577-15f2-481d-bb9a-030f6a452a28", "sighting_of_ref": "indicator--5558f991-20dc-4ff2-bf31-586aa719262a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d011d3f6-b3ed-4361-b0af-d205d92ab68b", "sighting_of_ref": "indicator--28c345c9-1663-4017-b017-6ec2822ad57d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c402ee4d-dce6-4d07-937d-4b8d1f8fe7ed", "sighting_of_ref": "indicator--71891083-7d7f-43bb-b6a6-995933e30f77", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7c6d4a-a011-49a3-9159-bb66e742e462", "sighting_of_ref": "indicator--71891083-7d7f-43bb-b6a6-995933e30f77", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5dba1ec-0a6a-49ea-9a54-a6e829bce481", "sighting_of_ref": "indicator--7ff6c87b-76f8-42a4-8524-6ddc6cc41c38", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ab04d7-ca4f-4b13-9698-45d29337f863", "sighting_of_ref": "indicator--7ff6c87b-76f8-42a4-8524-6ddc6cc41c38", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10a2669-bf1a-4784-9175-c715a2a84a7c", "sighting_of_ref": "indicator--f8af65b8-0b3c-45f1-872f-7886f72c50c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feedb0d-f811-41de-909d-7ed9499991ee", "sighting_of_ref": "indicator--9c2cefa8-54c3-4b64-aeae-ce8c4b669699", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382191b7-bdda-4ecc-86dd-56b1bfbec02c", "sighting_of_ref": "indicator--9c2cefa8-54c3-4b64-aeae-ce8c4b669699", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdd3b94-2c2c-448d-b080-2c0638647c69", "sighting_of_ref": "indicator--6b3aab58-4c7e-40de-a08f-609aceb106f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a422a904-1f63-40d1-8b99-871f8cd5edb8", "sighting_of_ref": "indicator--b272bce6-9662-430e-82d7-239361648968", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b82421d-da6e-4b6c-92ce-9003ba605e13", "sighting_of_ref": "indicator--dc5e6c01-1772-4a9e-b834-4d6c0bbc9ffe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2911c09f-3ae5-496f-a01e-a00b83d681d8", "sighting_of_ref": "indicator--dc5e6c01-1772-4a9e-b834-4d6c0bbc9ffe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717018e5-11fe-4956-a311-e413a725f4b8", "sighting_of_ref": "indicator--e4345c63-e5e2-4902-a3e7-493ae7af4edc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86057a53-f0ed-4f57-a562-cc1b90c4287c", "sighting_of_ref": "indicator--5477d38c-d6fc-4a0e-9f52-54f1f238f150", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c569efe7-e9dd-4f92-bc57-9b81317a9a1d", "sighting_of_ref": "indicator--c045b90a-b3df-4f42-bff7-020c51e091c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a031d9d2-b594-4dd3-a94b-d242df2b7fcc", "sighting_of_ref": "indicator--c045b90a-b3df-4f42-bff7-020c51e091c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ea36d4-972c-48fe-bcdb-eda50e92f76e", "sighting_of_ref": "indicator--ecb5ee0a-3ef3-45a2-9c6d-5caa4fbab126", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e79d8f-d2d5-4164-b171-f1cdebb9eed7", "sighting_of_ref": "indicator--4b4abbb8-26bc-4fac-bd49-c3ade9b2bde2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed29cc4-a034-4cc2-8cb7-7dddbc8c9fe7", "sighting_of_ref": "indicator--62c1cca2-87f9-4b99-b5d0-5280c61ff552", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a0c861-81b4-4ae0-b46a-65f188364dff", "sighting_of_ref": "indicator--62c1cca2-87f9-4b99-b5d0-5280c61ff552", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82799d7a-0b67-4e40-bca0-920d0ba0ae45", "sighting_of_ref": "indicator--8cc39e09-c012-479c-a646-b86c28bfdc86", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d471ea0d-a449-4180-bea1-ecf7a095b521", "sighting_of_ref": "indicator--94e79b06-39ce-42cf-888f-bcac89968c7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d841927-3119-4217-8945-a2259dba5d5d", "sighting_of_ref": "indicator--94e79b06-39ce-42cf-888f-bcac89968c7b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fd2368-3e92-4dad-9217-f5c5c1a41359", "sighting_of_ref": "indicator--adec23c9-a445-4cce-9032-eb7cc8271efe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6839d664-c03a-4c4c-8872-3376b243b37c", "sighting_of_ref": "indicator--af06430f-a150-4359-8ff8-f50f4a321033", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862ad295-05e0-402a-b436-9e7eb5a54907", "sighting_of_ref": "indicator--63ba9690-267e-4fb5-88ef-eb3b67b2009f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447167b9-0823-49b3-80e6-49ed52cee284", "sighting_of_ref": "indicator--85d6c604-4825-4dd8-8b96-8a9c27e89c8c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d584d3c0-ca9e-4fe5-9e92-12279557deef", "sighting_of_ref": "indicator--8c4eb687-483d-435d-b923-95e5b71cba2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7545088-cc25-4acf-864f-8c34eca7082d", "sighting_of_ref": "indicator--53c1fb59-7470-4481-84ff-1d801258822c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48596cac-430a-4496-a912-9b008c6a9768", "sighting_of_ref": "indicator--53c1fb59-7470-4481-84ff-1d801258822c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3ee529-8259-4912-a454-697ebc8997dd", "sighting_of_ref": "indicator--1e10ed7b-50ad-46d0-bece-1a972a5caacd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d4b5a0-9c76-4adb-ab52-252b63c4154d", "sighting_of_ref": "indicator--7d00f347-4e7d-407d-9d07-02c3a4dc5bf6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485eca8e-e619-40ae-863e-b757cd4ff5bf", "sighting_of_ref": "indicator--18cb1b8c-20d2-4bef-bd46-0c8ca512a495", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c477d3-3d8d-40dc-b9e9-f7f4599b1e70", "sighting_of_ref": "indicator--13ac6470-a002-47b2-b785-7d54992220ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e3a204-6255-4873-a5d6-bb850211c3e4", "sighting_of_ref": "indicator--c438b5d9-a752-4a09-a0f2-7684d130470e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b584a0d-6b81-4fd7-972f-184901fb6641", "sighting_of_ref": "indicator--cb245f63-0903-4e27-98f3-409136986a61", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19e12dd-3f4f-4940-a680-8b056ce9eecf", "sighting_of_ref": "indicator--cb245f63-0903-4e27-98f3-409136986a61", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d2df18-6f51-434f-ac8c-fc046538b048", "sighting_of_ref": "indicator--567919ad-75e9-4ac9-af61-8317608df7ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db38208-95fc-487e-9bb7-6983163bb41c", "sighting_of_ref": "indicator--37f81773-0daf-4175-8574-eb531ffdc7e0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee73796-e7b6-4950-9651-8245dffa2851", "sighting_of_ref": "indicator--423de3ed-d89a-470f-a5f9-38dc09221bf8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5b9341-20a3-4a28-b698-d438ecd785e7", "sighting_of_ref": "indicator--423de3ed-d89a-470f-a5f9-38dc09221bf8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4515bd38-9c94-47a4-b5b5-14c7eb98a4be", "sighting_of_ref": "indicator--948ba43f-61af-412e-8787-11400720ecd0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b30e448-6a04-46da-93c1-4d048dee703c", "sighting_of_ref": "indicator--a96dc8bb-990a-483f-a68c-541dcdc58ab2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a31364-3373-4118-b812-2803c70483e6", "sighting_of_ref": "indicator--8aed65dc-1b98-428d-b55c-5ebb7af722bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71972ff-1975-4b57-84e1-af6ac4d0eb9e", "sighting_of_ref": "indicator--982a42c9-cedd-47d2-beb2-204e710f14d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716f10e4-57dc-4eae-969b-b7e219ed946b", "sighting_of_ref": "indicator--e1f15436-4738-4607-b94d-34b51d98157c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5214f8a-3964-4688-839c-f2551ce44618", "sighting_of_ref": "indicator--c962b1aa-eb76-425b-8efb-04afb14f1e99", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40106dc1-6b1e-4bcf-bd38-715b56867c92", "sighting_of_ref": "indicator--7559f4ed-6a8d-4eef-aeb7-16880df06b75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe7e47a-cf01-4da2-8ac7-8b1ee7e9da52", "sighting_of_ref": "indicator--c8dc981c-19ef-4497-ad3d-afa07d58e337", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a900f65-50c4-4606-946c-8973a7c6dbd0", "sighting_of_ref": "indicator--29eab5aa-0dea-4e1b-afb0-d20a8b4e5a71", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc84c316-37bd-40d9-9e4c-48530838f802", "sighting_of_ref": "indicator--29eab5aa-0dea-4e1b-afb0-d20a8b4e5a71", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dbed4d-a53c-4a49-aaba-efb919b62d43", "sighting_of_ref": "indicator--3f118307-da41-4fd1-9961-c7617c54a001", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05fa16a-28ac-4298-9acc-f7c2c8de70cc", "sighting_of_ref": "indicator--13b595fd-618e-4262-a705-ed865db7c676", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493b4cbe-e411-465d-be73-ac0fb6ae74d4", "sighting_of_ref": "indicator--77acc498-010e-4bf5-8cc4-5c45589619ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d19769-1df3-49ee-8596-68345bbfbb37", "sighting_of_ref": "indicator--77acc498-010e-4bf5-8cc4-5c45589619ca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1bdc45-5c5e-4656-ad5a-d0b14d367c09", "sighting_of_ref": "indicator--6ba2352f-e02a-4110-95ae-633ad973fcd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603e3738-4d91-45b1-b9df-25a8d2dd78e5", "sighting_of_ref": "indicator--54dcd83b-bc07-4828-8722-ec3b8477c9d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673e6af2-dd76-46fd-b795-827280b84be6", "sighting_of_ref": "indicator--54dcd83b-bc07-4828-8722-ec3b8477c9d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806989ec-21f7-4418-9b91-f0aed32b50a5", "sighting_of_ref": "indicator--3f708056-7761-4930-91a0-5d9432554698", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864d1661-f1c6-4efa-9e01-868996fe8915", "sighting_of_ref": "indicator--3f708056-7761-4930-91a0-5d9432554698", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fecf7af-1219-4417-a86c-438369dead71", "sighting_of_ref": "indicator--fcf30586-a9e2-4bfc-8c2e-ad7b49f01612", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079aa80a-8dcb-4372-8175-c2be8d47b86f", "sighting_of_ref": "indicator--79e6044c-76e2-4af8-b0fe-46e42b7c27de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a9a10b-0d74-46a7-978c-c5ca906d7af1", "sighting_of_ref": "indicator--496b5d01-f27b-47af-9adc-536467b32b04", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8181e50d-7955-4291-a6ca-bde131fbf147", "sighting_of_ref": "indicator--496b5d01-f27b-47af-9adc-536467b32b04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd46823-0552-4c8a-89c8-4473339e25c3", "sighting_of_ref": "indicator--5dc8a616-9da0-4094-837c-44b2c1496487", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e950f3ac-4b2e-45b2-9569-dc88198840af", "sighting_of_ref": "indicator--080fc154-eae9-41c3-a221-8d788e3ae55d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a83b78-c8ba-41fa-9b19-e385fe794a1e", "sighting_of_ref": "indicator--8f4458be-cbb3-4b2c-97f4-7c14d1eaa6db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a91b9b-7713-44fa-9c08-995455e7abf3", "sighting_of_ref": "indicator--8f4458be-cbb3-4b2c-97f4-7c14d1eaa6db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710385d3-9bd0-4101-9a41-056c95a1b08a", "sighting_of_ref": "indicator--ca61004e-7082-4a81-b2ad-a0c35baee4bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1719a5-d9db-402c-ac5b-e3fcb965eb4a", "sighting_of_ref": "indicator--ca61004e-7082-4a81-b2ad-a0c35baee4bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c1a213-7dbe-40ef-aa9a-550c5d4b7f19", "sighting_of_ref": "indicator--339eec97-3c8a-4e8a-9789-bd8307ac7ea4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4667bd-69da-44d6-8912-775452648ff0", "sighting_of_ref": "indicator--2b355f22-b58e-44f8-8430-9156e81d0719", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b23d848-d32d-4845-828a-114fed3c5ccc", "sighting_of_ref": "indicator--2b355f22-b58e-44f8-8430-9156e81d0719", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b489fad-a1c9-430f-8786-48d2176ee45f", "sighting_of_ref": "indicator--73d6bc12-7235-42ef-9e01-7297415c7cb0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce044a1-157f-44db-8d18-e78e34c771f4", "sighting_of_ref": "indicator--a4c363b0-62ff-482d-8c01-a1fdbe505f6c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d185104c-5359-4362-8b9c-2ab00988e6b0", "sighting_of_ref": "indicator--e7094377-939e-4b1c-8163-c48c789751ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864b916c-772d-43a7-a1d3-5cab2ddf0579", "sighting_of_ref": "indicator--bced3b07-4d12-43b8-9439-cf4f5e76b6fe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2701d2-59e6-4890-b027-38702a032ba6", "sighting_of_ref": "indicator--a3b7a41c-7730-44e5-bc59-3ddb4c1a67e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc77d4fe-0d51-4ebc-b56e-dc3c51f5c71d", "sighting_of_ref": "indicator--870ecdcb-ea25-442d-8f44-a8fb83e869f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190dd46a-b9ea-4927-bef3-311b6cc566da", "sighting_of_ref": "indicator--870ecdcb-ea25-442d-8f44-a8fb83e869f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e69bd75-ba5f-4ff3-98e2-0ce2d4f3f6c9", "sighting_of_ref": "indicator--bcb44fc0-a18e-4b95-b86c-c0ebb49ee91c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9a1108-add3-4f66-be91-2ab013c9c652", "sighting_of_ref": "indicator--f82eb210-82e7-45c3-9ace-111fbb2fe7c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e24a2d0-5f2b-4c0a-a3a4-094368aa15d0", "sighting_of_ref": "indicator--f82eb210-82e7-45c3-9ace-111fbb2fe7c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e163258-2d7c-4163-bed5-9a12ab832ce9", "sighting_of_ref": "indicator--c067a8d8-c38e-4056-bf64-73e9a40a0b56", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca28df1a-6efb-4cb4-8b93-9b2de0bd2b72", "sighting_of_ref": "indicator--02d3c1a7-af0c-4b5b-b285-b47b4909e280", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9691067-dd6a-4be6-bf77-c904ba86fb6e", "sighting_of_ref": "indicator--ef35c093-7e1e-41de-86e3-9b2f3ebcc2cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa15d859-725a-4250-839c-302394a30853", "sighting_of_ref": "indicator--da8950f9-a0f3-4c7c-a4a2-dd8aef23d7f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81066009-a440-49e7-851e-5ca92061453b", "sighting_of_ref": "indicator--3226dfbd-2361-4748-a708-02cc56eb2348", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d835f44c-ee0b-4ea1-b1a1-77006d1b205f", "sighting_of_ref": "indicator--3226dfbd-2361-4748-a708-02cc56eb2348", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6856f2d-46c9-447e-a80a-7da2088593fb", "sighting_of_ref": "indicator--e3f909c6-63f7-4df8-a4fd-bfeee24bf520", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3304a4-7049-4129-9fd8-889ecd612bd9", "sighting_of_ref": "indicator--da8a7202-e107-4438-a736-c654819aad70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e42eccb-f23f-47cd-9a56-36bedb16157b", "sighting_of_ref": "indicator--b4646e88-9d81-4abd-baf1-cce0d7458d04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09af64d-7c53-4014-91e6-887c4e540875", "sighting_of_ref": "indicator--affc0b7f-6bc2-4833-addc-65f1151ba4e9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfb9017-cba2-4514-9876-506a63bce5b6", "sighting_of_ref": "indicator--1ae370bc-17e8-4420-830d-40ed0c0cd08f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae119c0d-4d0a-4355-a278-55260f0034ff", "sighting_of_ref": "indicator--b41d10aa-dc79-4ed7-9959-d9b50116d930", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d4ec16-50a2-4370-b0f3-74719cbd8169", "sighting_of_ref": "indicator--b41d10aa-dc79-4ed7-9959-d9b50116d930", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25706b88-c2f0-4f85-bb23-0f4c24a8cc9e", "sighting_of_ref": "indicator--532b117b-0362-41cf-a1a0-cb3d299377e0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15bf095-f8cd-4820-b6a1-e77e6660c0f5", "sighting_of_ref": "indicator--8348995e-b6b8-454f-a06e-0e948a2f7c89", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556da473-77f1-49c3-8e3f-0c0f1155089d", "sighting_of_ref": "indicator--3e24a7ea-c8d7-489e-9621-02dc761a1996", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35833d76-ae10-4427-a0bd-140e6e09823d", "sighting_of_ref": "indicator--99640d88-7223-4d06-b124-1416aedc54fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb3c0d1-7820-45bf-90d9-d075e43d1990", "sighting_of_ref": "indicator--aa0ea01f-d6ac-44e7-8db3-ea25750960f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f1d938-4631-4b1b-8656-3b8359c094b8", "sighting_of_ref": "indicator--8d47d4ef-268c-4fec-a3bb-8abc1179d10d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55609c95-ab26-443b-a431-a4677e5690aa", "sighting_of_ref": "indicator--8d47d4ef-268c-4fec-a3bb-8abc1179d10d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7d0ab2-c0fd-4769-aeee-8ea5ef562b32", "sighting_of_ref": "indicator--8782bec2-214e-4c77-a588-4aecb30d7ca8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7be135-d0d6-4c11-9d9c-627a1984bc85", "sighting_of_ref": "indicator--8782bec2-214e-4c77-a588-4aecb30d7ca8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641fd109-89fd-4a83-9987-3c4e0c62f60a", "sighting_of_ref": "indicator--7602f336-83c3-4aff-941f-c567ac2e9067", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a639e373-9dcf-45bf-aa8e-851aa06fe226", "sighting_of_ref": "indicator--7602f336-83c3-4aff-941f-c567ac2e9067", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cbc7f0-23d1-4ff5-929d-a61a761a2436", "sighting_of_ref": "indicator--5aa61cab-b8f7-4bf5-ba88-1adb533a3e74", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac55278-c0d8-45e3-b020-9ec447409efb", "sighting_of_ref": "indicator--389a5c76-7689-4cf3-89f1-6f4db5959df9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a4f381-b46b-49ed-9f4b-b2cd5cbb8ccb", "sighting_of_ref": "indicator--389a5c76-7689-4cf3-89f1-6f4db5959df9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7e6891-55ec-48eb-9b56-0b67e84b5d4a", "sighting_of_ref": "indicator--8cdfd336-b462-4523-8f61-cd120c5a95aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346177ec-4cd3-43e0-a640-d49d00b21c32", "sighting_of_ref": "indicator--08d1d437-c188-47d0-897d-a7173dd8ae9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac73ac8-c16a-42e3-9866-931f67a9f533", "sighting_of_ref": "indicator--ce00fad9-461c-404b-bd7b-9d2df762a689", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7a82e9-2e74-48c6-a1b3-6c39a8e9f1c7", "sighting_of_ref": "indicator--57349415-4b50-44d5-a0d2-8a530c2c202a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4baf85-fe6b-4bbf-8dbf-34196d03dfb6", "sighting_of_ref": "indicator--58b897f0-d6b9-4168-b1f8-39d3b9560355", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785c2573-6581-4444-8da6-91fb1ff6d368", "sighting_of_ref": "indicator--1fb0d682-33ee-4069-9c5b-983af29b559b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e23355-2312-4e7e-8a40-88a367af3528", "sighting_of_ref": "indicator--3aa75094-f78a-4f61-9ff0-d66414e98570", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6be842-2b95-48a2-9b73-0d1a07a87438", "sighting_of_ref": "indicator--33d315d4-ac46-4535-b332-f6076133260f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a4f07e-a814-41a1-85e1-83f8249830a8", "sighting_of_ref": "indicator--33d315d4-ac46-4535-b332-f6076133260f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e2e63d-b4f1-498a-a141-8cca9a0921f5", "sighting_of_ref": "indicator--6d150d86-0c22-4d8f-ab2e-52050954b1b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0aff541-9e1f-490f-add5-cb54db69b02d", "sighting_of_ref": "indicator--56a39c92-635e-4c5e-87b0-19633b72a0eb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e74933-9ad7-4d6c-8ccb-49090b1af370", "sighting_of_ref": "indicator--08c2c89c-6d6d-43ce-aa7b-f2680a5a37ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bec03f-ebc2-4025-8107-2b0d1b03a4ab", "sighting_of_ref": "indicator--153bf6b8-7922-413b-b58e-4d30e441844a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccda34f-7e98-4045-9235-8d6ba178995e", "sighting_of_ref": "indicator--fc14dcc4-812c-4afa-969d-070f5abfc387", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f783fd6-3330-4ca7-ada7-d0d417423c96", "sighting_of_ref": "indicator--1540379d-d45f-401c-a2ee-a98e413b7577", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f3f7f0-cc4d-47f1-95ee-89432c260810", "sighting_of_ref": "indicator--60e730cc-2957-4a08-8d87-e483fbd91aa1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2511017d-2c75-49a2-af10-6538d7212373", "sighting_of_ref": "indicator--37ef2ac7-18c2-40c1-98a3-9f0b86ac2b03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca23749-03d6-4048-aeeb-6f680d8e2c31", "sighting_of_ref": "indicator--37ef2ac7-18c2-40c1-98a3-9f0b86ac2b03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149caece-d0a8-4ed9-bcd0-0cd0b4eee5d6", "sighting_of_ref": "indicator--dd50b339-0fb4-4282-90f2-b7f0674c105c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a71e417-6f9f-42b6-b997-8e57b38a5bea", "sighting_of_ref": "indicator--dd50b339-0fb4-4282-90f2-b7f0674c105c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a0c56e-11d0-4d8d-9ff0-43d351f90eda", "sighting_of_ref": "indicator--8abcf1fe-344b-4d82-b45c-ece8e6358815", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8836d95c-022a-4f50-bfa0-61c34b956410", "sighting_of_ref": "indicator--4ab8590a-ec7f-47a5-9a36-2dda8699f30a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71556c8-60a7-4b02-8092-710d3a099f20", "sighting_of_ref": "indicator--4ab8590a-ec7f-47a5-9a36-2dda8699f30a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca94bee3-3a08-46c8-ae53-eb59daef5e4b", "sighting_of_ref": "indicator--f43c5f9b-627e-4db2-9f19-90f50062bc75", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d881da-9f55-4901-bc14-90d35a47f445", "sighting_of_ref": "indicator--3d08d02b-b2e3-4fdd-a52f-d981108b256d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3360d6-24c3-4e7b-9b8a-96b781b22854", "sighting_of_ref": "indicator--9be98868-97ae-475c-a767-3310ffa18ee9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e5dd2c-a8ca-41c5-9544-a47ca076c7d4", "sighting_of_ref": "indicator--9be98868-97ae-475c-a767-3310ffa18ee9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9394f426-a1e1-409c-b43a-e05b16389231", "sighting_of_ref": "indicator--17f943a2-333d-4d62-bff1-b456994eb23a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fefffde-eb3b-4b03-92dd-0a7a508efc35", "sighting_of_ref": "indicator--17f943a2-333d-4d62-bff1-b456994eb23a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f55d8ed-fcf6-49f2-8bc0-36aa0f25ef6b", "sighting_of_ref": "indicator--3bcefdc8-89a5-4458-817c-f3ee5a84d644", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f7e011-e9ce-433f-b8db-6a697daddff1", "sighting_of_ref": "indicator--b2d7e1de-4f3e-44b7-8670-a0421901d709", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f6d5cd-8a93-441f-9b8e-8af316e5dadf", "sighting_of_ref": "indicator--5b8ce590-e1e8-4af1-b311-41b6c70b7007", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623693d5-2786-4b9b-b0d6-007ec3d3773c", "sighting_of_ref": "indicator--5b8ce590-e1e8-4af1-b311-41b6c70b7007", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6895afd6-06eb-455e-bf8e-df184d98dee4", "sighting_of_ref": "indicator--b1bbc5c9-e7c7-4809-9666-31b7b421837e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69256ce5-0033-49b8-9f45-d6f6a5a225c0", "sighting_of_ref": "indicator--b1bbc5c9-e7c7-4809-9666-31b7b421837e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bc11bb-b8e5-4dac-a250-297f25c8d229", "sighting_of_ref": "indicator--176072fe-abda-4cb0-912c-f4dbfd78fe8e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e608f6c0-68fb-4828-8ace-48d042d4c843", "sighting_of_ref": "indicator--bc5bdbc7-2da5-4c9e-a7e6-20454c89aba4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f04978-7722-4953-9ad6-88355f33ab3e", "sighting_of_ref": "indicator--bc5bdbc7-2da5-4c9e-a7e6-20454c89aba4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dab4e8e-37ec-4d71-a3e2-938c4b096531", "sighting_of_ref": "indicator--00c837aa-c290-4a2c-88b5-d6e164aeccae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674a98a5-4bfa-4930-862b-f6fb0bf6769d", "sighting_of_ref": "indicator--3e8d083a-a551-4713-ac47-297984158404", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa49fe4b-53c2-4e98-a3d5-d67987e4ce08", "sighting_of_ref": "indicator--4c0eaadc-ed17-442a-b269-744758058a20", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e046004-c40a-4ea9-9795-d315e83504b6", "sighting_of_ref": "indicator--4c0eaadc-ed17-442a-b269-744758058a20", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcfac31-4a3f-4c0c-b71c-e480ed17a6c9", "sighting_of_ref": "indicator--a09bfde7-17ef-4f34-8802-c25fc85ecb93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4691b5d-117a-4f47-a92b-f4417ae016f9", "sighting_of_ref": "indicator--dc124f09-5cc6-4273-8785-d17e4130d029", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0b8071-6c0a-4a0a-8a74-87e15f711f2b", "sighting_of_ref": "indicator--1438af53-91e4-4d84-aeeb-a2b40205f624", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5e32f8-723f-491f-a1b9-d8cbbe5bb467", "sighting_of_ref": "indicator--1438af53-91e4-4d84-aeeb-a2b40205f624", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7864e0b-59fa-4dee-91b9-d77a3d0a13d7", "sighting_of_ref": "indicator--679498c1-b561-4402-b18d-7842c22bb6af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3788ad7-892f-4896-b70d-eec4faaf5005", "sighting_of_ref": "indicator--1e34ea5e-576d-4cf3-99a2-59059d7748a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f4d527-6073-4808-940b-eff62ed8a704", "sighting_of_ref": "indicator--12b82b4d-8477-448d-894a-a84a267e1ecf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2abf266-6055-463e-98d8-a8250a1a2563", "sighting_of_ref": "indicator--331ce97a-728a-496a-83eb-3cf88d1b842f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d645f719-bd67-4aa1-8bde-c9996340afbc", "sighting_of_ref": "indicator--78248a6d-d497-4af9-8ba3-2ebc41c2be91", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6bf120-e900-4942-9b40-45c79d1e5001", "sighting_of_ref": "indicator--67c012c8-4bf5-4c06-a991-6bb416199070", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3b1ee8-c465-4551-a83c-483dbd29bc29", "sighting_of_ref": "indicator--ece33164-5b19-4b0f-a052-60fffe149e77", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f67aeb-650f-4540-bfdc-4247074f9dcb", "sighting_of_ref": "indicator--d6ea876e-b427-47dc-95a4-8ab9583ada12", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61133f8-1743-4838-ab90-f26f8a661547", "sighting_of_ref": "indicator--60468680-0402-49b5-a3fa-8e3f4427c499", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb8f536-bcf9-4eb3-978e-82af032c7b32", "sighting_of_ref": "indicator--84e49f0c-f780-4380-9935-5e868e3ce041", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9769e662-1151-4474-9ed1-1f1f446286ef", "sighting_of_ref": "indicator--f034754b-1212-4470-addf-9d02e7b9bbaa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fd8794-1707-4aa4-8737-7b23dc5d4044", "sighting_of_ref": "indicator--16817682-55d1-4c03-bbcc-3aa93ac9bc8f", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d149183b-bbd2-4f11-a922-db8539944184", "sighting_of_ref": "indicator--5a0ce4b3-5c2b-4b86-b5ba-5e31f1443bd5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d127e0ec-fee8-439b-aa53-b295f858de16", "sighting_of_ref": "indicator--5a0ce4b3-5c2b-4b86-b5ba-5e31f1443bd5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bb084f-b021-497c-9621-86efd78856e9", "sighting_of_ref": "indicator--bb758798-69c0-47d7-93e3-5df240fd7f00", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caa6fe5-899b-48f0-87f0-eda0dbc8ad16", "sighting_of_ref": "indicator--fe73bb73-5b10-4c99-8194-5e8571020143", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fae4d9-5625-45bc-a964-33d1060f1ed2", "sighting_of_ref": "indicator--bc73d1e7-11dd-4ea1-a850-04d457a6b2d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2d3baa-61d5-4724-8ae4-be94243a3beb", "sighting_of_ref": "indicator--a1ea61c8-a200-4f13-9f6e-42947af26d87", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3accc312-c405-43fd-93af-a7d783150440", "sighting_of_ref": "indicator--a5135173-b69c-4a21-9840-cc61268bb00a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f98883d-1e5f-485f-ba87-b7bbb3a50abc", "sighting_of_ref": "indicator--1596cbc9-306a-48c6-a505-5d8b756c4a14", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e82174-9db2-4202-a5af-194984e5bf8f", "sighting_of_ref": "indicator--1596cbc9-306a-48c6-a505-5d8b756c4a14", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342cfa3b-192e-46d4-bfef-0a3b3c766b44", "sighting_of_ref": "indicator--c8ff7603-3b55-465b-aea3-8e30ea24867f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42d9b31-6c72-4acd-9eef-4daf6aaf7ea9", "sighting_of_ref": "indicator--33a7bb2f-ebc4-408c-a2ee-96465d076cf4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62242c30-1e06-44e7-8b8d-52f338572ae5", "sighting_of_ref": "indicator--ffa4893c-e61a-458d-a3bb-8e46dc1618c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869bae82-132f-473d-a6bb-4907a9061419", "sighting_of_ref": "indicator--ffa4893c-e61a-458d-a3bb-8e46dc1618c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b112f2-4c1b-4701-8ae4-e5d0f339b814", "sighting_of_ref": "indicator--c8051726-c376-4ba8-82c3-c52b7f2807d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4bd732-3800-4fad-a5dc-9388798cf356", "sighting_of_ref": "indicator--b587bd21-07ac-4fd0-8394-cf0dea7b68e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493f9ca0-b8a6-4c4e-998e-77e17cdf4f33", "sighting_of_ref": "indicator--609a38e2-ee07-4c01-874c-cec93a14f6f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394412b7-a4b2-4ac7-8b5b-75807574ae0b", "sighting_of_ref": "indicator--6de2bee1-aa1c-4819-8241-d4b7a95949ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6270d4a-2b61-4100-b991-7c11f4f0f581", "sighting_of_ref": "indicator--4401eceb-6fbe-4b2d-9dfa-e7bbf73ba891", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588bcb74-cb4a-4b39-8635-07a66ab1e169", "sighting_of_ref": "indicator--e545afdd-3b14-4cfd-b98c-e08475d666bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c3ee3b-3d7a-4668-86d5-a659515ba85a", "sighting_of_ref": "indicator--e545afdd-3b14-4cfd-b98c-e08475d666bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8561a537-0f1f-4c40-86c7-bf10e9987150", "sighting_of_ref": "indicator--66cc8a64-5959-4938-9983-d382fd8f9ee0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a8524e-5c46-4fb4-8567-d79a63453366", "sighting_of_ref": "indicator--21865e7f-ab51-4f64-b325-7f547ac5709c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e778f0d-1baf-418c-a500-2b933004a0d4", "sighting_of_ref": "indicator--19b0c58d-863e-4b86-9cc6-eaf819148ee6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c41ebcb-2c40-4e32-b842-23f57c44c84c", "sighting_of_ref": "indicator--19b0c58d-863e-4b86-9cc6-eaf819148ee6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb8d234-0ab2-4584-a011-1dd19f3eaf5e", "sighting_of_ref": "indicator--fec57053-a8ed-4031-935f-ec445133830e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e158352-876d-4ebc-83d8-ccba2720abf3", "sighting_of_ref": "indicator--fc50d5b5-a116-46d2-833f-8d07e03711f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b797ed79-7bf2-44fc-9356-e6e5c8cdac56", "sighting_of_ref": "indicator--904179b4-1527-4ed5-a0c8-aeafb970f4f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5f67fd-b212-47f8-877e-c1137da381a7", "sighting_of_ref": "indicator--904179b4-1527-4ed5-a0c8-aeafb970f4f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ce42c4-57f1-48fb-b638-f63ced0a9fd6", "sighting_of_ref": "indicator--32c8fb58-afb8-4b8d-8322-dd1690d7df9a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d48039e-c7fe-4602-8402-10316eeda76f", "sighting_of_ref": "indicator--95844b4e-3a64-424d-8365-6a46baabac03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c396d95b-75a1-4784-b3f9-abcc6f980ebe", "sighting_of_ref": "indicator--95844b4e-3a64-424d-8365-6a46baabac03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121dbadd-11be-48f9-a1cd-c642083e0d0f", "sighting_of_ref": "indicator--b1608cb2-fe1b-4d98-a4ed-36d7a150e5fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff670b3-a53d-46d4-90d0-51ad98f8e843", "sighting_of_ref": "indicator--be1ec947-8959-463a-b608-04d96d3b99db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03014edb-1b13-48f1-9c0b-58ab99b161e5", "sighting_of_ref": "indicator--be1ec947-8959-463a-b608-04d96d3b99db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133f81d3-2bbf-4bb6-ace6-d5f0cb5b6b76", "sighting_of_ref": "indicator--649130dc-e997-41d6-89f8-90f3fe5e1423", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21010f9f-ce73-47d8-bd0c-3a681353ff87", "sighting_of_ref": "indicator--a8492d4a-e600-4a14-a53f-eeda05463977", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e5229d-d82a-44ec-9e17-1b4073c39d89", "sighting_of_ref": "indicator--604d6cb6-71fd-45a8-89ff-c5acfb9753fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5773f8-7481-4798-b22e-b50a53336eb0", "sighting_of_ref": "indicator--8ee70283-013c-4ee8-b0d3-5c482c187425", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d482d8-2f92-48e1-8875-8e5d224f6827", "sighting_of_ref": "indicator--31af84a5-c58a-4272-b0ce-25ba396428de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f06af9-65c0-4e53-b11e-b5b1e96cba4a", "sighting_of_ref": "indicator--31af84a5-c58a-4272-b0ce-25ba396428de", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afad59b-a69e-4f27-b1b2-039c31b246e5", "sighting_of_ref": "indicator--d41f47fc-e6cf-4cae-a33c-2df8a5e9a4d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a30e3a-cd6f-4795-8f20-b02cc307b535", "sighting_of_ref": "indicator--ca286f88-6b6a-48dc-a681-7792f1c7dd99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e220864a-9741-4237-865e-2943a69fcc9f", "sighting_of_ref": "indicator--ca286f88-6b6a-48dc-a681-7792f1c7dd99", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5735818-4b84-4e4e-b154-86f08badd581", "sighting_of_ref": "indicator--70203292-819e-482f-a09a-de7ca87ae8c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c842d66e-a7d0-4a86-aaa2-051d96376d60", "sighting_of_ref": "indicator--70203292-819e-482f-a09a-de7ca87ae8c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614aefc1-cbfa-4519-ae7d-f9f62b5f0986", "sighting_of_ref": "indicator--e3800c36-cc31-4a3a-8d79-d71ab3cbd0ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d94c0e3-86bb-443c-9d8e-e6a555d17f23", "sighting_of_ref": "indicator--f9ecebac-1a51-40da-b589-68df44aee838", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b790983-0d15-4133-8160-aebbd0e21e1a", "sighting_of_ref": "indicator--f9ecebac-1a51-40da-b589-68df44aee838", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67115f45-5e8a-4347-b7b3-467ac622edcd", "sighting_of_ref": "indicator--d60aa508-791f-431c-a6ca-15241d3609e6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7218912-737e-4d3c-b8b6-65767a3bfe5c", "sighting_of_ref": "indicator--72e3ba30-6187-42df-a670-90ded072d3c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e847990-b7e2-441e-8e4b-5ea72dd9cb1c", "sighting_of_ref": "indicator--8d82f722-1b2a-47d6-b798-aaff669d40fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e2718b-102b-438d-95af-2c7ab859264e", "sighting_of_ref": "indicator--8d82f722-1b2a-47d6-b798-aaff669d40fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f052e370-b9ac-420c-bf20-f993e61f9d34", "sighting_of_ref": "indicator--3a6b987d-1b0e-4091-a9d7-4d719af9032b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87601a43-6df8-4e65-8a45-75df7e025267", "sighting_of_ref": "indicator--3a6b987d-1b0e-4091-a9d7-4d719af9032b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31666b0-93a7-46af-bdcf-a271ad988e25", "sighting_of_ref": "indicator--79e90dad-ac8f-4d6f-9291-c56ac4c63baa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c14d59-be69-403e-8a96-d5082749cf08", "sighting_of_ref": "indicator--79e90dad-ac8f-4d6f-9291-c56ac4c63baa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb53585-b0e5-408e-ae34-ad676741c78d", "sighting_of_ref": "indicator--621ed880-f3ae-4522-a7f3-5db77fa1c1c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aaf86a9-855c-4a6d-b3e8-181b578b5fac", "sighting_of_ref": "indicator--621ed880-f3ae-4522-a7f3-5db77fa1c1c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a86db8-d63a-47b9-ae9a-f428e4b04499", "sighting_of_ref": "indicator--9c777090-56a3-448b-97d0-3ad91ecb890e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4908a1ba-e1f3-461f-bdb1-1bebeca11cdf", "sighting_of_ref": "indicator--9c777090-56a3-448b-97d0-3ad91ecb890e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e5a722-26ff-4907-9aaf-43243928aa5e", "sighting_of_ref": "indicator--4deaaf4e-ef6a-4f8c-ae93-64575fdbeabb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58c1f53-a7b4-45d3-84a0-d6be3429579f", "sighting_of_ref": "indicator--4deaaf4e-ef6a-4f8c-ae93-64575fdbeabb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116d2ccd-903e-42cf-a5bb-433b62f9f122", "sighting_of_ref": "indicator--b9b8b3f4-3041-4412-8a8c-435488ac837a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaddd0ce-c186-43fa-aa29-3719bc824856", "sighting_of_ref": "indicator--169db939-64a6-4051-b661-b228e4402fd3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba5c184-54ca-4107-950a-2b48084e5f05", "sighting_of_ref": "indicator--7fbe2f44-d8b4-4b80-9220-7ac8ac18e1bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b198a8bf-f2dc-452f-9d23-575e32a8862e", "sighting_of_ref": "indicator--4acbfb38-8040-41ea-9112-cdceb6de2c0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a715a5b-d1bd-4c1b-8a0f-a194418eeb36", "sighting_of_ref": "indicator--3bc3cb86-bd0d-4af3-841d-b9916ddb0011", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ca778b-c55b-40b6-8ed6-f72154ec1303", "sighting_of_ref": "indicator--fefc9569-e225-4c51-bdfb-3509dfce4293", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a80623-6207-4fe4-aff4-816abff7c791", "sighting_of_ref": "indicator--fefc9569-e225-4c51-bdfb-3509dfce4293", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a99325e-24dd-45ba-999b-b39cd395f03b", "sighting_of_ref": "indicator--68e1bfe7-8db5-423a-8748-a2388fc3ab28", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc0514a-582e-4c87-8b8c-b12bd3f51cff", "sighting_of_ref": "indicator--c67717dc-6e5b-42e8-a9d0-c2c7bebae92e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af748e69-5cba-46b0-9725-caa6cce98d38", "sighting_of_ref": "indicator--c67717dc-6e5b-42e8-a9d0-c2c7bebae92e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4320148e-8523-4089-8a3d-6c8330e4019c", "sighting_of_ref": "indicator--57101fbb-bc4a-423b-a03d-c6ff904fc456", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ba5141-628c-4c98-af61-4b05bdc6f8f7", "sighting_of_ref": "indicator--e19a41be-c845-44ab-91b5-bb673e61746c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1500f70-60d2-42d7-bf74-8498dab49e1f", "sighting_of_ref": "indicator--e19a41be-c845-44ab-91b5-bb673e61746c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2729101-f220-48dd-91e1-85d1f2474bdb", "sighting_of_ref": "indicator--1912aad3-635d-404c-92f1-b18f6ffc8b6b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393e7434-1fd3-48d4-826e-8c6c65172169", "sighting_of_ref": "indicator--86d130cc-0b84-4c73-aa47-ec2d20dde88b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fddcec-a837-495f-91a0-1d33a648e2f5", "sighting_of_ref": "indicator--621bed5c-d395-41e8-a43a-749b8330faef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0868d525-4b21-49e5-ac46-5015b495da22", "sighting_of_ref": "indicator--a37dd60e-2c09-4854-9d23-ebc03e4b48b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09739a9-316e-4a07-a509-9c2bdf7127e0", "sighting_of_ref": "indicator--a37dd60e-2c09-4854-9d23-ebc03e4b48b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e315070-9402-47cf-8273-201ac86a0b5e", "sighting_of_ref": "indicator--2bc37067-1b47-4973-a49c-a779b0e36d27", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb43c211-7e2a-4002-8c8c-c6f64727714d", "sighting_of_ref": "indicator--f147fb63-89f3-4b04-85a5-e88d8e427748", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0179f35d-4182-4c38-aab1-fc2f42db6609", "sighting_of_ref": "indicator--6b0bca7c-63dd-4580-bd13-e6a64e79163b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21bdc7d-0afc-4a13-bf81-33eb8988bded", "sighting_of_ref": "indicator--6b0bca7c-63dd-4580-bd13-e6a64e79163b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c78fe8-31cd-411e-b37d-d10a42b9f79a", "sighting_of_ref": "indicator--b32622cf-4f4e-416e-a265-b9b88326b772", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8fdf40-6832-4f4c-ab32-5adeb71ec2ff", "sighting_of_ref": "indicator--b32622cf-4f4e-416e-a265-b9b88326b772", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b660e34-fb5a-444d-a3ac-40cb81832ccf", "sighting_of_ref": "indicator--893df9fd-bc6d-4244-8cf7-2b69f0a3aaaf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a908de1-ab9c-45fa-a350-66b3aac0d4c2", "sighting_of_ref": "indicator--893df9fd-bc6d-4244-8cf7-2b69f0a3aaaf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf0408e-f7ed-46ad-9758-ee70f1db5eb3", "sighting_of_ref": "indicator--945d3830-0551-4166-9888-81947e36e4ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df483bfa-cc77-4de4-8710-a1c3cff89231", "sighting_of_ref": "indicator--945d3830-0551-4166-9888-81947e36e4ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e59c1e4-6032-43f5-8d41-4d39b97c26c5", "sighting_of_ref": "indicator--4bcc181e-d933-4d4d-988a-05f7752037c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7e3267-4552-4d0d-a0c7-9ed089855164", "sighting_of_ref": "indicator--0221436f-ddaf-404a-8412-9a6ce0458b5e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cf457e-291a-4f9b-b46c-c9284e748dcf", "sighting_of_ref": "indicator--0221436f-ddaf-404a-8412-9a6ce0458b5e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5b2aba-31b5-45c7-91a7-8804d87f2846", "sighting_of_ref": "indicator--e3a9d801-6c0c-4581-9778-276c5e4d9853", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfd3e93-62e7-4912-83d1-b1dda4962dcf", "sighting_of_ref": "indicator--703c0aa3-c3a0-42a8-986d-37a522e18133", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef6eba2-7727-4252-9720-67d796148504", "sighting_of_ref": "indicator--832e8741-3ad8-4c47-951e-24ab1628ff83", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7da1ec1-c2c3-40c7-9bd8-4d3dd5356da7", "sighting_of_ref": "indicator--9c0c4856-7bcb-4193-ab36-430c394991c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabd61e9-61bd-4dd2-91d0-347d791cf83c", "sighting_of_ref": "indicator--9c0c4856-7bcb-4193-ab36-430c394991c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897d5016-a719-49bd-830f-66a78d7f0a7c", "sighting_of_ref": "indicator--cefaac43-cb6c-4a03-892b-8b3e182beca5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed5b1ad-48d6-476d-9024-097be101a829", "sighting_of_ref": "indicator--f8c48971-49a8-4659-80f1-259c3033f542", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2329fcc-5ac1-4f70-9b3d-ed58f6955d31", "sighting_of_ref": "indicator--f8c48971-49a8-4659-80f1-259c3033f542", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7491d108-5a34-4810-8528-3adb6532505c", "sighting_of_ref": "indicator--01f72081-a578-4c84-abfd-6b1b57ed9ef8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ede5fb4-8a46-4d4f-b388-8d3c51491f26", "sighting_of_ref": "indicator--00960d2f-d644-4b4e-8761-c23c679e9b99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfaadce3-9347-4db7-8599-7e883b55a562", "sighting_of_ref": "indicator--00960d2f-d644-4b4e-8761-c23c679e9b99", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097eb0f5-1c98-46ff-a8b2-ee1d424db714", "sighting_of_ref": "indicator--75560872-34e2-4e85-8e0e-8ea2dda30c3e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672d8e5a-5f81-45c1-8da1-5e6e77f0eae9", "sighting_of_ref": "indicator--75560872-34e2-4e85-8e0e-8ea2dda30c3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bf94fe-481d-4fe3-b391-17408b382ef6", "sighting_of_ref": "indicator--3146fbd3-96f8-4d8e-8fa2-798d7713640c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71ed418-2d18-447a-8960-268fe4abaac7", "sighting_of_ref": "indicator--3146fbd3-96f8-4d8e-8fa2-798d7713640c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de85a9ba-3d07-46ab-8528-0ddf709c5971", "sighting_of_ref": "indicator--a3dd2058-f874-4d9e-a653-0e4501613d9d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac1a7f3-8095-46a5-950b-f26b94bc07e8", "sighting_of_ref": "indicator--a3dd2058-f874-4d9e-a653-0e4501613d9d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f93a0d-7dea-4032-a6c1-f07a68edd90e", "sighting_of_ref": "indicator--724d1d3b-43bb-4cab-a700-8ffcaa350121", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8b7ef4-80d5-4ec4-90dd-2101f1f8527d", "sighting_of_ref": "indicator--36e2efdd-a473-4428-9fa0-19e849cb6119", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed37c24a-10ed-4a6d-a585-b221e77af948", "sighting_of_ref": "indicator--4841e795-4d45-4cd0-8238-a72c2f066d28", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5513d125-4896-4e0c-a4ce-29e9310cce71", "sighting_of_ref": "indicator--4841e795-4d45-4cd0-8238-a72c2f066d28", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1249a7-7272-45e8-a12b-fdc639a85c2a", "sighting_of_ref": "indicator--22aaae93-7e65-4938-af07-86b84bfcedbd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639780d3-50e9-439f-a488-6aa41b81a1e4", "sighting_of_ref": "indicator--437f0b26-ee8d-455a-ba19-233f4314acde", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdd3d29-ead9-4f9b-9c0d-dae4b8d7b7a5", "sighting_of_ref": "indicator--23e5a3be-3543-44ff-9313-5bcb59da99d9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff2b215-8710-4369-92bb-fb38ec2ff457", "sighting_of_ref": "indicator--0aa1ede5-2ad6-43eb-84db-1fe8fda26252", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187e5728-6406-4c25-9e2b-234e0d2b19d9", "sighting_of_ref": "indicator--916566a2-e5ba-455c-a546-60d7573df951", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc66c941-a95b-4660-b948-1a1e31a0fc85", "sighting_of_ref": "indicator--be6a1b77-a118-46bd-8770-267d6ff01f8d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06a8597-86db-4122-82df-821aff785d3b", "sighting_of_ref": "indicator--be6a1b77-a118-46bd-8770-267d6ff01f8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a63bde4-5840-4725-8370-8da333a3e692", "sighting_of_ref": "indicator--8abb5651-385e-485c-a3dc-5589f1defad8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50fbc26-84fd-40a2-baef-28d7f27e2a7d", "sighting_of_ref": "indicator--8abb5651-385e-485c-a3dc-5589f1defad8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed8f265-473e-4665-af73-173383ca9dc3", "sighting_of_ref": "indicator--e32d61b2-89b9-4934-ae5c-71365e654657", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790db140-58eb-4a3d-a509-fed05fff3bea", "sighting_of_ref": "indicator--fb8d5f4a-318c-413a-98d4-db13b06d0118", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbeba527-d24d-4aca-bf57-d8276a6e5c39", "sighting_of_ref": "indicator--3fa67765-47f6-45f6-8805-85a890fd2b52", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7952b120-67dc-40f8-9501-c0c5822b32ae", "sighting_of_ref": "indicator--7e20d32f-17fd-462f-bd6b-aafd41ef18a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831926ea-0c9a-4fc7-b381-6b6adcf217d3", "sighting_of_ref": "indicator--fe813c24-033a-4bba-9f21-ad5b1ee71446", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d491b83a-c431-415e-b360-a30cc01fa11b", "sighting_of_ref": "indicator--7f766a69-add5-4f2e-a4e7-5a0390e0ed3a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840a7778-34ab-432a-bf78-dcbd85ded0cf", "sighting_of_ref": "indicator--18260639-94c4-4924-944d-286daccafd21", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab039ace-6538-40b0-8475-b544c23ba9f3", "sighting_of_ref": "indicator--5c6478dd-4601-4115-b4fd-92fce005ad1f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd78dd6-1989-4f3a-b92a-fa868d0dbd18", "sighting_of_ref": "indicator--5c6478dd-4601-4115-b4fd-92fce005ad1f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c592ed1-112c-474a-b382-4e4babecd98b", "sighting_of_ref": "indicator--9003ab22-8de5-4240-9794-22199fa8ad58", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb93c007-9d92-4c18-ac0c-e5277dc89a7c", "sighting_of_ref": "indicator--c021c2f8-df81-4f5b-8ffe-981fb9b77a84", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fe7cc9-c54e-49b6-ad21-e451eea959fb", "sighting_of_ref": "indicator--c021c2f8-df81-4f5b-8ffe-981fb9b77a84", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20911ebd-1ca6-424e-9908-ef1f2dcec46b", "sighting_of_ref": "indicator--bcd7725a-505f-4cf1-90fd-a31856e3c57a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1825992f-9440-4b56-8edb-ce7ff99ec7c7", "sighting_of_ref": "indicator--bcd7725a-505f-4cf1-90fd-a31856e3c57a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a0427e-365a-4102-a18f-ffd9d5275f0c", "sighting_of_ref": "indicator--c4920845-dabf-4ca3-92e2-9f1df7b55d91", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5081cb-8201-4e24-b6ae-1cfcaaab0438", "sighting_of_ref": "indicator--154200a7-4861-43c1-becf-d00e516190c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2a5038-e3d1-4618-9878-8349b429c45c", "sighting_of_ref": "indicator--995c4cb4-e017-48e9-bd3d-26c91802d10f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f498f67-fda1-467c-9978-3015eca218f1", "sighting_of_ref": "indicator--e9737b3b-3cc5-4171-8052-6fe1e3576865", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27f0d8c-7113-48a0-854a-883df7412787", "sighting_of_ref": "indicator--a5b873b5-324b-4948-8341-a6204d230e15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e8e996-2b8d-4813-b8aa-a1296f84f10d", "sighting_of_ref": "indicator--e91f0035-8eed-4ff5-a44c-3dc93092d444", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a0239d-13be-4694-aff2-87df334b486b", "sighting_of_ref": "indicator--b9ee8544-133d-47d3-bb65-409038ca8e9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a77824-df9d-4581-b4eb-d27cf2b7caae", "sighting_of_ref": "indicator--b91e90ed-0fd0-4901-95fc-26573fd85162", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18baceb-e696-40e3-8f37-cab17d80dce1", "sighting_of_ref": "indicator--bb269058-8e3d-456d-a7ba-a90ddeb5e318", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6875c9dd-5b38-4ac5-b565-f6d9b1a9049e", "sighting_of_ref": "indicator--cf0e0af9-dc61-43de-bcbe-5ad9b87472d0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e50927-1f3c-4fd9-b444-4235c002f8f1", "sighting_of_ref": "indicator--578aab24-8d40-4500-aac9-dca094e37276", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312b049b-f262-4104-9057-c50d1f0647aa", "sighting_of_ref": "indicator--1badd78e-e675-4411-b35e-3fc7e15b8746", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41188587-558d-4e7a-8d71-d9e2d3574c0c", "sighting_of_ref": "indicator--5635f3d5-d47d-4b4f-938c-20d4e3e41097", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0c695d-d1d5-41ab-8fc6-274988c34122", "sighting_of_ref": "indicator--03b02ecb-9363-4583-b276-8ca0d2e19b90", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd96f6b4-9f19-4b98-8d2c-146c34ad8a5a", "sighting_of_ref": "indicator--cc298d42-6a67-4896-8c20-10edb3a96635", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88099037-4ed9-458b-927f-ad28cbf26c8a", "sighting_of_ref": "indicator--9a64825e-1f7b-4907-a807-bab01f333db7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d52f7c-dd5d-4fad-be8a-8791f9d5afb2", "sighting_of_ref": "indicator--9a64825e-1f7b-4907-a807-bab01f333db7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d54097-f98e-4efd-b35e-42208cbbbfa2", "sighting_of_ref": "indicator--a843a758-9d24-4921-afb8-cd266a7780b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32814bf1-7d0e-4f7e-87ce-0cd9ee77c9c5", "sighting_of_ref": "indicator--a843a758-9d24-4921-afb8-cd266a7780b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e73ed9b-fce3-4bc1-a2bb-dd9391e38204", "sighting_of_ref": "indicator--d12ebfb0-679f-469c-8535-d9fbe247beb4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f02bbe-316c-4f46-92b1-5768aa9eddd0", "sighting_of_ref": "indicator--d12ebfb0-679f-469c-8535-d9fbe247beb4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501a71ab-0e4a-40a0-8e6f-05bff77132d4", "sighting_of_ref": "indicator--417e5fea-e90b-4891-af5d-f85b9e03c4e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e356c19f-9777-4745-bb93-833c97d82b10", "sighting_of_ref": "indicator--417e5fea-e90b-4891-af5d-f85b9e03c4e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af449f0-7240-473a-aedb-02b0731058a0", "sighting_of_ref": "indicator--e7c6a707-15ec-42a0-9d5e-e2d6ea5a2c63", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3a7f93-d925-4313-bb24-b668d39d911a", "sighting_of_ref": "indicator--e7c6a707-15ec-42a0-9d5e-e2d6ea5a2c63", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3801e5-2551-4094-b54d-9eb374b69fe2", "sighting_of_ref": "indicator--1bfd0376-5f86-4a26-b6cb-a7236b8ada74", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ad7241-4b48-483e-86fa-375fbdf22d32", "sighting_of_ref": "indicator--991cf12e-4faa-4c12-b470-9dcebb047c6f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6eb6c8-373e-414d-8335-e771d1d3f8b6", "sighting_of_ref": "indicator--991cf12e-4faa-4c12-b470-9dcebb047c6f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7ecb34-5846-4529-b5a9-11f6a5fb7b3f", "sighting_of_ref": "indicator--789ca709-cee2-4514-9f6b-a8294b92883f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eff9d51-36df-4f75-a133-d454ff4c7964", "sighting_of_ref": "indicator--e15059fb-763e-4f7d-b630-ea09b87678b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a1f936-6eed-46f1-b5c3-523cc7a5cf6a", "sighting_of_ref": "indicator--9e047652-4019-44e8-af97-0d331ead0b40", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b711a78c-e8b0-4558-95a2-5b6486b8bf2c", "sighting_of_ref": "indicator--a82bae11-a1b3-4522-89a4-41e3ca56d5e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6ffb7e-5570-41cb-a91b-7fc0c3a39642", "sighting_of_ref": "indicator--a82bae11-a1b3-4522-89a4-41e3ca56d5e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0951bfd7-fd3c-4591-9cf3-2052881bb0e5", "sighting_of_ref": "indicator--f32b273a-a01a-409f-ab3b-63097ee3854f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a79232-a30d-4c10-b1bd-1da520186a4d", "sighting_of_ref": "indicator--5b421000-6d91-4bb2-beb0-cf3b19b272dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7da68dc-415a-4199-aa85-1d6ac1b13fb6", "sighting_of_ref": "indicator--3f256296-c3b6-4fbc-bb62-2b76d8265f62", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efc02de-bfeb-497f-9918-99f74b14fec3", "sighting_of_ref": "indicator--67375f4f-08b2-438f-8985-8689aa63d498", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8c498a-8b78-49b0-9c3b-35bed478d24b", "sighting_of_ref": "indicator--9895a10e-58fd-4ad2-8e34-c7119a8c67ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8a6205-3eb2-4938-acb3-d5eaffda6028", "sighting_of_ref": "indicator--386c55be-1d60-4f4e-9d50-56634437fae7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d38fa5-99dd-4b80-ba87-1b26c90c7d93", "sighting_of_ref": "indicator--21b7ed1f-3a48-41aa-af01-d042503bcb1b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b296042-ec55-4514-915e-f4271f267b92", "sighting_of_ref": "indicator--affa2426-02c0-4457-9fc3-6ac0b0d28d7b", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cee2dda-e254-44a0-84a8-9ce091597661", "sighting_of_ref": "indicator--6e7d110a-1fe5-4b7e-b263-6d9159697ee1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e34646-8a94-4e0f-a539-ed99b39bc191", "sighting_of_ref": "indicator--6e7d110a-1fe5-4b7e-b263-6d9159697ee1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bf4681-8376-409f-bc4a-11ba5dc99618", "sighting_of_ref": "indicator--369bdd13-f514-44ab-8e77-6a1a1b1ab212", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ba4522-003b-4dbf-bbe5-2b98692fa7f7", "sighting_of_ref": "indicator--79178891-140c-4c51-b81c-3a614cf141c6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02181340-a613-40e7-bba5-8b3d68b0319b", "sighting_of_ref": "indicator--9a6a4eab-72e6-4277-b68c-52d0eb2aef19", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d44374-e0a8-4a99-813d-ddc2fc1276c4", "sighting_of_ref": "indicator--2adf7bc2-c127-412a-be7d-285f5297f536", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef53a607-c1cf-42c4-8999-d8e237b042d2", "sighting_of_ref": "indicator--9ef6fcf1-92f3-4c3e-8004-66f4b7f5f1c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c554693a-b7e8-4bf1-96b5-fae50d854903", "sighting_of_ref": "indicator--8e8a7d2d-98a0-4144-a02c-e5a9212cd177", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a07d0f8-e0bc-4f02-8547-47b267d8c27f", "sighting_of_ref": "indicator--793c1ee9-10fc-4ea1-b230-2c1c98bc2f73", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02aad022-d3bb-4ae6-bd21-539d739c2edf", "sighting_of_ref": "indicator--946c7206-c322-4d27-8fc8-618b8420bcea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2716c83f-7e8b-4d5e-a897-f0a564791b65", "sighting_of_ref": "indicator--eb3245f4-9267-4257-aa94-928da8c08d92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe19a79-b8be-4a3e-9fbf-5f103e1b9e2a", "sighting_of_ref": "indicator--eb3245f4-9267-4257-aa94-928da8c08d92", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fccae6-cfa8-491e-8dd1-e75324a77599", "sighting_of_ref": "indicator--495f5864-d0d6-4923-a52d-0e8c21898322", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf0e794-3979-4d53-9ae0-74d97deb72ff", "sighting_of_ref": "indicator--7e6d57a6-ea9b-4473-8320-fe9cb5d892b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9d5686-4ecb-4044-b831-e71519fd6449", "sighting_of_ref": "indicator--90a4bc8e-e28b-4ba0-9ecd-5ff91d9d7507", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05a05a4-4fe1-45a0-a3ad-0458034933dd", "sighting_of_ref": "indicator--5412aff0-b202-4444-951a-95b937cff641", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f25f114-88d4-42b7-8ca8-3e744a549c9f", "sighting_of_ref": "indicator--5412aff0-b202-4444-951a-95b937cff641", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566dcb68-afce-496b-8929-1481a5fe4c26", "sighting_of_ref": "indicator--aa06eec9-a14d-4c2c-ac74-9958fa79b958", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d7658c-61d8-48ca-91ea-a1ee8413dfdb", "sighting_of_ref": "indicator--aa06eec9-a14d-4c2c-ac74-9958fa79b958", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abab597a-7ac4-406e-9c19-fe3f344e5175", "sighting_of_ref": "indicator--5a89fc31-72b4-443c-b729-56dc90b8e190", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932fc4fa-0c39-4a15-90b9-d6ce9fa69d9c", "sighting_of_ref": "indicator--f42cb92d-9a7e-4ec3-9aa8-2d03c49d3d25", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef313ac-aacd-489a-a18f-3f8bd0f64063", "sighting_of_ref": "indicator--276b40f1-2fc3-4147-83b0-8e79a49ba9aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b19c47-fa78-4626-9ac4-3b5576756320", "sighting_of_ref": "indicator--276b40f1-2fc3-4147-83b0-8e79a49ba9aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f6dcd0-2576-4902-b443-52221359cced", "sighting_of_ref": "indicator--439576ec-ad7c-41ec-8b3d-c4002875f187", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f9563c-969f-4acd-a57c-ae5bfc238576", "sighting_of_ref": "indicator--439576ec-ad7c-41ec-8b3d-c4002875f187", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f6d0a1-8ccf-437e-a18b-845fb918021a", "sighting_of_ref": "indicator--901b253f-b7bb-4d0f-9960-febcc1f0f1ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c71c20-d0de-4349-b4dc-eae20b94f92d", "sighting_of_ref": "indicator--592682c4-1976-4fb9-b038-2a92d309ea55", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b352def-f77d-429a-a800-04cca6255706", "sighting_of_ref": "indicator--592682c4-1976-4fb9-b038-2a92d309ea55", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb24832d-2b87-45d3-b0f7-81dad7b51ea9", "sighting_of_ref": "indicator--dfee6562-1eae-4f1f-8481-524e186ad4d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d43d09-d1e6-4de9-9161-a32896235fbb", "sighting_of_ref": "indicator--3bae502b-a5fc-4b58-83f5-f2e22a31b1d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76d4699-372f-4b7e-ab2f-d6157361bb0e", "sighting_of_ref": "indicator--87bbe76c-50d1-42d4-b1e9-a989836e3aa5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4feccc-0bd5-4c08-91a2-6c35e1b7490c", "sighting_of_ref": "indicator--1b2cfcbb-1665-4458-a641-47923cb667a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4845acfd-c907-4fd4-a64f-0f7148e346a2", "sighting_of_ref": "indicator--ae579f33-c4df-4582-aa2d-7455d12247ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572b4dbd-ab2a-4d7c-8e97-105694a1edd1", "sighting_of_ref": "indicator--45b2d488-916c-441e-bd82-8e1e7670a5bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b034b753-8b7d-4dee-86fd-be0a7e0075c7", "sighting_of_ref": "indicator--de96c196-0d85-4f73-847c-99c50a29d93a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02276603-4412-4f6f-9350-de2186a03eee", "sighting_of_ref": "indicator--aaba31b2-628a-4a3d-b8ad-a9a1330e057e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f130c5f-6a69-4ba1-9044-601cf5f0b5dc", "sighting_of_ref": "indicator--1951aff7-477f-492a-8d83-aa7e6458ede2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d62e82d-4ae1-4cec-946e-e9fc6b7b7e5a", "sighting_of_ref": "indicator--89d5adf4-1fb5-4184-b8f2-e565e7ed3c84", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a592a469-c550-4142-baa4-7227b8f25507", "sighting_of_ref": "indicator--c721c55f-d0c6-4228-a0f1-73c76840cdc9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511e130b-02d5-45f6-8026-ff0c1cf20d98", "sighting_of_ref": "indicator--e9529070-0ae1-4f8e-98ab-7249e04a00a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f1321a-eb38-45e4-835e-412e7eb2238e", "sighting_of_ref": "indicator--65e51917-d852-48b2-b3fb-8c998ef89ae2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1191aaaf-ef43-4917-9427-d43616495d33", "sighting_of_ref": "indicator--2cc63903-22dd-4d08-895c-1309d92e1807", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87acb528-3f52-48ab-b7dc-ef7988b3b2c3", "sighting_of_ref": "indicator--ed2e9d02-232a-4170-b157-aad90320c571", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ee057e-e5ab-4f2d-9a1f-6290197f96db", "sighting_of_ref": "indicator--e00e91c5-ed94-4a76-8732-c14c0752e7bb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b1cd5c-99bd-4826-9501-5de3642b22f6", "sighting_of_ref": "indicator--3d195115-a603-4214-a931-69e15bac3459", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0c5470-2b59-429a-b4c9-75491be5c520", "sighting_of_ref": "indicator--3ce2cba6-bd8c-4105-9589-cbcd21015643", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641d2385-ab56-436e-b4a7-b254609b5c98", "sighting_of_ref": "indicator--ff138740-8288-45ba-bbdf-50f7d51b4b7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31f3eb3-dfc3-4484-9118-f27cbb9298a2", "sighting_of_ref": "indicator--bd98b2c2-f1c3-4bb1-979a-079b2d5df3d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c155915-5cdb-4241-ac12-797100213104", "sighting_of_ref": "indicator--bd98b2c2-f1c3-4bb1-979a-079b2d5df3d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29385a8-28f8-4d05-b59b-7679d9a7f4b1", "sighting_of_ref": "indicator--3d7adda8-b7a4-4079-9c24-2d328f471f19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b78c0a6-2b9f-4687-ae85-4e2e3ed51416", "sighting_of_ref": "indicator--61905bb7-9efe-4ba8-89cf-b3298d9ed01c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724bc916-9daf-4a64-a8f8-ab5a9fff970c", "sighting_of_ref": "indicator--3440c54a-29ac-4476-a64e-179d899cf456", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf901c7-4e34-41a8-9c58-6a9c13b117b9", "sighting_of_ref": "indicator--cf8b6a9b-9132-41f6-b538-27208d32998f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c69096-08ed-4fac-aafb-1d5152762e61", "sighting_of_ref": "indicator--8299d49e-6326-43c7-b8dd-08c1f0b76d2b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebba5bf1-009f-40b4-9d2f-f92dd1af482b", "sighting_of_ref": "indicator--4f74d875-a5df-40d4-918d-80c8bbf01112", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7fd872-ec8b-4152-84d2-7eb0987feed3", "sighting_of_ref": "indicator--4f74d875-a5df-40d4-918d-80c8bbf01112", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4fbdd7-f639-4f0e-8c2f-59552ec7ccdd", "sighting_of_ref": "indicator--2b1d49cb-deb8-4f75-a8f3-e914a2eb43e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd94f33f-8d50-4b71-88a2-e3770bcc84e2", "sighting_of_ref": "indicator--42142780-7eb6-44b2-9e97-870b4168241f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47995fca-ab10-4687-b174-d9a9d57f1702", "sighting_of_ref": "indicator--0dc4c183-c458-45b6-a5d5-d4c8bc508ffe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf3cc95-641b-4bc6-9838-25b104608d11", "sighting_of_ref": "indicator--feecad3e-f852-4c37-ab5f-7f2d35ba3ab5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351fb8b8-f98f-49d1-930f-2ba473f9d0ab", "sighting_of_ref": "indicator--60177d3e-059c-4900-b7e5-616ef07c8363", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48819c96-1862-4e28-a417-19c48c66180d", "sighting_of_ref": "indicator--023cd9b2-527c-496a-a713-8a316ad0f7a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fb3f44-08a2-4163-8647-ab55a9171b2c", "sighting_of_ref": "indicator--c84ae68a-bc73-44b8-b088-90c8e338a329", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3805968-5c7c-4ed0-bf12-3e6d6f0fcfb9", "sighting_of_ref": "indicator--8f9e42f5-2ef4-41be-882e-13561afdc534", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46869f90-498e-46c4-8ad0-11e95fb3526d", "sighting_of_ref": "indicator--11499785-3f2e-4d17-a265-a5867fb3d283", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedf0eba-26ec-450b-828f-e3086e40e315", "sighting_of_ref": "indicator--5545ba9d-9d03-49b3-ae40-e30bcdedf617", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ebcdc2-cd9f-45af-bccb-65fffc9989fb", "sighting_of_ref": "indicator--8cc76dfc-c332-468b-8196-b87df039613d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a9774b-7c3a-4f2e-803c-f349a05198d4", "sighting_of_ref": "indicator--ceabdce6-d1ac-4fa0-b324-78bb8e2ca263", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39faf3dd-b7ba-4c74-93a8-80fc69635662", "sighting_of_ref": "indicator--82547042-51fc-453c-830c-191bab96dfbc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6637a485-d6c5-49a7-8cde-a190f2d3a0a1", "sighting_of_ref": "indicator--e399fda9-79d1-41bd-bb96-4b58fdf7ce1e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab47060-e1d8-479b-8fe7-5f983130fecc", "sighting_of_ref": "indicator--2060b377-87d9-4ba2-a366-c0c6242b9fd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d081349b-f6ad-4b0a-b496-94dc9b7f7baf", "sighting_of_ref": "indicator--f7319647-8493-42d4-af51-d1ef67396ee1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf605529-cc4b-4002-a63d-7850e95446d3", "sighting_of_ref": "indicator--6c109439-4f2b-41b5-91dc-b3583653d19d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c2426c-5d0e-4bf2-8182-717455935558", "sighting_of_ref": "indicator--19f73712-5d76-49c2-ad87-fe87be89ab2a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bff4b5-d3f8-453f-9b04-1081c3115e6c", "sighting_of_ref": "indicator--19f73712-5d76-49c2-ad87-fe87be89ab2a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1624c5-1954-4ede-a42b-9b9a31d96ce1", "sighting_of_ref": "indicator--11a7cad7-4df7-4ad6-8171-db6d4231fc37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423ca228-7279-4bdd-b246-aa40034d4f48", "sighting_of_ref": "indicator--8b7832e3-91f1-4d76-b7b0-1b6acf25df4d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d5e633-cddf-44c3-9184-8e6f894c1c23", "sighting_of_ref": "indicator--faed6902-5645-4e24-9b68-66a980c52d03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b9ae23-2591-4f00-ab79-5762e5381cad", "sighting_of_ref": "indicator--d18d89fe-e0b2-405f-83bc-db7ee9c089de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df5c933-7183-4e29-bc1a-9218986aa943", "sighting_of_ref": "indicator--772ccbe2-fa29-4e02-9e8c-38d890389883", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c6a3ba-3fff-4685-8702-35a11d890856", "sighting_of_ref": "indicator--bb76ac37-be79-43ae-872c-d34b79316a98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d55e860-9b1f-4fc6-a1df-3c98dce1b881", "sighting_of_ref": "indicator--7a8786e2-9ca0-4567-add6-f4dd822942a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a658a2c9-ad0e-433a-ba57-60cff8074b23", "sighting_of_ref": "indicator--9066babc-ad10-4442-9a14-bc46cd29fec9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94813ec0-aba6-480a-9be3-a1a2c611fe39", "sighting_of_ref": "indicator--6cad22bc-8f9d-46d4-9cd8-0b8c87be34ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661f7489-9b9e-45a5-9e17-776ffb4493d2", "sighting_of_ref": "indicator--1d34e8ac-cdd3-4f7b-a925-9a7aa00c5b66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea01a498-9bd0-489b-9340-df652f78bf80", "sighting_of_ref": "indicator--7fa76c71-6fd5-42ee-95ab-a2ad42a3107b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005bd8f0-a5b9-45a3-955e-7d1c92023fe1", "sighting_of_ref": "indicator--2e599a1a-c98a-4169-9040-bb9eedb971b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d5fa20-a31e-4ba3-b6d8-a8730c9af239", "sighting_of_ref": "indicator--743b9e0e-0db8-4902-b83b-e617c6178d15", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18775205-bb6b-4d13-a48c-215c0efff88a", "sighting_of_ref": "indicator--45fd8cc2-3a29-4f1a-a76f-a124d78cf957", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92d3801-4efa-48bc-b344-1a3431c2cfe2", "sighting_of_ref": "indicator--45fd8cc2-3a29-4f1a-a76f-a124d78cf957", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c076fa2-f9e7-4bdb-9f44-c0a0583bf85e", "sighting_of_ref": "indicator--0d374058-95f9-4d0c-be22-31763b02ebec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53791446-4afa-4315-973c-8913cfd9ddc1", "sighting_of_ref": "indicator--25922090-d1a7-4385-80be-adc5b60f936e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43d7526-cc5b-4a6c-9f69-328ccadd53fb", "sighting_of_ref": "indicator--062443bc-5238-42ce-8f1f-a6f811d2ac27", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8250d8b6-dd30-4071-8c72-8b4a82759520", "sighting_of_ref": "indicator--d3dd1a81-04a7-449d-8d99-780173b99e6d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1d4267-dad0-4120-9264-808da1d08fac", "sighting_of_ref": "indicator--7febdea7-3555-40d3-b653-64141c647aef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb828f1f-0a73-4778-a23c-57b6e03fca3e", "sighting_of_ref": "indicator--ba1b24b7-9f23-41f9-9992-821e99300542", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abc2fc0-2919-4b39-84a5-42aed31f2db9", "sighting_of_ref": "indicator--93dde631-0479-495d-8430-c3ab0b2e934e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067e16e0-2ce8-4031-9bd0-2d0c74c05453", "sighting_of_ref": "indicator--aee838f0-9a74-48bc-9f13-74366e4db576", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b01a479-7fbc-4d38-b400-81bbf8df4292", "sighting_of_ref": "indicator--5d3fb6e4-816d-45e7-8cc8-1d72b7fb68c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa30951-b92f-4c9f-91a9-89932caeb63a", "sighting_of_ref": "indicator--b43c1105-6508-447e-bfd3-0d8ef7c7c534", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ce6b45-5fda-4461-81fc-7e6b7a161dcb", "sighting_of_ref": "indicator--ffd435c4-74f8-47d5-b649-1b6f872ab972", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b9427a-2341-4b52-b6ee-1e3fe51a5e8e", "sighting_of_ref": "indicator--7aefa13d-e844-4f0a-a1b0-ca66a0fd239c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a7f714-426a-40cb-b06e-627d5279ad38", "sighting_of_ref": "indicator--291ec0f2-d6b0-43dd-ac30-e7e748b6ac7e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc354129-79c9-40fa-bb34-871092317758", "sighting_of_ref": "indicator--a787aac9-8224-4caf-82b2-c156fb6c674c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b457d09c-ee2c-4c37-98c2-188146b45815", "sighting_of_ref": "indicator--2af8a6ff-3b80-4aac-8c9d-d20d282b46b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfb3d9e-3a78-4739-8ffe-455db889a419", "sighting_of_ref": "indicator--29ee3ff2-18b6-4e72-b29e-30eddb20fe8e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9838d708-63ed-4246-abce-8633f3093eb1", "sighting_of_ref": "indicator--29ee3ff2-18b6-4e72-b29e-30eddb20fe8e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1b87ca-4016-4a79-96ba-356b85580d7e", "sighting_of_ref": "indicator--127ffad3-e979-430f-acec-92d89cb06f9a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c95b7d-dd88-4c8e-943b-323fcf420363", "sighting_of_ref": "indicator--3ed0ac6e-7f08-4f4f-8ae8-29d1406324c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd902154-bc69-4a89-b75d-9a8e9a082058", "sighting_of_ref": "indicator--baa47ee4-22a2-423b-9cc7-3a9e87da23ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf80374-83f5-4efc-8ace-63b7a53e70fa", "sighting_of_ref": "indicator--058b196c-8b49-4dad-b83a-d55123da7a55", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632c8cc0-9340-4c26-86c7-c924b5569e3d", "sighting_of_ref": "indicator--98765a09-dc1e-413b-9d54-8b0c07e5b800", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cceb00a-45dd-4043-84e9-97f8a9dffd65", "sighting_of_ref": "indicator--4e1bdca1-762a-49d6-be63-419cf3a5f166", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc241f2e-bf31-4c40-8a54-aa580bb55083", "sighting_of_ref": "indicator--160687e0-c0ac-45c3-9003-d2f4da9528b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7345b88f-bdea-4977-a6ec-40949f6ef8df", "sighting_of_ref": "indicator--1ded1b9f-5045-443e-a586-5ee8511c30b3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32d23c6-b4dd-4ecc-9899-cac4dbbb6593", "sighting_of_ref": "indicator--28477e06-4edc-42c8-be80-105c5b7b0e1d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad5375a-31c7-43b9-a557-63ee48ed323b", "sighting_of_ref": "indicator--dcbc4615-2bff-4868-999a-bee610fb21d8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf893875-e1bf-487c-88fa-f2764d5f59a3", "sighting_of_ref": "indicator--dcbc4615-2bff-4868-999a-bee610fb21d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dfcb72-8d74-41e8-b5c8-6ec2d025db07", "sighting_of_ref": "indicator--e29b0e46-aef8-4302-bcce-028508be594e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab5c8a9-68ca-4df3-991f-73c6a575b8bd", "sighting_of_ref": "indicator--26421cb8-9ce7-403b-86e9-c53658bf73da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a0cd0c-17c9-49bc-9e4d-f24531b8cdb6", "sighting_of_ref": "indicator--edb9e999-60e9-4934-9b3b-ca93a1f5863c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0a7ec4-947e-4e45-8dac-76d9e02953ff", "sighting_of_ref": "indicator--0d7b3ee6-ee18-45a5-9a82-8ba45db9d324", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2b347f-e56e-4427-a666-d93bf7523fb7", "sighting_of_ref": "indicator--4c644d6a-309e-49fd-a048-1ef15c45d0ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020723c9-d970-4454-9b38-93039570819a", "sighting_of_ref": "indicator--04d0df42-4633-40c5-989a-59e3d64acf26", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e26e441-b111-4eb4-9fa1-c0cda293765b", "sighting_of_ref": "indicator--04d0df42-4633-40c5-989a-59e3d64acf26", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b7087a-4902-4496-858f-510358d55209", "sighting_of_ref": "indicator--bfdc6108-3879-4eb9-a134-aa6eb8242058", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47f9750-be1a-4f79-a423-e2367d189fd5", "sighting_of_ref": "indicator--aa956144-2423-43f4-bdc6-1f5c67f9df3e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b14e6d2-6081-47c4-ab2b-e6fe90a2e9ce", "sighting_of_ref": "indicator--aa956144-2423-43f4-bdc6-1f5c67f9df3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c025eb0a-f4f1-412b-8ce1-398d2fc4d0ce", "sighting_of_ref": "indicator--541b4187-7656-4711-8622-954332f31efe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28272182-ad76-470d-bff3-3d761e793890", "sighting_of_ref": "indicator--541b4187-7656-4711-8622-954332f31efe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88dc745-4561-4862-a664-2148603623a0", "sighting_of_ref": "indicator--a8dca3a5-9b4f-419c-8f86-dda9d79e1034", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1391d8-d6a8-4c77-9a18-283afd598cb7", "sighting_of_ref": "indicator--126e951c-5a3a-4fab-ae39-0a1a704be7fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9f0c3b-d7a2-4a5f-bf43-60c03bcd4129", "sighting_of_ref": "indicator--f29f37dc-71a4-4c23-ae6d-b58e8e374d60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8fbdac-09f6-4881-8b77-3924a1ab4600", "sighting_of_ref": "indicator--f29f37dc-71a4-4c23-ae6d-b58e8e374d60", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ce9b99-4bbd-45bc-b0ec-67037fcdce37", "sighting_of_ref": "indicator--1112902f-60b4-4c47-8597-8c1fdae45021", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b28b7cd-d6c5-4d1e-8f9d-013a83c26d3a", "sighting_of_ref": "indicator--1112902f-60b4-4c47-8597-8c1fdae45021", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcd2baf-6ca4-4443-8d56-ca10e9e98a97", "sighting_of_ref": "indicator--29a3a4f8-aa4b-4690-be25-b75fda783ef4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2c7deb-a3d7-4c39-a1df-2343c5b56d30", "sighting_of_ref": "indicator--29a3a4f8-aa4b-4690-be25-b75fda783ef4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3272de5-5531-4196-8b63-45498062c0b5", "sighting_of_ref": "indicator--30f48105-0c76-4375-b87e-511af5ea24e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67949223-d7f5-44a5-b21e-ebd0f58a1f56", "sighting_of_ref": "indicator--1092bfb4-02fe-4915-997f-0639147e5545", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd199f95-f9aa-4917-b5fb-b6ab550df18e", "sighting_of_ref": "indicator--ce06a69d-caf6-4d87-957a-e6fa7e46cd09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2f0ade-c648-4c18-b159-416f17a14f04", "sighting_of_ref": "indicator--ce06a69d-caf6-4d87-957a-e6fa7e46cd09", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c0d04a-2cd9-4902-ac22-a1ca6b647a51", "sighting_of_ref": "indicator--c747b3de-5a0c-48bb-a8a9-57e77a42f539", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf72634-2659-460c-94bf-fc43f89184b8", "sighting_of_ref": "indicator--d48ffa6c-affc-45ee-867e-62b1e2f56803", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb174743-0cc7-45b6-94c9-59cfcb49a5c1", "sighting_of_ref": "indicator--9481aa2e-4192-4b7c-9597-5fdc0e461d52", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0698b1-3055-4157-804b-00ab63e7339a", "sighting_of_ref": "indicator--a63ee2dd-eaf5-4ee4-aae6-83e594c8b945", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746006b2-c3b6-48eb-971f-721bc1a9170e", "sighting_of_ref": "indicator--3b62fd4e-1b28-4f86-ae5e-9d5dcf7ac1d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2d21bb-98db-41f0-bb42-2d6efc7db652", "sighting_of_ref": "indicator--f82b8c62-4724-434d-aed8-f42cb082dd73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4927591-cd99-4e1f-be62-625a085e270d", "sighting_of_ref": "indicator--0fed53b4-ee34-4e7a-9b85-750cea651195", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99910e05-557d-4c23-80e9-d875d85d319f", "sighting_of_ref": "indicator--194b494f-4591-41c4-9d4f-947c3cef0407", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41868ded-3576-4643-a103-426faf4f7deb", "sighting_of_ref": "indicator--0964f709-7451-4099-a11b-27089e0e65ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e0805f-ba02-40d9-b2f6-6510cf4f6452", "sighting_of_ref": "indicator--92917ec8-69ff-45b7-a332-d50530835a44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e0bbb8-22e9-448d-893c-d80ab7d7b1ad", "sighting_of_ref": "indicator--3c127921-c92b-4143-b639-89c0dc78987a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aada3f3-63fb-4582-b7ec-76afeb4385fa", "sighting_of_ref": "indicator--eac1d04d-74bd-4d85-ab93-791812ac432a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b45573-a4a1-4ce7-adf0-00e2eee41798", "sighting_of_ref": "indicator--b1cc97bd-709d-4e93-af5b-f1b972d52b61", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb888e0d-c661-4226-b3fe-8f5e40ad54c0", "sighting_of_ref": "indicator--8c09a6d5-23c6-4abd-b9a4-5af2143ca179", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf9118d-8f53-44d1-aa19-afb0dfaf0375", "sighting_of_ref": "indicator--681a6b21-0b6c-4945-9997-c585587b5900", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed456108-7e80-40db-aabc-dee19c1117e9", "sighting_of_ref": "indicator--4b7210c9-e34c-44c6-a844-38c13ac9489b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07079259-294a-410f-a0f0-6260e5ecf1f5", "sighting_of_ref": "indicator--ef873af7-b3c9-4e42-84f2-cbcb3e35f4f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7b709c-8393-4bf9-94eb-b3436b94f4d6", "sighting_of_ref": "indicator--212ded4f-a0b2-4366-98ca-8b1073cdbdd4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cc42c7-5646-4e8a-8bf9-db8a2f8d5a79", "sighting_of_ref": "indicator--d5d6be62-5b12-4980-90aa-365630b91a13", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb750de-8321-4ae9-b4bd-fd98250c5dfb", "sighting_of_ref": "indicator--c16e2d52-bed4-4437-8179-e9d5f5a1f7c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b55c0f-8f25-44e5-bbce-26d1b8ed9db8", "sighting_of_ref": "indicator--c16e2d52-bed4-4437-8179-e9d5f5a1f7c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bb71dd-79d5-40ce-a957-a71277111363", "sighting_of_ref": "indicator--4ee984da-41b1-4ec8-aefa-3a87b044593d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a1477c-dde9-4014-afcc-eea28c321e8d", "sighting_of_ref": "indicator--8b2c313c-4890-4a6b-9429-3042aa573ef1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d409d7f-df1e-4688-b709-36b5a9258253", "sighting_of_ref": "indicator--ad7a2a9f-c169-485c-84d7-4d6e9ed39bf1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80419140-e7d1-4b04-b640-5185b544d796", "sighting_of_ref": "indicator--c21b0b60-cf58-478d-a561-73eaa94233ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a794ca1d-3c32-4b01-8f74-537c33e2d08d", "sighting_of_ref": "indicator--1360a7a5-8279-4dab-9e4a-f2101cf268c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb2ed2e-ce7e-41b1-986e-1e6a62a30d08", "sighting_of_ref": "indicator--be8ce347-857b-4be3-9bdc-2a87a02ece90", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78346362-3d20-4f81-b7fa-68b7792a8640", "sighting_of_ref": "indicator--77f42f88-a98c-4e33-8d62-246e8a46f3d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433fb986-0739-425b-aba9-34cc82ce559c", "sighting_of_ref": "indicator--47a9601f-4eaa-41c8-9f50-2d9481ac9efa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62c851a-daa1-449c-9710-c4bb6df405eb", "sighting_of_ref": "indicator--e2871d01-ef6c-4a28-8877-384a4a742798", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f548605-27b6-4c86-b20d-0f8ff3dc95fe", "sighting_of_ref": "indicator--5156d732-d9f2-4e4b-a5fe-30b7c970ec80", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e50558-ccf3-4086-b77a-cda169eab55a", "sighting_of_ref": "indicator--7c7239eb-cdc6-4d76-b426-2cc22c82ee8b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a146092-2788-47a0-ab88-a00cfaa6b9ef", "sighting_of_ref": "indicator--7c7239eb-cdc6-4d76-b426-2cc22c82ee8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d88c68-dc2d-44d7-b298-2d1e1dc99461", "sighting_of_ref": "indicator--4a53635e-a8ab-4e11-b74c-cbcf9eb657fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbe6ae6-eec4-493b-989a-d22d0fec1cc7", "sighting_of_ref": "indicator--9da05e9d-e6f6-47fb-a11a-ceadacf4483d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe145cca-99c0-41a1-8ee8-5926f132f1fa", "sighting_of_ref": "indicator--ae81cbb3-04ad-4786-92fe-72b41e18538d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9480c8-7375-4f17-8060-9f8d265da983", "sighting_of_ref": "indicator--ae81cbb3-04ad-4786-92fe-72b41e18538d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272f855b-5ce8-4d94-8977-29ae07561210", "sighting_of_ref": "indicator--40a13c73-c05d-44fd-bf24-34506eca19f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8564e36-64b7-4366-8264-e17e6d80b1a3", "sighting_of_ref": "indicator--d6e1d9ff-3c9a-4a87-a437-9c18ae7849e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d200ad-033e-409b-b5ac-70fc22319461", "sighting_of_ref": "indicator--d1d3ed8a-1701-4858-94bf-41353431be5c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9d9d71-1361-4a4a-b29c-b8488fd290fc", "sighting_of_ref": "indicator--2b545bdf-2b80-4ce4-88b1-4803858ebe7d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df397a4e-a790-4dc1-8ba0-438052fe2b1e", "sighting_of_ref": "indicator--cb1942a0-16e6-40ca-b9a6-c9f6adbe7fa2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe29c39-fa01-4090-98e0-ef58b0599567", "sighting_of_ref": "indicator--82d84f8a-76cb-46fa-b047-5f960ef42596", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849723fe-b836-424d-afc2-d5ca2e7e1d5c", "sighting_of_ref": "indicator--c7944070-f58d-4dbc-8ba5-f33e3cb2fb77", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdb1e72-5490-48f7-ae5a-b7a6cd55c57a", "sighting_of_ref": "indicator--77b2529c-beea-4fc3-a32a-23eee44823d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10edeed-7966-486e-9e5d-fdc7ac8440f7", "sighting_of_ref": "indicator--fd5f65a0-fc27-4458-81bd-8ffe994dcdad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c16599-2408-4e6b-a359-3ef57c9cdfc0", "sighting_of_ref": "indicator--2c9218a8-5b9e-495a-8c5f-cfd58b1fe8de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf79a86-6753-409c-b20a-a8445d48092c", "sighting_of_ref": "indicator--2c9218a8-5b9e-495a-8c5f-cfd58b1fe8de", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c8eaf2-c459-447d-b2a2-2c6f52975b2c", "sighting_of_ref": "indicator--2bee2444-c45e-4590-8711-0242a7380977", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf59c90-5f4a-473e-8236-0a6d44f6f7b2", "sighting_of_ref": "indicator--28225b22-2677-4684-8b9b-b9e23cd802fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4705da4c-7088-44a6-90ea-b4c3bdca38ba", "sighting_of_ref": "indicator--28225b22-2677-4684-8b9b-b9e23cd802fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f80e1af-c3a1-4499-a8e1-f1bbe328df14", "sighting_of_ref": "indicator--bbbb3f20-93c8-4f7f-9287-6e389098291c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88f577e-7c4e-40cf-9c1d-9abe29b0dabb", "sighting_of_ref": "indicator--5e7d7090-c518-4c64-a626-ec28e237dad4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ac5b66-48de-4332-a6b9-570e2d74533e", "sighting_of_ref": "indicator--5e7d7090-c518-4c64-a626-ec28e237dad4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ded6fa-86de-4ab1-b748-37cdef6fef49", "sighting_of_ref": "indicator--60ab6b00-6906-4440-99b7-70ba67ea64c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4364680-5209-42f4-ba32-2287c645f0f3", "sighting_of_ref": "indicator--a5fed1f0-2d34-4f8a-9b6f-967bfb5d8b4d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c2a941-8428-4c61-875c-45ff841f002c", "sighting_of_ref": "indicator--1204bce8-9bbf-4007-bb90-93bf2d910c0e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b7c21c-7c57-4b8e-b43c-81c98b62b20e", "sighting_of_ref": "indicator--6bd63385-25cf-4772-85c1-219404bae730", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed92a6ae-621d-4451-a25f-0f294b1e9a1b", "sighting_of_ref": "indicator--6bd63385-25cf-4772-85c1-219404bae730", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c08a23b-7771-4e67-8f3b-40c0b6d966b8", "sighting_of_ref": "indicator--a68eb1a6-7082-47e4-8d91-3e16bc3391af", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a035b3-908a-4bb3-ba5e-b5f6470c0b3b", "sighting_of_ref": "indicator--a68eb1a6-7082-47e4-8d91-3e16bc3391af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb880575-a4aa-40e8-acb5-77272e1a98bb", "sighting_of_ref": "indicator--b5fa08ca-30c9-41c3-b6c4-ac3ee7ee5055", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b7264d-4715-42d1-9643-2281dce1e63a", "sighting_of_ref": "indicator--f3badfc0-3deb-4cf0-9463-7a2c6acea63c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48919407-7d2e-43d3-a778-3bae64497b90", "sighting_of_ref": "indicator--f3badfc0-3deb-4cf0-9463-7a2c6acea63c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a74b37-83e9-43f6-b9b2-b1559ca4b77d", "sighting_of_ref": "indicator--82830e09-9121-48dd-94d1-211c4e43acb3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4ff85a-b880-4054-931a-4f8e9a6b6a23", "sighting_of_ref": "indicator--48673631-4f77-4d6a-bcdb-2d7d501aefd5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a4d3f9-c49f-48b4-925d-dada1a21ded8", "sighting_of_ref": "indicator--24108774-4222-476f-8e21-52b70497f31e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f89c07b-c513-434f-9cb1-a51fc0dcf906", "sighting_of_ref": "indicator--5534fec6-41f4-49a0-84bd-8c17b2f91656", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538adb51-d02f-4389-87fe-5609990e8316", "sighting_of_ref": "indicator--6fcda091-2d88-4431-b772-25e946e5c3d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4352c893-b210-4c38-8d5b-6a154db07921", "sighting_of_ref": "indicator--6fcda091-2d88-4431-b772-25e946e5c3d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6c9755-215e-4892-ab00-0321c2654c77", "sighting_of_ref": "indicator--d1228477-b3dc-4788-88c0-64990ac42b86", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dff934-9208-4f59-b1d4-6c2c673c08f0", "sighting_of_ref": "indicator--1254c2ef-488d-4f2c-9272-bc6e09646106", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db42dd08-095f-4d4e-9a69-b8973f722c80", "sighting_of_ref": "indicator--1254c2ef-488d-4f2c-9272-bc6e09646106", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d761d5-9bee-44f0-918f-6b5b34bbe154", "sighting_of_ref": "indicator--5bc91f4c-7eda-4a48-8cde-0fd263cd0ec1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f1e823-0f45-499a-aa19-813f1fd8d9fb", "sighting_of_ref": "indicator--5bc91f4c-7eda-4a48-8cde-0fd263cd0ec1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70cf8a8-1bc0-42e9-8ef5-fdca44b0f14c", "sighting_of_ref": "indicator--2ebf68fd-d86b-4fe7-b6c5-399f1dbe7fc1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e662211e-4fe9-47e8-a9e9-8fc219d39519", "sighting_of_ref": "indicator--47c2ab77-dff4-4362-9b28-6579ecd2206f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b175bd33-9ad9-4f5f-a846-244781db8d1b", "sighting_of_ref": "indicator--696a1045-2bcc-437d-9391-10b1fc95e020", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21a0829-b3be-4959-a53f-5f9e7b57f869", "sighting_of_ref": "indicator--bf3a6e88-9021-4975-8604-d2553e6941ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aad7dc2-14a4-4aa5-b7b0-4b5e762d8c4d", "sighting_of_ref": "indicator--bf3a6e88-9021-4975-8604-d2553e6941ca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bccc24c-564e-46bb-8445-d078956189a0", "sighting_of_ref": "indicator--ea805997-59ae-4879-a7be-81aa742208c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0df1b6-a05c-4e41-a2d8-db7b01cfe0c8", "sighting_of_ref": "indicator--0f298125-e97a-4d0f-b5e0-fe6d5543d6b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3616d44-2080-4593-a000-f8ae54791fa4", "sighting_of_ref": "indicator--fafa644e-69fe-4ac7-bf45-158d5f729a99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeea7c33-674d-40c4-99f7-6e23bb85e8f0", "sighting_of_ref": "indicator--02a68285-a0ef-48c6-8309-202052cd0cf0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e01460-d53e-4773-87a0-f6cb1d4e4d98", "sighting_of_ref": "indicator--77ff0814-9347-49ca-97de-be57924bcca0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a9d8a7-eb86-4a1c-96d2-ec59f15829b7", "sighting_of_ref": "indicator--7802d27c-162f-47ef-8bca-37589d9d69ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7291142f-3bf2-49c6-9c12-9a7b376a65e9", "sighting_of_ref": "indicator--67a18d6b-dfce-4fb1-83e3-051aa71b54f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8a4aac-766a-4443-b21a-1b598698167a", "sighting_of_ref": "indicator--e80c277c-56c0-46d0-a085-c78a5308725d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b98c90a-0ea1-4b67-a56a-ff4227b1c265", "sighting_of_ref": "indicator--e80c277c-56c0-46d0-a085-c78a5308725d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afb1c66-5b2e-49bc-865a-6c6619ed397f", "sighting_of_ref": "indicator--dbb3ae59-6c55-40ab-9290-4d67d942e275", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881b6aec-e3d4-46c0-8db8-3d956687864a", "sighting_of_ref": "indicator--d3ee6cc0-9213-4600-93d7-ab1aa61a0e47", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0c840c-5e5b-4bb3-901c-3c7320b61361", "sighting_of_ref": "indicator--d3ee6cc0-9213-4600-93d7-ab1aa61a0e47", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7d475d-a147-4fec-a318-79fcb68d47b6", "sighting_of_ref": "indicator--5c4628e4-d4d1-4b6b-bf41-9fd380cce7ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04953a1b-6bde-404d-a4b9-943d7274b3c6", "sighting_of_ref": "indicator--27fbef03-8eb9-499e-838a-aa8ea8edf9e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e051ee29-1d69-438c-aa46-24babb747630", "sighting_of_ref": "indicator--9c9aab05-ee42-476d-b1ff-6db6d87e465b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c76cf0-74a7-4abf-96f5-2c74f3ff56aa", "sighting_of_ref": "indicator--e01cf192-9f06-4a0d-8c76-1172c5a6fd10", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7323e8c3-4396-41f5-89b2-b32e62ecfed8", "sighting_of_ref": "indicator--608f37e2-412c-45ad-b111-4ca5450addec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bd4538-37c8-4a11-949f-6bc1164bb876", "sighting_of_ref": "indicator--37ca1e5a-dcb8-4b24-97d2-c9746fed3294", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81efb00-ac5f-432d-bedb-64ffe57b44e4", "sighting_of_ref": "indicator--3ca1969c-bc33-4408-8c85-875ca884fe73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0de7608-032b-406d-97c3-688504842848", "sighting_of_ref": "indicator--3c917bf5-db03-4d32-982a-3a16662b9f9a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da897224-1618-44f3-a9fd-726efda29c14", "sighting_of_ref": "indicator--9cd7657c-2c3f-4f76-ac1f-736a6adc62ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcd289e-5c71-42bb-b96a-5434f75f0701", "sighting_of_ref": "indicator--0fe5fc60-6854-4b46-9b06-ea64f26a1f15", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7950d0-c8ad-474c-a3ef-0d4e962b4381", "sighting_of_ref": "indicator--e1e7a76f-e55d-4fc1-b76f-d6a1f1665d7d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29ec6e2-987d-4e2a-80c7-a34cfc9d717c", "sighting_of_ref": "indicator--e1e7a76f-e55d-4fc1-b76f-d6a1f1665d7d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab0e391-6e26-40c6-a6e9-8914697dccf0", "sighting_of_ref": "indicator--7904ce75-1d39-4ff2-aa79-6e898ab005c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c17e00-2703-4c8b-a18b-8e70d908a2e6", "sighting_of_ref": "indicator--80944d74-7227-40cd-a5da-18d3d78b6a98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de74eac-b1a3-4024-8ba2-1d6661aac419", "sighting_of_ref": "indicator--393cee19-6774-4791-8b5d-67e788f9bb7f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879a24ab-e2ac-4c1a-bfd3-d99843e8dc40", "sighting_of_ref": "indicator--cecf064e-e54b-4d33-9bdc-e1ff1e1d78a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999d93b8-a9b9-49d5-a86e-29d1e841ce14", "sighting_of_ref": "indicator--2fa90be5-6003-4972-9b8f-c25df7cf5ffb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661480c4-6ac1-42b1-bddb-84c6ac6fd780", "sighting_of_ref": "indicator--cc117815-f19f-480d-ad44-9819672426d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde7ab01-40a5-44d5-98a1-40fd2d67ae13", "sighting_of_ref": "indicator--99fee2ef-0ee8-4df3-8b8c-aecfeb1702fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d7905c-fedb-4e2b-a74f-87a14f975d8b", "sighting_of_ref": "indicator--99fee2ef-0ee8-4df3-8b8c-aecfeb1702fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ba91f0-a29c-44c9-b385-909d6345c8fb", "sighting_of_ref": "indicator--7bd936a9-fa3e-4b93-9b35-62a1404548c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc90d74-6756-4e14-82ad-5b4e2a645104", "sighting_of_ref": "indicator--7bd936a9-fa3e-4b93-9b35-62a1404548c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123b9403-2e3b-41c1-a855-d2767eb2144d", "sighting_of_ref": "indicator--c9968adc-6ad9-480a-b78f-7db79ac3c3b7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c32c96f-b486-4e37-b906-cea3956b1dec", "sighting_of_ref": "indicator--c9968adc-6ad9-480a-b78f-7db79ac3c3b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbbdb74-3210-4224-8f1b-1826e9ca4e86", "sighting_of_ref": "indicator--e58ce5ce-f7b4-40e4-a49e-8a5d2ba486bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3a100d-da1f-4f6e-a60c-ece4fcb94778", "sighting_of_ref": "indicator--add57729-81d5-4a10-864e-cecc6d25e892", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bca627-b858-49d6-b4cb-73ea09deb084", "sighting_of_ref": "indicator--378bed0d-18bb-4f51-99d1-4cfa6c13810e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418528c0-d628-4379-a5b4-dfc807c17ddb", "sighting_of_ref": "indicator--b07cd327-0e53-469b-9d36-860d64b1dc43", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f811857b-03f5-4711-80fe-3898ff2670ae", "sighting_of_ref": "indicator--c90822dc-8487-4ee3-85d4-a9f08025f220", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e0f722-fe75-48fb-b056-e0752e36b71e", "sighting_of_ref": "indicator--ad95c877-187e-40a7-95eb-0a410f093c3b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f8a0f6-7918-4578-a2f2-254e45d49472", "sighting_of_ref": "indicator--9295eb0a-2012-4020-ae41-3bea9896fddc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4719c78-1982-4a63-8975-5ed78aa73387", "sighting_of_ref": "indicator--6b767244-7a73-4796-9348-0fef7652a00e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749f92fa-f981-4f22-96ad-103fbc312089", "sighting_of_ref": "indicator--fc1bf0a7-a11a-41c2-8eac-eee0b64c3223", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37155fe2-7a28-4e4f-b3a6-9d8b9dd407a5", "sighting_of_ref": "indicator--15280520-cd5c-4e40-a5cb-9faf133f002d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0319c8a0-5e92-4bf6-893f-d9b805903364", "sighting_of_ref": "indicator--5dedb696-db2c-42a8-b3fc-f154d435e06c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5357e6-5ab5-493d-8380-ab2534613c8c", "sighting_of_ref": "indicator--c5fa42e0-af8b-45af-8469-06d069d836b3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cb07ad-34c7-4cbe-8f18-052265abbfa1", "sighting_of_ref": "indicator--e1ba8451-6706-4f63-8eae-d9934ee3b58d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b818bf-fbbb-4648-9582-95e55c316055", "sighting_of_ref": "indicator--eb113189-45b4-4797-ac84-b6e64d397a81", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5508be9c-d97f-4f15-a6b6-84fa91b0ac7b", "sighting_of_ref": "indicator--eb113189-45b4-4797-ac84-b6e64d397a81", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d4c317-cf35-413b-bac7-f9b0765a52e5", "sighting_of_ref": "indicator--6415fb5e-cd70-4cfb-828a-3a81e3907dfd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efca98e5-3cd1-4a0b-813e-ca306f90b272", "sighting_of_ref": "indicator--32a677d2-9ad1-49ca-9278-83af91f0e638", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b70ede1-db0e-468f-b0e5-7870875d0c5a", "sighting_of_ref": "indicator--571e30fd-f1d1-43e2-a750-ad10d2501dda", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91eae803-4672-4830-9a7d-f4c376d9095f", "sighting_of_ref": "indicator--a0e52f95-62ec-4dab-879b-34020773945a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f87e8aa-cade-4808-a0b3-5f6f0a7c74c2", "sighting_of_ref": "indicator--17fed0ea-65ef-48ad-81f3-afbe3aaa8392", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f295474-5d84-4eb4-8db1-1a904cea1415", "sighting_of_ref": "indicator--9552078f-b08b-4d4d-8700-a8ddef63ff98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89dca1b-b5d3-45dd-802b-cf696cf42aee", "sighting_of_ref": "indicator--c01964a1-5920-4540-b109-31f03b90cc01", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6e7368-50a6-4900-8c51-ed1c49d35b98", "sighting_of_ref": "indicator--f26eac74-17d5-46d8-8e44-80d45f50de2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f18753-a47b-4aa4-b522-cbfd32e16149", "sighting_of_ref": "indicator--888fe1dc-fba1-4f3c-85e0-645a3fb264c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd24a2f-5b60-4336-ad24-e7c505aaa8dc", "sighting_of_ref": "indicator--6ead6c6f-90b1-4b19-afd2-925900703c36", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51ef279-566c-4978-b434-d0653824de6f", "sighting_of_ref": "indicator--c8eeb6ff-8d87-46ba-85bc-4ee33a7fe496", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8939882d-d355-400d-bdfe-b74ef8446fd9", "sighting_of_ref": "indicator--4c4d2dfe-9845-4b83-9c50-8dea11ebf71e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8be00bc-5a86-429f-b2b5-994e9a95bf84", "sighting_of_ref": "indicator--a6b822aa-515c-44f5-b499-6807a4595117", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d814c9d1-e051-4e29-b5f2-cbfd97482a69", "sighting_of_ref": "indicator--9e7ece28-2780-488d-8feb-8cde46014e3e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe856fd-331b-4615-8d15-9280ed72e64e", "sighting_of_ref": "indicator--9e7ece28-2780-488d-8feb-8cde46014e3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64836306-c9ef-40a3-bec4-75371b7ebbcf", "sighting_of_ref": "indicator--797d5b0b-31f7-45e7-a045-682742e794c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b92bf8c-d3b4-40d7-a67a-2c38145061e8", "sighting_of_ref": "indicator--6143b48f-f815-4001-9eda-0136a9faa54f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0d420d-98f4-4d60-9c9e-386345d5038d", "sighting_of_ref": "indicator--31ced4da-2173-4d8a-ae1d-9719bea4b3ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f9cee3-c344-40f7-8985-6c7095829c7e", "sighting_of_ref": "indicator--0ad73751-4e77-432a-af49-249e717c83d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d0a9ae-ab7c-4899-8f46-cab2eaaecce4", "sighting_of_ref": "indicator--37c98bcb-d882-49ea-a608-49ab58556443", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5accfc9-0eda-4a17-9e7d-6f93419305e5", "sighting_of_ref": "indicator--fd723125-c235-42de-a97e-09f990e144df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847834bb-4697-43dd-9baa-faa49abe60e5", "sighting_of_ref": "indicator--08c18d13-d4f4-4b5c-b1fd-49c27e752c22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caeaafd-9b30-453f-9e42-29aaca3b2add", "sighting_of_ref": "indicator--272bf708-f612-42a3-87e4-d7de679d39b3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ddc346-c492-459c-b81d-04aaf9a920ee", "sighting_of_ref": "indicator--20736624-892b-4180-b93f-4ffafeaf8b9a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60df44cd-f8b0-4f92-a278-abba5b396320", "sighting_of_ref": "indicator--20736624-892b-4180-b93f-4ffafeaf8b9a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9f8ee8-dc4a-49d1-8356-5d5bcd0cf01e", "sighting_of_ref": "indicator--af8fc226-a128-45cd-ba4d-9677a431d5f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb72fe3-5907-4fc0-bb81-1b3137c9decb", "sighting_of_ref": "indicator--87c6f12a-3d80-44c6-82ae-3229147fe5aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2b8a57-1487-4817-9320-664f9d7f1db9", "sighting_of_ref": "indicator--1abd7aa8-0ff6-4ca3-a512-3edbd65aa8b3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f745e6-fcd2-401f-8062-0d827da2fbdd", "sighting_of_ref": "indicator--727f7f0a-c347-4a49-a7f2-0103fe515cb5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559b11cb-f360-4d4a-91d8-978650ced350", "sighting_of_ref": "indicator--909dbf06-5d07-4b08-9c2b-579a1a3bc378", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a70d8d-fa74-49bd-8b79-82fc330c435d", "sighting_of_ref": "indicator--f43e7d50-fdc9-41a2-a6c2-218ceadef47a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b26646-d8d9-4561-a354-6d627d38c17e", "sighting_of_ref": "indicator--f43e7d50-fdc9-41a2-a6c2-218ceadef47a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948f5e63-ceb3-40e1-a03a-5b227e566b0f", "sighting_of_ref": "indicator--b0ee672f-801e-4f0e-a134-0bb26abe7ed1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82875198-70a6-4583-8615-57430285499c", "sighting_of_ref": "indicator--b252f0de-7046-4357-b94f-010b7681f2f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f03016-1a15-4f0e-beec-8aff02339ad6", "sighting_of_ref": "indicator--857008bd-77ae-49c5-8470-25956d2f3b2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dfb1e0-7d54-4d9c-a284-f116351236bf", "sighting_of_ref": "indicator--d82ec734-c8e0-415f-80bf-c8bfadece1f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c80754-f5a4-4330-b9e8-08ca244973e0", "sighting_of_ref": "indicator--68ed20b5-d403-42e4-972f-2247ac578326", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15dcc6b-6fb6-415a-9a34-a24cfb927a4e", "sighting_of_ref": "indicator--68ed20b5-d403-42e4-972f-2247ac578326", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd6736c-484f-4d1b-a4b6-5d6e09d9064d", "sighting_of_ref": "indicator--7d0e2563-1cfc-441e-8f7f-2f2eef495a55", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a280a2-7700-4d00-9c49-c9f77f2839e3", "sighting_of_ref": "indicator--7d0e2563-1cfc-441e-8f7f-2f2eef495a55", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79274598-24f4-4056-b3a3-fc4b72bd76eb", "sighting_of_ref": "indicator--278004ce-fc1f-40ce-99d5-152306ec0164", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7789224a-1bb6-4f84-8324-cf137dc3c45c", "sighting_of_ref": "indicator--3618d876-48af-451f-a42b-f4304fd98080", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79bbf9a-0cdd-432c-bf78-e49a80a55909", "sighting_of_ref": "indicator--3618d876-48af-451f-a42b-f4304fd98080", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33104cfa-a9ad-4b71-9d46-04eefc04f1b4", "sighting_of_ref": "indicator--e180659f-31c1-4b92-9a8a-eb6d1c0d0dbd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7441f430-1b4a-4e6f-926c-84954702e59b", "sighting_of_ref": "indicator--e180659f-31c1-4b92-9a8a-eb6d1c0d0dbd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadd348b-0e02-404b-88de-b9c3f16c4b28", "sighting_of_ref": "indicator--38228047-fcc9-431e-8e42-cf552f4e43c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6445010-ff1f-4d68-8289-bd0229e50763", "sighting_of_ref": "indicator--b6d4ad95-d036-4633-b2db-850b50fabcf7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead30b56-e975-4b27-803e-be09a30e0be0", "sighting_of_ref": "indicator--b6d4ad95-d036-4633-b2db-850b50fabcf7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9788f2f0-61ea-4eea-aad4-79336d51730f", "sighting_of_ref": "indicator--f83b724c-fd27-4d14-abb9-acd611b6691f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413682f7-01d9-4ee3-a655-2cfb7e5a9696", "sighting_of_ref": "indicator--eab3f656-0938-44a0-8f10-f2056888987d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989e36e0-164d-42bc-a974-37e9c7acec3a", "sighting_of_ref": "indicator--e0c03a34-4eb4-46fd-99a6-328df8a772d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd74920-db07-421a-8454-330fbe19fb99", "sighting_of_ref": "indicator--9c01afbd-e491-4f6d-9903-34e4796333d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395f1629-be64-432b-bf9a-bac4973f1f64", "sighting_of_ref": "indicator--45d1dd6e-2030-486f-9f74-fb093796f6ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc364b0-7a75-4bf6-bae6-e9c1c5eaef54", "sighting_of_ref": "indicator--0f5781f6-5660-4a31-bce9-279cf81b9162", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddfd9a1-499a-42d7-8af6-a1215297c819", "sighting_of_ref": "indicator--3a7f89b7-0c63-4c9c-9858-c713d7d15465", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd11ebd-b6de-4844-823e-7bb1e5c7991d", "sighting_of_ref": "indicator--e22e2457-c410-4c76-9a79-15f1c0a7db98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bc2a75-3f00-441b-becf-dc916b4ec2a0", "sighting_of_ref": "indicator--5371115c-5c9b-415e-bd63-976a68334d47", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fac5f8-2915-41b3-a0a5-fd1058a720b3", "sighting_of_ref": "indicator--5709dd1f-d18a-4361-9d0b-5841b6e09a1e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fb0e32-c865-4f96-9498-2095bd67aa06", "sighting_of_ref": "indicator--f95a4612-7089-49a8-92fb-1100691b4c7d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e520008-2a35-41fb-b506-bec7e8e51938", "sighting_of_ref": "indicator--7779ddc3-074a-417e-9e41-f12facdaff00", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf3b81d-a27f-4606-a767-fbed00cd4533", "sighting_of_ref": "indicator--5dd5f905-4d2e-485e-986f-56b255936745", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fb6b04-a6dd-465c-8e37-e097d7099c98", "sighting_of_ref": "indicator--1dc6f419-a43c-43cb-adc3-2f3734093d04", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24942fd-1699-4b02-9b4f-3e8cffb07caf", "sighting_of_ref": "indicator--1dc6f419-a43c-43cb-adc3-2f3734093d04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db78cec4-1dd3-4cb3-9e7d-2965156bde53", "sighting_of_ref": "indicator--ba9f9a40-0ee1-491c-8690-c717b7210456", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018d192c-6a9c-4e64-bf67-9fde5ac52b8a", "sighting_of_ref": "indicator--60b31a56-cf62-4be1-b774-3313f21510d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b8a892-58f3-4bb7-8a1d-2027119157b9", "sighting_of_ref": "indicator--944951b4-6fa7-4f69-857e-44b11b0803dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca548062-e198-4e99-872f-040809de7c96", "sighting_of_ref": "indicator--0ad23123-1b01-4923-a45e-4340770a5635", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772259a4-3e27-4f3e-bdc5-2e5f86d62f6d", "sighting_of_ref": "indicator--6ac81e32-da8a-4316-8169-12a68efb0d59", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00092438-d3a8-497f-9fa6-2e85433fc8dd", "sighting_of_ref": "indicator--1862dabc-805c-4fd3-85a3-676889a7abce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cff74e-b33d-4017-8e91-d1f29c64023e", "sighting_of_ref": "indicator--1862dabc-805c-4fd3-85a3-676889a7abce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1034f2a-0f95-4694-8422-63a7f4adb26a", "sighting_of_ref": "indicator--b0bb1301-8d8e-49d7-a1c3-9d62e138f665", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58974e8-502f-43c9-b0ef-5903e37b0d54", "sighting_of_ref": "indicator--b26aa80a-c1e8-4712-8ad0-fe3f733e3147", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6da9bb-ecb3-49b1-847e-3fa063db6f3e", "sighting_of_ref": "indicator--9996110c-3328-4661-9816-fc430c74eae4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa3960c-7ac5-4a4b-972f-55b64dbab255", "sighting_of_ref": "indicator--5614e772-8150-42b4-b088-5d99f79d8868", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4552cf7-f7f3-4788-a57d-b96dc8387e68", "sighting_of_ref": "indicator--44b1e1f3-512a-42d7-a021-1f66efaf1c9a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7052e9b4-1c17-4066-87c4-1899af90c448", "sighting_of_ref": "indicator--9492ceff-60bb-4889-8e88-2f9bba9a9e6b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a60aa5a-e186-498f-af6b-ef8cfc3cb5ac", "sighting_of_ref": "indicator--f3de0580-5b76-4da3-a09e-de29bc7591e4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029f1e0c-f8ca-4b06-b55b-a3e1fd234cc7", "sighting_of_ref": "indicator--058f0c4d-c7b4-4939-9876-184b6f34b732", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221816c1-32a0-48de-8fc6-bc9c94463de3", "sighting_of_ref": "indicator--058f0c4d-c7b4-4939-9876-184b6f34b732", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0056a46a-c8c4-4f1c-8617-6f9e101ca3cf", "sighting_of_ref": "indicator--a4986d74-d61f-40bf-aaaf-9418eecde6b0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a59160-61cd-483f-84b4-c2b915e9a341", "sighting_of_ref": "indicator--a4986d74-d61f-40bf-aaaf-9418eecde6b0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0067cd2b-1119-4738-af79-130b312b54ad", "sighting_of_ref": "indicator--5e4175d9-4842-4649-aa95-1c6cc3633a46", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c82066-244b-4fec-9d73-420978376b35", "sighting_of_ref": "indicator--a6349baa-aff7-4e37-ad95-f5ffa352dbf4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf1d902-8e51-43f0-a1cd-02fd9e8dc35c", "sighting_of_ref": "indicator--a742c82f-0096-4430-af16-a1149952be48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abbcdeb-d48f-41d4-9c8f-24152c38cc0b", "sighting_of_ref": "indicator--24d168e0-c73e-40b2-9286-d2dd07828043", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96429743-b283-4855-aed2-a247ec2061c2", "sighting_of_ref": "indicator--d185038a-7058-46f7-ae4f-e76a6c15a2a4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c47629-42b6-4e8a-96d3-83247f4cabd0", "sighting_of_ref": "indicator--d185038a-7058-46f7-ae4f-e76a6c15a2a4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948f97d4-c333-4d84-a4a6-162b9ebe54a3", "sighting_of_ref": "indicator--a58bc7c1-53b5-4acb-9bfe-37274c7136aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b75b191-849b-4d68-84f2-74a2128dd00c", "sighting_of_ref": "indicator--07e218d1-d456-4951-9788-fc2ab963f1a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade0c514-0081-422a-8c24-43a4c0336574", "sighting_of_ref": "indicator--864f78a3-1f3f-41ec-837a-ac14907b3189", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b09600c-c852-443f-8b99-6c92de7bf388", "sighting_of_ref": "indicator--cbcb89db-080c-4332-825e-8f219d65c700", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92aac7e-85d9-458e-a2b0-e98acf4973f6", "sighting_of_ref": "indicator--535e74f6-6c37-46d9-9c91-865bc1a5d931", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fa8abe-6a4a-49d7-9245-746c42b2e32a", "sighting_of_ref": "indicator--fea85d66-2a4c-4f32-be9c-ee1aa01dd695", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0a1b7d-aba6-4bba-aa1d-d5f09f171581", "sighting_of_ref": "indicator--fea85d66-2a4c-4f32-be9c-ee1aa01dd695", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3cbd89-59e0-4bf0-bd94-8235c5cb6e20", "sighting_of_ref": "indicator--d5929efe-2d0f-4c34-8398-cc69d22f14d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80241d21-180f-4491-bd39-43ae482f2088", "sighting_of_ref": "indicator--d5929efe-2d0f-4c34-8398-cc69d22f14d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f46dcf-e190-4831-9736-cca9f208db44", "sighting_of_ref": "indicator--ed4425cf-153c-4930-908a-5aff093593c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b947288-6c49-4a68-b3c3-d4fe8fce99a4", "sighting_of_ref": "indicator--b8d2cc93-9570-478d-b14b-a53969e6605e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b358c7-beb5-4110-bd3f-27f39eeb4f39", "sighting_of_ref": "indicator--d3129bf8-f3fb-4ded-8381-58971aeb4506", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09742bf-bdae-402a-a62a-715f058c4619", "sighting_of_ref": "indicator--a42108d8-fd44-4589-af9d-fec120e7f0e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa7aa4-b0cb-46c4-9005-71587710c0ff", "sighting_of_ref": "indicator--1cf9f1c8-5bc8-4280-a489-5aa595c21e2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09657a7-9dc8-46ad-bf16-844f84de70b8", "sighting_of_ref": "indicator--5831e4ec-6a17-44ed-a428-aef9dbf93b34", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb286b34-9c4b-458b-94ca-9701563c9c80", "sighting_of_ref": "indicator--299dce50-88fa-4aab-b2ba-0376c537ff86", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9476f5a-1fc5-459b-8804-6c53c46bc8b6", "sighting_of_ref": "indicator--299dce50-88fa-4aab-b2ba-0376c537ff86", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc56aa15-dfc0-454d-8e56-5ddfa06c9598", "sighting_of_ref": "indicator--09bd943e-7585-4881-b629-0d682ff0fa72", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52babf4d-13e8-457c-996a-e2884001b357", "sighting_of_ref": "indicator--1ca9d8b3-f85e-4c42-9bf8-39b8ac8d8668", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3a7db1-1742-44bc-bda1-5e21d872e8ba", "sighting_of_ref": "indicator--7df2f9a4-402d-4881-8cdb-7ef719e4c725", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39093c3-85b2-435c-858d-0905b7b4bec7", "sighting_of_ref": "indicator--e6e960ba-fbdb-45ee-82f8-8c401f271222", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ebbe38-8b2c-47f2-b2c9-9f62d1fa9237", "sighting_of_ref": "indicator--af268730-5743-4ed2-95e6-bcb85d235563", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5422bbce-469e-465a-8bda-6b2285fc939f", "sighting_of_ref": "indicator--af268730-5743-4ed2-95e6-bcb85d235563", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853fc219-e933-4969-840b-df7fd03eca66", "sighting_of_ref": "indicator--d620a2c5-a786-4084-b0ca-6d7701e12c5a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75eaf15-d659-43e1-a772-353f6e7fdd4c", "sighting_of_ref": "indicator--b58be3a8-c0ea-4aba-a393-2c8ef91fcd98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2021b810-4c07-42ae-a631-f8214da537a7", "sighting_of_ref": "indicator--6f2df2d2-43fb-4e08-8d51-fac4ca578486", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9917036c-f3a7-4ec1-918e-10be359e4852", "sighting_of_ref": "indicator--eadf996e-81e7-44fe-9c8c-9e518530ad55", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec153163-d8cf-4da5-9d20-6a6a48beb5bc", "sighting_of_ref": "indicator--adab97ce-75a3-4383-8615-ad4173449262", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ce6d2b-6994-485d-b0b7-7cf970eb3a67", "sighting_of_ref": "indicator--53afa16f-5e99-4e21-afbb-e66a3f154600", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b59a94c-6543-49a8-8e72-bcdc4e6c34c2", "sighting_of_ref": "indicator--e488d300-ff49-41ed-a1d0-6c34bb637f8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe21c99-4bfb-4d89-9b0a-24bf3e0575e0", "sighting_of_ref": "indicator--65eb8ba0-d41b-4c4a-8e03-033b733fc830", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edef5d8-5679-49ae-8f17-2c64d3fcd846", "sighting_of_ref": "indicator--65eb8ba0-d41b-4c4a-8e03-033b733fc830", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7110be-a9be-4c3d-8c08-b129fa45d6f9", "sighting_of_ref": "indicator--d6c6681e-79e4-48c4-8645-cc7610f40538", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcf2aa4-878b-4823-acbc-8ee279c48e67", "sighting_of_ref": "indicator--d6c6681e-79e4-48c4-8645-cc7610f40538", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdf1389-4313-44a3-aafe-d1bd9fdbc9d5", "sighting_of_ref": "indicator--43afa12f-0793-426b-8a32-4aaa60ffe850", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9678d8d1-5f6f-4d26-a899-7d5e2e9c00d6", "sighting_of_ref": "indicator--28914a1d-32f3-4011-ac76-02269a605462", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fdd6b5-9cc3-4eb4-9899-20e49cacffee", "sighting_of_ref": "indicator--28914a1d-32f3-4011-ac76-02269a605462", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f297cbf-6855-4103-bd83-5e22312bd220", "sighting_of_ref": "indicator--5474b957-49ff-425b-8c80-a3287cd3b6fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5edb521-437d-4880-9415-a88461bf3f4f", "sighting_of_ref": "indicator--18da9513-de9a-4cf1-b2d1-6202f272d21b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25af21e6-13cc-431b-9d93-f67ebc62f4d2", "sighting_of_ref": "indicator--0c8ef111-1188-411d-805b-e767f9c96223", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8ffa0f-7416-40a3-9af8-a8db17c577c4", "sighting_of_ref": "indicator--f45c0b49-4e7d-4b1b-8e09-e000cc6d43cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26552635-a09b-4bba-bfff-1f7656bf0023", "sighting_of_ref": "indicator--7cedeaf3-dc5b-4ecf-845f-29b2272dd142", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23911a2-3061-45b4-a934-e6797b7a0a02", "sighting_of_ref": "indicator--7cedeaf3-dc5b-4ecf-845f-29b2272dd142", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e9c833-9392-45b7-b5fe-13e0c2eabc97", "sighting_of_ref": "indicator--2b1005ad-5874-46cc-863c-91f754eb8bde", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac139f5-6f73-4a0e-b5c5-11246909c509", "sighting_of_ref": "indicator--9128074e-4e34-411e-84de-e285ccffd803", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb9970f-9390-4c25-87dd-4b7ad6433ceb", "sighting_of_ref": "indicator--7d09dacd-d6e8-41f9-9e3a-d39d88cb3133", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa74fa79-f4fe-4ab9-9b87-00025d390d5b", "sighting_of_ref": "indicator--9e18e7bb-06b1-4d37-bf24-902adf3ea733", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419753d5-d125-42d6-80b1-5456aa5fd86d", "sighting_of_ref": "indicator--7dc2c5ab-060d-4ce8-abed-e06f3307cde8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2ab421-ee75-4276-bfa4-e7220f9a76db", "sighting_of_ref": "indicator--c9c9231f-b0b7-4e06-93c1-8ed8b6cb463b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebeb392a-bfdf-469d-99e4-12af8f8f1606", "sighting_of_ref": "indicator--03c3066b-00f6-489e-8ee1-ecfca7b3dccd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e30156-42a3-4578-b70c-0ceebf8ddd29", "sighting_of_ref": "indicator--a2718b54-56a9-4930-a45c-9ac597db5728", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c72d80b-7111-4b5c-a397-7486cafd5089", "sighting_of_ref": "indicator--76acc77c-a6a5-449b-b22e-4a62a3e62678", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b185317-a76b-429b-bdc3-a96405b1a80f", "sighting_of_ref": "indicator--a7380f7e-e943-4aa7-b409-bd7c54a60a4d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a38d9c-ad06-434f-a44d-ce537118eecc", "sighting_of_ref": "indicator--ee25da33-3577-487b-b626-71467c2b711d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282377fc-c955-42ae-8eb5-7a0c1f749c5e", "sighting_of_ref": "indicator--34157c3d-e9b2-45b1-a808-37b30832d0a3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e0c746-e72a-407c-a121-f8050341567d", "sighting_of_ref": "indicator--0779e6eb-96f9-4825-83d3-9c0b95de0dfa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84e7047-af5c-4473-84ca-f819e6dbe3fe", "sighting_of_ref": "indicator--8b739277-7f68-4929-9a16-39329fb9a6c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbdb91c-f36b-42d8-9790-5516d62ddcbe", "sighting_of_ref": "indicator--9284c72b-f788-46dc-b4ea-f008e72c97d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4b3ac4-d2f1-4acc-990a-2645c766afa9", "sighting_of_ref": "indicator--7162c239-0b99-4cb0-837a-f76eca68139c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae0bc6b-eede-4b8e-8358-96a7075bf5fb", "sighting_of_ref": "indicator--a6d44625-e303-4c0d-a3a4-37790cdb20aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655dcfe6-d6d5-4339-a37d-e65a3ee8ee69", "sighting_of_ref": "indicator--47fc3229-b70c-4ab1-9f79-2fae85a5b637", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187e7de7-b047-4f2b-a35c-a2e8bbe9af76", "sighting_of_ref": "indicator--9e8b0ee1-dfe6-4c59-9d21-2c76904d113c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e978f8b-bd1c-43aa-92f3-f90a60059918", "sighting_of_ref": "indicator--26c34eec-f6eb-4b8e-91d0-19125aeab881", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ba193f-db3e-448e-b8bb-c51acbf9971b", "sighting_of_ref": "indicator--d22db5ce-26d0-42bd-b916-6fb9ba0f0eb3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7399c6-9478-4fdf-bee0-9f5a2f5885b7", "sighting_of_ref": "indicator--191bb899-c5fd-4178-8e19-3c1679f32e3f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aead7d4-ccfa-4ed0-bb44-4b6bda3f2017", "sighting_of_ref": "indicator--5a3c6a1f-b299-46d7-9099-37c7791f9ef6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757fe280-e2c2-4d96-8856-e39a45d8335c", "sighting_of_ref": "indicator--5a3c6a1f-b299-46d7-9099-37c7791f9ef6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e7de2f-4abb-4eef-bdec-055b0cfc0d0f", "sighting_of_ref": "indicator--15f33851-8180-40a7-8f6c-e3b5f90ac560", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66d831b-e01a-4c34-aaa0-271d13ef6231", "sighting_of_ref": "indicator--15f33851-8180-40a7-8f6c-e3b5f90ac560", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbe3162-35f0-4bfc-8e08-141ebd413e70", "sighting_of_ref": "indicator--e01fa89c-0c66-4d06-b1d8-9ec291c926f7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a798885-9b52-439d-a854-0ac7ef53125f", "sighting_of_ref": "indicator--fbcbe62d-6427-426e-8c41-b39582b78fba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ff00c6-b0e5-4551-92c5-3f251810bb19", "sighting_of_ref": "indicator--7ba2574d-169c-4271-b678-b6e6ab04f644", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241b0f36-41c6-45d7-a4bf-2f792b8b04db", "sighting_of_ref": "indicator--d43c0c77-4a53-4101-a755-3ca705f16d7c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c835c95-0708-49d1-ad57-ce744744f864", "sighting_of_ref": "indicator--6c63fca2-ccb6-4822-a7a3-4bd2b239f2dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29194adc-3119-47a9-9dfe-ebd7255f4706", "sighting_of_ref": "indicator--6c63fca2-ccb6-4822-a7a3-4bd2b239f2dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2c20a7-476c-433e-a7a8-b543da3dd2a7", "sighting_of_ref": "indicator--209c3ad7-e27b-418f-a342-fa253d2e6a30", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de226ed-00ad-4e0c-b5f0-8570c1109680", "sighting_of_ref": "indicator--794ad203-db27-4fe6-8903-051d3f087045", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c7e1be-003e-4bab-856c-debfe761a2c5", "sighting_of_ref": "indicator--ffdbe82d-a765-4dc0-b650-b889ba42b2ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8f78c0-ccea-4730-91a6-8ed8fcc2020d", "sighting_of_ref": "indicator--a3252d1b-04e8-4893-aa30-91f47b8b915f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aea6320-78ff-476a-93b5-c94c06961b47", "sighting_of_ref": "indicator--daa18b66-6ccc-4169-b3f1-59c57e0cca36", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1e0713-30fd-4426-8d33-01907203b7c3", "sighting_of_ref": "indicator--daa18b66-6ccc-4169-b3f1-59c57e0cca36", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4f1075-0135-4212-a347-a2d389a4c1cc", "sighting_of_ref": "indicator--62f3dd33-62a6-48f8-af5e-1436e04b7002", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2e7903-d606-47d2-8da3-428a65a2fa3d", "sighting_of_ref": "indicator--2e805bde-d097-4f1f-82a1-2a67aa0f3594", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f90540-5de9-43e4-a5d8-e84d1fb20c9f", "sighting_of_ref": "indicator--4ede46ef-db47-4617-8a1a-ba060b46ba11", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f80526-6233-4540-a5ca-d4c16d3d1441", "sighting_of_ref": "indicator--477264cd-9f99-4dda-b1ce-196bdc1b1e0d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1043bd-a521-4c7c-bdfc-16b9a74b1594", "sighting_of_ref": "indicator--a3a9489b-88de-4ea0-8bc2-cccb0b431e99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bfae11-d872-4cbf-ae27-06aa2cb89a5c", "sighting_of_ref": "indicator--705f8c8b-2dde-4363-935d-553a8275bec3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0681fb7-51ca-4a3c-a868-ddccfa8a7a8a", "sighting_of_ref": "indicator--9554b18d-a294-4481-b922-9ed52cef5ccb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c79d305-1a80-40a5-a256-82b74d9afc3e", "sighting_of_ref": "indicator--eff6b2b9-12a6-44f8-996d-070e82878583", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83424810-991d-4e50-8638-758b441afab6", "sighting_of_ref": "indicator--eff6b2b9-12a6-44f8-996d-070e82878583", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea30485-5d85-45ec-a91f-0c7c0b0e7765", "sighting_of_ref": "indicator--62e2f681-7585-4e92-97a2-b5e26ab19124", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb760ba-03fd-47ea-a110-6123df581162", "sighting_of_ref": "indicator--6c880ace-7906-4fff-86ba-7bc71bdcffc5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a618b51b-8816-4037-b9a0-1cdb02d2c2fa", "sighting_of_ref": "indicator--dce2b397-7e79-4fc7-9df4-a591177afd93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500ae722-73d0-44b9-839f-edc3b57bb4b0", "sighting_of_ref": "indicator--7dd43eb2-f5f2-4678-9096-e2241f564b93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf15273b-819f-4d11-9c28-9734b0a749d2", "sighting_of_ref": "indicator--7d4bb59f-3c28-4df0-ab0f-14d199a43b86", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc56677b-e17a-4921-a055-49c36ded7502", "sighting_of_ref": "indicator--b6f5cf00-4b51-474b-a5d0-d53e26fa5c73", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5a50d1-20e7-45bb-bdb4-618b19baaaa6", "sighting_of_ref": "indicator--772f85cf-be3b-4b45-8f62-d15b09e61a98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f72ef3-264e-4fa9-a3d7-a88e151a1392", "sighting_of_ref": "indicator--a1df8465-cc59-4af1-8486-58fb26627a57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8da4d0-5bdf-49ad-b61b-081c69751450", "sighting_of_ref": "indicator--35ed2c8b-5d4e-4bc4-a8ea-1d86a773d2c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb03bc4-f3c3-41f7-9cb1-740ca06ef94b", "sighting_of_ref": "indicator--bc14b382-043d-41ae-9569-85041b7a9de9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15282d9-6c42-4b7c-a5ce-d75d2da16a5d", "sighting_of_ref": "indicator--7823d6d6-c4fa-4eba-9932-fd781260def8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a188838-19be-4886-88f6-3be26ba52d92", "sighting_of_ref": "indicator--97fb76be-4ea6-4fc2-9b33-6b6fce2a98f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfe9efc-ccfe-4566-bff7-07cee9e8f087", "sighting_of_ref": "indicator--103a48e9-0fe4-4416-b7ff-756ac8583dce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b9e583-818e-4031-9c01-898d5c0fe332", "sighting_of_ref": "indicator--103a48e9-0fe4-4416-b7ff-756ac8583dce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790d124d-91ac-44fe-9782-bafd5d06eb5a", "sighting_of_ref": "indicator--afe743ad-2071-4ec5-8a4a-f63c2c096063", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38e075a-3d34-4299-b8e6-40927ebc70eb", "sighting_of_ref": "indicator--860ac4ad-1b68-4147-be70-e5b52266b3ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53feaaf-4a9c-4aa8-88be-ab5c10b32e9c", "sighting_of_ref": "indicator--860ac4ad-1b68-4147-be70-e5b52266b3ca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d7c3f0-8eca-47bc-aa18-4be957c058e1", "sighting_of_ref": "indicator--cf5fe6ae-dad2-4598-af76-96a720f3e948", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657b130a-5074-4977-a9b1-1406b88233e4", "sighting_of_ref": "indicator--4c6581d9-4238-4017-9e24-77c0b40af40d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc02819-a2eb-4ca6-86f6-7a0b7c9e92ea", "sighting_of_ref": "indicator--5b79b425-97ae-4ea8-8657-36358f133628", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26cc0f6-2b08-4d15-93f1-d20f32de9b62", "sighting_of_ref": "indicator--8b320915-0faf-4000-8838-16ddd41f1c15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00faaaaa-826b-4a67-a25a-55fdc2b8157c", "sighting_of_ref": "indicator--c2643b2d-b608-478e-b7c0-46ad60ddac64", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44949822-d3a5-43db-a604-18cc73fffe80", "sighting_of_ref": "indicator--bc65e5e0-98c3-42a0-b2f4-ee3dec78031e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18225b56-ab6c-491e-a56d-e6aa6f81a7ba", "sighting_of_ref": "indicator--4c6dcb32-fc2e-4efb-89fd-3b1f7747f1cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7f9c5b-2e7b-454f-803e-61d9404b283e", "sighting_of_ref": "indicator--849894d8-6c51-4d24-a38b-dc48e2750704", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecc5fbc-bc9b-4da8-bb45-30939ff9b718", "sighting_of_ref": "indicator--7b83545e-3ba2-4982-a823-31286dbd488a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbf67db-2674-4cfb-af56-5caa034dfd29", "sighting_of_ref": "indicator--677c8072-01c2-4c61-b745-c44a3efb7220", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0da781e-f215-4a7c-ad63-23e4d4a4e7ce", "sighting_of_ref": "indicator--71d45c37-9428-4d39-b3b8-e8b0b5c9acd7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9d9ae9-27bb-471f-8ab3-ba11692d83bc", "sighting_of_ref": "indicator--4840e2ce-d512-4b76-a55a-6e57c6926da9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1be603-b349-4cf1-862f-d0a620d1b759", "sighting_of_ref": "indicator--7da76040-a99b-455d-8fb3-0dc637f68fd3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f61463-7ee0-4639-b023-540d7d367f01", "sighting_of_ref": "indicator--a88c1671-11c9-4dbc-9dfc-f671f03f1135", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247c4f13-cac5-4013-890e-5df46ad686ab", "sighting_of_ref": "indicator--c5fdab0c-07e4-4935-a534-d5f947659f9f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f64cca-f125-4384-ade2-f29e53b5cb65", "sighting_of_ref": "indicator--c5fdab0c-07e4-4935-a534-d5f947659f9f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca47952-463d-4cbe-a12a-ccbedbef3434", "sighting_of_ref": "indicator--9a303076-b1eb-4099-a193-5ee387b41091", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2331751e-4d6f-488b-b9bd-8e029ff4a864", "sighting_of_ref": "indicator--6ac97eea-cec5-41fd-aa49-4e43f5b5deed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca77a397-a2b8-4a92-83a2-4f1337c7a388", "sighting_of_ref": "indicator--d044a11f-7063-477e-b518-179bd6083019", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62baf3bb-0f9e-4aca-acd0-9abcadfb40bf", "sighting_of_ref": "indicator--d044a11f-7063-477e-b518-179bd6083019", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcc4267-ac41-4e58-a201-33b9486d55ce", "sighting_of_ref": "indicator--71e60d8d-5c3d-4b43-b121-e588b5f242f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f237e1-68d9-47ae-be94-106e6ef1c8b4", "sighting_of_ref": "indicator--71e60d8d-5c3d-4b43-b121-e588b5f242f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de809cb-c542-47eb-8ebd-20570c25da40", "sighting_of_ref": "indicator--c4eba745-b8ea-48ec-ac75-d06f08496bba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d6aca7-4790-4fc5-8986-03622b369b0c", "sighting_of_ref": "indicator--96938dc5-00b0-499f-b99f-405db2811d15", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7757fa-2d9c-4ab5-9291-36a0728b10da", "sighting_of_ref": "indicator--2f3cff3d-4444-45b8-8ebd-b493104e3a8e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a38b389-5c48-47d4-ba3a-6a1d04e37578", "sighting_of_ref": "indicator--961785e0-735b-4592-a548-e8bf0717f29f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d5c207-929d-4524-9f7c-3b575a8fe7bb", "sighting_of_ref": "indicator--3ce38c9f-95de-41c4-b910-b22b60203e98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48e46b6-7e7e-4ba7-8f5b-31b4399dd003", "sighting_of_ref": "indicator--6e7e61bf-71e9-4ea5-8159-5bf349a2526c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716c6a44-0690-47c3-bc38-890e6403161f", "sighting_of_ref": "indicator--6e7e61bf-71e9-4ea5-8159-5bf349a2526c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1476fa-d2e8-4692-8638-a28f665c860d", "sighting_of_ref": "indicator--952737e2-6580-469a-ae62-493140eb8fd6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23da5d99-16be-459d-8278-2a173f05e5a7", "sighting_of_ref": "indicator--952737e2-6580-469a-ae62-493140eb8fd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4651e85f-d8f3-4c12-8afb-9c62332c4a30", "sighting_of_ref": "indicator--a19cbbdc-e42d-445b-9881-5ea2fa55033b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6990d87-0bf8-4435-bc1f-21ad48f77009", "sighting_of_ref": "indicator--d479c674-847c-4972-a6fa-8bf734082c19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd55d35-f5bc-40a4-b2f5-4626d06cae47", "sighting_of_ref": "indicator--5f36c342-d1ea-4f64-bec3-426a5a7a016e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d3512f-b930-470f-9bf0-c930e42e4e31", "sighting_of_ref": "indicator--598fd559-b94a-481f-9b16-794a7867338e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f02afe-91d6-4ead-b906-d28a73928564", "sighting_of_ref": "indicator--ffbd69d9-9d52-473f-ae07-f0f671c0a0d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5d6f83-742c-4238-a706-2ceccf7904c2", "sighting_of_ref": "indicator--f784f3ab-d593-4d5e-9e16-f0643429d412", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3381b409-674c-4bca-b5d4-a75aefe31d6b", "sighting_of_ref": "indicator--f784f3ab-d593-4d5e-9e16-f0643429d412", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596a537b-b1cd-476e-8ed9-a01156936c0b", "sighting_of_ref": "indicator--09b9a37e-c6e4-42da-b7d7-25fd49cb5708", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce722790-3485-404a-b465-79ecd768f17b", "sighting_of_ref": "indicator--09b9a37e-c6e4-42da-b7d7-25fd49cb5708", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cee43a-17f7-474d-934f-57910215c2cd", "sighting_of_ref": "indicator--eac7b552-d735-487e-9921-1e1df61f2175", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5baf20-ca2f-4c62-8977-7345f07e129c", "sighting_of_ref": "indicator--48e5e2e2-de5e-4a59-a1a3-c671d2bea8ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4063a2-7645-4fdf-9ecf-5fad6e52d4f8", "sighting_of_ref": "indicator--55520b00-6664-4d2f-99bc-25a7c8343533", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ec7d92-bf97-4955-99ac-ccdeacbd72a4", "sighting_of_ref": "indicator--55520b00-6664-4d2f-99bc-25a7c8343533", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba3b871-327e-493b-8d37-249dd3bba2f5", "sighting_of_ref": "indicator--d1f11602-2811-4ac2-a19d-72a037e7e267", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695514a4-cfb9-4c52-b136-a73ecd13dd5d", "sighting_of_ref": "indicator--03f7c665-ec3b-4df2-8e78-27ded89af42c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3b7f57-751e-477d-8ab6-11f2c238ab18", "sighting_of_ref": "indicator--085495b1-fb0f-4e10-a215-43ebebd8c985", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488aae75-a990-461c-8852-97abe2d3ab99", "sighting_of_ref": "indicator--c0e3eff3-0592-4654-84e3-2260f7a0027d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe79f3d-ec58-42de-aca9-0d85d8aa6c1f", "sighting_of_ref": "indicator--9f9a2e97-69a9-4374-9866-d382fa91c806", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c28932-b65d-4bd8-b8ca-3d4ff6816304", "sighting_of_ref": "indicator--8312183c-fc13-44fc-89d3-8977cf9639f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4313c1-092a-4ed2-bc8d-2fa7d2e69b7b", "sighting_of_ref": "indicator--908b2037-2ccd-4457-a84a-5ee2f718c7a3", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032a9bcb-47d0-48a3-899b-f80192bd606a", "sighting_of_ref": "indicator--6c19034d-4c89-49c1-8c8b-169e497bdc74", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a584b3c-ead1-4895-82ef-c7fece13dfe8", "sighting_of_ref": "indicator--c9e5b0e0-e819-4ee1-84da-fb2ea9ab3566", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3062f265-0fd6-49a3-9966-4f3aa58ffb17", "sighting_of_ref": "indicator--98ac13d7-9d6f-45bb-a10a-2813dbfdb85c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9682434-8e5a-430b-b0c1-778c4550fd90", "sighting_of_ref": "indicator--726e3f4a-e23f-4710-a150-589912f1d066", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6880e65d-2970-42b6-8d20-49b9423ac374", "sighting_of_ref": "indicator--726e3f4a-e23f-4710-a150-589912f1d066", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f6459b-1233-448e-b94e-17a8d6ed21d6", "sighting_of_ref": "indicator--a0b76356-ea6b-4b7b-8927-72431b7ab7a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f5c030-a3da-4a1e-b52d-5d726f7b2326", "sighting_of_ref": "indicator--aac7569b-e23e-4db4-882c-fd90cc94a402", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d4413b-d5b9-4d8a-a50c-ae95372fdc1b", "sighting_of_ref": "indicator--090cdf74-9c11-4e56-b7f9-4ec2ab615333", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758e9de7-f812-4bae-ab71-888bc4c4e72f", "sighting_of_ref": "indicator--bb22d155-0074-49e6-aff4-9458322f3b0c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11a11e6-8ea9-4be2-96ae-cd41fc3aee48", "sighting_of_ref": "indicator--ac658ef7-23af-4362-93a1-7190a7ff3a04", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c18204-5985-4f6a-bde2-dc51eab23ac6", "sighting_of_ref": "indicator--12391b70-3ea7-4c47-a946-6d8cd3f5e1a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e9cfb0-f208-4e3a-9807-4bbfc71aedf6", "sighting_of_ref": "indicator--62d83276-40f6-406f-8879-e1cf5ec2f1dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2602b5b-6081-47c8-9de7-b28ba6f14b73", "sighting_of_ref": "indicator--43fedcf5-3d7e-4a49-9942-890fde2686a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917a2803-f1e8-4898-86fa-e95e66835120", "sighting_of_ref": "indicator--8dee5eb4-0ac9-4496-bbd9-52bb0deb842e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f84a69f-a5d4-48aa-91d8-e74ecb860df6", "sighting_of_ref": "indicator--97afb2e4-973a-4e1e-98f9-11f87ab21426", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e896eb-96a3-46f5-99dd-dc5e60b90fad", "sighting_of_ref": "indicator--5228865e-f592-4415-80d3-6adf201f7276", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3588656b-5d14-4888-80f3-a50256fb7dc8", "sighting_of_ref": "indicator--9aae3ac1-d4cd-457d-a211-776e7b00564b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8215fb09-533b-4793-ad50-5206abe41f87", "sighting_of_ref": "indicator--9aae3ac1-d4cd-457d-a211-776e7b00564b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3d7883-0651-40cf-8025-84ec05190975", "sighting_of_ref": "indicator--82b7aaba-ce7e-4f15-8b04-2fbb17135294", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa1e2eb-b9eb-4b9d-97c7-e69e30035f84", "sighting_of_ref": "indicator--b499d205-1028-414d-b6a4-2dbcc682c7a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d6e59d-b5db-431f-80bb-90f1cb3f81f2", "sighting_of_ref": "indicator--01223fda-d8a6-4885-ae38-c13a968a8964", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6d6935-740e-4edb-9126-f0e82feff0fc", "sighting_of_ref": "indicator--678ad598-fa6e-479e-aa54-99007b0cd9d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13ccbfc-554c-4103-8fb5-5d99fa5e8a53", "sighting_of_ref": "indicator--678ad598-fa6e-479e-aa54-99007b0cd9d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e871f2-9df2-4313-9239-7c9ed840c185", "sighting_of_ref": "indicator--78b96762-fad6-4b05-abf7-51750aba8df3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e8cb29-567f-434c-a20d-37c14dd2da1a", "sighting_of_ref": "indicator--1e009884-d7df-4e3b-878a-1a513d5b8d7e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e10aa2-acbd-4e58-9778-2c66e7233e43", "sighting_of_ref": "indicator--1e009884-d7df-4e3b-878a-1a513d5b8d7e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd5a642-2583-4f81-9335-3b56ecb4b805", "sighting_of_ref": "indicator--dde4accb-eee4-449f-8a8a-460feb374d76", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0917e8ac-86bb-4ca6-8056-32f007465e46", "sighting_of_ref": "indicator--dde4accb-eee4-449f-8a8a-460feb374d76", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ebe713-e95d-45ce-9150-3834ad87b2a5", "sighting_of_ref": "indicator--0fef17ea-7cfc-44ac-815e-d1f21e52b6a4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c41fdd-2126-4f0d-8da9-42e9522f405d", "sighting_of_ref": "indicator--0fef17ea-7cfc-44ac-815e-d1f21e52b6a4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6e4cea-c72b-4618-b0be-b304ed0e6604", "sighting_of_ref": "indicator--68fabe43-4462-4e27-94b3-941a32a596ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b7fbfe-471d-45e3-8580-9d3fe028db36", "sighting_of_ref": "indicator--f32a0a24-579d-4e91-ac18-d96f0323fbfe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe14e0d-cd8a-4e6d-bc73-633b2af9ef12", "sighting_of_ref": "indicator--10e27864-7392-4558-855d-80c1fec9bb91", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d868c4d-dc47-4ccd-b89b-3d88b0b5727b", "sighting_of_ref": "indicator--10e27864-7392-4558-855d-80c1fec9bb91", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8050a068-c648-4637-8630-433f84cb82a8", "sighting_of_ref": "indicator--a8578307-a0c7-48b6-950f-46bd7b6eea2e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a508fe6-1b98-44fc-94ce-dbf0d64be8f3", "sighting_of_ref": "indicator--34fda15d-6d5c-4fe3-b2ec-a07579511a81", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cd3e73-8a8e-4cf1-9c46-0658d5fb2022", "sighting_of_ref": "indicator--091d1d2d-6518-4617-92c4-de32203ce268", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b1d7d6-2015-477f-b77f-c14764e9a64b", "sighting_of_ref": "indicator--b38048d9-dfab-41e3-8b9b-56c3b418c552", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4886dc-bd06-4d80-b390-675c1ecd3145", "sighting_of_ref": "indicator--b38048d9-dfab-41e3-8b9b-56c3b418c552", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00eff7c1-7d02-432e-b56b-0bbc1a6003b3", "sighting_of_ref": "indicator--d4b47134-7428-430a-82f8-252df6636dde", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84169dbf-9db0-4c17-90b5-9ff6e68d503c", "sighting_of_ref": "indicator--6ce36927-5736-4a39-8035-f699c9afa7ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2f4323-4318-4e23-b86d-d85b71f7a67e", "sighting_of_ref": "indicator--30031d5d-cf17-4413-b2a7-7e67d7518cef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429d6f4d-51a8-43fc-87a6-6300403dc527", "sighting_of_ref": "indicator--30031d5d-cf17-4413-b2a7-7e67d7518cef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6359a669-6471-45ff-9ca3-1d4971b37052", "sighting_of_ref": "indicator--3a6167a0-809b-45ef-a762-007228e839c8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dc46ff-2fb3-412d-aece-62c5a79d5498", "sighting_of_ref": "indicator--8e523360-c971-47c1-88c8-3b55be480f33", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7174723-caf7-4439-ac88-1a8f4e9db010", "sighting_of_ref": "indicator--03a38fb1-315d-415b-a23f-b9f386fe8c4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1c87dc-2240-4583-99bc-2e952711cb99", "sighting_of_ref": "indicator--16e4bf33-7327-4b48-8bda-548389f91697", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41ca8ef-ef60-4e54-a8cf-4f62af06720e", "sighting_of_ref": "indicator--44df0ca2-c239-48a5-8c12-0e2f83266a66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a869b328-7d21-42ca-84c9-ff1912a8e3f5", "sighting_of_ref": "indicator--44df0ca2-c239-48a5-8c12-0e2f83266a66", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a565a45-126c-4085-89c3-1e396c235961", "sighting_of_ref": "indicator--9384fbd8-5c52-455e-9679-a5f2d7743c31", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39655637-e4f8-4ebc-8bc8-d55479551675", "sighting_of_ref": "indicator--9384fbd8-5c52-455e-9679-a5f2d7743c31", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f2ce9c-8bc2-4148-be31-1f5c308ecaf4", "sighting_of_ref": "indicator--488f6c75-a1c1-414e-a1a0-4a81c0360aa1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cccb63e-7adf-4c5b-9e46-5df895cc21fb", "sighting_of_ref": "indicator--ad4f58ea-539c-4e80-a337-e04304f899f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8fbdf1-6744-4529-a3aa-47aa67afea9a", "sighting_of_ref": "indicator--ca33bbf7-8c66-40b9-8614-5fc05793cf4a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce259ab-a61c-49b0-ada3-2eb6e2472b37", "sighting_of_ref": "indicator--1dfc1dba-a103-4211-9cae-4e74f76802a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db88a64-0c6f-4c5b-b9da-2b5b87a52d63", "sighting_of_ref": "indicator--1dfc1dba-a103-4211-9cae-4e74f76802a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429850f7-c8ef-4040-94e3-815c694d4218", "sighting_of_ref": "indicator--0a4c5ea9-f92d-4734-af96-61b4a035ff36", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9edfd6-9265-4d90-b551-9040ed4663fb", "sighting_of_ref": "indicator--6b4d11b6-338c-4e16-a4bf-66ba9e314abc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3abea0-115d-4dba-86d2-63df3434e44f", "sighting_of_ref": "indicator--7c6efed9-2683-4a51-9a75-bbdd46588e5d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae695fd-9a2e-4c01-bdff-e33eacfc976d", "sighting_of_ref": "indicator--bbd90068-c942-4e3b-96e2-1f216c0beee9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad2a5f1-bcfa-4f8c-9d2a-4a940fb9c6ae", "sighting_of_ref": "indicator--ea6d2bc1-d938-4a2f-9419-6612726d6bb2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34377e25-e18f-4371-87c4-7ee6a1519978", "sighting_of_ref": "indicator--343054fb-b9ca-431f-948e-5e0d09579362", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297c47cd-26b7-4984-9f1a-6efaafe2ce59", "sighting_of_ref": "indicator--9b5209d3-4195-417d-a332-b397f2b0f46e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f189262-28c4-4ecc-ab8d-6cc4deb6aadb", "sighting_of_ref": "indicator--37dbbf4e-d927-4a13-a997-8dd7cff9bf80", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18d4569-8db3-4dac-b136-4c02a5c3445d", "sighting_of_ref": "indicator--fed161c3-97f8-45b0-89df-5b0c8360e89a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247a27ff-0e1a-4c60-9b94-6d64f44f7dcf", "sighting_of_ref": "indicator--fed161c3-97f8-45b0-89df-5b0c8360e89a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb9d71c-1fa3-4911-b689-657212fbb105", "sighting_of_ref": "indicator--17084954-e4fa-4c66-a00f-0ead950c1d17", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0727214a-30d9-4b90-aec2-350c1fe55b81", "sighting_of_ref": "indicator--17084954-e4fa-4c66-a00f-0ead950c1d17", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce77f390-feba-4920-be79-8953ed793194", "sighting_of_ref": "indicator--6fba3980-2de8-491e-a7f5-aaa3b43b5456", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e389c4-65de-4b7e-8004-6b1ece56647b", "sighting_of_ref": "indicator--86402f76-50a4-43f5-8489-823a457282dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caca1827-69e3-47f4-896d-d738cf6b6dfe", "sighting_of_ref": "indicator--6e300ac5-6aa0-4e05-a1bb-4a84636b096f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d661cecb-ebb9-47ca-ac91-481f9ac74630", "sighting_of_ref": "indicator--e9c02359-e4df-4b3d-b1d3-10bd87199618", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc67c350-2cc6-4ae5-85c7-ae9d30ad5d4f", "sighting_of_ref": "indicator--6a391827-11f9-496b-965e-44d7083fc75c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149656e8-0aec-456d-8d75-fdd3ee8a25e1", "sighting_of_ref": "indicator--7aea11ca-4d0f-4874-8e3d-032dd97169e0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cc0b6c-9b8a-4f72-97c4-276a8e6f35ed", "sighting_of_ref": "indicator--341b9201-b9d3-4901-b60f-afccf978402b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c9cc4f-ef10-4d42-b12d-1eb0169606b6", "sighting_of_ref": "indicator--ef0deaa6-6d43-43b1-8ba7-e828f058c6a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1b88d3-55bb-480b-847c-a06433007d49", "sighting_of_ref": "indicator--ef0deaa6-6d43-43b1-8ba7-e828f058c6a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f26f8c6-851f-47f5-904a-8374f0b5cd50", "sighting_of_ref": "indicator--1f6ac0e5-2710-42a6-ba16-79e58834f789", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4c27e3-e4dc-4717-8bd9-d91d6da95e9d", "sighting_of_ref": "indicator--67ddd328-1cc3-42dd-9ef0-64db3ffd75db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af849733-17ef-4c44-bca8-a56213144240", "sighting_of_ref": "indicator--67ddd328-1cc3-42dd-9ef0-64db3ffd75db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c8c815-9b76-4f63-96e9-877a4b9c448c", "sighting_of_ref": "indicator--a14e6f80-7e13-471e-9ae8-5d2232810e72", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea54b6a-20d2-4319-b742-2309174942c1", "sighting_of_ref": "indicator--a14e6f80-7e13-471e-9ae8-5d2232810e72", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b88fe64-585c-47bd-867c-b7fc7c87c73c", "sighting_of_ref": "indicator--d998489d-9b08-493d-82f9-1119f74ca5c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb27506-a0fb-42c0-9eb7-704ed0e59dd4", "sighting_of_ref": "indicator--d998489d-9b08-493d-82f9-1119f74ca5c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4882ba36-2c5f-4f54-aeab-c7ad5cac1efe", "sighting_of_ref": "indicator--614ab996-9e01-4b60-a20c-cf5b3020f6fd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f461e6ed-daf5-4eeb-b652-cfb7c7976ec2", "sighting_of_ref": "indicator--ea0b0316-8968-480f-8d42-5684d341359a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74033c39-4f38-4be5-97ae-10d422539ba9", "sighting_of_ref": "indicator--2ef18dcf-8132-4d00-94d3-95372e7866bb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e717f8-606c-42e2-9ffa-b1662992ddc5", "sighting_of_ref": "indicator--a4f65dd1-9ae3-4bc5-9084-c0fd7619890e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0078918-9821-4e03-b516-5c9b0e79a8c1", "sighting_of_ref": "indicator--fb4fd21f-7e11-4d60-96e7-ef7505015564", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34e58af-6715-4662-8e4e-71e696c72abb", "sighting_of_ref": "indicator--f5ce1070-1210-46e5-9758-ad93a73b61e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951943c8-1f91-453c-810b-de2c9a9a4136", "sighting_of_ref": "indicator--5971922b-7d94-482d-ace1-711994157c04", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e86e4fa-e2ff-4b0c-8244-00e80e530f8b", "sighting_of_ref": "indicator--5971922b-7d94-482d-ace1-711994157c04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee429efb-9e54-48fa-a577-9418eb540f6a", "sighting_of_ref": "indicator--fa67e925-21fc-4a72-ad29-3167c3d48c8c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19de88e4-cd60-4af0-821d-079182ea349b", "sighting_of_ref": "indicator--33513423-6857-4769-a1e8-558ed5fab523", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02ff9f6-4ac2-4863-9fb3-5ecc44aee7a9", "sighting_of_ref": "indicator--73692823-1215-43d9-bdb9-83ce28026bc8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f69c520-e49e-494c-af3f-87b2e7415034", "sighting_of_ref": "indicator--73692823-1215-43d9-bdb9-83ce28026bc8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5852558e-cadd-44f1-b665-bb32001e1059", "sighting_of_ref": "indicator--614942ef-82e7-4a69-a6c7-63e9369f8923", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84e3db2-52ee-4102-ae35-a6ba91c0cff1", "sighting_of_ref": "indicator--cfa163a9-1515-4624-a80d-71e2b88244a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf5496f-c8d0-4d92-9ab2-5fc8bfeb1006", "sighting_of_ref": "indicator--922dbfd0-849a-43f8-a60e-8891b836d842", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f61c09c-5544-4969-8f1f-9d0f2ec43b3e", "sighting_of_ref": "indicator--02b24595-7fc2-4af8-9923-ade6c7aba19f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c3d792-b0aa-475b-b114-f57d219cd2a0", "sighting_of_ref": "indicator--91cfebe1-c3c1-400a-b48e-9efc6b910250", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba2d28b-0a51-400a-889d-04e49395201f", "sighting_of_ref": "indicator--6172f1ee-5074-44f9-b030-1bef9669fb1b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4af4e2-a076-4d7e-b6de-aba8c8393a57", "sighting_of_ref": "indicator--6172f1ee-5074-44f9-b030-1bef9669fb1b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511f7d6a-b528-44fc-9a9f-ec1b4019f4d8", "sighting_of_ref": "indicator--6b4358aa-01ea-45b0-a59d-a4a8b30bbdd1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176b7a84-f236-4c0d-a231-add0547d9b6a", "sighting_of_ref": "indicator--1add9546-aad2-463e-87ab-8e93b2900d74", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759f4578-07ef-4aa1-8a94-22e4b7238146", "sighting_of_ref": "indicator--02a68dcd-ce5a-4390-988f-465e1cd1f501", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914fcd60-64f5-403c-8f79-de1fc4acf0f7", "sighting_of_ref": "indicator--09bc3660-b08a-450d-8964-3d0d421dba43", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fface4-3357-46a1-a32b-94d828413494", "sighting_of_ref": "indicator--09bc3660-b08a-450d-8964-3d0d421dba43", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e836fd-09dd-4255-8738-584ae1205654", "sighting_of_ref": "indicator--58624af7-c8ec-4bc8-affb-c24d39ed7d5a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c455030-3402-4b55-ac88-eb405ff0cad2", "sighting_of_ref": "indicator--5941b4d0-dac4-406b-be81-febb617d84f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39326342-d341-46be-8525-389bdd8b99ff", "sighting_of_ref": "indicator--105bfa81-9b50-45f8-98a2-24a08ec5bb30", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ebbfce-148f-4897-91ee-57d920b417b2", "sighting_of_ref": "indicator--1a19cebb-2d96-4753-bad2-a155b11c7c5d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7736a683-f6cd-4a2b-ab44-2899e84e115a", "sighting_of_ref": "indicator--bcccfc10-be51-4e6a-ba2b-f0da3202c246", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b80966e-9715-43bb-b28c-f01179bc2b34", "sighting_of_ref": "indicator--04e6bda8-1f97-4646-b7db-3c096d9356c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353e5797-dd84-4707-a19b-70c0a3b6cf70", "sighting_of_ref": "indicator--a0875571-aa55-42ce-980b-e6710664f7ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7bbc69-794a-465c-8cca-fd28a3b1ecb5", "sighting_of_ref": "indicator--a0875571-aa55-42ce-980b-e6710664f7ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0987fe91-4a6d-4342-8e09-f42062a9dd0a", "sighting_of_ref": "indicator--48fdae8e-de81-4b4e-ad4f-f0a69590bc26", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7700a688-661a-4b4c-a3ee-9c6c9e207f72", "sighting_of_ref": "indicator--48fdae8e-de81-4b4e-ad4f-f0a69590bc26", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4663d250-5c07-47f6-9286-e801742da561", "sighting_of_ref": "indicator--d7834f7e-6eff-47a0-aa77-cf2eb99bb5e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783d131e-e032-49f1-a234-8299fb6818b0", "sighting_of_ref": "indicator--0c33846e-dd46-4108-9fb4-d519fc0e4a23", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a666da6-5ba5-41aa-865f-c14cf8f6106a", "sighting_of_ref": "indicator--d57d92a5-439b-4675-a17a-cf51805e0055", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1875cb-2e76-40b2-9e90-a2f5d1d59aae", "sighting_of_ref": "indicator--0b2f4782-aa84-4b02-9e61-cd032d58096f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7849648b-efb8-4b19-bed5-a0603e616967", "sighting_of_ref": "indicator--8a895746-3ce6-4218-9c0d-164854e1156b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228ccf57-f31a-4366-9e15-a95bb86a6430", "sighting_of_ref": "indicator--7e1f123b-533d-44e2-a1ab-f4490829ef48", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca66ff8-906a-43ba-9238-c84ccb691266", "sighting_of_ref": "indicator--accdeff1-a013-4dda-8961-b3a76bef2bbd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8604164-38ee-4150-982c-54037ff8683f", "sighting_of_ref": "indicator--accdeff1-a013-4dda-8961-b3a76bef2bbd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd96eee-e83c-4b0f-b12f-3a659383817e", "sighting_of_ref": "indicator--10c6ff97-c4ea-496c-bca3-df47b987916b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521b1b89-e57a-4948-97d9-1b1b6755df68", "sighting_of_ref": "indicator--10c6ff97-c4ea-496c-bca3-df47b987916b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60442a2-3c79-4e7d-942d-c8b07ce662cf", "sighting_of_ref": "indicator--06c2577d-55b2-42db-8781-b09087450678", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2a3fd9-b7b0-4cf5-9144-f63cc6d3dab7", "sighting_of_ref": "indicator--6817f8ba-3d5d-434e-855d-bca6b20d679b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877c7284-71dc-4f3d-b7e7-d523b1f4e149", "sighting_of_ref": "indicator--dc4e9704-fbaf-4e42-89c0-8132ec9b2e16", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bf44db-feba-4cdf-980f-1f179510167a", "sighting_of_ref": "indicator--91ba0445-a40a-46f0-94c7-5f819647a1eb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517507b7-57e8-4ffe-a698-f6504ccaf584", "sighting_of_ref": "indicator--91ba0445-a40a-46f0-94c7-5f819647a1eb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a33b72-0228-416f-942b-f2ce9af4ef55", "sighting_of_ref": "indicator--ae70f4e4-5a4d-44d8-9d2e-ad6e23e4a2c6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58901971-af4a-4e24-b7c0-360a997a2dd1", "sighting_of_ref": "indicator--4f75101a-bd03-4167-87d7-3ccd0175e221", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bdf4cc-2884-4421-9eec-50b15fa908fd", "sighting_of_ref": "indicator--4f75101a-bd03-4167-87d7-3ccd0175e221", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32517b76-9f38-48ad-9970-55ecffa5eb98", "sighting_of_ref": "indicator--63776e3b-16ed-446d-846b-cbe86dba67ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b3c27e-bce5-495f-b8b8-1e0b23f0511f", "sighting_of_ref": "indicator--63f75763-018a-4aa9-94db-b0e4cb9164de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a67786-2c28-45b4-afb6-21d7da38d159", "sighting_of_ref": "indicator--76aefb7c-e8ae-490b-a7a5-944ad1ccc8ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41809ff7-f3e7-48b4-8734-21bfe432b0cd", "sighting_of_ref": "indicator--07f31006-1130-4ce5-9e6a-0e40f0c62085", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75b7693-dd65-4f29-980b-13d5d35bd2cb", "sighting_of_ref": "indicator--e367d6f7-1298-4259-bdcd-c3c8d3017a2f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68124bc4-2c3c-4468-bd79-daa7f24d7af1", "sighting_of_ref": "indicator--4f5646b3-4340-4e80-b3f2-e12256c08541", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f466cb96-1741-4e29-98f8-3b613543e0bb", "sighting_of_ref": "indicator--4f5646b3-4340-4e80-b3f2-e12256c08541", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc15200-9f15-4be0-b60b-b628e784aac9", "sighting_of_ref": "indicator--b4e349a8-9a13-4f08-ab4b-0fc0cfa3fe72", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd995ab-524a-490f-8dd0-ad5a58467417", "sighting_of_ref": "indicator--a85ceb88-e077-4e2c-8551-a79271c57124", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0a3055-566c-4a6b-bf5d-11b9e98e6dd5", "sighting_of_ref": "indicator--f5f283cc-02f5-4ec6-b290-d51fe34b4981", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d394f23d-9f42-4542-9de2-e908ccb07cc6", "sighting_of_ref": "indicator--5b305f2f-ab15-443e-a7a8-4cf6d30a1b08", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ee2fb1-2065-4a3f-9c4d-261bcb757ebc", "sighting_of_ref": "indicator--5ddffc02-f692-495b-b3e4-8691d560ec13", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9b7167-ac8e-4778-9534-ee44c3768645", "sighting_of_ref": "indicator--5ddffc02-f692-495b-b3e4-8691d560ec13", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b810c0f-c9fb-48f5-bbfc-6604a0d05cf4", "sighting_of_ref": "indicator--8b794658-7de3-4496-a399-5541a7fb35db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58f127c-9461-4867-8ae6-6f71c21d3ec9", "sighting_of_ref": "indicator--25f703f1-df4e-4b87-b33d-e1bf72801f9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b2dae8-63cf-46d2-91b1-6cd9037828a3", "sighting_of_ref": "indicator--6b568d93-1276-407b-915f-8aba9bc1257f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e635bb24-cd32-4aab-b367-26f48c69e54b", "sighting_of_ref": "indicator--be213897-7ae3-4aab-ab2c-1f2204929b58", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0430a78e-e52c-4524-b486-62edca582fd0", "sighting_of_ref": "indicator--70cd33b9-5dcb-4fae-a739-6453eccaf07d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b81c475-f606-4add-a46a-58da7f72504f", "sighting_of_ref": "indicator--70cd33b9-5dcb-4fae-a739-6453eccaf07d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76aac3a-ab15-4375-99d4-f1d312a02864", "sighting_of_ref": "indicator--8999d9a1-87e7-42a1-acdd-39503031333f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974ed70a-2680-4541-b07d-8b6f2ed964e4", "sighting_of_ref": "indicator--e5f3a559-0c02-4856-9cc2-e214aad94b76", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458a5be8-0023-49bc-aab2-ac03288c3d23", "sighting_of_ref": "indicator--0b6dd54e-6d51-4eab-b51a-0575a4061431", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c913b836-d458-4188-b5e4-852ff03a95bf", "sighting_of_ref": "indicator--00c42b2a-55a4-4c7a-b645-4a8f99500f4c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa017e2a-aa74-4854-a7be-2e538ac168a4", "sighting_of_ref": "indicator--c0d4afcf-a466-4413-bcf9-90fb21ad78db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a80455-dc6d-4498-8ac7-34f0f614b615", "sighting_of_ref": "indicator--22caf2b2-2073-4298-b4c5-8a17401981da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2776143-78fe-487e-ad87-291df7058e42", "sighting_of_ref": "indicator--22caf2b2-2073-4298-b4c5-8a17401981da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e286a4d7-c6a8-41a5-b714-bfdb045fd986", "sighting_of_ref": "indicator--f425e572-9277-4aa4-86ee-6777b25c6a97", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd88c8e-b9d7-4687-ac62-bcc8f6aa8838", "sighting_of_ref": "indicator--3232c6c1-8a38-4b4b-89e7-9a2a308a0a82", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fff7d7-e6c7-4bd2-8287-59b64744e60e", "sighting_of_ref": "indicator--3232c6c1-8a38-4b4b-89e7-9a2a308a0a82", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593f4af5-8be7-4708-9b5e-104f3073f4a0", "sighting_of_ref": "indicator--69dd88f6-58d4-4131-bf92-fe605c371ba6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975c6be8-b3f4-4b7a-9b8f-f58a81522aae", "sighting_of_ref": "indicator--69dd88f6-58d4-4131-bf92-fe605c371ba6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc70036-60b5-497d-ba3c-35a0f46c292f", "sighting_of_ref": "indicator--cb5adffa-e9c2-418c-901c-4067c367ccad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51835103-3ddb-4828-8927-cef996a503da", "sighting_of_ref": "indicator--c028aceb-35e6-4bd6-8f84-701d7d36ef8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7502b6-5f85-4149-abc4-abf6a3d4b3aa", "sighting_of_ref": "indicator--06621048-3e58-47f6-a592-7abe167a3b41", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683bd2f7-9720-4f0c-9b7c-fcea7855c59d", "sighting_of_ref": "indicator--06621048-3e58-47f6-a592-7abe167a3b41", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672e392e-964c-43e4-a31d-8a7f26b5ff2e", "sighting_of_ref": "indicator--45f558e1-3363-4b9a-abe8-6443901215e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50a5262-1af6-4033-9921-78dee1b142b8", "sighting_of_ref": "indicator--57747b93-0fad-4627-9b44-7406efee1c21", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc84a91-cb2c-401e-abb7-7b4dc8ae086b", "sighting_of_ref": "indicator--bbd72f49-5b87-4872-b8f1-56498131db4d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bb9ac8-7045-4998-9871-faff458874eb", "sighting_of_ref": "indicator--d18fb7e0-f917-4b24-b1c5-46115c8d3235", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb71e30-d222-4497-b38e-4294187bc994", "sighting_of_ref": "indicator--d18fb7e0-f917-4b24-b1c5-46115c8d3235", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9822858b-5e19-40a6-9f5f-4f71c2aeba83", "sighting_of_ref": "indicator--065a5d13-7ba6-4331-89ba-b2f3943d4e4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19b7bc8-8cde-4df0-afac-8be890e38a42", "sighting_of_ref": "indicator--233c032b-3b70-4a94-84a3-ed18e497768e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83667cb3-bae8-4bb9-aa54-a483fecf1d52", "sighting_of_ref": "indicator--af663a85-249e-4108-9f0d-7f6f9bd743a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7679a592-483c-4c14-810f-d14543710e3b", "sighting_of_ref": "indicator--7c6df39d-319e-4d7e-a216-8eb61626b578", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6a5f14-dff8-456d-a5dd-1a4bc91d26c4", "sighting_of_ref": "indicator--eddb8878-5626-4905-94e9-ccacd34b389f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8e1471-bf08-42d9-a0cb-b5ba3afd5b99", "sighting_of_ref": "indicator--eddb8878-5626-4905-94e9-ccacd34b389f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deabeca9-0834-4810-b397-f6c9f9ee741d", "sighting_of_ref": "indicator--e2ccdc2c-cc61-49ef-8300-9aa424bdd357", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4ed40f-9ba7-4017-be32-c0565d53d6c1", "sighting_of_ref": "indicator--e2ccdc2c-cc61-49ef-8300-9aa424bdd357", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5c8646-e20a-44a0-9d60-ae61c90fb1ca", "sighting_of_ref": "indicator--267fe450-0b1c-4364-84a8-de659384c467", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9ff57f-d582-4431-91a3-97799206cf40", "sighting_of_ref": "indicator--052aadd6-2291-4e7a-b126-8790199d21e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3094b7-8113-48bc-9456-2afa4def2255", "sighting_of_ref": "indicator--a8c27bb5-e528-4bbf-abed-2e4d3ca85ad7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca62f355-5d3e-41f1-8849-d95c93da04c0", "sighting_of_ref": "indicator--e78e6311-562a-486c-b081-e8a0bdcdc013", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bfdf30-e80d-46c4-9df1-a7de033b3040", "sighting_of_ref": "indicator--17198185-8186-4388-b424-5135de6d984f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678f2b0b-e5de-42a3-a564-23a11037818d", "sighting_of_ref": "indicator--01142e62-8200-4951-af1d-a9223403e6be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695fab73-52c7-4544-b2e0-5fd072cd229f", "sighting_of_ref": "indicator--0bc8938e-2baf-4344-8d33-c9726790b471", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d98df3-c851-4415-9b7f-6854a5d525ea", "sighting_of_ref": "indicator--b1fcb4bf-3b4c-4431-957c-7e258a203372", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a2f4ad-a99c-41dc-8674-8b5601673cab", "sighting_of_ref": "indicator--64b4148d-6722-4e10-988d-6a194364a850", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02ef245-dc81-4453-8054-21ad268f0d3f", "sighting_of_ref": "indicator--259c7834-5a63-4704-b6e7-322e32cebe3b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da98fd3a-484c-43af-bd72-497aed1f8d58", "sighting_of_ref": "indicator--1048cf31-dd5b-443a-8028-13927e828b41", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498107f1-a848-467b-bf23-20b60a47013e", "sighting_of_ref": "indicator--1048cf31-dd5b-443a-8028-13927e828b41", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e69782-29d5-4c4f-a9fe-467a45b266aa", "sighting_of_ref": "indicator--c1fac418-f857-4f36-8ec1-a174c9063271", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c41f347-6891-4283-a4bd-02c7dd890d24", "sighting_of_ref": "indicator--199142af-73c8-4cac-942f-be7c8f0b02b7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0faa122d-6aae-49cf-8bc3-74a6c67675bf", "sighting_of_ref": "indicator--a022cbb6-c4c8-4629-ad20-f3878cf448cb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9860bd8-10e7-417f-9115-96c241db80d4", "sighting_of_ref": "indicator--33d50a52-85f5-4f66-882d-18162b894a56", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fd78b2-707c-41b4-9cdb-938327b1e811", "sighting_of_ref": "indicator--48932768-ce77-4813-a91a-74ec2284237e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e395c653-e1fd-499b-bdd2-fef49ccdf7f0", "sighting_of_ref": "indicator--48932768-ce77-4813-a91a-74ec2284237e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ec5a92-f256-4f84-890f-3cd904e5b6bc", "sighting_of_ref": "indicator--af90f6dd-0d7b-4412-9f23-1d0a31607876", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13b55db-3fba-492e-9f8f-29b69fcfb88b", "sighting_of_ref": "indicator--af90f6dd-0d7b-4412-9f23-1d0a31607876", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e6bc1b-7547-4146-9d32-00f3cef86dcf", "sighting_of_ref": "indicator--f38331b8-9b9c-42f3-9ece-6a513583b0ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bfa6f6-33ab-4cd7-adcc-f00f186c5ba8", "sighting_of_ref": "indicator--64a212f2-1eb1-4552-97c9-d90db9c057cb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7019076-3b65-493e-9564-4a004aaf0969", "sighting_of_ref": "indicator--3a403e61-997c-4f4a-b066-37ed65c9ef25", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15320deb-7f86-401d-b21e-6a8a53e87a06", "sighting_of_ref": "indicator--3a403e61-997c-4f4a-b066-37ed65c9ef25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea741abe-53aa-4888-a201-128ccb174f6d", "sighting_of_ref": "indicator--10718ae0-9512-4607-992d-eb17250392a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870a6c75-8283-44bc-a4b1-3e36aa3f1230", "sighting_of_ref": "indicator--10718ae0-9512-4607-992d-eb17250392a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7367144b-f970-4b79-97c0-c5d1d9848dca", "sighting_of_ref": "indicator--b4bbbf9b-aa53-4caf-9f33-d9dc7ddb4d4d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad97698a-b1ca-486d-8da3-72422155d9d0", "sighting_of_ref": "indicator--bd7821d4-9955-4c60-b1fe-e95d2919436c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4408f3-4437-4d91-ba3b-0f1d04461031", "sighting_of_ref": "indicator--bd7821d4-9955-4c60-b1fe-e95d2919436c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9384dc6b-7033-41b2-b682-c814ea1e2ba1", "sighting_of_ref": "indicator--25abc013-e182-4f54-bd64-23e148e85217", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1056b1-1872-4f92-bcad-ee2eaeb27deb", "sighting_of_ref": "indicator--8bdf6189-2546-4abf-bd07-69cb229437d9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17eb2ecd-aad6-4285-9f06-128f6ce2b83f", "sighting_of_ref": "indicator--fa5b8692-1f84-4cdf-ae24-eef9d989d833", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6ee85f-8893-4ecd-93e0-25b94ae61e6f", "sighting_of_ref": "indicator--eec206e1-daf8-46ff-8b1a-bcd69c418313", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ac94c7-cb09-4248-a403-cf2e3820a7b1", "sighting_of_ref": "indicator--7d526021-30ee-4b17-9daa-3f8ddea7d227", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa5fd77-5aab-45f1-8cee-cfc0776813e5", "sighting_of_ref": "indicator--8c78046b-d1a0-450f-849c-711efe76f9a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443cc75d-9384-44cb-bc6b-616fb27df09a", "sighting_of_ref": "indicator--4bbfdd04-07f6-4c90-b065-b1f80de081ab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2515f71-4dca-4b7f-816a-c89aa7572127", "sighting_of_ref": "indicator--2b9cb94f-31fb-4e7c-8461-a7f606f9336a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e183b6-df91-48b4-9e62-c79d813ca08c", "sighting_of_ref": "indicator--110cd97f-bd43-44e3-802b-7cf8819e2f0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80616c17-ca30-419d-8d5d-8838e49e4d4a", "sighting_of_ref": "indicator--110cd97f-bd43-44e3-802b-7cf8819e2f0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfee3bd-492f-4f55-b3c0-1528e5a4c3ef", "sighting_of_ref": "indicator--ed5b4218-ea23-4cbe-9670-71d43d858a7f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b77c32-2d93-491d-a2b2-d9696115161c", "sighting_of_ref": "indicator--74800dca-ee39-4fdd-bacf-32d5b98ec42e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941370e2-a787-41b7-8ca5-a5f9005616c9", "sighting_of_ref": "indicator--2161ca8b-c5c3-49df-8465-8bdf35dc07ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfad693b-6b3a-4afa-89ad-62e53a6ed800", "sighting_of_ref": "indicator--2161ca8b-c5c3-49df-8465-8bdf35dc07ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b5cafe-92b7-4efe-9a9a-d4aa85c5b578", "sighting_of_ref": "indicator--07f561b7-60b8-441a-b747-e75b3d83357f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97964de8-2c18-4e83-b60a-fee627cf5f6e", "sighting_of_ref": "indicator--aa826ed0-796b-421c-a208-2f25093b6e34", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96327604-4808-4959-9bce-5b5614297c9b", "sighting_of_ref": "indicator--a95226d9-28e6-4e34-90a7-5210b3c3cee3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc8d03f-c9a7-4366-ba71-55d865ef489b", "sighting_of_ref": "indicator--145803aa-5d3d-44f8-8e70-fb9a0add316f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dc3940-2a4d-4e56-b04e-cf6ae7e69723", "sighting_of_ref": "indicator--4f027519-a25f-4875-8fa0-8002fa3e69a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb831f2d-8fc9-4fae-b7f9-8cd19ea61078", "sighting_of_ref": "indicator--24b704bf-0b86-4878-897b-aa4d6c0292c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cb50f4-33af-4f4b-8989-49864d19f041", "sighting_of_ref": "indicator--bbf747c9-8334-45e3-8f24-0be195fd9f82", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18943c4c-a9cc-4f6b-9e05-730bf7cbd8c4", "sighting_of_ref": "indicator--0a24a69d-97b1-43d1-89b1-9f58873a8e03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c0855d-d78e-47de-8735-1959195d6a57", "sighting_of_ref": "indicator--0a24a69d-97b1-43d1-89b1-9f58873a8e03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fd75d4-1719-43ae-9636-04e9c31c0539", "sighting_of_ref": "indicator--169c70ad-f75a-47f9-b786-7284f425c17c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc33722-1a55-417d-971b-7a84c6b01b6b", "sighting_of_ref": "indicator--169c70ad-f75a-47f9-b786-7284f425c17c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edebd5a-97a3-461b-9ab6-3b0e87147d9d", "sighting_of_ref": "indicator--2bcb0f6f-40df-49fb-a0b3-174e7212f46a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5e3788-6572-439c-8ea3-b4cdd17a7a55", "sighting_of_ref": "indicator--7b0296a2-8f61-450b-8962-dfa8b41d922b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf39a54-b9c2-4ba8-9e25-2418be386cac", "sighting_of_ref": "indicator--f8535f16-369b-4cb5-b550-8295dd9aee78", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36577198-f580-4a80-a5b5-e990d7252ebb", "sighting_of_ref": "indicator--f8535f16-369b-4cb5-b550-8295dd9aee78", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85e39b3-1baa-4b0e-9586-c68b88becdf3", "sighting_of_ref": "indicator--72ad02f8-561f-474a-9dbb-2e42a079c8ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f77715-1204-4b11-bc8e-20e7f42d5a6e", "sighting_of_ref": "indicator--33124163-b814-4a71-b6a3-4e33448a394e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9db20c-175c-42b1-8761-ceefb455749a", "sighting_of_ref": "indicator--33124163-b814-4a71-b6a3-4e33448a394e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1798fa17-0543-4f13-a7aa-aa19d021460d", "sighting_of_ref": "indicator--9aa32d82-8ca7-46b2-824d-faebb7726544", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eb8828-1a3b-4538-9edd-f22d31d3745c", "sighting_of_ref": "indicator--9aa32d82-8ca7-46b2-824d-faebb7726544", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac197f2c-0cf3-4546-84a0-f3d9f60fb90d", "sighting_of_ref": "indicator--79134485-85d0-4f19-974c-1b7fbe49164c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebddecf5-68ff-452a-87ee-372e7030037c", "sighting_of_ref": "indicator--4f22ec8a-e174-4a84-b8b8-af04047908bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92d39f5-91cb-444d-ae17-5c8ce39b25df", "sighting_of_ref": "indicator--d1c43e33-3fef-4466-bad5-5162393841d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7510337e-1b64-4ef4-956e-0d1d1fcfd7e3", "sighting_of_ref": "indicator--c1aff968-31f8-4748-a47c-4f5d40470f22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39035776-439f-4ee6-92fe-f2cd434ce152", "sighting_of_ref": "indicator--a351ee48-f6d8-4a8e-8b91-3a5773f60054", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8f23c9-2651-4c22-a74f-2d0f617b8ea6", "sighting_of_ref": "indicator--bb355b6e-e3b4-4b81-9b72-b3b8181bf647", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5310b8a7-b17b-49cc-913a-79f21b82f8cd", "sighting_of_ref": "indicator--acb08a4b-0e47-4650-91ea-f0288d0b9102", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5841bc75-21c1-473a-b451-d435c278d0cb", "sighting_of_ref": "indicator--11a82fb7-5d20-446c-88e9-8670c6dd3d6e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c16deb5-f075-4ca0-9948-ec60c2d0c46b", "sighting_of_ref": "indicator--11a82fb7-5d20-446c-88e9-8670c6dd3d6e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bb621e-8c6c-4b1f-a9d6-7957f529bd81", "sighting_of_ref": "indicator--89a43186-9924-42c7-9987-6ab121f3fa06", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6eb0e5-86f3-441c-9d0c-8f1b910b0bdf", "sighting_of_ref": "indicator--c69b9040-5643-4984-88f3-5a9b9b101a4f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa29059-323e-40d1-b082-943319a766ff", "sighting_of_ref": "indicator--c69b9040-5643-4984-88f3-5a9b9b101a4f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60a27a0-4f8a-4d1f-a4e1-6c36b6fbfef2", "sighting_of_ref": "indicator--274430d4-89a2-4e34-932c-9cb05cec7be8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724c6e8f-14f1-47b3-b1cc-92baf296fd1e", "sighting_of_ref": "indicator--dc316021-7a90-4451-ac08-bafc5ee33a89", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625ed441-21bb-4266-8a16-a2c52fd6ecad", "sighting_of_ref": "indicator--47196a26-ee09-4216-96d3-1e750b370494", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e05a468-defa-422b-9d4b-aacf784ee2eb", "sighting_of_ref": "indicator--66ad9f58-1584-4557-84aa-2aaab8cadfc8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62f8c4f-e73d-438f-9ecf-4d59bae99bee", "sighting_of_ref": "indicator--4ea36a62-6d27-4bf8-96d3-39be3e701e73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21208378-14f3-4cfb-a458-16b0a909448e", "sighting_of_ref": "indicator--acbe1422-ab18-4225-8a63-f00fec018a40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1b8473-da7c-429c-85db-d55e27896ffe", "sighting_of_ref": "indicator--6ac157ad-f299-4ec2-97c4-3e6b1c27c5fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba26d72-d85e-47ec-894f-2abb3a817fa5", "sighting_of_ref": "indicator--0ed7cc8a-f1aa-4e0d-a8ea-119c0b39cfcc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648fa76d-9503-4f28-89a1-1f204f2011bc", "sighting_of_ref": "indicator--bdc37901-9356-45bb-aca7-eaff2986830d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d935ed8-25d2-480c-9078-0072daa4682f", "sighting_of_ref": "indicator--bdc37901-9356-45bb-aca7-eaff2986830d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432457a4-6ef7-4b20-b275-659a16dfc78b", "sighting_of_ref": "indicator--b8b749e2-d9c5-4997-b688-c097231e74ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026f0511-ded5-4a65-8070-ed81cb8e57c1", "sighting_of_ref": "indicator--27f50313-b9fe-4f30-ab5d-6103cad90d17", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2172f83b-373c-4882-88d6-fb8895f2ba79", "sighting_of_ref": "indicator--93207004-c253-4fb4-8a9c-6c96cf095a8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cff026-4e77-4710-b452-07adfb200992", "sighting_of_ref": "indicator--868949e9-5768-4e71-aa56-4ae8b90d23ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205eb5d9-16a9-432a-bea1-fdb81bceaef8", "sighting_of_ref": "indicator--b8ff66bd-2910-4a39-8177-59e0e69b3d02", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56b6c02-519d-4c1f-ab9a-ef968df24d28", "sighting_of_ref": "indicator--d020bbfb-5f2e-4540-8f76-ad3804c4516b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4a704d-6e08-46cc-92b5-814e283af1d0", "sighting_of_ref": "indicator--5eb360db-0929-4bad-a36a-17d567c296cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b91180-1e91-4c25-86ea-61dde19bf3a1", "sighting_of_ref": "indicator--62a865fd-ad76-4c97-9cb0-f8b9b736d0ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d74ada-5a37-4fb8-9e39-bf2679069980", "sighting_of_ref": "indicator--59a1c81e-bfbf-43a4-83d7-28802884d64f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753525ed-40c7-4b5a-9424-66960bab1a52", "sighting_of_ref": "indicator--830836c7-a5eb-4a4e-bd44-bd7cc816af79", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dabaf30-dd5a-4eb9-a704-14d4d24fa2dc", "sighting_of_ref": "indicator--9e057c66-a8b5-4764-b7f9-b3c9b00a16b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57e29e0-1afd-4dfb-937b-062cc77be299", "sighting_of_ref": "indicator--0fa0c192-6f8f-49c3-a317-4d0012a461c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb33d14c-2e22-4178-b30e-fee995d15b82", "sighting_of_ref": "indicator--24c1e2fd-0608-43ba-91c5-594f1f560945", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66a79bf-9343-452f-9060-f503fcbeebca", "sighting_of_ref": "indicator--56df8e7d-e92b-4eed-b81a-50bd8bcc46b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11da019-964d-4be4-8668-ee4bd202ce40", "sighting_of_ref": "indicator--e80fa33f-07e8-4d4b-8e10-4e9ca0ef28a0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f63b2d-1fba-4e80-b896-dbbde64d5245", "sighting_of_ref": "indicator--9f50f80b-7157-4a71-8636-051bd1c13e04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691ad186-2d71-4a63-8845-4b9bc305f340", "sighting_of_ref": "indicator--fb46dc82-8e30-4daf-8c35-ee610ebb9068", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f05eac2-54a6-4162-9cc9-b6d5cfa7794b", "sighting_of_ref": "indicator--509de03d-ee65-4ec9-88df-f706afa5db98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8208af4-0899-424b-9ade-f2068b110a46", "sighting_of_ref": "indicator--509de03d-ee65-4ec9-88df-f706afa5db98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f8edfe-ebd9-4f7d-b33b-19c0d5d232c5", "sighting_of_ref": "indicator--75ecde8c-6b8f-442e-be81-4ca0b7e42101", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ca1f24-2a52-404b-8fc4-4a8eaf737aca", "sighting_of_ref": "indicator--75ecde8c-6b8f-442e-be81-4ca0b7e42101", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587b7494-64fa-41be-b1ee-5f099eb804fe", "sighting_of_ref": "indicator--73e853a3-7b18-4326-b069-8a581e3ca1f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8235c541-a62e-4220-b121-9f2c3c7893c8", "sighting_of_ref": "indicator--8a8621a9-61df-47dd-9a3c-75ea5637093c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd886e6-73e7-44b9-93c7-b2dd718ff4a3", "sighting_of_ref": "indicator--93196648-cab9-4f5d-9bd7-de9839de604f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26b9fb0-a2b8-4d69-9b4b-c4e167b60ffd", "sighting_of_ref": "indicator--373f3519-33d8-4e10-b64e-b2d0688de2dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1658a63-d63e-4b01-8689-f57340a85a19", "sighting_of_ref": "indicator--21129cd2-c4bc-4504-a7bd-1dbb2f7f706e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9094c3-8a5e-4104-899d-bf9d0919a7c4", "sighting_of_ref": "indicator--0282d958-861b-4001-8d22-6b3c715589b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9952c731-3362-4bfb-8f47-467dadf67885", "sighting_of_ref": "indicator--bc946de4-52a5-4151-b032-98d6c4b7b13a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1624ac2-1c6e-4d1c-8daa-f9d9dd2a7c3c", "sighting_of_ref": "indicator--e83fce15-2cc7-4bcb-a79c-cfb7184388f5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d379f4d-d3a4-4175-b3fd-642efce65ee0", "sighting_of_ref": "indicator--4901efc5-e321-4f89-8da8-82825575e959", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5a8038-3a42-4e4e-9ba2-0d9e9c00f513", "sighting_of_ref": "indicator--a37e7b28-2337-4f12-b3c1-e882608d6ac1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba0921e-7e0a-4154-814e-77703a5c6b20", "sighting_of_ref": "indicator--ef811646-9681-4068-a7c2-71b713d65045", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060f9552-6373-43fa-aae4-986f243648b8", "sighting_of_ref": "indicator--c1413f86-4b46-49b5-a4c6-ee0ccfeb15e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c462dc-a7f5-46ba-a55b-f724170c6a5c", "sighting_of_ref": "indicator--12dd57ef-5a5a-4c70-8c3d-3f081b9d6d44", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbc973c-853b-46fa-9f3a-3f56d3c2eb95", "sighting_of_ref": "indicator--1626f98a-a1ea-431d-a6d4-0159a8814efa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8665d6-4ecf-41a9-adfe-81dcb0771f82", "sighting_of_ref": "indicator--bc8b8218-cff1-4553-ab94-114210614d6b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363929ce-1a52-4a1e-a18a-1e92b520f6f3", "sighting_of_ref": "indicator--14b557b9-3272-4ec9-a9e8-3ec2b12c51f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0fa0a2-abbb-4b7e-bdf0-029ff8f79065", "sighting_of_ref": "indicator--795b6848-4efa-4fca-9403-f1775f213b5c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538e0ad7-f38b-409f-bf4c-96f2e9c897d9", "sighting_of_ref": "indicator--30be1a98-9ffa-481d-a035-2c599f514ba3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb6aaef-9d09-43d9-8112-5eb35a6ee814", "sighting_of_ref": "indicator--5cbb374f-c5ca-411c-adc8-cf91b6c6f285", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79f2af8-f804-40e8-a6e6-7072bfae4e60", "sighting_of_ref": "indicator--710e4f25-5116-494e-bf7a-a1cd7ab069dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece03493-936d-4b9b-8e51-aaee66aab7d4", "sighting_of_ref": "indicator--de64463c-dc30-443a-b581-e946f8d908f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360e9edf-22e0-41fd-97d3-87a67357abb1", "sighting_of_ref": "indicator--de64463c-dc30-443a-b581-e946f8d908f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24201e1-c499-413c-924f-0c0e27da618a", "sighting_of_ref": "indicator--298e0255-ad79-4395-abd9-b19ee0a76008", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b907b5c-8ca8-4cce-a024-28a77eed4be8", "sighting_of_ref": "indicator--298e0255-ad79-4395-abd9-b19ee0a76008", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35571367-995e-4d25-809d-d0c8b36c9cf9", "sighting_of_ref": "indicator--8d86e5e7-88a2-4c27-9e90-ca50b9565184", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed8c746-084f-48a2-aca8-5f02661f0956", "sighting_of_ref": "indicator--8d86e5e7-88a2-4c27-9e90-ca50b9565184", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e031680-f112-4a21-a2aa-777225db5fd0", "sighting_of_ref": "indicator--6d5316ed-680d-4915-8015-83851a97c3f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83603e07-c8bf-427b-a0e8-5b086e30e2e1", "sighting_of_ref": "indicator--2ac07c4e-83fc-4079-9ed3-61521186888e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1974f512-38ee-49e4-8108-894c763506f0", "sighting_of_ref": "indicator--2ac07c4e-83fc-4079-9ed3-61521186888e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46758b26-e4b8-4350-8e8c-83a7e94b79a8", "sighting_of_ref": "indicator--6a6e926e-c260-4ff3-a18d-ebc1c2c996ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8c2711-e9f6-4391-80da-8095e3809948", "sighting_of_ref": "indicator--6a6e926e-c260-4ff3-a18d-ebc1c2c996ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b3aaf4-08a2-4214-9320-6a40130b340e", "sighting_of_ref": "indicator--c05a6cdf-26a2-456f-969f-54de9223b1cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866e9659-3d64-444f-907d-32f63398cbe1", "sighting_of_ref": "indicator--c05a6cdf-26a2-456f-969f-54de9223b1cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386842df-2664-438e-aaed-5a096d7e58e7", "sighting_of_ref": "indicator--758ba0a1-f646-440c-a557-e74167c2378b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70152378-584e-4658-81fb-e19d98dedf72", "sighting_of_ref": "indicator--758ba0a1-f646-440c-a557-e74167c2378b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db10930-b5c6-4570-a763-72b49767a1fa", "sighting_of_ref": "indicator--b7df5273-1bf7-46b8-875e-a6133ffa956a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcead66d-ec6e-48fa-98dc-4753955b75e1", "sighting_of_ref": "indicator--b7df5273-1bf7-46b8-875e-a6133ffa956a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61317eea-6432-4621-afd5-fee3cdae16e9", "sighting_of_ref": "indicator--fedb9b9d-5b6a-4e10-bfb3-3da4029da22b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4dcca2-652b-414f-bd70-f3416673f566", "sighting_of_ref": "indicator--9b3b4f65-702c-4def-85f0-ca1f23ce3b22", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f173310-5e2b-47a8-a35f-a036648477c0", "sighting_of_ref": "indicator--9b3b4f65-702c-4def-85f0-ca1f23ce3b22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f12246a-eeb6-4775-b623-30d35a456f58", "sighting_of_ref": "indicator--cbe04d99-130c-4fe5-818b-e0838c6d0378", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd439830-c241-4ceb-a12b-1d6eb44dfca0", "sighting_of_ref": "indicator--cbe04d99-130c-4fe5-818b-e0838c6d0378", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63424d9f-cab5-4f6d-ad5e-55a14f375116", "sighting_of_ref": "indicator--222c7aca-a0c6-4892-b4f5-fc8e61ca568c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549a6796-a472-488a-988c-9d55807f5aba", "sighting_of_ref": "indicator--222c7aca-a0c6-4892-b4f5-fc8e61ca568c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f864ac6-3e2e-4ff9-ac50-8980dc9152c3", "sighting_of_ref": "indicator--df1e99b1-b549-46cb-8f28-d90ee0f7714f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02ce64b-70a1-4370-8afa-0b4329d1577d", "sighting_of_ref": "indicator--df1e99b1-b549-46cb-8f28-d90ee0f7714f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a59454-316e-4ab1-9d47-431cde227405", "sighting_of_ref": "indicator--fe0dd618-1aa7-43fc-b975-d33ab314b492", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d769ed3a-d821-48eb-a538-8ce94e53fcdd", "sighting_of_ref": "indicator--fe0dd618-1aa7-43fc-b975-d33ab314b492", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c220db3-8375-4cca-b12c-779b84ce3c40", "sighting_of_ref": "indicator--1d725bcc-fd4b-4c29-8f34-d12fbcb3b13c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b61c341-1e2e-4312-a42e-fb101eb98d7a", "sighting_of_ref": "indicator--1d725bcc-fd4b-4c29-8f34-d12fbcb3b13c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b30cb1b-e63b-454b-924d-ab00f7857fb3", "sighting_of_ref": "indicator--9da84c27-77c9-45c7-81a9-a7e8038b0eb0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4e26ed-aa8f-4df9-851c-66e19b2f2716", "sighting_of_ref": "indicator--f548af38-24e7-47d3-adfe-3b9af588fa71", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0999e5-96e3-4f39-9c12-775fcaa16543", "sighting_of_ref": "indicator--a1755349-d4d8-4823-95c7-d6649361965e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9563ae-2469-4651-bdfb-f8208acf1f2a", "sighting_of_ref": "indicator--39b996c1-d385-4864-b475-e5f0dac7d8ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb14c17-fc7a-42fc-87f7-55120b5fced8", "sighting_of_ref": "indicator--5106a743-7c45-4d2a-96fb-b1f3329eb33b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d30ab93-0108-49b0-9892-ea9c697c780e", "sighting_of_ref": "indicator--6d4d13b5-c557-4ace-a1b6-99176c06318d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a15effe-1c48-4b98-8b51-d0c348955663", "sighting_of_ref": "indicator--03bc92cd-92b8-4aa3-874b-033100d0fd4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba0f07c-80d8-4646-a50e-27665c66ffce", "sighting_of_ref": "indicator--d12fd9fa-7015-49d0-a240-efe4d66f2601", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0ae60a-0b71-4167-a3a4-cb4f61acaf62", "sighting_of_ref": "indicator--760472f5-4533-4705-b10f-6b5790e72c74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd9014b-05ae-4f8d-9305-b64a61edeb8d", "sighting_of_ref": "indicator--7287d28d-8966-40a4-b2c8-9b1794550de7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed0e9c3-09cd-4ea8-8065-b1f4dbea27e6", "sighting_of_ref": "indicator--6374592d-7ebf-4762-902f-9cca85f06d22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d837d7-22aa-4fb4-b4af-ed6ef49eb1d5", "sighting_of_ref": "indicator--1440d052-208c-4476-9d6f-fadd5cd36689", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f097b0dd-67f3-4d52-92f6-3367ed12748b", "sighting_of_ref": "indicator--4a94388e-1f81-4a37-b4c6-85cbdf975557", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c7ff05-ff59-4d78-8a5f-a2bbc531f73a", "sighting_of_ref": "indicator--c9b80d94-188d-4034-b1f7-e7b28e740274", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8aa4ebc-1dbb-4b6d-80b4-f4b3577d0003", "sighting_of_ref": "indicator--bd685ec1-d663-401e-a8e5-7864fbcb06de", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb786b3-f638-43d8-af0a-7d734273d295", "sighting_of_ref": "indicator--a68489ce-9b77-4b69-a380-260f43f6f9f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3462e33-a872-4970-af19-31fa21fa1a32", "sighting_of_ref": "indicator--0eed568d-4673-453e-ab1e-0b558344c20f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d96230-8ddb-4417-82c6-456af97a7705", "sighting_of_ref": "indicator--bbf148ed-7cc2-4fa7-8c0a-6f38e6fa7851", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f89531-e9d2-44aa-96ee-ae29afa633bb", "sighting_of_ref": "indicator--747fe7c5-76a0-4c4d-96f1-ef437f9a6796", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74824241-0958-4b83-9a2d-56864e2d0a19", "sighting_of_ref": "indicator--df9469c3-00f3-47e7-ad77-a04cc58d794b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d4c104-a1e9-4ea1-9567-f45662853caa", "sighting_of_ref": "indicator--df9469c3-00f3-47e7-ad77-a04cc58d794b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51835dae-63aa-45fa-9c11-7b0256297ea9", "sighting_of_ref": "indicator--bc287f3b-eeaf-4fa3-a167-b395af57fdb4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fddcbe-a209-43a9-ad24-5bc1c450c316", "sighting_of_ref": "indicator--c5c5f689-bddb-4fb4-9aec-ee8dbc24f200", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cabae5-e610-4044-8e8f-f0b495d9181f", "sighting_of_ref": "indicator--363ad3ea-79d4-4c06-b60c-217ae7f35a37", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0998facb-e3b9-4b4d-b63d-7f78f52007ef", "sighting_of_ref": "indicator--363ad3ea-79d4-4c06-b60c-217ae7f35a37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ede10a-1118-4cb5-9c7e-8d300557d779", "sighting_of_ref": "indicator--5c04e535-b78d-4ae4-9341-9f73d2914069", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c9cb74-aa2b-4118-8361-b0c0073a23a5", "sighting_of_ref": "indicator--5c04e535-b78d-4ae4-9341-9f73d2914069", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08eae212-a14f-4990-b88d-7f1b20725526", "sighting_of_ref": "indicator--92a3178d-ba1d-43d1-ae59-1e6b24a518c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0027cb36-5ec0-4bed-a614-86e206bca62e", "sighting_of_ref": "indicator--054bd6b7-36c9-44df-807c-8236d8b6713f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99afad6e-9016-44f5-8db9-e170a8a62129", "sighting_of_ref": "indicator--054bd6b7-36c9-44df-807c-8236d8b6713f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6da5cf-51c3-486c-aecf-cf0c20462b32", "sighting_of_ref": "indicator--18f8c95e-ec0a-4cf0-aa07-f297cb3cc4b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fee4a93-7a36-477d-bee1-8e24ec602368", "sighting_of_ref": "indicator--960ed98c-0ef5-4599-82bb-17775295a771", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de1c95e-0a7e-423f-9af9-c12a016aa798", "sighting_of_ref": "indicator--f0b621c2-3a89-43a1-9778-e7d6212d6161", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dce5720-de48-4f38-9b69-c5c80609e449", "sighting_of_ref": "indicator--94ce7e63-a4c1-49dc-8cff-a655ebbee411", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f6601b-75a3-4636-92a2-f10518fcf142", "sighting_of_ref": "indicator--2ed023ed-57cc-42bf-a089-d0452e98abe6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b721d896-d041-44ce-b382-3d5ef56348ac", "sighting_of_ref": "indicator--62b58506-bb44-4957-b03d-dd85d6e225f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a06de97-488f-405c-96c1-b99a771924fa", "sighting_of_ref": "indicator--5d6cfd00-4310-437a-86d9-0fadc52db1d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe27c2d-5a71-495a-a86a-16e5975eaf1a", "sighting_of_ref": "indicator--b7a9e2af-9e89-4867-b763-6fb2f2f22365", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b94ba4b-bc39-42b2-a8f9-a99f8a755463", "sighting_of_ref": "indicator--daaf4be7-b9ac-447d-884f-23f2d8164ea7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fab4429-f4ca-497c-948e-a0e3668f9b10", "sighting_of_ref": "indicator--1d1a6cf5-aff9-49f8-bb1a-79f5e041d9ab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef97718b-67e5-4c10-9eea-42420d8728bd", "sighting_of_ref": "indicator--1d1a6cf5-aff9-49f8-bb1a-79f5e041d9ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400e0a34-171a-43e6-a88d-5a38d68a545d", "sighting_of_ref": "indicator--63767419-c066-4f55-be20-e2a345d55888", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc76028f-d6c1-44d1-bc98-27b2da3a1195", "sighting_of_ref": "indicator--7dd3fbc7-df42-4d36-b470-61b269777db7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed657a3-11d1-41c4-8a77-3481d445bc0d", "sighting_of_ref": "indicator--eb8b75c6-5894-4b62-bde1-6767b0d7e941", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6892d9-08f9-4f4c-bb00-0e234cff6b35", "sighting_of_ref": "indicator--61bc4fb4-48d1-47af-99eb-8cd0edb055e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a9e1f4-9ea3-4400-ac00-f301b617c6db", "sighting_of_ref": "indicator--ff2be211-0b59-4af6-b6fe-7f919519cdb5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9843b9d6-ef9e-484b-9bf6-93209e2dcbf4", "sighting_of_ref": "indicator--a13b9174-65d2-439b-b8f3-5f23ea278bbe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393461e6-f8a4-42af-8c23-f5e2bbddd888", "sighting_of_ref": "indicator--b1ce3081-1e9e-4fee-b6d4-f4d795a2fd4f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902c898e-79c6-4348-8d01-55d1b1ee60be", "sighting_of_ref": "indicator--e8243b5a-19ee-49d4-a51e-14ace327831e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5ca644-d658-4ec6-815d-dda211e09d4b", "sighting_of_ref": "indicator--7f7958d5-79bb-4210-8233-7973f8a301ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1bdacf-2b9b-4eed-b06d-d3d08baa5977", "sighting_of_ref": "indicator--95f68f2d-bd99-4fe5-97d7-9a9cc3d2dcd4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c048ad1a-b58c-4a5b-8d72-64087981a93c", "sighting_of_ref": "indicator--ed4b30d1-c00d-4360-a7c3-ead98140f51e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d524ac-5c56-41e3-9528-bdc7ee73d637", "sighting_of_ref": "indicator--9e1a89d2-f555-4d90-9e1b-33ffda2f4163", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae844c8-f08f-41a1-9300-4a4249a97c48", "sighting_of_ref": "indicator--f9defaa2-9c37-4f00-b1cd-6b30d43ce8f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fc3c62-8120-41f4-ad66-a79d6e76ea8d", "sighting_of_ref": "indicator--282e1ad8-eb3f-4d3c-8013-c25b742ff843", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fafa182-f122-420d-a254-9ac489959c63", "sighting_of_ref": "indicator--cf4dc371-7bfa-48a5-91ed-5f7b1e97f4cb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e929bd78-7ab9-41fd-8460-90b597ec5f60", "sighting_of_ref": "indicator--84827e18-cf21-432b-9e49-e286af03de25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302c0505-bac4-470a-a182-5c89d8959698", "sighting_of_ref": "indicator--868fb3cc-f471-4783-a0ac-5ee3a0baaba4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713e927f-506c-474b-a992-8982dc0ac516", "sighting_of_ref": "indicator--4afd85ef-2b7f-4e89-984f-e5017de22dbf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfa9637-83a5-45ca-bfa4-6b11829e69a0", "sighting_of_ref": "indicator--8e70a435-a4ef-4909-bce3-58ac0419f0b0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406bb7db-ab13-4580-ae9b-393b4ded7c87", "sighting_of_ref": "indicator--c6993092-1276-4282-b363-1e057c7bd555", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4a0bc4-5841-416c-b5cd-fb832225b3a3", "sighting_of_ref": "indicator--c6993092-1276-4282-b363-1e057c7bd555", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a7ddef-b2b0-45a3-8bee-5ef68165697f", "sighting_of_ref": "indicator--aceb8d07-1359-48de-8c48-233fae15da5c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcfb3e2-c204-49fd-b954-f9262e5471c1", "sighting_of_ref": "indicator--1194e908-5c48-4da9-a68d-4a35489b4105", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442f59ff-30b0-4434-a2ca-79adfbb12582", "sighting_of_ref": "indicator--87dc6b0b-35e2-424c-8d44-44cb5984188a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bc84c4-3783-4597-bf51-eb7e6ba8f6f1", "sighting_of_ref": "indicator--fd9f865a-3f08-4e8a-93e4-c7bcd6794cab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f48159e-c6a4-414c-80d0-31c5839b6e70", "sighting_of_ref": "indicator--76d839b1-bdea-4798-b1f7-6c47b1ac5721", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca216d22-bf0a-4318-a399-0a5713fa8ca1", "sighting_of_ref": "indicator--3a245b0d-e44e-4969-8ad2-c7e761c6d435", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce22f3e9-b492-4ee0-bcaa-d63ae55515ee", "sighting_of_ref": "indicator--c6fb4cfd-41d3-4d48-9a96-64a9f9e11d34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ff7c76-bbad-4040-b52d-5743e28401de", "sighting_of_ref": "indicator--dd4401fc-728b-4973-8294-f555ed9a3da1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65977f5-ba55-4ed0-9476-957b6e4a9655", "sighting_of_ref": "indicator--17b0ed98-e1d4-47cd-87f6-e39e64d67032", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139d6527-2eec-412a-8422-c5ae2ce13a46", "sighting_of_ref": "indicator--819e9c4a-699f-4b67-940e-0fcdf8da474a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2822cacc-dfc4-44ac-a284-abc9adb5c24c", "sighting_of_ref": "indicator--16aaef7f-af74-4a4a-9d5f-316e833b019f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f982c6-1b3c-4052-bdc8-f65f75ae6c44", "sighting_of_ref": "indicator--16aaef7f-af74-4a4a-9d5f-316e833b019f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a33e555-95a2-4c48-bc8f-0c6f3c9c995c", "sighting_of_ref": "indicator--8d71a893-dcb4-4451-8b4c-c81b797aaf15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba723cb-6f36-4441-aea4-05126342cb6f", "sighting_of_ref": "indicator--8d71a893-dcb4-4451-8b4c-c81b797aaf15", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0b6d5b-5272-4ba1-b477-b8cd72119659", "sighting_of_ref": "indicator--53676b4d-ff0d-476b-a451-813a44394f4f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ad6d17-e902-4483-8ee8-546b09187887", "sighting_of_ref": "indicator--53676b4d-ff0d-476b-a451-813a44394f4f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8e59ab-8d38-4bde-a250-38d174ddb21b", "sighting_of_ref": "indicator--75dc118d-987a-43bc-a139-1c5b13062926", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b3e8c2-760a-4f63-a358-b326e83400b4", "sighting_of_ref": "indicator--75dc118d-987a-43bc-a139-1c5b13062926", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9537ca82-d912-445f-b66d-92260adef3b7", "sighting_of_ref": "indicator--fc37f3b7-e61a-4cd6-9d9b-2408ed430caf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1197ee34-949a-42de-a230-9a94440b7860", "sighting_of_ref": "indicator--fc37f3b7-e61a-4cd6-9d9b-2408ed430caf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dbbe09-ad34-425c-a146-a4f49fcbdc5a", "sighting_of_ref": "indicator--ac7658f3-8106-49ff-8b51-4ca37fdb5d69", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a8d446-b03f-4e9c-a0a1-381e7e429807", "sighting_of_ref": "indicator--ac7658f3-8106-49ff-8b51-4ca37fdb5d69", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac92ab6-b06b-45cf-b63c-1c492cdcd890", "sighting_of_ref": "indicator--85e04a1e-33c3-4540-9def-76fdfebd1090", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e00017a-cc5d-49de-88b5-500c251701df", "sighting_of_ref": "indicator--85e04a1e-33c3-4540-9def-76fdfebd1090", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb62a52-8345-4866-9334-cc29faa32d1e", "sighting_of_ref": "indicator--ef237d1a-0b40-4616-842b-f09c823c90e5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bebe72-1050-4099-b5e8-6f904fe1d1fd", "sighting_of_ref": "indicator--ef237d1a-0b40-4616-842b-f09c823c90e5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09af614-984e-4b4e-b304-6793d912d6dd", "sighting_of_ref": "indicator--168a69eb-bb8a-4c18-bee7-83274740c42c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fd480f-c04b-40f2-9a59-e22c8682f1b2", "sighting_of_ref": "indicator--dd633175-fbb9-42b1-80ea-8aa612ca15c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb79db6e-645d-4608-8864-1ab770f256e5", "sighting_of_ref": "indicator--dd633175-fbb9-42b1-80ea-8aa612ca15c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a39f1d9-dbcd-4929-875f-72093ade1fef", "sighting_of_ref": "indicator--ef5e7b13-7e24-42fb-a59d-23150e701bff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc41ecaa-b15a-462d-ae4c-7f120decdfed", "sighting_of_ref": "indicator--2fcb3cf0-9699-4ab7-96fd-2a8af16df4bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276ef253-1dfe-4708-906e-8b47708711bc", "sighting_of_ref": "indicator--2fcb3cf0-9699-4ab7-96fd-2a8af16df4bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bade9aee-79fb-482b-8a98-fa44e62e2ca6", "sighting_of_ref": "indicator--5f9b6ebc-9c92-4ab7-983d-575933fa4bf4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4f0a2b-d567-48b8-818a-cec9909f7886", "sighting_of_ref": "indicator--b1d9c9d2-ed62-45fc-bd2f-8fc8e890b26f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7134188b-7c70-4973-84ce-9eba9ad1c9e0", "sighting_of_ref": "indicator--b1d9c9d2-ed62-45fc-bd2f-8fc8e890b26f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380b0ea7-ab7a-4bcf-b6a0-4422b1f9e0ac", "sighting_of_ref": "indicator--450391f0-9db5-45c1-ac9b-4fb7c6f303c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b572c217-81a9-4094-a564-d282ec1d3f93", "sighting_of_ref": "indicator--450391f0-9db5-45c1-ac9b-4fb7c6f303c3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2f444c-fe3d-4f7d-a535-825f9c02243f", "sighting_of_ref": "indicator--14fa0803-f2be-44b1-a8bb-c9e2bdaf77ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1111df-629e-4ad0-92da-f294c6a20fc6", "sighting_of_ref": "indicator--df9b6562-bcaf-49c1-b1a7-0e3681531d22", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71900dc-d890-448e-b568-1b79940ec4d1", "sighting_of_ref": "indicator--df9b6562-bcaf-49c1-b1a7-0e3681531d22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92eaf934-29ac-4a27-85a2-fdac00f570b8", "sighting_of_ref": "indicator--a271a3e5-3b43-4f35-b5a1-a8c5f67e6718", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e98c30e-355f-411c-a20c-66c1b11dd560", "sighting_of_ref": "indicator--a271a3e5-3b43-4f35-b5a1-a8c5f67e6718", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc3b50e-68b7-4f5f-a03b-caa6db1b0a89", "sighting_of_ref": "indicator--0487be8e-dfd5-434c-9852-fa383d6cc600", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedf5d99-eb39-4ab6-a310-1227a29b7c71", "sighting_of_ref": "indicator--0487be8e-dfd5-434c-9852-fa383d6cc600", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b55a08-586e-4a35-b425-7b9cd4848d67", "sighting_of_ref": "indicator--4929503d-1ed3-43a8-9b6a-d69abd651dd6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b707d939-2f67-4ca1-97c7-f2f512d5fc03", "sighting_of_ref": "indicator--4929503d-1ed3-43a8-9b6a-d69abd651dd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d642b5-19ec-4b12-bbaf-619f31009150", "sighting_of_ref": "indicator--fbf709f7-b354-4797-9446-ff364b622758", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a20332b-3c81-4e3a-b061-ddaa93b814cf", "sighting_of_ref": "indicator--3953cbcf-04a0-4389-b9c4-93be4b79694b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a3d547-7876-41b1-89f0-89c217e70d13", "sighting_of_ref": "indicator--833fce09-7f99-489e-80c5-e546bbbe8828", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a2771a-c2fe-4e25-a090-e45bbf79475f", "sighting_of_ref": "indicator--87d3a4cc-c235-40d6-bdd4-8b0cb6d9de10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30930c2-f169-4be3-a7a9-0cae2e740f08", "sighting_of_ref": "indicator--e378c7fb-f22a-4e32-b8ca-07d9f8a75f26", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3641b2e4-1acc-495f-a00a-3687edaadbe6", "sighting_of_ref": "indicator--a9360939-f108-4b59-8ea3-241c06366faf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8387d88a-91e2-4a6c-82f0-1a38df8c83c8", "sighting_of_ref": "indicator--344bc146-81c2-408a-88f7-77d2bfc70c81", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08886e57-6602-4d17-8ff3-a3913191d3c0", "sighting_of_ref": "indicator--c7b152d8-7606-4ef3-b866-b5a04b106440", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef817dab-9290-43d3-a10c-201dec5139c5", "sighting_of_ref": "indicator--02335883-9bc3-4329-920e-15ac8a1e6639", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22d0694-cc8b-4fae-8c90-1163e9b5da29", "sighting_of_ref": "indicator--ffa91b0c-467b-481b-b069-a1817dd2ea90", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f17401-2577-4fb2-a84c-5ae321feefce", "sighting_of_ref": "indicator--d195676d-ffaf-40a3-9c5d-a22509f36e5b", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582a61c3-6f04-4b15-bddf-e9dce165170b", "sighting_of_ref": "indicator--6598f0ee-9608-4cc9-bf73-71740d9d5e65", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80846d48-1b5a-4622-b984-50d981ea641f", "sighting_of_ref": "indicator--55239617-88b9-4e9c-a00f-fce327853905", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e5bcdf-41f4-4e98-998b-2405f9e99e29", "sighting_of_ref": "indicator--c70a611c-4bf8-4eb6-8a4b-cfe12a9c6e63", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8478bb2-01a3-4760-adde-134b8b279780", "sighting_of_ref": "indicator--8f0b338c-717f-4f55-90d0-7cf5ab32247d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058c3ad4-33df-4471-af1f-f9ed6f32095f", "sighting_of_ref": "indicator--8f0b338c-717f-4f55-90d0-7cf5ab32247d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38136cb-4d6f-4bcd-836b-d4c8ab36b934", "sighting_of_ref": "indicator--4a9727f5-5767-4717-bb07-0c23aa0d71f7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2fd155-0d65-48e2-89a7-53ad4f45ee5e", "sighting_of_ref": "indicator--b05853a9-2410-4586-a165-7466222a4470", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d595613-e09a-40a4-933d-1990342e993c", "sighting_of_ref": "indicator--a53f128f-08a3-4519-b0d6-66c37d9452c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54c0c80-c5c7-4e3e-b9b9-7f6be08d02fe", "sighting_of_ref": "indicator--8e3e48f1-164c-4eaa-b979-5dc38a0926a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28538c6b-c03a-4b59-a5cc-d901528d3637", "sighting_of_ref": "indicator--0bf20f31-c956-41b6-87cc-b55c7a4ec37e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d8f725-2fbf-4e98-846b-d989c4b12464", "sighting_of_ref": "indicator--5dba3c70-6900-46e1-a039-fe1edc16e562", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902bbd41-5322-4f4d-8f62-b53f95580b7c", "sighting_of_ref": "indicator--b272aeaa-ebe1-4c0c-b60f-79286285e4d9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1af9f2-0045-49e3-be74-94ce414e8c5e", "sighting_of_ref": "indicator--b272aeaa-ebe1-4c0c-b60f-79286285e4d9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782757fa-c3c0-4684-b635-1e76d5cc8c1d", "sighting_of_ref": "indicator--16488488-7ed6-4343-aae2-e79cf14350c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd04251f-6b5f-4758-8c61-aae5af12d479", "sighting_of_ref": "indicator--f69b7bdc-38af-4667-be3f-ef26575591ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a652d7-df10-4fa3-a571-d08cb2384b85", "sighting_of_ref": "indicator--f69b7bdc-38af-4667-be3f-ef26575591ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20890ebc-2889-4cec-8174-b2bba29073c6", "sighting_of_ref": "indicator--67c3d040-a252-42fa-b535-38e3a348669a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2eb43f2-f600-4a21-96b3-ec9005b90ce5", "sighting_of_ref": "indicator--a17cd8e9-8410-4307-9dee-facad9a057fd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566e6130-3571-4b46-90c3-27a85bb211fe", "sighting_of_ref": "indicator--f74c10c2-41ba-472a-9e61-9589d0db7d4a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec89cb0-c727-4fce-b7e6-97d5307278ae", "sighting_of_ref": "indicator--dcfdcf11-2e71-4876-b26d-6b01e34c98f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e19e61-8582-42b1-8363-6bd25664a9f6", "sighting_of_ref": "indicator--9acf712f-8596-4c1d-8676-7afaa7a087fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8421be8-57d2-4d98-b503-168936630cc3", "sighting_of_ref": "indicator--5ad9b41a-f8cc-48a8-9024-80f32a198837", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55889e17-284b-4cbd-b232-3267bb603449", "sighting_of_ref": "indicator--743a454d-6ee8-4b77-87e1-e33f5bab00e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e803fd-5c5f-4f4e-b8a1-09e98d5aeb3a", "sighting_of_ref": "indicator--b522c80e-1766-47f2-a408-e9323be857a4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba202f7e-7a13-4238-9eeb-4a59f1d46269", "sighting_of_ref": "indicator--b522c80e-1766-47f2-a408-e9323be857a4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac562728-1783-4dc2-a40a-8d85e97c7c88", "sighting_of_ref": "indicator--ff52816b-924d-4057-8f76-d1abfc9d7f9c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980947b7-2d17-4405-a61a-d17384e0b35d", "sighting_of_ref": "indicator--12060177-0e6c-4d59-a0e5-c2e14fa05a30", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ea8443-1b58-43df-87dd-4e0169488354", "sighting_of_ref": "indicator--6ecd4cd9-845d-4f2c-87ab-ddb90dfa4885", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d881ddb-900d-42a6-91db-88e073e1af87", "sighting_of_ref": "indicator--950aa7ce-18db-4f2b-bb02-d11348475fbe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c73bca1-12eb-44f2-994d-af9724894cc8", "sighting_of_ref": "indicator--943e9a94-31a4-43af-b1c6-02703070e32d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f43e918-e4f0-411b-a8b3-0e04bfa2937c", "sighting_of_ref": "indicator--943e9a94-31a4-43af-b1c6-02703070e32d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9963a59-218d-44d8-91d1-79cdaac62d30", "sighting_of_ref": "indicator--b8d8f76f-2c52-48a1-8a66-ba8c9b6c34ca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4844a9c2-56af-4deb-8c60-cdbd5049fe4d", "sighting_of_ref": "indicator--0d8d6eb2-e527-4032-b541-48ed796e1b7c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc09b96a-6e23-4567-a9b1-32c368fa9967", "sighting_of_ref": "indicator--0642df18-4a6b-49a1-80c6-50fc02999053", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb68a8d3-1597-4919-add6-6dff934e7944", "sighting_of_ref": "indicator--a749149f-a63f-4c13-9b17-b7d0a099f582", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a1a21a-c325-4507-891e-c3f573cf3bd2", "sighting_of_ref": "indicator--ab28b8e9-1f28-45f1-b3f7-dafcbb8be5b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b12fb1-c742-4df9-9b6f-87828a43136f", "sighting_of_ref": "indicator--67ea0719-4e4f-4765-85a1-42afcafa97b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e30b3be-a060-4d25-80b2-5b330852e217", "sighting_of_ref": "indicator--7bf573ad-a737-4015-9272-071dfef59ea4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0562d3e0-c57f-4e0c-b943-0a935aea72e1", "sighting_of_ref": "indicator--c7913171-eafc-4dfb-b346-f39638a466c3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5961094e-7a0e-4598-9527-43e717e46af9", "sighting_of_ref": "indicator--ac55b4a4-6710-44a4-8e95-e4976b4d0f46", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e2c487-29cb-40eb-baa6-d9cd4fb2137c", "sighting_of_ref": "indicator--e2089c55-7b83-42e6-a7be-5193b0b6e1a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1245fe51-4efb-4765-8818-d7987fc67b8a", "sighting_of_ref": "indicator--a4e8d2da-61f5-42ac-90a7-36557933488f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08c239a-447c-42c9-bbfd-4eca6a2a117a", "sighting_of_ref": "indicator--f67f6ab8-2153-46dd-95b0-d7bd15a9723a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb1d510-cac4-469b-a8cb-d560ac330975", "sighting_of_ref": "indicator--da724154-4a00-46dd-bf79-a93b9ae31bd4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e61a16b-cf70-4d18-a9d4-cc3df5a26a9e", "sighting_of_ref": "indicator--ec2af29d-238f-436d-9263-78fb9761e202", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315b684a-cd90-4ca1-b226-8a3faeeb3594", "sighting_of_ref": "indicator--3c8d79f3-0440-498a-9842-10af11dbca13", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a21f4fb-b5d4-427a-bb67-53abdfb1c6b4", "sighting_of_ref": "indicator--d31a7eda-d209-47a6-840e-2c7c1fde36ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b23a27-02a1-4029-98f4-ae7d342df543", "sighting_of_ref": "indicator--3995ef83-7afb-4477-aeb2-9ebb1bb4c741", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6f5474-bd2b-4813-bb84-4dcb77358142", "sighting_of_ref": "indicator--11cdd865-08a4-48fe-a971-1fb1d1317ac9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12a5822-fdd6-4f9e-8ede-3203e24fe0ba", "sighting_of_ref": "indicator--cc4270b9-db49-457a-b16e-cea4148766a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14685e4-5ccc-4083-8f60-338407cf0922", "sighting_of_ref": "indicator--bb047ebd-abdc-47a5-a744-e28b62e42f7c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c4623a-feaf-40c4-a62a-cbdf5ce4e163", "sighting_of_ref": "indicator--d063f2cd-7037-47b6-87e8-450fd9b58287", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd3faa3-1064-4793-81cd-a1b740c2e41f", "sighting_of_ref": "indicator--d74995aa-f762-4662-ab9d-f1f983519f4d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e746acb-7204-440c-83e5-27434d2fa726", "sighting_of_ref": "indicator--46a31db8-215c-4516-85a3-3b6665283172", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbaccc4-df7a-4017-a3ac-1cf4f4e61507", "sighting_of_ref": "indicator--ac9d467a-35c7-4217-a4ec-6f3848c7f5eb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580a3ad4-0a06-49cc-85b2-ef60b6caa8df", "sighting_of_ref": "indicator--85b766a5-c3fd-4cc6-af37-28070d2942ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1031167-6994-402c-8cce-49a6abd27328", "sighting_of_ref": "indicator--dafdf2c1-7e3f-4505-8e84-be198e9b1df3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da431641-d69d-4c1a-93a2-ba8670a6b179", "sighting_of_ref": "indicator--da262d98-6247-4e50-ace7-3436014bc433", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38862adb-b1bc-4af0-b529-6a1e722cae51", "sighting_of_ref": "indicator--ee8f3a4e-c569-4aa2-9a9c-0c3aac89e271", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389c4076-a970-4e40-908c-ad6847af9b56", "sighting_of_ref": "indicator--29e7ed3a-546b-415e-b57f-2762cc7e5419", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b98a33-261b-4404-b8be-0c6dfa69059c", "sighting_of_ref": "indicator--a6815274-589f-4333-9b59-08bce2640c94", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994457f6-4649-4ef2-a70c-7f387fda261b", "sighting_of_ref": "indicator--438123ff-1709-4706-9e57-9ee489f86387", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297b2166-26c5-4d9b-ad1b-44135d553fb6", "sighting_of_ref": "indicator--75a86465-3ab0-4b1f-a7d0-8c79a283963f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fd548f-29e3-421e-9e79-eae560dcb43d", "sighting_of_ref": "indicator--bbc1c3b0-a46a-4534-bfbf-325e3b4e6105", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487851bb-bf59-44e4-8874-f0b84a8a6f93", "sighting_of_ref": "indicator--c7a07ea4-0bfe-4576-948f-b03fe0ccb12c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8900fd-c015-484b-81ce-a0ac5f48900a", "sighting_of_ref": "indicator--c7a07ea4-0bfe-4576-948f-b03fe0ccb12c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064e3bdd-c184-43f3-9cdf-11dd30c536ad", "sighting_of_ref": "indicator--2f232926-95a2-436d-9edd-4e89bcaad617", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354afa3d-e35d-4778-8abc-df0a539e43f7", "sighting_of_ref": "indicator--2f232926-95a2-436d-9edd-4e89bcaad617", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5c614b-9616-4184-b5fe-8c69f1e8d020", "sighting_of_ref": "indicator--2b9eb203-7edf-4592-a77b-169c902b721a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b829df33-a96f-437f-bfc9-4d07ba64475b", "sighting_of_ref": "indicator--5699598c-42cc-4b52-9872-b55c0ec4efd3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873ff725-c2ad-43c0-bd34-ff2f16aeb0b1", "sighting_of_ref": "indicator--5699598c-42cc-4b52-9872-b55c0ec4efd3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec2f177-ea4a-42a4-ad6b-d4e991c3c175", "sighting_of_ref": "indicator--3b037c29-0eef-46ba-b3ce-576000ac2fb7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77297121-a327-4d3b-9a0a-015b737ed45c", "sighting_of_ref": "indicator--3b037c29-0eef-46ba-b3ce-576000ac2fb7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa122e2-c620-4ccf-b709-3f841948d800", "sighting_of_ref": "indicator--5c9da280-22ef-483b-9fb7-286caca12894", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1739715-3d8a-411c-8c00-e9d653f3b7ef", "sighting_of_ref": "indicator--5c9da280-22ef-483b-9fb7-286caca12894", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ff0fc5-c407-4b9d-ad45-af83f309fbb0", "sighting_of_ref": "indicator--cad86d88-223a-41b6-a016-fe6d3bf468a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf362e70-fec1-476c-a695-a425dca7625b", "sighting_of_ref": "indicator--cad86d88-223a-41b6-a016-fe6d3bf468a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d1cc35-18b5-4819-b402-af3ed3f92b93", "sighting_of_ref": "indicator--59be4692-2f62-49c9-b024-307c0c356327", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e3cabe-606c-4b0c-9f28-a71f0120247a", "sighting_of_ref": "indicator--59be4692-2f62-49c9-b024-307c0c356327", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b3ee27-a95f-4072-8b92-9a0385f725e2", "sighting_of_ref": "indicator--c1b09daa-aa74-4ec9-a0f4-eb11f256e96a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca68f9ea-77ea-4a9a-ae03-577cf2c00d21", "sighting_of_ref": "indicator--c127e3fc-724e-411c-b57a-e9fbc1cb51a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffc9c94-ae08-41a0-a434-724583d14bdc", "sighting_of_ref": "indicator--c127e3fc-724e-411c-b57a-e9fbc1cb51a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a404ab9-2b38-46e7-9936-737b0c53b7ab", "sighting_of_ref": "indicator--62177b0f-b6c5-445b-83e7-6ee888d44037", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26114373-c970-4d00-940c-7c60b35daa2a", "sighting_of_ref": "indicator--62177b0f-b6c5-445b-83e7-6ee888d44037", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37613800-b4c9-4a0a-84c6-ee70ab234c81", "sighting_of_ref": "indicator--73179227-1b74-4866-8afe-f2bac6ba5eb3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1488b095-22de-4676-b1be-87f435d97226", "sighting_of_ref": "indicator--73179227-1b74-4866-8afe-f2bac6ba5eb3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6704daf6-dc50-4070-b7d1-00ed99bd12d6", "sighting_of_ref": "indicator--099875cd-47e5-4f83-98ac-69ef5a0d9f2d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe644755-9fd6-42b8-a3be-7f6e4273a740", "sighting_of_ref": "indicator--099875cd-47e5-4f83-98ac-69ef5a0d9f2d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2782b3fe-3556-4e02-b6ed-f6f22cea99c0", "sighting_of_ref": "indicator--f725dfba-9d06-4bd4-92dd-850467704d73", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be28d47d-da5e-47b4-bb61-e2a0903bfabb", "sighting_of_ref": "indicator--f725dfba-9d06-4bd4-92dd-850467704d73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc1e8f0-8942-41f7-9a9f-23aa2894f4a2", "sighting_of_ref": "indicator--4da2a92c-e37e-466a-9f6b-fcf72701b549", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a465c0a8-6d8e-4681-b18f-0478acf37dfa", "sighting_of_ref": "indicator--4da2a92c-e37e-466a-9f6b-fcf72701b549", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8337f5-bf58-4b4c-9e59-cb4a1bfd0123", "sighting_of_ref": "indicator--8c8626e1-095c-4b02-afc7-eb93406a6840", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57dc627-65bd-45a1-9423-e7f90515a3b7", "sighting_of_ref": "indicator--8c8626e1-095c-4b02-afc7-eb93406a6840", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0926c013-3888-4cef-8f3a-502568db8158", "sighting_of_ref": "indicator--85fd7d40-a2b2-49ef-a74d-1bbeaeb690c8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a57c949-08d4-4021-bc07-63cb97a8756b", "sighting_of_ref": "indicator--85fd7d40-a2b2-49ef-a74d-1bbeaeb690c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369535bf-508f-484f-93e9-c46737cf6e03", "sighting_of_ref": "indicator--9b0223fc-9647-4e27-87fd-0cf21e2f14f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f68771e-cba2-4c26-a5fb-59f48629e760", "sighting_of_ref": "indicator--9b0223fc-9647-4e27-87fd-0cf21e2f14f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c10cfd7-3edd-45f7-b997-8c252c53e14f", "sighting_of_ref": "indicator--7c017be8-d0ed-4e9a-af0c-05fcacfc00fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ce591d-ef1e-4944-aa88-1e02bef1c5e0", "sighting_of_ref": "indicator--7c017be8-d0ed-4e9a-af0c-05fcacfc00fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981a6bfd-1575-4c30-ad96-93057df98778", "sighting_of_ref": "indicator--3b7a3761-032f-455f-ad2b-e9de681ac78b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d770253-555b-41fa-9271-600499687822", "sighting_of_ref": "indicator--3b7a3761-032f-455f-ad2b-e9de681ac78b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec9040f-28cc-427d-99ed-b56fc0b6b4ac", "sighting_of_ref": "indicator--a68f6dd7-c761-451f-a8b9-9c6581389f62", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2663d3-8b06-4256-89ca-06bdbb5ed94c", "sighting_of_ref": "indicator--a68f6dd7-c761-451f-a8b9-9c6581389f62", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e2ba82-8467-4698-82ba-435d5adf7acc", "sighting_of_ref": "indicator--294d03f4-0008-4dcb-bdf6-fc8462ccbaa7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83f212c-ca0e-4d59-affd-4ec1ddbbcbd0", "sighting_of_ref": "indicator--294d03f4-0008-4dcb-bdf6-fc8462ccbaa7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208491dd-b147-4b2a-b719-86d298f7d085", "sighting_of_ref": "indicator--cbdce748-2963-453f-bf3e-7bb58c741c27", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fc2cd1-b0fc-472d-a64a-4fd7b9b35d1f", "sighting_of_ref": "indicator--cbdce748-2963-453f-bf3e-7bb58c741c27", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477703e5-6d0c-45c7-9e27-6808f785d207", "sighting_of_ref": "indicator--b2d0a862-8cf0-4b45-9cd6-86044a4f9386", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e2c246-5d4d-4bc8-8b4a-350576700dea", "sighting_of_ref": "indicator--b2d0a862-8cf0-4b45-9cd6-86044a4f9386", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f2d5f1-35ee-4b42-bf8d-ebf3cb1800d6", "sighting_of_ref": "indicator--030c7731-1fba-48ab-9c9e-1df88d7f341f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df52c3e1-2689-43f8-a5c6-1675f3812f59", "sighting_of_ref": "indicator--030c7731-1fba-48ab-9c9e-1df88d7f341f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea6a6bc-e0e5-4426-a401-4bb10b63a687", "sighting_of_ref": "indicator--70fd0bd5-84f6-4637-afdf-da763a534b63", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc4a1e1-2c74-4265-8576-d6cf58a6653a", "sighting_of_ref": "indicator--70fd0bd5-84f6-4637-afdf-da763a534b63", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111cc8d3-1e4e-4bdc-b3f9-ea0c820c5c6d", "sighting_of_ref": "indicator--abe9304c-c1a6-4131-acd1-909ae2b122b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d38cba-cda7-492e-97eb-902a3896bd3e", "sighting_of_ref": "indicator--3fb97830-7fc5-4a82-ae4b-c445af11f895", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7c0438-4741-481d-8f42-792e58b69857", "sighting_of_ref": "indicator--fcc6b3a4-9fd0-4a76-9298-7fbb2f2228cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f8431c-5b35-409f-9fde-9b2d81d95f09", "sighting_of_ref": "indicator--fcc6b3a4-9fd0-4a76-9298-7fbb2f2228cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ba842a-bc92-4680-9abe-0ec5216b0e69", "sighting_of_ref": "indicator--0e3a43b3-dbff-41b6-9634-611d60052537", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e95fa1-a4b0-4dac-b9ef-d1d6ccc372ea", "sighting_of_ref": "indicator--0e3a43b3-dbff-41b6-9634-611d60052537", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5968a55f-f6d9-4058-81bc-8502caccff5b", "sighting_of_ref": "indicator--50d0b304-e13c-45f1-b2cb-9725b81ff08e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0e388a-5cab-42b0-a584-d94c6becb66b", "sighting_of_ref": "indicator--50d0b304-e13c-45f1-b2cb-9725b81ff08e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0f4d63-3398-432d-b63a-a9ab569fa82b", "sighting_of_ref": "indicator--374c50f2-07f9-4525-b26e-b2b63d71634d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51747ce-79cb-4111-be1e-b4dd0f675a06", "sighting_of_ref": "indicator--374c50f2-07f9-4525-b26e-b2b63d71634d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a62cfb1-a86c-4979-ba83-12487edb1cb7", "sighting_of_ref": "indicator--0f8942a0-01dc-4258-9196-c3cf4a34efe6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03508863-9c21-4847-aef5-dfe605a0038b", "sighting_of_ref": "indicator--0f8942a0-01dc-4258-9196-c3cf4a34efe6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b86420-428f-42c6-bff1-98f836a8b3df", "sighting_of_ref": "indicator--17de879f-eefa-4bb7-bd4e-f75c79dda5b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023bb1ca-465b-4a23-99d7-00fceb2a1a3f", "sighting_of_ref": "indicator--17de879f-eefa-4bb7-bd4e-f75c79dda5b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd37009-d6ec-4aab-ac3c-57719bb99b3b", "sighting_of_ref": "indicator--2492e728-a784-445f-8906-9e1cb21f1ac2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b3d8d9-b890-47d8-8e85-a20fc571a01a", "sighting_of_ref": "indicator--8ddd3a9d-ac5b-41f4-aafd-98a1afd94b91", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c687b7ca-5ae7-4de6-a769-9623aab08782", "sighting_of_ref": "indicator--8ddd3a9d-ac5b-41f4-aafd-98a1afd94b91", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4de7a9-5f67-48bc-9969-e783bb1cc9d8", "sighting_of_ref": "indicator--7fe3c9a1-ad70-4d8f-bb4f-0854f2f7c4c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072fc988-1716-480c-bec2-007a75201e0c", "sighting_of_ref": "indicator--7fe3c9a1-ad70-4d8f-bb4f-0854f2f7c4c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3cffe6-a6ea-44dd-af90-800df3b226ed", "sighting_of_ref": "indicator--719a0dc9-bde0-474e-9d88-6e3fc06b1278", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0a1ea4-3b9b-4411-8466-34522f397540", "sighting_of_ref": "indicator--719a0dc9-bde0-474e-9d88-6e3fc06b1278", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2283771c-c6fe-4419-8c8a-48095005d426", "sighting_of_ref": "indicator--c5712758-02bd-4d48-9913-42ea28aa9872", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dd9471-72fa-4acc-ad74-4b427f823491", "sighting_of_ref": "indicator--4e2d2707-bd9d-4ba3-836f-3e119995acde", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df228f2-d695-4ad4-85d0-f3344a707cbc", "sighting_of_ref": "indicator--dbcfe355-bbc7-4d82-a9dc-dc0b8a67a498", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737ed37b-2769-499c-ba88-734c7ea32cc3", "sighting_of_ref": "indicator--2136cc4f-7d7a-4d09-83bc-02c9013f2c72", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58996e07-040e-428b-a01e-b92559c54b22", "sighting_of_ref": "indicator--6710ea4e-60c1-4ceb-b9f8-48374bcbfdaa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe86a9b-8d0c-4e96-9a72-62f19dacc02f", "sighting_of_ref": "indicator--b6d9cc8f-95aa-437b-bf49-77ff6b2b22e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bdaba8-569c-43f4-9d41-4b7994476aec", "sighting_of_ref": "indicator--6300580b-4cca-4bd3-83e4-ba5cabb023c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b083e08-df68-4086-a53a-78e9198df952", "sighting_of_ref": "indicator--13a9fdc7-d86f-4524-8edd-b69373bb0150", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4110ad-f07c-46b2-863a-2eea53603d3f", "sighting_of_ref": "indicator--33152092-8c82-4cac-840f-3fb17eb55673", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4651f5c6-5505-4f2f-9e0f-e5c5737a9828", "sighting_of_ref": "indicator--33152092-8c82-4cac-840f-3fb17eb55673", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c7afdd-0376-49c7-b1ef-07c27901a190", "sighting_of_ref": "indicator--1e157ebb-c66e-40b5-8b6f-40c618c3b334", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7534795-1540-4986-8b5a-3b65c97f2812", "sighting_of_ref": "indicator--1e157ebb-c66e-40b5-8b6f-40c618c3b334", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4f5a62-2616-4447-886f-a3b2c3149496", "sighting_of_ref": "indicator--7f0c80ae-10a6-4903-9912-d2ce4ff11a43", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958f80e8-26bc-4a43-85d9-75f34df9993b", "sighting_of_ref": "indicator--7f0c80ae-10a6-4903-9912-d2ce4ff11a43", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d052644-a5b4-4fdc-98fc-8da21f593e90", "sighting_of_ref": "indicator--f682991e-ceaa-4351-a6a8-818e8d5a2390", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af25c67-53c6-493a-ae40-70e13826fd62", "sighting_of_ref": "indicator--f682991e-ceaa-4351-a6a8-818e8d5a2390", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ad4acc-17c1-4fbc-827f-402b472a0caf", "sighting_of_ref": "indicator--8db996bb-09ec-4f1d-8f56-33c74db12eac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c7f560-28cd-437a-a1f6-e6bf806d5a16", "sighting_of_ref": "indicator--8db996bb-09ec-4f1d-8f56-33c74db12eac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfea7d9-e3b5-441c-9fd7-2f462c2e34fb", "sighting_of_ref": "indicator--1994bee5-1936-4a76-9cf0-72acda3ed5ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f79ec1a-43ac-432d-8843-4f5cc8608aa9", "sighting_of_ref": "indicator--1994bee5-1936-4a76-9cf0-72acda3ed5ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d83ad0-26ee-4287-85f1-d535b94030d8", "sighting_of_ref": "indicator--36f9b492-0274-4589-9895-a56c781211c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3129badb-4ee9-4ff1-b41f-aa7f727b8a8d", "sighting_of_ref": "indicator--36f9b492-0274-4589-9895-a56c781211c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d47903-966c-4036-9fb2-b0461271b2c1", "sighting_of_ref": "indicator--0c8591e9-94e0-4236-a75f-85fe7042a1fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b92ebf9-f18b-4fbc-9dc5-219c77b5619f", "sighting_of_ref": "indicator--0c8591e9-94e0-4236-a75f-85fe7042a1fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d601041-7a0c-4148-aaf0-7b1d0902c1ca", "sighting_of_ref": "indicator--855c453a-48e9-4f46-90f1-301cd7119863", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8893b4e7-0ab9-4c72-95b5-08797eb072dd", "sighting_of_ref": "indicator--855c453a-48e9-4f46-90f1-301cd7119863", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11572076-15e6-4dde-be51-30f7cc921def", "sighting_of_ref": "indicator--d47834f7-9850-44fa-ac64-bf3ea3769ba0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4816a0d0-93de-4bb4-817e-0f0090f6aae4", "sighting_of_ref": "indicator--d47834f7-9850-44fa-ac64-bf3ea3769ba0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4e98e0-7e21-49bd-969b-47320769b583", "sighting_of_ref": "indicator--4a1222e4-e4db-4633-940d-4db34e0c67ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b38c121-61ca-4695-9a41-a78b92d4e0c8", "sighting_of_ref": "indicator--4a1222e4-e4db-4633-940d-4db34e0c67ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461983fe-cad8-4c7e-ae6c-fd347bba4d7f", "sighting_of_ref": "indicator--f6d7f85e-3adb-44b5-b63a-fc3d29129434", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f795a354-0af7-47bc-899c-775773d724d6", "sighting_of_ref": "indicator--f6d7f85e-3adb-44b5-b63a-fc3d29129434", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bd15c3-fe87-43e2-a572-684ccd357366", "sighting_of_ref": "indicator--4eec6317-4636-4836-969a-aa8e1d402690", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be9138f-2558-47b2-82ce-9e6074b4d180", "sighting_of_ref": "indicator--4eec6317-4636-4836-969a-aa8e1d402690", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04d2b82-80b7-4459-ac14-c115911dcb6a", "sighting_of_ref": "indicator--8bedb4cc-4319-4178-b9ba-c0726f377942", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8eacc74-c8f9-4798-8f8e-cefe734a4472", "sighting_of_ref": "indicator--8bedb4cc-4319-4178-b9ba-c0726f377942", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bb7f21-2ec6-431b-91f2-803ea62646de", "sighting_of_ref": "indicator--996eb4e7-61eb-48eb-b1a6-2f88039736b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cab51c1-04e4-439c-ad7e-d80cc2871094", "sighting_of_ref": "indicator--996eb4e7-61eb-48eb-b1a6-2f88039736b2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fd8a4d-862c-49aa-a378-74d24824282e", "sighting_of_ref": "indicator--0f8dc773-9bb9-48c3-997c-8099030b863d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c81d16c-2e78-4da5-bebf-7f33d6123d33", "sighting_of_ref": "indicator--0f8dc773-9bb9-48c3-997c-8099030b863d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902f8a5e-912b-4173-954c-68e2e859511a", "sighting_of_ref": "indicator--e633a028-9b98-434c-bbfe-80278d7c3482", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbc470d-255b-4791-9c50-563a201a9ab9", "sighting_of_ref": "indicator--7d3cadd2-c7e9-4663-9eef-24d8a07e81bd", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3e1790-fa8d-49b5-a801-e320cc0920bf", "sighting_of_ref": "indicator--363d2864-284d-415a-b8b7-c23aa1469fef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b77b58-0270-4ca6-8489-ab10f05d59bf", "sighting_of_ref": "indicator--363d2864-284d-415a-b8b7-c23aa1469fef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814c1f31-22b5-42d6-b181-74b0eb7af694", "sighting_of_ref": "indicator--0294f470-0dba-4dc2-9eda-8d573ec2d2e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97bbd6d-95cc-4e36-a800-0f4c78f3bacf", "sighting_of_ref": "indicator--0454d39e-8e6f-48b4-8302-cb6b64d95f08", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d5c5e6-1e45-4dd3-b6e1-b305249e3b45", "sighting_of_ref": "indicator--928de9e1-c3fa-4249-86b8-cb7b217d89f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95b9232-bb72-42a4-b738-b7664e7efe20", "sighting_of_ref": "indicator--3ef9c14a-02d8-43d1-ab06-8b069c237c8a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e93e843-9ff1-4a50-9697-614026e45516", "sighting_of_ref": "indicator--2fe7d9a5-0210-4611-b2f4-a76843b3416b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1dca18-7300-436b-beaa-d6767db3e29b", "sighting_of_ref": "indicator--2fe7d9a5-0210-4611-b2f4-a76843b3416b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23d3d97-627f-4b44-8646-3a51ffa648af", "sighting_of_ref": "indicator--c8078402-2793-4d67-855e-c916903e721e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2e2a45-cc71-41e7-bff9-e55ae3ca85c2", "sighting_of_ref": "indicator--c8078402-2793-4d67-855e-c916903e721e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef6f21e-5261-4d72-a9a9-6d40f3b29fcf", "sighting_of_ref": "indicator--75348493-824d-48ee-bb72-ca69c05519b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a747c9-f3bd-4a99-b8a2-5cb7ff3823ac", "sighting_of_ref": "indicator--75348493-824d-48ee-bb72-ca69c05519b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da800b5-bd06-40fa-ae94-f432a53fa77b", "sighting_of_ref": "indicator--10b3347d-6238-494f-85b3-a26dfbeea2c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b5f7bc-a32b-4f9a-a388-8619408dcd88", "sighting_of_ref": "indicator--6ac3d1af-6921-4393-a57c-d5924fc3fe45", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7942293-089c-47ea-ac3a-44ab9b21ea34", "sighting_of_ref": "indicator--127d66fa-d811-4d07-864f-7ca29534e635", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c591a721-8a5d-4e08-a761-269bfe5e5e87", "sighting_of_ref": "indicator--35baeb6e-a474-43db-bdea-c5cfc722b23b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249fc0ac-efd8-4cc2-827b-5bc8090af30e", "sighting_of_ref": "indicator--35baeb6e-a474-43db-bdea-c5cfc722b23b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d933fa62-4152-4592-b881-14407080cde6", "sighting_of_ref": "indicator--7697e3f8-f71c-4205-b3f6-7a06e7a1f718", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05acc6b6-605e-46c4-a20c-85855247f8e3", "sighting_of_ref": "indicator--7697e3f8-f71c-4205-b3f6-7a06e7a1f718", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd964660-9951-443b-9410-8285abce01bf", "sighting_of_ref": "indicator--ad36d493-2aae-44ff-b2ae-7aa7d6b612c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74579cbd-4013-48b5-99fd-a5139cf9a935", "sighting_of_ref": "indicator--0ab305cc-48ba-4e74-bdbb-87c9c1f143b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf4960b-c393-4476-b5e4-cb039cb79b8e", "sighting_of_ref": "indicator--0ab305cc-48ba-4e74-bdbb-87c9c1f143b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d1c09c-dff5-444f-bf97-0333302d0c8e", "sighting_of_ref": "indicator--f6c001a8-cf2f-4dd0-8755-ec4285fc5c83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2446d01-c9ee-49d7-afd1-62dec954fa7d", "sighting_of_ref": "indicator--f6c001a8-cf2f-4dd0-8755-ec4285fc5c83", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fdb789-eaa7-4b02-87d6-31b2d7aa9fc6", "sighting_of_ref": "indicator--3a5a5377-c25b-46de-bfe3-f4c50a626800", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729cc501-bcba-429f-b275-53d826f668c6", "sighting_of_ref": "indicator--e0a2810e-b4db-4807-9def-3a1ad1f3e939", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b89198c-8101-4a4a-b132-02a0dd575d01", "sighting_of_ref": "indicator--e0a2810e-b4db-4807-9def-3a1ad1f3e939", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2462140-eb4f-4dc4-864e-8677380fc3ef", "sighting_of_ref": "indicator--8063b2f0-b8a0-4328-a387-edca4981a6d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c95429c-29ef-447b-9fe8-4a36dd19e457", "sighting_of_ref": "indicator--c7957557-0bbc-4bdb-986e-04fcaf9a8dbe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c292a669-f2dd-4c5b-b74f-e4c1a3826ccc", "sighting_of_ref": "indicator--9769de05-e56f-4baa-a8fe-587bd5d87b59", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9c830d-a71d-4277-80d7-c34b589b9fa1", "sighting_of_ref": "indicator--9769de05-e56f-4baa-a8fe-587bd5d87b59", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71614c1-1d21-4a51-bc37-63723561d50b", "sighting_of_ref": "indicator--d6f4ed10-b990-4193-bde6-4f9341dee925", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b21688-db8d-4654-9cb9-a2c23e9abe10", "sighting_of_ref": "indicator--d6f4ed10-b990-4193-bde6-4f9341dee925", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2409a452-c6ac-4453-96b3-4257d081fe4d", "sighting_of_ref": "indicator--fcf44d3c-af9e-4467-9de1-b3bbe5a077ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28daf337-b9b3-4a97-b5d9-577d23605079", "sighting_of_ref": "indicator--fcf44d3c-af9e-4467-9de1-b3bbe5a077ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e663e359-c12e-4906-bb06-0e9e7a2c2152", "sighting_of_ref": "indicator--fe854068-0ce2-4abb-9857-7f132cec4d69", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbd092a-bfe6-460d-aeb5-fc3f43c4b7ff", "sighting_of_ref": "indicator--fe854068-0ce2-4abb-9857-7f132cec4d69", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8731dd-e9ac-49b7-b0fb-27bca30f3c7d", "sighting_of_ref": "indicator--a595bb74-3fce-486a-9454-29275ef17dd6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bca49a1-11d1-4e50-9111-6ff951d985e4", "sighting_of_ref": "indicator--a595bb74-3fce-486a-9454-29275ef17dd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4760efff-cf39-4302-8566-aa3847de3892", "sighting_of_ref": "indicator--0502f6f7-3c11-427c-82cb-20491159ad7c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851c064c-3ade-4897-9986-e346b9bc3aac", "sighting_of_ref": "indicator--0502f6f7-3c11-427c-82cb-20491159ad7c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb39ed5-6411-4955-a5e3-0a1f29c8632f", "sighting_of_ref": "indicator--fbaa0edc-7cef-485c-a9b6-21fd0b2a5b07", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e69301-c2e0-407a-9480-d6149a5d8b87", "sighting_of_ref": "indicator--fbaa0edc-7cef-485c-a9b6-21fd0b2a5b07", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb852145-dd24-4ab4-8e18-d745be818e65", "sighting_of_ref": "indicator--95d9d99e-58a1-4d80-bfc7-93b6be818f5b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7140c4-f88b-4a0f-8b21-f863905169eb", "sighting_of_ref": "indicator--95d9d99e-58a1-4d80-bfc7-93b6be818f5b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b957a69-8666-49a2-8bba-0f1c40993462", "sighting_of_ref": "indicator--e108e71a-d694-439d-820f-619303e5a39e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8b35f6-8982-4206-ba3a-9183973de9c3", "sighting_of_ref": "indicator--e108e71a-d694-439d-820f-619303e5a39e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2041c17a-3cdf-4d48-89b6-64c4255aeb57", "sighting_of_ref": "indicator--c1af0f30-8ea1-4092-94d0-e59ac8e4a046", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72b1c7f-f572-422a-b5a1-31e0dd725b05", "sighting_of_ref": "indicator--c1af0f30-8ea1-4092-94d0-e59ac8e4a046", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb6afbc-b16a-474b-9264-807502b13daf", "sighting_of_ref": "indicator--25fb8e6f-fa4e-45d1-8656-48ebed71006a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea93de34-75a3-4346-b628-0e9f706bba6e", "sighting_of_ref": "indicator--25fb8e6f-fa4e-45d1-8656-48ebed71006a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b43fec1-930c-40e6-854b-cf5d623a71aa", "sighting_of_ref": "indicator--5ab8fd32-73f7-4c20-9fcf-b1e71ea48330", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e612a865-5116-4d9d-8fce-62e9eef5f456", "sighting_of_ref": "indicator--d3eb315f-08d3-480b-95db-1844636d2e54", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc046a87-14fb-4920-9c2c-f5fb669f5615", "sighting_of_ref": "indicator--b0f53037-9b08-4325-a0d3-9614303e0757", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16103750-814e-4898-b6a7-06bbddf4c049", "sighting_of_ref": "indicator--b0f53037-9b08-4325-a0d3-9614303e0757", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823bdc52-de55-47e8-b30b-6a273732efdd", "sighting_of_ref": "indicator--fdbccc25-f852-47e5-bf7b-ee448d0bec09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef0de47-b9fc-4b2d-a4d4-d0b410b6cbaa", "sighting_of_ref": "indicator--fdbccc25-f852-47e5-bf7b-ee448d0bec09", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc8ca43-1fd9-4652-a601-ee306c676ac9", "sighting_of_ref": "indicator--beeb483e-ebaa-48fc-96ea-ab0accae52a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff62fba-c382-4b3c-8a72-615411454b08", "sighting_of_ref": "indicator--e0fabba6-2f6c-4a8d-aec7-bf1b724f492d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c145e90-604e-4695-ab4f-b83e94180095", "sighting_of_ref": "indicator--cc891949-40f6-4360-a339-c60b8e52e5a4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3d9987-680e-4b54-acea-3740c7af4f3f", "sighting_of_ref": "indicator--cc891949-40f6-4360-a339-c60b8e52e5a4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1035b4-e678-4eaf-bc68-f769de7ed388", "sighting_of_ref": "indicator--3d9a9658-ac0b-42aa-bf59-bffc15063eef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c31940-ab2e-4452-8120-f2cb81622755", "sighting_of_ref": "indicator--69e8cca4-b59a-4e67-bc3f-2fb554a7ac02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d20381c-16f3-4e16-bdf8-8451df150c05", "sighting_of_ref": "indicator--9cf81155-3a2a-4388-8b32-ef55d225c085", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de82f864-f448-4564-bfaa-c91d8f2f6c53", "sighting_of_ref": "indicator--b6bbce82-1b87-4eb8-8456-e4d26461c8fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9f9412-8f3f-4034-822a-617977dc5a63", "sighting_of_ref": "indicator--309ca02d-66ab-43c8-b54e-30d9a823c983", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7769215c-049a-43d5-bd1d-2bda187efc66", "sighting_of_ref": "indicator--d66303b1-e52a-4424-956d-9ae57c67e477", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54065e6e-adc7-4ead-a64b-ad32a7223d1d", "sighting_of_ref": "indicator--d66303b1-e52a-4424-956d-9ae57c67e477", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf062099-8b29-4796-9ef8-e29fa4ac0738", "sighting_of_ref": "indicator--6c20ace2-6364-48d0-8240-fbdbdd798ea7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792196d6-0f63-4ab8-9cc9-2f5a3ebd7cef", "sighting_of_ref": "indicator--73aada82-d489-492f-8a4f-6b2464e3799c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421bbab0-d707-472d-b062-cd6a96fa4d7d", "sighting_of_ref": "indicator--9ac4e43d-f743-4cb0-954d-be8d01948aaa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562dbb8e-7ca9-415b-b105-0e4fec136027", "sighting_of_ref": "indicator--52f71723-ff65-48e4-aa48-08bb13cb03fd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f079036d-5a8a-47ba-aaf4-1bfa4fdaf34f", "sighting_of_ref": "indicator--99741c72-ad56-4df9-90d9-c56f288e08ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81101be3-b313-49f2-b8db-e4b89b16916e", "sighting_of_ref": "indicator--e13942ee-d416-404e-b5d9-8a5be96bccaa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd71f33-53ba-4beb-81d1-761debc4d316", "sighting_of_ref": "indicator--f2cab2fd-eb5e-489b-9ec8-5a29f21bcf14", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664990b6-cf79-4b2a-bc68-e32ca3ccd8da", "sighting_of_ref": "indicator--438a1c6e-c3f9-4e28-9fb0-f3a1090769f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef937250-30b7-4311-af63-e385add69630", "sighting_of_ref": "indicator--4f1ff694-2d4d-454e-81f6-9708eecbcb18", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2633cdf-2e42-446e-b320-53b145673400", "sighting_of_ref": "indicator--c7e4f968-f5f8-46f1-89e7-058666eb975b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2721d3b3-8e76-4fe4-a013-108eaea8dcfc", "sighting_of_ref": "indicator--72f8b761-ed3e-48cb-8b62-36224f170131", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a7cc4f-29c2-4561-96e1-ec43428b4da6", "sighting_of_ref": "indicator--48debc40-fa6d-483c-a2ed-f132b8d91ac5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5d2a2d-3a26-49cd-9496-259502377a35", "sighting_of_ref": "indicator--452b5773-2ba6-41c9-8a7f-aaff265fdd1c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1aac56-a5cc-4dba-bc31-ad1fc7e4176e", "sighting_of_ref": "indicator--96e6265a-43fe-408b-8018-d86ea7e9dfe3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6752bd-4805-4acd-9f9b-d66fb5206466", "sighting_of_ref": "indicator--90de3501-2a2f-40d8-bfdb-a784ab1e7cc0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faddaef-b5df-49fe-b4e7-94c4400c03d2", "sighting_of_ref": "indicator--8f3d3992-0ce5-4edd-be04-99d9fa8d8539", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f516e5ed-3957-4817-9164-b9ac1a48823b", "sighting_of_ref": "indicator--799607ee-69f8-480d-8c72-914b84a7c26f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503cda7e-cdce-4a89-a109-e89483e52426", "sighting_of_ref": "indicator--945816e2-2932-45f9-944a-1086af4ce838", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1166084-b266-4621-811c-d60932deca61", "sighting_of_ref": "indicator--fcd49e3a-0dbd-41c2-a7be-c3abdab0be94", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bdc577-ad35-4af6-990c-7cc20a74fd04", "sighting_of_ref": "indicator--fcd49e3a-0dbd-41c2-a7be-c3abdab0be94", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99ff53f-0bd9-4c75-a232-ffa034cb9fed", "sighting_of_ref": "indicator--6c00a6a8-76c2-432f-a47b-84ea9319ada1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f74cdac-afa8-4b99-b349-b1a797a3022a", "sighting_of_ref": "indicator--fc76e88f-18b8-40f9-8c98-261308b9d57d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829db6f0-eaf8-4b5b-a139-39114cdbf6da", "sighting_of_ref": "indicator--fc76e88f-18b8-40f9-8c98-261308b9d57d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92fed21-2945-45ff-b2b8-67a1d60edd88", "sighting_of_ref": "indicator--72a98b84-fe50-4e43-87df-61631602a72b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795109dc-5770-4f03-a239-38ce77fcc184", "sighting_of_ref": "indicator--72a98b84-fe50-4e43-87df-61631602a72b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fb3e88-a92a-40d3-849a-be0518a6482f", "sighting_of_ref": "indicator--c31c94be-0907-493c-8e2b-937dc7f3078f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541ca9c0-1827-4862-a0a6-ae255f9f7598", "sighting_of_ref": "indicator--c31c94be-0907-493c-8e2b-937dc7f3078f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f36afb1-f149-4f7c-affe-62d65bf9afc7", "sighting_of_ref": "indicator--edb163c5-f448-4b04-9c7b-e7bd9be43196", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86589401-e522-4e21-962c-a07d557b0b7e", "sighting_of_ref": "indicator--6dd78fdb-4207-4609-b271-ff867514636b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c28bf0d-fa60-4f5d-9209-9959c9a36d29", "sighting_of_ref": "indicator--7d7c6dee-989f-4c63-befb-00643dab3321", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a65ef7-a74c-47ba-966e-1748eb997a1a", "sighting_of_ref": "indicator--7d7c6dee-989f-4c63-befb-00643dab3321", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc83ef1-c9ae-4fde-b9f4-edc0be44a6e6", "sighting_of_ref": "indicator--556ffad1-ca68-41a6-8931-c1cf98d83304", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150f4f36-736f-4e35-9258-f9e01118d2c3", "sighting_of_ref": "indicator--292dd877-55c5-4407-b19b-904557db4060", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7182d5-4358-4e37-b977-4f80a9590fe8", "sighting_of_ref": "indicator--1ed6814b-6631-4881-b93f-98c46331ab76", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31577f3f-8a71-4bfb-93ac-9a2a14ea8a8f", "sighting_of_ref": "indicator--81c18429-e6e8-4fe6-81c6-e3b5589c880d", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e58345-18b7-4ffa-8499-a877b536b28c", "sighting_of_ref": "indicator--9835de71-fcc8-495a-a48c-dc97632880b7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d003c2d-5d31-45dd-ae52-e3b8bd7be119", "sighting_of_ref": "indicator--1cf302b6-0ce1-42d7-9534-6922d95fcb2a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df21f1db-6ab9-4661-be45-303fd259873f", "sighting_of_ref": "indicator--1cf302b6-0ce1-42d7-9534-6922d95fcb2a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4f9559-902f-4fa6-b837-df80a13008e1", "sighting_of_ref": "indicator--dc9825a3-2458-4d96-9ae9-a43e2da89d79", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c21e97-6519-4f7f-bafe-1444e49bdfb3", "sighting_of_ref": "indicator--1fd6d1c1-7618-4dd0-907e-9ee5c3f216f9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97164445-e1a0-42de-93c0-6d696c9dcbb9", "sighting_of_ref": "indicator--1fd6d1c1-7618-4dd0-907e-9ee5c3f216f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6109de3-f3e9-41a2-af6b-da3826eafb13", "sighting_of_ref": "indicator--fec873f9-1bc5-440f-927a-00e9652724e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d3f223-5bf8-4d69-a843-cc1c7e83c0c5", "sighting_of_ref": "indicator--fec873f9-1bc5-440f-927a-00e9652724e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b919a32-3570-4535-ab41-5e328721205e", "sighting_of_ref": "indicator--94924be6-495f-4e34-83b0-74d0a7c7b615", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc2d50b-4c06-4cf0-b7ec-796f1a0141b8", "sighting_of_ref": "indicator--94924be6-495f-4e34-83b0-74d0a7c7b615", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6652669b-fa2e-4636-8f86-4b1f9729985d", "sighting_of_ref": "indicator--509ce2c6-0de7-45de-810d-a542d17f2b3f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9802f5-c10c-40fe-aff5-4dd9040d3f14", "sighting_of_ref": "indicator--509ce2c6-0de7-45de-810d-a542d17f2b3f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3e9810-8be4-4405-bb42-0ae41df26a1a", "sighting_of_ref": "indicator--a2000848-6a81-4dd6-84c6-6aaa1e6eda92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9efdae-ae88-4840-bdca-68bcd1dd3337", "sighting_of_ref": "indicator--a2000848-6a81-4dd6-84c6-6aaa1e6eda92", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a179e14c-051b-4cb1-8fe3-686f4c8b37df", "sighting_of_ref": "indicator--e046643e-187c-4bd4-ab45-3c731c38fa60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fb7ef2-590e-4012-bcb0-db9d7185f1b3", "sighting_of_ref": "indicator--e046643e-187c-4bd4-ab45-3c731c38fa60", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91b5545-3c73-4e82-a042-98228ab04379", "sighting_of_ref": "indicator--76896f1e-05c9-4bbc-b239-db34067870f6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11f6ae4-808f-4429-a1cd-5b65e79f67bc", "sighting_of_ref": "indicator--12d862b2-f47b-4eca-96dc-0cc529e851ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d389d42-02dc-4804-92dc-991d0a653a2c", "sighting_of_ref": "indicator--3551c234-c305-483d-8db0-593e5ae10a5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd78836-21d1-423a-ad5a-ed6662dc3b6e", "sighting_of_ref": "indicator--d0cd9725-4fb0-464a-92ae-18417efb8a4c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5042e5e2-749f-44c7-8ae9-209f56376676", "sighting_of_ref": "indicator--d0cd9725-4fb0-464a-92ae-18417efb8a4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5379c3fd-73d2-4839-9450-5b0512502f25", "sighting_of_ref": "indicator--b636c10b-dbc4-49b5-854b-7cdc06477fb2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca35fae1-7196-440d-a797-010c073e0c76", "sighting_of_ref": "indicator--b636c10b-dbc4-49b5-854b-7cdc06477fb2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eb7184-244d-4384-830a-45a183e9721d", "sighting_of_ref": "indicator--5b515ef9-684f-418b-b42f-48119cfd19b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbb4e52-44a8-48fa-96d9-c800115b3a96", "sighting_of_ref": "indicator--5b515ef9-684f-418b-b42f-48119cfd19b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9af71a-55cd-4229-9fea-e136b8b21aa7", "sighting_of_ref": "indicator--67b13717-4af2-4020-b222-c4d8acf9cc60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5246bf3-4669-4432-8daf-83dc572bb6ca", "sighting_of_ref": "indicator--67b13717-4af2-4020-b222-c4d8acf9cc60", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86830e8-b345-4c78-9b3c-d60a65f36300", "sighting_of_ref": "indicator--54a55f7e-4c72-47ab-83e2-3d3f78f4b9d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b199c1-dfed-41c2-a528-c185d2f3d093", "sighting_of_ref": "indicator--54a55f7e-4c72-47ab-83e2-3d3f78f4b9d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc8e362-3d71-4da0-9975-fce8f3533ca7", "sighting_of_ref": "indicator--ce190810-46ad-40ad-80e4-1e5db3bddb3f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f047ff7b-a0ed-4f2c-af5d-cdbbf43e1b4c", "sighting_of_ref": "indicator--ce190810-46ad-40ad-80e4-1e5db3bddb3f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c997483-82c0-4435-ae79-da531876879b", "sighting_of_ref": "indicator--4e90814e-968a-4f21-b0b7-29fdd2f08577", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5effb600-7dcc-44f5-8d27-938c52406016", "sighting_of_ref": "indicator--4e90814e-968a-4f21-b0b7-29fdd2f08577", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a370c48e-1391-4625-8d23-06ee8139230e", "sighting_of_ref": "indicator--70b8cdaa-f52f-4aa2-8319-d31d92532c39", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d36cf5-33d4-4e48-9618-671c98ed6ca2", "sighting_of_ref": "indicator--70b8cdaa-f52f-4aa2-8319-d31d92532c39", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71164c1-c08f-430b-a20e-1845d0861bd2", "sighting_of_ref": "indicator--40f2a3d0-c687-4c65-abb6-12964a6fb103", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecd6c31-6b67-4973-b6c9-192bc5c9cf96", "sighting_of_ref": "indicator--40f2a3d0-c687-4c65-abb6-12964a6fb103", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af62e9c4-d350-4eeb-b602-7a9ef05a8ec4", "sighting_of_ref": "indicator--2f73307a-9559-4de3-8047-f353adab79d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3af4291-4d9e-4cc6-96a0-7ad5f0fbffa2", "sighting_of_ref": "indicator--e250b609-bbbe-4a34-b0db-4ba67b7ff1f5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d211ba2-8e2f-49d3-ae4f-23a53f785f38", "sighting_of_ref": "indicator--e250b609-bbbe-4a34-b0db-4ba67b7ff1f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c6e114-a2b4-49d9-bc54-9a8bae744f5c", "sighting_of_ref": "indicator--42f2ee83-dd20-4feb-a92f-43ec1bc36925", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4d9ebf-6c11-4945-9cac-85f71307b6ae", "sighting_of_ref": "indicator--42f2ee83-dd20-4feb-a92f-43ec1bc36925", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f5a53b-b5a7-4222-827b-eeb21f48f3e9", "sighting_of_ref": "indicator--2f803737-40b5-43e6-b732-bf6b95dcce23", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2666148f-8c56-44dd-889b-eb8b4052cbab", "sighting_of_ref": "indicator--2f803737-40b5-43e6-b732-bf6b95dcce23", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318914f2-fb06-4ed7-b121-e2bd3bb96363", "sighting_of_ref": "indicator--0e64c18d-9ce8-4365-8211-6ba69478fa2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952c42fc-1f54-4b00-9cde-92bc34e8bdcc", "sighting_of_ref": "indicator--0e64c18d-9ce8-4365-8211-6ba69478fa2f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d00cde-08e8-41c7-86f9-5520fc61a957", "sighting_of_ref": "indicator--4c7308af-5630-485d-9597-5d8e96315851", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4f7c2e-2e14-4702-80bd-4dc723709da8", "sighting_of_ref": "indicator--4c7308af-5630-485d-9597-5d8e96315851", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c1dd47-537f-4d44-ac73-f13df7e45845", "sighting_of_ref": "indicator--cfac703b-9982-41c2-b7f9-7d02b2330322", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f167710-738f-4bd8-87d4-2a81aaa3df18", "sighting_of_ref": "indicator--cfac703b-9982-41c2-b7f9-7d02b2330322", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebcedd6-a09a-47ad-aad9-26fc1e17f4b9", "sighting_of_ref": "indicator--c2f3ec79-3e86-408a-847b-14141d504694", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc24e28-fc50-4eab-989d-2520b6ba7a3d", "sighting_of_ref": "indicator--c2f3ec79-3e86-408a-847b-14141d504694", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad94f8b7-bc58-4434-92c9-e6eae44e1731", "sighting_of_ref": "indicator--d15f3266-1def-4a5a-8c47-c90fc7f1aabb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d01859-858b-4524-84a8-87a588273934", "sighting_of_ref": "indicator--d15f3266-1def-4a5a-8c47-c90fc7f1aabb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae69bc6a-df7d-4f7b-a075-8592a9f6293e", "sighting_of_ref": "indicator--c5197e01-d48e-48b0-a372-e4a481329711", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388029f9-c449-47a4-a56f-41a689385cec", "sighting_of_ref": "indicator--c5197e01-d48e-48b0-a372-e4a481329711", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741a5f91-f58a-4b53-a59c-4ba0d7bed9b8", "sighting_of_ref": "indicator--f8537451-0659-4293-937f-2a7359a40e84", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb81253-3d46-47ae-9e45-8c513f18ed89", "sighting_of_ref": "indicator--f8537451-0659-4293-937f-2a7359a40e84", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5c767b-460b-493a-a0b4-96fd0d2483ba", "sighting_of_ref": "indicator--4614a7db-aada-4057-b3d6-f0edfdcecce1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d31c52-46af-48ce-81e4-b56d4021d7e1", "sighting_of_ref": "indicator--4614a7db-aada-4057-b3d6-f0edfdcecce1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc4657e-32a9-4075-b1df-956daa0d5060", "sighting_of_ref": "indicator--e7c113ce-d561-4315-820f-b8fde882acb4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0a5b70-5cbb-466e-ba17-530f70de8013", "sighting_of_ref": "indicator--e7c113ce-d561-4315-820f-b8fde882acb4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9bd56c-b947-4c5a-998e-58e1664fb20d", "sighting_of_ref": "indicator--50dd25a6-7a92-4775-a3c8-aa8b3205c825", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af383b0d-ee31-4c5b-9a29-afd07dc5dc29", "sighting_of_ref": "indicator--50dd25a6-7a92-4775-a3c8-aa8b3205c825", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76ad406-8140-4515-ae68-8f6f8650645b", "sighting_of_ref": "indicator--89696ae4-09e2-4e15-a578-23ba1e432f23", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cbfedf-0661-45d6-b6b0-600b2fc693b9", "sighting_of_ref": "indicator--89696ae4-09e2-4e15-a578-23ba1e432f23", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba0b204-addf-4371-a9d3-89d4f6dbedad", "sighting_of_ref": "indicator--70a53aa8-14b8-418f-9e54-448b6361e2ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cb9de6-12eb-4822-a001-1575e22ac2f0", "sighting_of_ref": "indicator--70a53aa8-14b8-418f-9e54-448b6361e2ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaec1b68-d5bb-400c-b652-77ebf51004e5", "sighting_of_ref": "indicator--e3d4e1cc-ab2b-4fee-9878-ed9dd649be61", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7c7208-b72d-42d9-b5d6-a072cd1d1520", "sighting_of_ref": "indicator--e3d4e1cc-ab2b-4fee-9878-ed9dd649be61", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6684f886-a1fd-4f2a-a15e-320240a846cb", "sighting_of_ref": "indicator--e91b5727-c88e-4eb9-abea-fe2793a1d0c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7104a32-ab93-4bc1-a101-4bbc2cfc695e", "sighting_of_ref": "indicator--2d25033d-4e6b-4111-9c82-c8fc2bbf34ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb7682c-9136-4043-ac24-38a96ed3ac99", "sighting_of_ref": "indicator--7799118e-94fa-4c72-8c64-17e7fb0f9cb1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9a499c-52bd-4e02-8209-29931876e87c", "sighting_of_ref": "indicator--5af2ca65-e63a-4e67-aa91-70c4c44206c8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e84cfb-89e1-43eb-a8cf-b362b6ce1270", "sighting_of_ref": "indicator--5af2ca65-e63a-4e67-aa91-70c4c44206c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b8fe3a-e6bb-4e3a-ab46-fd60ff7717c0", "sighting_of_ref": "indicator--91abd7fb-313d-4527-840f-e5e36df0898a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434ac830-b348-439b-97cb-66e018536ae2", "sighting_of_ref": "indicator--82146701-3d7d-4b3e-a11f-b26fafcb9be7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13373fa-924c-40aa-82bb-a3a355978cfe", "sighting_of_ref": "indicator--82146701-3d7d-4b3e-a11f-b26fafcb9be7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3c726a-8dfc-4702-bb74-3e677cd9210b", "sighting_of_ref": "indicator--45f87436-d3b2-4d8f-b56f-dcdc6bbae959", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4351cf5d-6757-4a85-acd1-d353728d79df", "sighting_of_ref": "indicator--c8a534da-cca7-4a29-8159-2217ab328626", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c57767-e6e2-4a81-9cb1-aa5a7589dbf1", "sighting_of_ref": "indicator--6205c7b3-36a5-413d-a651-ed2d2976e849", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46410ed-4d6f-47c0-9899-4ecf46afdf8a", "sighting_of_ref": "indicator--d20f4cfb-4d35-485b-a626-951275c62f5a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cac83ad-428d-4adf-8e00-c32d5789f117", "sighting_of_ref": "indicator--3226db3f-6d18-443a-9ba9-fa35f2d2ea66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3619ea1b-3110-4cb4-9de6-31708d3d8796", "sighting_of_ref": "indicator--7077f7a8-6036-4d26-b090-2e1532ef5e87", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daea4426-4414-4bca-a22d-a55a1e0409d4", "sighting_of_ref": "indicator--7a8bc50c-46ad-4bf1-81fb-9872589c6ea2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc6bcc2-9b20-4f21-bd6b-5061167e675d", "sighting_of_ref": "indicator--11e74060-9da2-434a-9b3c-d547e32e4c2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e21972-b0c0-4668-9226-01e8ad6f8f9d", "sighting_of_ref": "indicator--2ff03aee-d671-415f-ae61-6424219a9bf6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1ccb45-adfb-46a4-89dd-0d6a2f89dc67", "sighting_of_ref": "indicator--4a7fb139-550b-4ccd-98e2-2eacc63ffee6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428f72d2-01cf-47a6-b845-f8b9969bf757", "sighting_of_ref": "indicator--527973ee-a27c-4dbf-b319-cb66ce47d20d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a1d39f-656f-4ce5-85ed-0e186bd1f36c", "sighting_of_ref": "indicator--4cb0a39c-f1a3-4d2f-8e01-ff481440f345", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ece707-6d8b-49f2-9122-595c25fd9d99", "sighting_of_ref": "indicator--5238fd38-3970-4993-bb48-3931d22cc10f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b31a7c-80b2-4328-9c10-6b57bb790093", "sighting_of_ref": "indicator--5238fd38-3970-4993-bb48-3931d22cc10f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29974e63-687f-4b39-8818-c59c841326a1", "sighting_of_ref": "indicator--0bf024b7-219c-4bdc-b30c-e755f18465fe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108567ba-0978-46b1-94ff-bbd3337f4e29", "sighting_of_ref": "indicator--29a132c9-e048-4c7e-a3e4-0145e46000cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d75b22f-57b6-4789-94dd-7d093cb0898c", "sighting_of_ref": "indicator--7b07f227-3e87-45a3-a6f6-722389e07e0f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1481608b-865f-4406-a805-1c4bb6723a0e", "sighting_of_ref": "indicator--f30aedb4-a478-4fcb-bfae-3df1cd726ff1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7672a88e-a705-44d0-866c-fe88566a2b94", "sighting_of_ref": "indicator--d1e26d7b-62a8-4878-9665-62e6bc534065", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0a071e-3b52-46a9-a55a-29d3e2949006", "sighting_of_ref": "indicator--af4ae71b-b3b6-4514-ad55-b95ffa03cce6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b9b534-c501-4086-86dc-3343b68afd33", "sighting_of_ref": "indicator--0d0ed455-1eca-4fa7-b466-736235ac2d87", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f393f964-5080-4dca-b8c4-cb47fd1322a7", "sighting_of_ref": "indicator--66e903bf-0868-4f79-afc8-91e908b627aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aeecc43-33d3-49a4-91de-85a1e611c57b", "sighting_of_ref": "indicator--c675a741-8a31-47a7-be52-de72ede3bfe6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c979831-d6a3-4861-947d-c6253f8827d5", "sighting_of_ref": "indicator--baa13efe-e8db-4581-9bb3-66132cde1455", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c5eac1-7e74-48a9-80c7-eed1eeb7e459", "sighting_of_ref": "indicator--fc247393-e208-47ea-83e4-b88333e3e1b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0369d84-69a9-4ad9-9462-69f7e9c9c1f1", "sighting_of_ref": "indicator--39fdc86d-eb3e-46a6-98a8-5d7022b17ed6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39c2c9b-c8da-4055-8dea-8f842550e661", "sighting_of_ref": "indicator--c6f4d866-864b-4909-a48e-45423a79072f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb80910-452d-4359-9c9f-0061b020d564", "sighting_of_ref": "indicator--1ae64886-3a65-4ec1-b9a1-cac2fa608b57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe91c162-f297-473a-98db-1766f39dc989", "sighting_of_ref": "indicator--5164374a-b2ef-4e29-86b1-ba703f012c57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30437314-0976-4bb4-9467-9d716102503d", "sighting_of_ref": "indicator--04fd1411-0524-47a3-b6ee-be8f9aaf682f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e420f7d-5f89-41be-a398-47c70aac2616", "sighting_of_ref": "indicator--09032c9a-104f-4089-9b98-96bf77dbf84e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e8f567-fe7e-4c42-bbef-e987a17611e1", "sighting_of_ref": "indicator--932074ba-a621-49fc-9d75-e95ae99c89c3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b272664d-c6a9-470f-bfeb-bbefc6257138", "sighting_of_ref": "indicator--1adf1527-3482-4dbb-9a25-26f43e19f841", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ace7106-ee65-40f8-8647-17526a445853", "sighting_of_ref": "indicator--f06b3dee-4f09-4635-bc3a-0a16e75ee4e4", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48a5b89-3ac1-4595-9e2f-16ed5cba5969", "sighting_of_ref": "indicator--4529a796-7d6b-43d3-af39-807b43f610c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4f4cf4-fbc7-4d69-90d2-f740c2947065", "sighting_of_ref": "indicator--c2f55782-9ebe-4f60-aba6-20c07f7d1cbc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea45b01c-7362-40c5-8e52-ff5209e45f90", "sighting_of_ref": "indicator--01068e3e-6096-4bf8-a021-defd2ec52f95", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380db0d4-3fa3-4f2d-a821-82c773a42f65", "sighting_of_ref": "indicator--27930cae-f728-40b1-b5f8-0118a7dffc39", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec98b2cb-2f81-4f13-a8d5-d9ff88bf2378", "sighting_of_ref": "indicator--3dbeba1c-b3b7-48ad-b510-c3a8fca97719", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f371291c-727f-4bf5-9a43-dd513a8c8c57", "sighting_of_ref": "indicator--b91e7731-5846-4372-839b-ef2e9dc35419", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83d1a73-9d9d-4234-ad3d-c4da561cf521", "sighting_of_ref": "indicator--262023c6-b298-493d-b58c-a04353e1e836", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26da7ef-cc50-4e0f-9f56-185cee41abea", "sighting_of_ref": "indicator--262023c6-b298-493d-b58c-a04353e1e836", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd421576-750b-4d05-ac8e-c21597753330", "sighting_of_ref": "indicator--d1b05761-11b8-422e-9ea7-0de7b4d1aace", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bd3bcc-880d-45a0-9a04-97b564a14b59", "sighting_of_ref": "indicator--122812c8-f1f1-40dc-a8e6-926851a011ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31783b75-6d35-450f-b7bb-722bb339153c", "sighting_of_ref": "indicator--8d4899e9-66c9-4fa6-b971-f50cf433ee10", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd4a036-17da-4957-9cd1-1c94d173bca2", "sighting_of_ref": "indicator--3dfcc2c5-1b1f-44f7-9214-167106ad5332", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08945aa0-367a-479f-ad6f-a7c730e1479c", "sighting_of_ref": "indicator--b48e3b90-f4e4-4abe-9d36-02913b310b3e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb43606f-30db-4a94-87c4-b4f3aeb0ba37", "sighting_of_ref": "indicator--b48e3b90-f4e4-4abe-9d36-02913b310b3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a361fbe-118c-41ac-8df0-c19c0eeb6854", "sighting_of_ref": "indicator--855e66f7-56af-4a64-9808-c500b46529a4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012c0de7-46cb-406a-a0ff-1fb238776d39", "sighting_of_ref": "indicator--855e66f7-56af-4a64-9808-c500b46529a4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8205b9-d0c9-4186-99b1-8a928101036b", "sighting_of_ref": "indicator--89d7ff50-d73c-4188-a5e1-30a5909be0ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6800d66b-8010-48fb-ac8f-993a5bb97ba4", "sighting_of_ref": "indicator--9cff2ab6-50ef-4dbf-852d-a7cedf18ffdf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4314bc9-9e55-4ed0-bdf9-296d613ec5c5", "sighting_of_ref": "indicator--c9b7d773-6fb0-44f9-8dce-59dbadb0e66c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1072341-505d-49eb-abd6-719caa1cff24", "sighting_of_ref": "indicator--8bc2a81a-ba29-4a0f-8277-11d1d41cc1b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e8466f-06c7-4b4b-bcc7-bb73853eed98", "sighting_of_ref": "indicator--285c8150-8613-4a8e-afb1-53bab4363961", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389a9961-955d-4edf-979e-c81268c09c1d", "sighting_of_ref": "indicator--5181f1c8-2e43-4768-8918-4fd5db97b3b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af07154-d111-4f1e-8fa2-9bb9953de9f4", "sighting_of_ref": "indicator--6aa57e72-3828-449f-84f9-977c2847f18c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c8eb94-869c-4838-a6c3-64e33e791849", "sighting_of_ref": "indicator--f2b9cd09-010f-436d-87cd-7e9f596bbbf6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca9ea36-e141-42c0-922d-1e6e7f2f19ff", "sighting_of_ref": "indicator--cef22c0d-2671-4354-84d1-bfeadf8bd2b3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fd40a7-8470-4df7-a2cd-49405b3a4980", "sighting_of_ref": "indicator--b72e4689-1d2b-4dfa-abd6-87e7d023e668", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3190f0-9795-455a-84f8-fd5b5f83c231", "sighting_of_ref": "indicator--e896fc9d-d038-4c98-b5d9-66f02b5f05eb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb77280-7c12-44e7-829a-003a283f2983", "sighting_of_ref": "indicator--e896fc9d-d038-4c98-b5d9-66f02b5f05eb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f73cba4-f465-4301-9443-4c6725594f2e", "sighting_of_ref": "indicator--618fdb69-556a-40c8-8d00-49d5c0bc06a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035f9832-90ce-43d3-8dd4-ebbabcda0ccc", "sighting_of_ref": "indicator--ca52bfcc-91bb-4431-af0b-d96e6aebe5ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196488ce-3123-4de1-9ed9-47cc0796c668", "sighting_of_ref": "indicator--452cd47e-23e2-432f-a774-78052cc1f23b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891111c0-3fcc-4e08-9c1c-e836be18a6d4", "sighting_of_ref": "indicator--452cd47e-23e2-432f-a774-78052cc1f23b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddb41ec-126a-4ae9-bfc0-bd5450b7b514", "sighting_of_ref": "indicator--1fc05c85-78a7-4d30-a7ed-713dc2eef39d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0446a6-1b4d-47f9-9e1c-09578c347119", "sighting_of_ref": "indicator--1fc05c85-78a7-4d30-a7ed-713dc2eef39d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d89aa3-fdf9-48a9-addd-5cc73a7ec181", "sighting_of_ref": "indicator--42ecb782-a846-4377-a150-029ba39cf4a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9371a7f-b4a9-43df-b959-806ef7cf8d5a", "sighting_of_ref": "indicator--6f81070c-bf02-49b4-9c74-1b50974a2da0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60af8cca-0fb6-42f2-ac08-119c071386d8", "sighting_of_ref": "indicator--68cd44c6-ae36-418b-8f8f-a562d8f7a186", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4196fb91-64d2-4186-9831-9f3cfc5b62c7", "sighting_of_ref": "indicator--1c8e4ea8-1980-4239-8762-2324f18edb44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de80f12-6ad9-46c7-89c2-e9fe0a699924", "sighting_of_ref": "indicator--1c0df525-9126-4801-a5b0-048b9b0ea56d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1aae61e-2688-44d5-80b8-dc24ec3b3909", "sighting_of_ref": "indicator--caae04af-a5a1-465e-b831-84bd7527eec7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70703d61-42c8-4c61-9e05-40f83714badf", "sighting_of_ref": "indicator--93662a60-03cb-42e9-ac7b-437604d9eccd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519e3011-c608-43f3-99d0-50f7598a5463", "sighting_of_ref": "indicator--a9eae2d8-e6fe-460d-b2f2-6cf046e29caf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e357f8e-b0eb-423c-9aa0-5b5729015573", "sighting_of_ref": "indicator--84da3a65-f80d-49df-9108-75f238ed04dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3dfbb0-5b67-462d-9c03-96e154b05e6f", "sighting_of_ref": "indicator--84f5f065-bcc0-49d7-b634-e49ea8c5cb2f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e0b55d-3258-41d9-bef9-303484a705ac", "sighting_of_ref": "indicator--2d964656-c51a-4086-a7ed-7ce8861b830a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7c0f93-c70e-4d1d-b1cb-8b4f695f5a01", "sighting_of_ref": "indicator--8a360e0e-403c-4776-8101-968ed03a8b39", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04789af3-e6cd-4d59-9898-827faef431d3", "sighting_of_ref": "indicator--e50b25c8-1560-42be-ad34-07d575b2a1f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b6f7b4-278c-414a-ba21-09e205b66617", "sighting_of_ref": "indicator--554758b2-023e-441a-8922-19766ce834fd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928fe3ce-815e-4bcf-866b-e7ef23b950d0", "sighting_of_ref": "indicator--da358ce3-adff-43e9-a112-1604bb67a23e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634b2109-a848-455d-a360-5ea26a77acce", "sighting_of_ref": "indicator--561d53e0-285a-49a7-9e2c-6cc6374bd629", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d88381a-f46d-4d3c-b64c-d70a296504e7", "sighting_of_ref": "indicator--561d53e0-285a-49a7-9e2c-6cc6374bd629", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2886fc20-00ee-4ff5-81d3-cb4ed60030b4", "sighting_of_ref": "indicator--0100cce0-9166-4a70-b667-d097d6f7b0d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efda44b-de46-44b7-b5ba-7e58e0291369", "sighting_of_ref": "indicator--9230ab8f-657c-4a74-a455-9be907b719a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd00393-02b5-4caa-8098-aeab68b271ec", "sighting_of_ref": "indicator--647b19a6-d7ad-4701-b55e-a8177d5c7bc4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9df202-20ab-4dad-b97e-2ad3aaf70ed3", "sighting_of_ref": "indicator--0144a46c-d4e0-46bf-beb8-2219726be70d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6634d4a-cd94-4b88-9c24-8cfc81012cb7", "sighting_of_ref": "indicator--2355f365-5141-4d2e-b59e-a76c456ecd89", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7275f9-a912-4c95-8178-de65cfac0e54", "sighting_of_ref": "indicator--2355f365-5141-4d2e-b59e-a76c456ecd89", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995c5968-f48b-4b03-bfc1-ccccab70b2a1", "sighting_of_ref": "indicator--d7449a48-5ad5-4323-8064-6ac0ca9a4f36", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e19dcb-4a51-4cb4-a37a-3908579bcea4", "sighting_of_ref": "indicator--0ca4c93f-4901-4c93-b9fa-6112de886d0e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2c7d0f-00b0-4876-97cc-50c54ae111f2", "sighting_of_ref": "indicator--0ca4c93f-4901-4c93-b9fa-6112de886d0e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0389ba36-955f-4644-9a6c-02ac6ddb6a19", "sighting_of_ref": "indicator--60f864cb-2305-4376-b01c-a1f50573c105", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb074d1-d786-457c-a4cb-fc7ac6026bd2", "sighting_of_ref": "indicator--6c7be44d-d642-4946-80ab-7eb82c0af822", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed8e801-a8ff-4db0-a979-f61e60a52900", "sighting_of_ref": "indicator--df515d6b-a671-4e40-bb3b-8f65b58bfd78", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ac67cc-706d-45f9-9992-306a7d9490df", "sighting_of_ref": "indicator--5fec401c-d048-48a5-a76e-31d22eed1c29", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb3476a-5f91-4ada-bace-02ee15d81d6e", "sighting_of_ref": "indicator--713d2db0-59b2-4780-b571-7730886c896b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f07e59-c28c-4f04-8183-a0f197f5c557", "sighting_of_ref": "indicator--69dfee59-ac87-4f1b-aa90-44d53ad80779", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa686d42-1aab-45b8-bb60-e046c9d27e5c", "sighting_of_ref": "indicator--69dfee59-ac87-4f1b-aa90-44d53ad80779", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c83f914-70c9-4776-9ec5-40c895a391ca", "sighting_of_ref": "indicator--83c14ad3-4668-4187-89b0-6f9661cefad4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18948119-e223-4edd-a4d5-c25c05e3ad4c", "sighting_of_ref": "indicator--a34c19f7-104a-40f1-9f8c-b6ec180d8da5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c15cd46-8482-45b8-81aa-6a113693f411", "sighting_of_ref": "indicator--29b01ed8-a656-4433-a9aa-0d0805c88572", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97456d06-5604-43b4-8a20-a34979748539", "sighting_of_ref": "indicator--29b01ed8-a656-4433-a9aa-0d0805c88572", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1038db7a-b05d-4408-a654-4b5cbfd56e2a", "sighting_of_ref": "indicator--639c4df6-805e-4b78-a5f9-c5fc75c9264d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b247cf7c-b991-4aeb-8450-956779fc3cc8", "sighting_of_ref": "indicator--639c4df6-805e-4b78-a5f9-c5fc75c9264d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ac1496-7ccd-47d7-9999-5e82b6f603f1", "sighting_of_ref": "indicator--8e85dd7b-e3d6-4286-afdc-898ff1272145", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacd7e17-4109-47b1-b0b6-5d57ab762294", "sighting_of_ref": "indicator--4af6adc4-a1a9-40f6-a02f-0130108696bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fdbac2-d9fc-486e-a298-b5699d6e1d9f", "sighting_of_ref": "indicator--925fe0fe-3fa9-4494-91be-41094d77fc57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ba617e-28ad-47b4-b765-26c5e2b3c740", "sighting_of_ref": "indicator--85cb7aa0-147f-49e8-ab21-1932fe76f770", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39048fb-8690-4272-87ac-66d18c581ff7", "sighting_of_ref": "indicator--85cb7aa0-147f-49e8-ab21-1932fe76f770", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aedf1c2-3f56-458d-9bc4-a0747e93ca1e", "sighting_of_ref": "indicator--251d8ad8-1be7-4e36-9fcc-721f0bde4c85", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c88c8f-0c62-4b76-a8a3-5350281404f6", "sighting_of_ref": "indicator--251d8ad8-1be7-4e36-9fcc-721f0bde4c85", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04dc0141-918f-45c3-874e-422614a7d226", "sighting_of_ref": "indicator--883a2e86-4783-485b-b05e-ee9c5581471b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5b9ed5-2237-4486-a0f2-e12660081338", "sighting_of_ref": "indicator--883a2e86-4783-485b-b05e-ee9c5581471b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c7a806-a03f-456b-9d1c-caec76495c65", "sighting_of_ref": "indicator--9391e6a8-6c2b-4920-a56c-e3ac1d3e9212", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeedbb0-0221-4ae5-97fa-77742e03de3e", "sighting_of_ref": "indicator--23734d48-8f97-4675-8124-3852af03d3cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805b9db3-d577-4a1b-8f7e-335056137b0b", "sighting_of_ref": "indicator--23734d48-8f97-4675-8124-3852af03d3cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd5b5f3-7413-46db-beaa-0120bce05fba", "sighting_of_ref": "indicator--e93d263c-9773-470c-8290-763c8e7b88c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6f2510-f0df-4e70-aa6c-d0725dd7ec85", "sighting_of_ref": "indicator--e93d263c-9773-470c-8290-763c8e7b88c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba51c10-6fa3-4031-841c-45d98d3e3fea", "sighting_of_ref": "indicator--0a4f33b4-d718-4028-a845-8acd3018b0d9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e292bcba-36f1-4377-8c14-baad0cdc0705", "sighting_of_ref": "indicator--f384356b-13d9-4239-8481-47b46b7b32e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acfa876-f74e-4f9e-b713-5fd148c28867", "sighting_of_ref": "indicator--f4036a2c-8628-495e-a045-ed3467ab7990", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d99612-b5ca-4e10-b744-b3c2989ebe70", "sighting_of_ref": "indicator--b3a02eb3-8956-461d-be39-b865d1a88548", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb40f837-dc3a-4d77-ba2b-a96020e417ec", "sighting_of_ref": "indicator--c66aee6c-63cc-479b-b80a-3aad998aa330", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a532e4a-11e9-482b-84f4-eb96894b3821", "sighting_of_ref": "indicator--c66aee6c-63cc-479b-b80a-3aad998aa330", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e3fd0b-658d-42de-a3ae-c38ea388a3e2", "sighting_of_ref": "indicator--2c52d3b8-d669-4f3d-acc7-04c26f22e7ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0530dc1-4e30-46f1-8333-251ac28723ed", "sighting_of_ref": "indicator--9794e22d-4096-4243-8220-71d4b7f9d743", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f8929f-251a-4d9c-badf-13b32e6785c1", "sighting_of_ref": "indicator--be431019-5b50-4a8f-b5e1-49ba5ada18c8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d277d455-bb80-44dc-916e-daf6210bb0de", "sighting_of_ref": "indicator--7b7a73ff-1923-447c-b47e-c04dd896aede", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5af3f9c-5c63-4978-9a90-d717c1624742", "sighting_of_ref": "indicator--3c5ff4b2-a847-407c-93ae-28ce9300ad4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790a00a8-c534-4b5b-9987-5ed5f3308395", "sighting_of_ref": "indicator--3a0c54f1-a6e0-447e-b749-d8181b1aa3e4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28472678-53b6-4875-84d0-3fb75d71c59c", "sighting_of_ref": "indicator--102a79a4-881a-4b98-a4e4-a36097d1874e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6d26b3-fffa-40e8-b7b9-d6f74c2806f7", "sighting_of_ref": "indicator--5e78d595-d39f-4424-b5a9-79fb3c51f16d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8dfb50-54fb-4372-90e3-0f3d78566a2b", "sighting_of_ref": "indicator--f5a478ae-e27e-4d93-9ec9-8ffa0141532d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c972e21-fcaa-4b03-a830-7001e7a4a24f", "sighting_of_ref": "indicator--1869a03d-65aa-4a4e-a279-a619cd25dea3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45646916-a08a-4a26-92d2-46f08a7ef769", "sighting_of_ref": "indicator--94d06305-af48-438d-8abd-4416284e6b44", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e211aeb6-84ad-4ad1-a13a-f72fdd83c103", "sighting_of_ref": "indicator--783d13e9-daa3-429d-92b1-17656183ca3f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac12fe70-ab6c-4e9d-8b0f-29459b855566", "sighting_of_ref": "indicator--2c9ef4fb-4d76-4347-8830-4e5160f71727", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14e01ca-fae4-446f-b7b5-c187df6d1f16", "sighting_of_ref": "indicator--cba9d4c0-a82d-4fd5-a3ed-0d02c6b3bbdb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b555a2f5-2c4e-4af2-9c15-6a3bc2f2575a", "sighting_of_ref": "indicator--0fdf1b7e-f687-4ea1-b539-4f2cda266208", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a887cf93-db92-4f48-99b9-17004fe15fc6", "sighting_of_ref": "indicator--fb9b15fd-9974-4cb8-a5df-13decebe7ed2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b9b33f-1366-4447-89f0-5de6d3c12336", "sighting_of_ref": "indicator--eaee1e86-5868-497c-82e9-4f782d720d83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c1443b-c506-4667-9f6d-d337fcc2d17b", "sighting_of_ref": "indicator--a32a1c59-95be-48eb-9b1c-711a2ce1d5d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f452a67a-8d21-44aa-a72e-5b4acc5c59c0", "sighting_of_ref": "indicator--e72f9935-4128-45db-b14e-a6ea6e3e35c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927ce0d0-cf80-4ec9-bb5d-f86518503d21", "sighting_of_ref": "indicator--5893bc7f-90f5-47d1-b115-d5b7860816b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd10d96-1809-4390-b7a3-780df7de5c2c", "sighting_of_ref": "indicator--516c1864-37ab-42e8-a5e2-c1e77455fd95", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72c198d-2246-4fdd-af58-2258037c93c1", "sighting_of_ref": "indicator--a9142c39-c529-44e6-8ac4-da1fa074abd3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8b76a7-5c29-46c7-ba97-c8c6f660d779", "sighting_of_ref": "indicator--3095734b-7cef-48d7-84a6-353eaff455ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a58638-c3be-40a8-b486-d58130315302", "sighting_of_ref": "indicator--e60eac80-e518-42d4-b430-4a5c45763669", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb6441b-2b8c-459e-9fac-5d8c539e8961", "sighting_of_ref": "indicator--f3102a2b-2f33-4e67-a4b4-46de8ab0b614", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1b91b0-34e3-4be8-baf9-7ed9393a1b72", "sighting_of_ref": "indicator--3574a8c0-4353-4d27-a0cd-bb3cb5c14e98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad426fbc-1be4-4fdc-9e51-0ada490a5cb1", "sighting_of_ref": "indicator--13e33dbd-b68d-4ac0-ba89-f23ed7d65b87", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483cfdc8-9780-4e77-b6e1-3ad3efd901e1", "sighting_of_ref": "indicator--56dff322-f5e1-4711-9482-b71962b5a258", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b9b6ee-f6da-4e93-8024-79fae08d458d", "sighting_of_ref": "indicator--4c698d6e-a82a-401b-9282-d97e3cf94873", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd46246-74de-4a34-81e5-d2245be7d3e4", "sighting_of_ref": "indicator--de08c97b-6505-4437-a89b-c5f1033b686d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55db060-fb54-40e6-b4cd-b54f688a75f6", "sighting_of_ref": "indicator--11cbf733-6eb7-45e5-88b0-65e2c19be590", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07eaa36c-77b6-4a95-9db4-d035a735aa3e", "sighting_of_ref": "indicator--9cfd8a0a-7582-429b-b0e6-2ea2654e9038", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d38dbb-ee62-4ee0-b230-b6f3ca174ea9", "sighting_of_ref": "indicator--e02a28bc-18ab-4001-a2de-4fcb8b6ea994", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff3cf15-5fc1-4501-bacf-44f8de81f85d", "sighting_of_ref": "indicator--7e80573d-716c-4fa3-a418-0e39cb9055d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed3c37a-11a4-4b5c-93fc-035d77b17c87", "sighting_of_ref": "indicator--49a8d46e-51d2-4086-ab78-776526745c12", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7912ca6f-d63a-4e08-a94c-f3b0ca8efca2", "sighting_of_ref": "indicator--deac1b3b-e35c-4a68-bf2f-1354476996d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192e2f63-c764-44c3-b6b1-a7ce16410335", "sighting_of_ref": "indicator--afc7202b-2e24-47b5-a703-52d25ea0c2ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d36eb0b-fb65-49ec-b3f7-d1df2fab4519", "sighting_of_ref": "indicator--84651812-0f81-4ba0-8b3e-c5b5f121fa06", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3e1b83-8cea-484d-a7e4-ac717a81bbaa", "sighting_of_ref": "indicator--aa3d930a-e0c9-4353-a895-29feab161f7c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c24ace-6598-470c-965e-0b386b6467f8", "sighting_of_ref": "indicator--fd636a95-e247-40d4-984b-5a91446f8831", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e8f069-58f6-40cc-b826-656767cc4fbb", "sighting_of_ref": "indicator--ca8511ac-c9e8-4737-a661-9976ed322ff6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0543dfbf-1f8f-41a9-b0b4-d6edb5cda6a2", "sighting_of_ref": "indicator--12fbf638-8acd-43ea-9f6e-e2816a6a2323", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70a0047-130a-4587-a6cc-392426a9e4d8", "sighting_of_ref": "indicator--5fc49fc5-8f63-4843-8261-751526ace104", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed2c49f-0e8f-4612-901a-238762500eb5", "sighting_of_ref": "indicator--d0fb2b28-dc4a-4fc5-a7bb-c278a6aeb355", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8630f6-23b9-4414-a38a-004f3a0852b5", "sighting_of_ref": "indicator--3a396129-437c-43e1-9ba8-74349edb3a70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d19a4d-0b0e-4d77-8d56-0249989cf8f2", "sighting_of_ref": "indicator--22e14601-39a4-4c6a-8f8e-df6ac1ada278", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b167270f-cebc-4f5d-b019-51f8c9609dab", "sighting_of_ref": "indicator--d2f23618-42d1-483c-95ed-8d71b30ce3fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea2ec05-5a1d-43ff-a1a9-d6f62d565faf", "sighting_of_ref": "indicator--8327c04a-b369-4d37-b7ec-aefd7317c07f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5b6d7f-db7d-468e-9696-ca3e867ca6a5", "sighting_of_ref": "indicator--51fae71f-54b9-43e8-beec-d0b50a6d8236", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ced13b-a2f4-4068-adb0-0664211162db", "sighting_of_ref": "indicator--f619fd81-1092-43f2-8a0b-5d04f46868b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa23c6c9-c3d8-417d-ad96-1127df8370fc", "sighting_of_ref": "indicator--7a8ca7e3-0ece-48ad-a808-e8a56f6181fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edec44e-f64c-4933-9165-22cac4bd65d9", "sighting_of_ref": "indicator--7a8ca7e3-0ece-48ad-a808-e8a56f6181fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b123940-4a3b-46d7-8e86-cadbc8cff705", "sighting_of_ref": "indicator--02c60660-6f74-43f9-889f-cb1dfdd0018f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5e48c3-9883-4308-aa34-3329a7c716b4", "sighting_of_ref": "indicator--ab102ad7-3310-41d4-bde9-49ea2d6ac6ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca789f08-4844-4da7-a532-4f3d3a4def08", "sighting_of_ref": "indicator--73b568fa-8b6a-4402-98fb-91ed4df5a787", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93fad63-9ea6-4363-81d7-97ff87fc735c", "sighting_of_ref": "indicator--0fadd907-6378-4858-8723-cd6f34711334", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649a455f-b69c-48a5-93b2-4d928b43bab0", "sighting_of_ref": "indicator--0fadd907-6378-4858-8723-cd6f34711334", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43528545-2ab6-4b58-bfdb-9ae96deb3103", "sighting_of_ref": "indicator--c6ce408d-2729-4eb0-aab2-867ec5f2effa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc6ec4e-d547-42d1-bd9d-67d6049c6ec9", "sighting_of_ref": "indicator--53b13554-8a45-4534-8876-029226ae005e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1752cc-fedf-4311-8cb8-1060ed231343", "sighting_of_ref": "indicator--ce3c1445-7009-4c6e-861e-8be7e35ccce8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b274d261-3fbe-4b65-9fca-6d8ec3c523f2", "sighting_of_ref": "indicator--17095730-073c-4446-b38b-db6793e83836", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9e2ebe-8929-476e-8377-a1158796d4da", "sighting_of_ref": "indicator--5063a90c-ef36-41d1-bdbd-caf3839c1f1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e093d329-9e3b-4605-89b5-3b0b00b3acf2", "sighting_of_ref": "indicator--4998dfa7-9b20-47d2-91f0-50d1e676528c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75ef3ab-a3f7-4d6a-9f03-68e5eb24e206", "sighting_of_ref": "indicator--4998dfa7-9b20-47d2-91f0-50d1e676528c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3a47a5-64e1-40a9-9768-2c8ca245b91b", "sighting_of_ref": "indicator--dae6bd03-d6df-4958-810e-ddc70b111cf1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e24e28b-9054-4191-9898-90776d421a2d", "sighting_of_ref": "indicator--6bc544fc-5200-441a-95cd-708b6128a041", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1184810d-f832-4d8d-a5aa-e7eb635dac2b", "sighting_of_ref": "indicator--cd35c053-7449-4626-be12-e03d966497fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cb61b3-d806-489f-a06d-43f3dd208e27", "sighting_of_ref": "indicator--cd35c053-7449-4626-be12-e03d966497fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98974093-4c45-48de-93ef-199460a386f4", "sighting_of_ref": "indicator--8f7e439e-a45f-43e4-b607-3b0c6239b19c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3abceb-d0d8-4563-9a65-ce6b74eca3fc", "sighting_of_ref": "indicator--2975de48-fc05-435f-bfb9-a8343b8bc844", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ca3c86-ccf9-4ffe-aeb3-f406c23d9b2b", "sighting_of_ref": "indicator--b3be7ebd-b99d-4fcb-aca0-ba3b75c96a97", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e2d034-9c33-4fc5-8de1-568d75887d41", "sighting_of_ref": "indicator--09a5d3ad-da19-4fb7-9f88-d9f0a32f5ad4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffdc6dd-0aa1-4825-9a03-8359582e64c1", "sighting_of_ref": "indicator--89c20d43-9f57-4ede-9454-a0e0e8e08308", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7605d178-bc69-4331-b427-41edafcad763", "sighting_of_ref": "indicator--89c20d43-9f57-4ede-9454-a0e0e8e08308", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a245bf4b-d739-428d-b4e7-489a01050bb2", "sighting_of_ref": "indicator--1860a302-91e4-4494-b449-25732a7b19bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4462b768-d712-42b2-9d40-b832f058053b", "sighting_of_ref": "indicator--1860a302-91e4-4494-b449-25732a7b19bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd4bf26-d1c3-413d-8845-191562156740", "sighting_of_ref": "indicator--68620935-294b-433e-b652-e9ae7168c928", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce8f207-b1c5-4255-ab63-de0823db5879", "sighting_of_ref": "indicator--32e81af0-672e-46ed-8c0e-35bb246abeaf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639bd01b-eb2e-4e57-874b-f69ac1648cd9", "sighting_of_ref": "indicator--32e81af0-672e-46ed-8c0e-35bb246abeaf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb5ed71-4e39-4584-82a0-a9bab6fa31f8", "sighting_of_ref": "indicator--94779b87-5727-4c14-980d-681fea11009b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cd26a7-f508-4897-b134-e19345fc7f19", "sighting_of_ref": "indicator--2fbfea1a-558d-49d2-86a2-955e3ebe1a07", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a91803-c983-4c27-b2b6-8ba30a2679b8", "sighting_of_ref": "indicator--2fbfea1a-558d-49d2-86a2-955e3ebe1a07", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8d75de-8edb-4724-acf7-3b9fb0352c39", "sighting_of_ref": "indicator--af9c8d10-f823-4fb4-9023-ff99fd0b318e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865970ac-22da-448a-ae22-551692b7e4bc", "sighting_of_ref": "indicator--bf8ebb6c-4e4c-4ccf-b2de-b78057418624", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49209f45-2622-4956-bf01-99c04a0cfa6f", "sighting_of_ref": "indicator--d1b45fa6-9869-4d7c-984f-95e2a85b6fff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498c5ab8-9189-478c-9d5c-442d3ef69684", "sighting_of_ref": "indicator--dbae226b-a14f-499a-83dd-59f44c52407e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8484ae15-08f2-41fa-a703-965f85d9f4ae", "sighting_of_ref": "indicator--8e480f3a-d8ae-430d-966d-d69014689853", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f19786-5f30-4bb1-bc94-f31c60b9d3ee", "sighting_of_ref": "indicator--d7083405-a036-432b-8952-31c6b67075f0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e534577a-4aa5-4e53-a1a4-a303e43622b5", "sighting_of_ref": "indicator--d7083405-a036-432b-8952-31c6b67075f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2f59b7-4d0e-4501-86ec-5bc0571d72cb", "sighting_of_ref": "indicator--12c43f9b-03a5-4484-a382-bc3a548310d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c6846a-7aec-4f91-a4df-aa27f4ea488e", "sighting_of_ref": "indicator--8ae21ad4-7b22-4db5-8ef4-26048085479a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf9b456-7516-4c39-8fce-bd3265dace8c", "sighting_of_ref": "indicator--ecb4f1c1-da14-44b6-9edc-e6a0144d2b5a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec26b68-8617-4ae6-b7c4-6bbe62bd2148", "sighting_of_ref": "indicator--fff1dc09-de41-4799-87bd-022dba60abce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a8450c-03d5-46e2-bf75-8d0b20f1875f", "sighting_of_ref": "indicator--dcdaf51e-994e-4717-8da8-ea9c9da5be7d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec0624f-7cb8-464e-9dc1-21599324f3a0", "sighting_of_ref": "indicator--63bb6267-4b3c-46b8-be5b-8fa2110ac188", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6bcaf1-e09b-4e75-9a03-35099a58ac86", "sighting_of_ref": "indicator--63bb6267-4b3c-46b8-be5b-8fa2110ac188", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4efb53d-abdc-4307-92db-64642f7f55fd", "sighting_of_ref": "indicator--db1d7978-7fb2-4770-bf5a-5d25177fe75c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f4b4a8-b38a-4266-841d-deca1c95eb05", "sighting_of_ref": "indicator--db1d7978-7fb2-4770-bf5a-5d25177fe75c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8652db-fa10-4f2f-8b31-09f185d1b72e", "sighting_of_ref": "indicator--1fe57138-30dd-421a-a2a9-069312eabe87", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5144e7a8-62f3-423b-8124-17dcc71689b2", "sighting_of_ref": "indicator--f4b2db0c-72f1-41dd-ba4b-65a5af29284e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30b2963-fe1e-41c7-921f-dfb6029e4427", "sighting_of_ref": "indicator--f4e3df03-5a4c-4a0f-bf54-2e76ccfa782a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3944b33-d31c-40b2-9944-91dc7a6b5ce2", "sighting_of_ref": "indicator--1c380d40-2887-4480-81d6-cb71d87406e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4732766-3919-4c2b-ada6-5bebd25557d7", "sighting_of_ref": "indicator--1c380d40-2887-4480-81d6-cb71d87406e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821d4201-8fd2-4532-97a6-50d60f342159", "sighting_of_ref": "indicator--6fef02c2-69af-4e42-94c1-2e1cf3902130", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686e154a-6d3c-44f7-9334-c39604ba1382", "sighting_of_ref": "indicator--72da05e8-62a0-4825-816a-4281403a5bf5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fe8214-f739-483c-8926-89c7164d3d0a", "sighting_of_ref": "indicator--72da05e8-62a0-4825-816a-4281403a5bf5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86ccc8c-c276-4e38-bea3-c2c438b26316", "sighting_of_ref": "indicator--d8e4c3f9-40e5-4077-82ec-ec170d52bf7d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f0e6e1-bdb8-4024-83df-701af28c2ddf", "sighting_of_ref": "indicator--d8e4c3f9-40e5-4077-82ec-ec170d52bf7d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b872b16-480d-48fd-a3d7-b52d4cca5b49", "sighting_of_ref": "indicator--fec54ead-3c6b-4541-8e90-b3f3b9384965", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c94d574-e28f-4ed0-a927-1e35304a91ef", "sighting_of_ref": "indicator--fec54ead-3c6b-4541-8e90-b3f3b9384965", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa6dcb5-e68d-4eda-9c1f-2c72c4fa8307", "sighting_of_ref": "indicator--90441f41-6fec-4065-a1b2-6637f658ed22", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3886df3-0f04-4b3e-9f0c-70ce6cbfe114", "sighting_of_ref": "indicator--33bfeca1-c917-4f94-82c9-eefcb77eaf8f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd6a544-f406-4257-8014-72eee6480a7c", "sighting_of_ref": "indicator--33bfeca1-c917-4f94-82c9-eefcb77eaf8f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef9853f-529a-482b-acf6-56a4b52cfdbb", "sighting_of_ref": "indicator--6661214d-fa89-4012-bd4e-c6bacabe15b7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f01f82a-25f9-4e59-8354-c5824484ea5b", "sighting_of_ref": "indicator--6661214d-fa89-4012-bd4e-c6bacabe15b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9347656d-f290-4f1d-97d7-8f50b2a2a1ec", "sighting_of_ref": "indicator--16da5e23-28c8-47d4-b743-121359cce58a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a86516-265a-4bda-a807-8b325b27c5c9", "sighting_of_ref": "indicator--16da5e23-28c8-47d4-b743-121359cce58a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec40c97-9722-45d3-9941-6747375bbbbe", "sighting_of_ref": "indicator--05e54f73-8694-40de-b288-2706ffeabdb9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62b6ba8-68c9-477f-a716-bbd8c043d3c9", "sighting_of_ref": "indicator--cd992cff-1538-48d3-8aac-4096225e2b76", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c402944-f227-493d-b5aa-647d3dbadaf2", "sighting_of_ref": "indicator--cd992cff-1538-48d3-8aac-4096225e2b76", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3327eb-5ff9-4e05-a27d-58d7420bc88f", "sighting_of_ref": "indicator--3af26f1c-e481-4c53-a266-756608566fce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4b28b5-d5e7-4517-9b1a-8f203eea03f2", "sighting_of_ref": "indicator--579e6274-ab5b-4266-b7f3-13640e798607", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd9ad97-c005-4430-98fc-88769e216f22", "sighting_of_ref": "indicator--daaccc16-ef74-4872-867d-2f8b1d079b4c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a689fdc-9b43-40d2-b3c4-d2484654358f", "sighting_of_ref": "indicator--bcf41f15-1871-4dc2-b4f3-93c548a81062", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f52187-2978-4c8d-bf13-863353ca4341", "sighting_of_ref": "indicator--fcb26fd5-9911-4df0-b0bc-e0510e6b2367", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9ced10-714d-4877-8257-e09d142fdc65", "sighting_of_ref": "indicator--fcb26fd5-9911-4df0-b0bc-e0510e6b2367", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09024044-38c7-4f5d-9bdf-3337778ddcca", "sighting_of_ref": "indicator--10f00c6c-00d7-46de-a25f-0f987762800b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066d5864-c563-4b42-bde0-50ae5acf69ec", "sighting_of_ref": "indicator--10f00c6c-00d7-46de-a25f-0f987762800b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17f8e67-6bed-4cd2-81d5-e556390c8d6e", "sighting_of_ref": "indicator--18e068b9-93c1-4f45-83bb-88e5c424206e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044ed1fc-b8f6-4190-9a93-c7555b34b484", "sighting_of_ref": "indicator--697c9804-4fa6-4c5d-a68b-1f09addee52d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0273ca5a-73df-411d-9f30-b4655f73ca01", "sighting_of_ref": "indicator--9224759b-ebf4-49a0-9763-af7e52e81ee9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007363fc-3e31-402b-a53e-9b11e4ead32b", "sighting_of_ref": "indicator--4a3570a8-5246-4663-a101-fe5b13612159", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f611ac6e-14f4-4a38-aedd-0908265a48c5", "sighting_of_ref": "indicator--4a3570a8-5246-4663-a101-fe5b13612159", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b845a214-8832-471d-bc07-564c10ed97af", "sighting_of_ref": "indicator--429205af-6f5b-4022-9d99-83b51c20ee8f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b07961-787a-4527-937e-dce66c4471ec", "sighting_of_ref": "indicator--3c977b59-ea2c-4745-8b35-09955402b73a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c913565-82b7-440c-b08e-61d3d851767e", "sighting_of_ref": "indicator--3ac710fa-5d6e-4927-b078-04f444421715", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498b2b87-ad70-41a9-8d89-7891a9fe8839", "sighting_of_ref": "indicator--d6abf7db-b8f9-496d-9a35-d5cba0c2bb2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc81a89-e361-4462-80c6-5c3a97c00605", "sighting_of_ref": "indicator--d6abf7db-b8f9-496d-9a35-d5cba0c2bb2f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bee109b-4551-4e3c-aea5-c9c6d2402d91", "sighting_of_ref": "indicator--859752e2-c68b-49fa-a46e-6c9803db9899", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8f0b01-3ce7-4aa9-8999-59405b136b3e", "sighting_of_ref": "indicator--859752e2-c68b-49fa-a46e-6c9803db9899", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5591d351-c809-4eb9-8353-bfa10683196c", "sighting_of_ref": "indicator--02a335d9-b91f-4ce6-a8cc-07ea12cb532a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55e8f74-46eb-41b7-ac23-0471a96834ed", "sighting_of_ref": "indicator--02a335d9-b91f-4ce6-a8cc-07ea12cb532a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd05df6a-256d-4db8-965e-48e1315ca810", "sighting_of_ref": "indicator--37887bed-a9e2-430d-bc14-40b01b684a66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a29b34-1bc0-408d-be7b-1f5e13f98bd7", "sighting_of_ref": "indicator--37887bed-a9e2-430d-bc14-40b01b684a66", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c183d1d-5708-4bdb-aeb8-f5bbde29fd3f", "sighting_of_ref": "indicator--7ae3a87d-2876-4bd1-ac06-f6dc3dbf0465", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e58157-8983-4029-a661-f4f650ef1cc4", "sighting_of_ref": "indicator--f49ccf40-3cae-4ca9-a1c0-86ae84c3d541", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d679b7f4-9bef-4f7c-b47f-159b8eb68ff0", "sighting_of_ref": "indicator--80bc5893-f859-424f-8f7c-09b1f6a39561", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50dfbf6-ca94-4f4b-a6ae-b1072250b05a", "sighting_of_ref": "indicator--e6bcd96f-5937-4200-9bd4-1d02ae87e1ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795afc72-ee14-4b3e-863b-623b06cd430e", "sighting_of_ref": "indicator--3af18418-c00f-4035-91f1-0501f94cf3e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df480a13-2d38-47b2-a3a4-efe6db2bcb4f", "sighting_of_ref": "indicator--92d5ed16-a09d-4860-8db0-662660a8f3cb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733bf169-e454-4962-9202-05beaf0f6e6b", "sighting_of_ref": "indicator--e6c18aee-56fe-48b7-ac38-f5755cb17ff1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb68be07-b233-4e5c-a7ae-c91d418eae72", "sighting_of_ref": "indicator--6f6d36d7-bbf3-49d6-bcfc-df770eddf2f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c429bb3b-488f-4b38-9eaf-8dee40c4257e", "sighting_of_ref": "indicator--20373329-0611-488a-8a56-4e4c515f6e4e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661d5b27-81ec-47cb-86ea-49a52ed4d49a", "sighting_of_ref": "indicator--5c823f86-7840-48c2-9159-9543d75719cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883e058b-b50b-4431-929a-ab030dfcbfd3", "sighting_of_ref": "indicator--5c823f86-7840-48c2-9159-9543d75719cd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f348a2-5081-441b-b40e-fd426332b3d6", "sighting_of_ref": "indicator--9527c42d-23f3-4c18-8c22-178f6431e608", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf21375-b607-42a0-b6e2-ca1bbbdc21e0", "sighting_of_ref": "indicator--831572ef-9b6d-454f-8619-d411f87f1363", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e77d6e-0860-4345-a18e-e783c96cf305", "sighting_of_ref": "indicator--ad665c78-81de-491a-8cc8-4252e5aa3bc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfe94f9-62cc-438e-a955-564d3f220f13", "sighting_of_ref": "indicator--efb133e5-0069-4ae2-bff0-a811dfc3ffb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3251c8d5-c8b6-4bfa-a5ac-cc2e86a5389a", "sighting_of_ref": "indicator--d534eca4-3873-4452-b187-2ea05abf45c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15629a5a-7b73-44fd-9720-8072f75b6102", "sighting_of_ref": "indicator--837e1042-fa6d-459d-b69c-64319e947670", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46681be-d652-4564-b6a1-5090def2e248", "sighting_of_ref": "indicator--15d83e97-ffdc-42a3-a026-ac1985377cc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea3b800-d1a9-42d2-91ec-11bc6b1ed526", "sighting_of_ref": "indicator--777e1e6e-340f-4f14-a276-72ad241d59e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d904d9cf-581b-4036-ae74-397fb28488fd", "sighting_of_ref": "indicator--afd55e51-7285-4cdb-8f3b-461d084795f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e46327-3e3d-4e90-a1ba-85164a856bdb", "sighting_of_ref": "indicator--9300ba62-96a8-4e03-88df-e60123983868", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc6085b-20d8-4adc-947a-5c6757707f7e", "sighting_of_ref": "indicator--943fb4a1-106a-41d3-8740-233544680fdb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdf45f1-6f4d-4989-b094-86e030af64c3", "sighting_of_ref": "indicator--883bfee2-0150-4f64-9ffd-206aa53c283a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6429dd25-84e7-4afc-99af-c70b0e9cbe45", "sighting_of_ref": "indicator--ea8cbc10-40c1-4133-9454-a84320005f07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bf8b45-2fb4-42a3-9382-81c454210609", "sighting_of_ref": "indicator--9b95689d-1a5a-4116-ad7d-008c611b55a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537f8b1b-2b1d-44ac-ac9d-c2e1c7954a7e", "sighting_of_ref": "indicator--867a6434-05c1-4343-9673-7c4cd14212e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46576c9-abae-4183-bb9b-2263c22f6723", "sighting_of_ref": "indicator--2ee8d8aa-8acb-4a4a-aa09-c58a92ae4e32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb852250-189d-4d1d-810d-992c1381fa4e", "sighting_of_ref": "indicator--1ff1ad41-1288-4090-8ef5-c9e05b16c233", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f1e47e-e380-4cca-9101-39f8ced53610", "sighting_of_ref": "indicator--f4f83659-d41c-4c0c-afaa-4dfb2825e284", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5aa433-d127-447e-a8f7-10f1e651ed5a", "sighting_of_ref": "indicator--26312fe7-b9fb-41ff-8553-beb669c790f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341ce950-e694-49b6-a741-15307c7663ab", "sighting_of_ref": "indicator--e5100961-745c-4262-a3e0-182ce537280b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910a0369-dd38-4860-83ef-a3cd29325e74", "sighting_of_ref": "indicator--3b24176a-3c1b-46f6-8439-6b81384c3d41", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cf60a5-07f2-4e4d-80cd-fb53dd3c657f", "sighting_of_ref": "indicator--f2c74ec2-312b-4203-a9b2-5aca7aca832d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7bbd91-d7f6-4c78-9219-0cff3d82ad8a", "sighting_of_ref": "indicator--f2c74ec2-312b-4203-a9b2-5aca7aca832d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882c85e7-e769-4a9d-a951-d57535ab7ca2", "sighting_of_ref": "indicator--e75a90e1-ef37-4f9b-8689-4e5f9a7885d8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114e12fb-3613-40db-932d-183f792efa7e", "sighting_of_ref": "indicator--e75a90e1-ef37-4f9b-8689-4e5f9a7885d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f5fa34-0c37-491f-9d8d-c629b11ec83d", "sighting_of_ref": "indicator--ffffffb0-622f-4b1b-8a40-e637eb85e9d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91aaffac-b759-4552-a3e0-2f32f9ef7355", "sighting_of_ref": "indicator--ffffffb0-622f-4b1b-8a40-e637eb85e9d0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea65795f-654c-4226-9899-77953c6ceed9", "sighting_of_ref": "indicator--111af0e4-8342-42b0-8926-2bfab79e1a0e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf1602c-87f6-427b-a016-6c63e0d33277", "sighting_of_ref": "indicator--111af0e4-8342-42b0-8926-2bfab79e1a0e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5179fc6-7307-4f55-bc7d-30d29e4cbd8e", "sighting_of_ref": "indicator--64cf5cc9-652e-46d2-a057-a5297cd0c847", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9d2f4d-764b-4ba7-9ef7-a2e4e64c3f34", "sighting_of_ref": "indicator--64cf5cc9-652e-46d2-a057-a5297cd0c847", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e1a1c6-1ba7-4a10-a47b-bdce0df5b778", "sighting_of_ref": "indicator--d91b2922-d5bd-4631-b810-58ec84f84bae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e861c80-3712-4fa1-b6f1-09d16ab4d271", "sighting_of_ref": "indicator--d91b2922-d5bd-4631-b810-58ec84f84bae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c548cecf-9839-4653-8ca2-4f8bed5cfec6", "sighting_of_ref": "indicator--1b722c3a-bc72-4cdf-a8c5-18d2bec184d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b216ae6-67ef-4aa3-a035-a98c0686d543", "sighting_of_ref": "indicator--1b722c3a-bc72-4cdf-a8c5-18d2bec184d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11762e3-b0df-442c-b2b6-f96b6ab4dcb5", "sighting_of_ref": "indicator--996cac8b-1a0d-4ac0-8457-8fe9095fe09e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2023b905-32e0-4162-aee0-e117085d77c8", "sighting_of_ref": "indicator--276abac3-8e06-434e-949f-c78fb4f2fe53", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d743bb-e07f-430b-9e0b-bdeb6336a692", "sighting_of_ref": "indicator--1a0920f8-bad1-4c58-854e-45bde0205166", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb37d82-d805-46c0-8a70-e8036dd6f96c", "sighting_of_ref": "indicator--14c59385-1aed-46b5-b7e1-837a6032e6e6", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402fa094-faba-4825-9180-1c393ba552ed", "sighting_of_ref": "indicator--3b1b5749-9fe5-4847-b687-544366048d83", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73220fc-e3f7-4163-a9c6-05226aa17114", "sighting_of_ref": "indicator--bfbd5f25-a7e3-4c92-9eae-37484a6c047a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b388257d-90ee-4a5b-b0f5-2eec26f1f78d", "sighting_of_ref": "indicator--de181790-f552-4768-ad9b-047261deb790", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe6ad06-16dd-4e95-b4b0-903674d65767", "sighting_of_ref": "indicator--e195afb5-19d3-42c5-9208-379b0a3804bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0426b36-8344-4d94-99b5-a152ea347d20", "sighting_of_ref": "indicator--857a0424-f999-4f17-b736-bf2078fe39ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b688ff9-cede-4fd4-bd36-34e1b7d16545", "sighting_of_ref": "indicator--e5405086-39d5-4c9e-9769-2c230b6ec453", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7396cc09-cc61-4722-9a69-2d94036b48d3", "sighting_of_ref": "indicator--b7894099-6831-4b64-9514-ffecd4711603", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd09728-1e6b-4898-9ee6-d18810d0d083", "sighting_of_ref": "indicator--b7894099-6831-4b64-9514-ffecd4711603", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dec4c79-1b16-40e6-8366-b0f2cd2a5584", "sighting_of_ref": "indicator--e73715e8-1266-441b-b36f-396371a26cb1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b007044e-d433-4f71-beeb-b3e50378edf7", "sighting_of_ref": "indicator--75cffd90-0965-4e03-9085-a776effc3f7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f6f144-4a4a-4bbf-b103-a6500e2f056e", "sighting_of_ref": "indicator--75cffd90-0965-4e03-9085-a776effc3f7b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee1bda9-7811-4138-81fd-14cd084850ee", "sighting_of_ref": "indicator--8ef8175d-e6d9-4ff0-ad91-f5871eb0ba90", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340e306e-0ff6-4ebe-9653-6569c7d59a6b", "sighting_of_ref": "indicator--3be00cd1-d315-4ab3-b490-9887d657db48", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b168deb-ca11-48a3-b104-d6daf017c919", "sighting_of_ref": "indicator--f07f2cbe-8a84-4181-8afb-1f6e79946cd9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2b66b8-36fd-4867-93d9-93b890856f4f", "sighting_of_ref": "indicator--298cbdac-ec9c-4484-bad5-ff1bc6cf7644", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807f2d3b-6050-428a-8abf-971771300ad3", "sighting_of_ref": "indicator--e8176a78-2c3e-4961-a151-9cb79f8acb2b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16465314-8577-43d4-b214-6dad675ee259", "sighting_of_ref": "indicator--e41c8692-33ee-48da-88d3-c791f6172579", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4f87ca-4cfa-4b72-8b4c-cc6bab3db30e", "sighting_of_ref": "indicator--b8d50472-195d-432c-96b8-37a3b2f60f81", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6e081b-c55b-42a9-9f3b-27a821104f4a", "sighting_of_ref": "indicator--7e3c992e-7a0d-4e48-a3fd-5da907b7cf77", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d84453-a927-494b-b322-0a29b9984ccb", "sighting_of_ref": "indicator--f205537d-4bd3-46a8-9cae-36cf227c17bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5b4776-1644-4b9e-b16f-894b22891d78", "sighting_of_ref": "indicator--71ed4fd2-b0aa-41aa-8bc9-e09336e4fa29", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69160aac-cf62-4d53-8179-6d8abef39ef0", "sighting_of_ref": "indicator--383c57e4-0a58-43a8-a842-9d0d8aadf57a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fe1503-b02e-469b-b870-f648b0d95335", "sighting_of_ref": "indicator--358da921-6bf3-48f2-a34a-7df11d8d13bb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fbbe44-c365-4b03-94be-4408d1284c6f", "sighting_of_ref": "indicator--31afbb4f-acdc-4927-9eb7-1e19447d8d79", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4608dbd5-e394-407b-848b-65acb39ad6ef", "sighting_of_ref": "indicator--d4ae64bd-0715-44f2-a13f-aeb7eb851bff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66af933c-f60a-4141-adae-dcb998892706", "sighting_of_ref": "indicator--952a647e-34dc-4a16-a643-c3687a7b4507", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88ef95d-06b5-49d1-9011-2cf6db03aa4d", "sighting_of_ref": "indicator--1553d2ac-8c9c-4687-8283-a1e751873b82", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8771e55d-19e2-4f54-a3ac-2f680b2c5f27", "sighting_of_ref": "indicator--72f6d10b-ecd7-46b0-a79c-4881faa63675", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a9cd86-c54f-40da-a3c4-c18d86009853", "sighting_of_ref": "indicator--72f6d10b-ecd7-46b0-a79c-4881faa63675", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d42eb9b-5d0c-48b1-8490-73f1edcda47e", "sighting_of_ref": "indicator--d9f4dbd6-e49e-49c8-ad89-c9bb41367653", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0157b94-a49d-4991-aba8-d45bc6c9e8fa", "sighting_of_ref": "indicator--d9f4dbd6-e49e-49c8-ad89-c9bb41367653", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca0083f-32eb-4a9e-8be1-f0f16ec49892", "sighting_of_ref": "indicator--baf06fba-aab7-4b46-9a3f-1520af28aa67", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e707bd-1768-4be3-a875-96fe45479e06", "sighting_of_ref": "indicator--baf06fba-aab7-4b46-9a3f-1520af28aa67", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a00aee-a6cf-421a-ac9b-7f2f5234e7bc", "sighting_of_ref": "indicator--45f855eb-3e8b-464f-b867-65b49f4374d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfff3eed-8f31-40e1-a204-aa1db3464cea", "sighting_of_ref": "indicator--45f855eb-3e8b-464f-b867-65b49f4374d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b53011-ae21-4c06-b9b5-7077c1d793fb", "sighting_of_ref": "indicator--94eb2eaf-b7f1-49d9-af4b-23373b10f6f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf81c59f-c872-4539-ab0d-e32cd3e3a79f", "sighting_of_ref": "indicator--ddfd8840-7749-4018-94e3-5a5767fa8c0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15029119-a4dc-431f-b7c8-3bfa2168b4f2", "sighting_of_ref": "indicator--109d26e5-241c-4319-aa42-c1815ec33527", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebb2d0f-4b9d-4d31-b431-4328cee9081a", "sighting_of_ref": "indicator--109d26e5-241c-4319-aa42-c1815ec33527", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b28eb8-26e7-48ad-b74b-198909163511", "sighting_of_ref": "indicator--9ace9c24-b718-4d3a-93f3-8dbcde68f586", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1038bd0-318e-4158-91ca-0ca4d2a7d949", "sighting_of_ref": "indicator--9ace9c24-b718-4d3a-93f3-8dbcde68f586", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304fe850-2890-4bae-a26f-d10b697ce35c", "sighting_of_ref": "indicator--8a7f0b2c-db33-4356-965c-358604ab7588", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9e6cb1-b173-4010-87e4-908269123172", "sighting_of_ref": "indicator--10952027-0c78-4464-9878-440d96d5253a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953df2b8-990f-4277-a872-e4fec0ae632c", "sighting_of_ref": "indicator--10952027-0c78-4464-9878-440d96d5253a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f6d6b1-7e03-4e8b-bc07-d3e842e4ef3a", "sighting_of_ref": "indicator--e4772781-cc41-4c84-9e23-405b64df1801", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d951635d-2e26-46c5-ac20-df345744dcba", "sighting_of_ref": "indicator--e0921623-829c-476e-b1fe-f4e76593bbee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b7fb63-2e0f-4cd7-a0a0-256d87892f85", "sighting_of_ref": "indicator--e0921623-829c-476e-b1fe-f4e76593bbee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3841fa73-c161-4c42-bccb-8cf8310839b9", "sighting_of_ref": "indicator--615f7195-c5e5-4d0e-9eb6-651457214fa2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cc7334-1286-4f31-afac-1c732189906a", "sighting_of_ref": "indicator--b71b505b-ea97-494c-b782-a9a68d45c2a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356fdae5-998d-4995-83e7-0f8f20e00263", "sighting_of_ref": "indicator--b71b505b-ea97-494c-b782-a9a68d45c2a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f25a19-250a-4c36-a2ac-760c0ed489f7", "sighting_of_ref": "indicator--2cd3d063-688f-4200-84aa-1bdbf9357093", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d21898f-7d88-4e67-a1f3-44916fb273ec", "sighting_of_ref": "indicator--8aba0c7a-e1a0-4683-90c4-c155ce141576", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57735827-dc60-4401-8474-eaa810225dec", "sighting_of_ref": "indicator--2e64cb54-4831-43ac-9f96-1fc749360d63", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a11ead-850e-4101-9ec7-d754e75eecc3", "sighting_of_ref": "indicator--d1a42972-4176-4158-9128-dfe8d2de5842", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acde9984-cc13-4daf-a8d2-ea856f6f1174", "sighting_of_ref": "indicator--53a721cb-45b3-4d93-92fd-002c3dcdb727", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029e72dd-fc7c-44a8-bf48-3d79598c3e99", "sighting_of_ref": "indicator--cc9bbedb-04b6-4362-b195-135056e81542", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1067d03b-4cb5-4329-8779-0498523c2930", "sighting_of_ref": "indicator--38756eba-28d7-4fa3-8e15-17c8639e7040", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274225e9-1391-4212-9e16-f4abec55291a", "sighting_of_ref": "indicator--2f09a30a-045e-42d2-9a9f-59c63bb3eb3c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babbda9f-8c4f-4adb-9828-9f3abd783585", "sighting_of_ref": "indicator--f9482d75-26de-4ba3-bed9-9f7804e9e3ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5ddfb8-b45a-4a4b-a4c1-06baf5a159c1", "sighting_of_ref": "indicator--f9482d75-26de-4ba3-bed9-9f7804e9e3ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f56721-3b70-47f9-a1ee-ce614f19d996", "sighting_of_ref": "indicator--01b8e568-58da-4b68-986e-4e3cad253c44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e833549-543f-49f4-bc08-63f71f619289", "sighting_of_ref": "indicator--01b8e568-58da-4b68-986e-4e3cad253c44", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb02b66-bf8d-4865-8880-4ba519cf07d1", "sighting_of_ref": "indicator--572d0ffa-e9c4-4a53-b901-db4ad2560861", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90eaad73-96c9-4f10-b5db-e90c49e38824", "sighting_of_ref": "indicator--8f84d3f8-3390-4366-a15b-278ed9c266e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68639d9e-391b-43f7-acb6-45cc6446eb8a", "sighting_of_ref": "indicator--8f84d3f8-3390-4366-a15b-278ed9c266e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1cdc52-da5e-47bd-a497-f20355c6f2b5", "sighting_of_ref": "indicator--f3657f39-d522-497c-85c0-19ae518e22f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d21bbc-5bab-476a-9a37-86fe3462c845", "sighting_of_ref": "indicator--9898bd71-f787-4142-ad80-aab37df7e52c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8dda81-58ec-43bb-8d7e-3442515294a7", "sighting_of_ref": "indicator--9898bd71-f787-4142-ad80-aab37df7e52c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84dbea7-5fb2-4717-99d3-770b323c2a8d", "sighting_of_ref": "indicator--b7be08ac-1b61-4a55-814d-59278f44dce3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b2ac20-a960-411f-8b8c-06cd2e3e738e", "sighting_of_ref": "indicator--ff89e6e3-e045-4f08-bff6-6f0a395cec0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c313fa-ba3c-4d52-af8c-f225acbaf632", "sighting_of_ref": "indicator--9d3e6ad1-5fb6-44bc-8632-2da4027fa37a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f541b9b6-0e34-4522-9bc6-4de7829a1147", "sighting_of_ref": "indicator--9d3e6ad1-5fb6-44bc-8632-2da4027fa37a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a359c5cf-8e54-48a6-abbf-5c6aef54e6bc", "sighting_of_ref": "indicator--ef284660-9590-4b2d-ab4f-f189e01ca6e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63637d73-04d7-4e87-9209-ea470e1e2e42", "sighting_of_ref": "indicator--ef284660-9590-4b2d-ab4f-f189e01ca6e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7033944-8b2c-4734-a4cd-b45d5fce52a6", "sighting_of_ref": "indicator--1107d6e6-ccc7-4edd-8d37-dca45fe15c74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211b723e-5481-43b3-9a43-e08133fde74e", "sighting_of_ref": "indicator--67dddb49-7795-42bb-9b7d-364ba2aa7132", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace26bcf-deec-4a69-acb6-717b076277e9", "sighting_of_ref": "indicator--4336ea9d-1ff6-4018-861e-2f51f57f0394", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74acfdac-ba26-43f6-8aa2-29d79d3b6db2", "sighting_of_ref": "indicator--5702b9ef-5c23-47e2-b139-088b715b1a7a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6b2f77-8bd6-464c-a4f2-af8ab5a24349", "sighting_of_ref": "indicator--b01f29be-8a16-4c3d-a1f2-a37818f9ab81", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750496b7-ec85-4cf4-960f-fc6fa311a65a", "sighting_of_ref": "indicator--06bb75db-15ba-4341-85e5-69f4c5a343c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7856a60-616f-4408-972c-4f6eee88c4fd", "sighting_of_ref": "indicator--06bb75db-15ba-4341-85e5-69f4c5a343c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a749532-a14e-4be7-9e8d-13c9342e0d80", "sighting_of_ref": "indicator--70eeb7ad-f05f-4e8a-9aa8-bc3251f47031", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af64ea39-da38-447c-ae81-8d05b720fbac", "sighting_of_ref": "indicator--355aa3e2-df1c-4175-8e5f-b193ff5fe5c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce769ab2-72bf-414b-a47a-8ba2443ef293", "sighting_of_ref": "indicator--17c43b78-973b-4eaf-a51e-977b107ec293", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5da99a-ef75-4ec5-8ac9-e593541d02fd", "sighting_of_ref": "indicator--66ae47ed-9d1f-4d8d-b233-125111347fb9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08c312c-cfa2-4661-9ae1-b348e36dddc6", "sighting_of_ref": "indicator--082eae04-62cb-485f-b90d-4e5e760d1616", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc666ce0-db84-4c1f-84b0-52c986b463ee", "sighting_of_ref": "indicator--6c451ba3-b833-4719-984f-ab388a8200ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2009780-27a9-40a1-907c-1ccf0a521299", "sighting_of_ref": "indicator--6c451ba3-b833-4719-984f-ab388a8200ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295a86d7-bd07-4182-9469-2c8db66f8008", "sighting_of_ref": "indicator--793b59a4-ed12-4d6c-8b34-0cf40dac4f2e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f093ba-1c98-448e-b6d1-f432615b2159", "sighting_of_ref": "indicator--71ee9384-0667-45e4-bc8b-b79c3954c79c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46da17a4-6ed4-4270-ad60-0531c52a7433", "sighting_of_ref": "indicator--ec1bf5c2-64bd-40cf-b336-a159d337d4a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3460971d-8d31-48d6-9244-6a99be461d63", "sighting_of_ref": "indicator--281c1e4c-8773-4e5f-a2bc-803784f8f9d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1f065c-b455-4a84-ba3e-325149362c34", "sighting_of_ref": "indicator--281c1e4c-8773-4e5f-a2bc-803784f8f9d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab0dd6f-41e9-46ec-9eac-1c1a1d3520b4", "sighting_of_ref": "indicator--94e0f4b7-3b36-46be-a64f-637cc7deb1e5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a255d7-7d34-48f1-a73d-ae93f058a139", "sighting_of_ref": "indicator--257547ac-3bc6-4616-a5ea-d2cb6046f62a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50eb6cf-449f-47e2-b517-099bdd7524a0", "sighting_of_ref": "indicator--29ba048f-ae70-40fe-bb33-9bf5406aa294", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e3a13b-27e1-4aa6-b66a-da11aef441fb", "sighting_of_ref": "indicator--29ba048f-ae70-40fe-bb33-9bf5406aa294", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bb3f79-47cc-4c17-b9ae-5a360edee98b", "sighting_of_ref": "indicator--86d98c70-f5ea-486a-9f95-02d38d7e6421", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a36d20-210a-4935-b7fb-b4820127fcd9", "sighting_of_ref": "indicator--86d98c70-f5ea-486a-9f95-02d38d7e6421", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97e1c58-285e-4cd5-9363-6803f585233b", "sighting_of_ref": "indicator--921f390d-66d6-4a39-8d02-b93db49f407b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6781c5a1-ce23-4844-9681-0260c423c4ba", "sighting_of_ref": "indicator--921f390d-66d6-4a39-8d02-b93db49f407b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1e4e33-1d41-4e0f-8f17-67bdac63623b", "sighting_of_ref": "indicator--cb43394b-698d-44ed-9cf5-e77b506bb451", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0618e02c-9c63-450a-a7c3-01c90907b31f", "sighting_of_ref": "indicator--57fadfe1-04ad-4102-9012-0f77ab6f0e42", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc29727-808a-4f16-9e76-18b926fe4d74", "sighting_of_ref": "indicator--2f024ebd-433b-43b7-9b37-0093385e7cb3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6305e3a-99e0-4abf-8623-e711b855341d", "sighting_of_ref": "indicator--52f2545f-1e38-491b-93d4-0a10d227b952", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bca309-32b6-473a-bf43-04a659ecfd0c", "sighting_of_ref": "indicator--52f2545f-1e38-491b-93d4-0a10d227b952", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d605a5-f6f4-4d9c-b768-bcd2abffbf1a", "sighting_of_ref": "indicator--c1bcfd29-0d43-47e2-a28e-cc54be7b344d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90cd2a3-3188-4251-93c6-0c6f426340b4", "sighting_of_ref": "indicator--c1bcfd29-0d43-47e2-a28e-cc54be7b344d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a75c09e-c672-46bb-beb3-a2f45d47d009", "sighting_of_ref": "indicator--4b6a2ace-1569-4985-b09e-64025f803d03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77682c6d-9c85-45a0-bc62-1310c711f057", "sighting_of_ref": "indicator--8d863689-e54b-480b-b601-c7b25f635d0c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60143eea-af1a-4c4d-bb9e-357c45b9a40f", "sighting_of_ref": "indicator--75e1ebdd-2dd1-4a94-a799-7cec7f99c53a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5aff6cb-7638-42d6-8f8d-342bca25e8e7", "sighting_of_ref": "indicator--2ee9b549-b236-4660-b6a6-a800f12fcfb6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e43fcdf-6cc8-4715-8a5c-49b3bc1726dd", "sighting_of_ref": "indicator--f804556a-ebc9-43c9-99c5-bcd25d8bc2ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5d4d08-3f96-415d-812e-517f1e3da128", "sighting_of_ref": "indicator--5da716fe-9ae3-4a44-b4fe-774d05128b0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f6c580-23f9-4879-83fd-892d7c392eb8", "sighting_of_ref": "indicator--23dd5b5a-191f-4e8d-9551-d94b077f5c3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc41480b-6e90-42aa-be98-f81f5566a3c1", "sighting_of_ref": "indicator--91379a1a-6973-476d-b914-d20cc2b0a32f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34aa4a97-8b63-4cd1-8be5-13e92f5c34d9", "sighting_of_ref": "indicator--bb79b8d3-acb6-4601-9076-9be057ab9fcf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0069a9a-acfa-4af9-8438-ad026a8dbc19", "sighting_of_ref": "indicator--e879a0f8-59e8-459f-89e3-8ac4c7471c02", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce66337-bf0a-406a-a0fe-c603cf377b55", "sighting_of_ref": "indicator--933b6847-8c10-4dab-bb90-90373088c22c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11296a2c-0146-4bb2-aaeb-4ea4e2b60238", "sighting_of_ref": "indicator--ec466cc5-6e2a-4bf3-b9f4-ee7c08115655", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2f7e4e-86af-4dd3-9be0-93d5fb9996d7", "sighting_of_ref": "indicator--ec466cc5-6e2a-4bf3-b9f4-ee7c08115655", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97c888f-0a1c-448f-9dc1-737fdc15b0e8", "sighting_of_ref": "indicator--dd680d78-a92b-4446-9198-07e9585f3154", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6e6d12-42e4-4b24-a42a-19c6288b8982", "sighting_of_ref": "indicator--b505b1a8-91b0-4f3a-8326-70c354ed9813", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fab458-d038-446f-9407-06ff69fe1fe6", "sighting_of_ref": "indicator--7b9ab532-b1f6-4cdd-a41e-f4cc330b95e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579acc14-7f13-45ca-b206-9af2abc0ff09", "sighting_of_ref": "indicator--8c8b821b-8587-44a2-b022-e580e1ceeeda", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b3df9f-1474-4197-8252-9638b63878e9", "sighting_of_ref": "indicator--6b710762-7e03-415d-ba69-1d3429c86234", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca18e5d8-c479-44c6-9a5f-2ad77ac4e249", "sighting_of_ref": "indicator--41a3fdd6-2e01-4679-bf31-03b6678e90e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e5e689-827b-4467-a5e0-fcc9bbfb73f4", "sighting_of_ref": "indicator--b3db79f9-5aae-4cd0-ac7b-670469ae4912", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0e60f5-749e-47a5-aa1c-1f1c7a7b0549", "sighting_of_ref": "indicator--b3db79f9-5aae-4cd0-ac7b-670469ae4912", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b625830-7253-4136-87ec-14ff53780cc4", "sighting_of_ref": "indicator--442c6d60-105c-4174-9f63-3e615fbfcee9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1255fc0f-5e8c-4be3-a792-c62772e5eb2b", "sighting_of_ref": "indicator--93cec8f7-6123-49b1-85ac-eda45ccf2786", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6eb3285-215a-4923-8537-e5538a689410", "sighting_of_ref": "indicator--55ee5300-166b-4ce7-b388-ec0093e287ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac56c968-013c-4a03-a3bb-b309894fa10c", "sighting_of_ref": "indicator--b5994b2e-fa3b-4545-835d-35e41a2f567f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9cef50-6b03-4b3d-a6e0-17af48363442", "sighting_of_ref": "indicator--a4b577cd-691e-4190-843c-c4d0d5257c7c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ede6d0-8c59-4243-a4e4-ef7bd9dc213a", "sighting_of_ref": "indicator--62d52faf-5fd2-4c4a-818f-ae588168b2d0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8621c4-b3e1-4ca8-82f4-0db6581477d7", "sighting_of_ref": "indicator--35b2f20c-e919-4fef-bdd2-d05f039aed1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778c7308-81f7-427e-aa25-81b95f3f4d0e", "sighting_of_ref": "indicator--a1698929-5f00-4d3a-b48b-bdf796c49a77", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d179a29e-010f-4e42-b603-28593689e657", "sighting_of_ref": "indicator--3d0ebce7-4ca6-406c-b065-5cd947fe13f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d1db02-3cc9-45dd-9684-51193fd31290", "sighting_of_ref": "indicator--5fe69472-2c58-4a6e-8815-eb1cbad3ab12", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb53637-ba69-4c9c-9a2d-bcf484491f35", "sighting_of_ref": "indicator--76c1cffc-3609-42b0-9a06-ee9b5bafb249", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f8e241-6756-4c7e-af4d-4c8d4677ec5a", "sighting_of_ref": "indicator--d5f5869d-5c56-4875-b122-a66c7c9df95b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a654633-182d-4e16-a3be-dfd3d3603ac6", "sighting_of_ref": "indicator--1be75cba-90bc-493a-b37b-f320b2f25001", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294158fa-1ec7-453e-815f-f1882f15c17d", "sighting_of_ref": "indicator--543b2139-7b6e-4e08-b611-1c72e7a1d6ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1938b9-a5c4-41c9-8d68-7b1ca0721206", "sighting_of_ref": "indicator--548e255a-58bb-41f1-b8e4-b3b7cb399f86", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05ca90f-01b2-4369-933a-31c5576febb6", "sighting_of_ref": "indicator--8e473004-bec0-44ee-86aa-34f9748f2314", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a8bc18-2879-41d8-b660-c0e122dcfd33", "sighting_of_ref": "indicator--5c22f26e-7e4e-4ff6-93b3-366c458dc2ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541ab146-f82e-4284-9024-6e7dc9da5e22", "sighting_of_ref": "indicator--8c52eb7f-3157-48e7-bf6f-14661f410093", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dae208-96e1-4aac-b4ad-0374b75a28a2", "sighting_of_ref": "indicator--b01d4301-2999-48b3-a495-4490fad44d8b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9e1486-31ca-4ef5-ba54-75d45aaf2dd5", "sighting_of_ref": "indicator--b12aac67-3b66-4beb-b5ad-470388700b60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5e1a15-423b-463e-8931-ad9adbcf2fdd", "sighting_of_ref": "indicator--b43d1b5c-690f-42c9-9e38-77550ae46fa3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70a8b7c-4728-46fb-9382-3cda84b5b62c", "sighting_of_ref": "indicator--fcf2e559-3087-4434-8d10-f2551d4fbcf8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77909887-f793-457c-879f-423a58752fda", "sighting_of_ref": "indicator--cb61099e-cc13-4da0-878a-1dd758e00e7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e59806-be25-4ac1-92d0-e284bf2da503", "sighting_of_ref": "indicator--cb61099e-cc13-4da0-878a-1dd758e00e7b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356d1d39-d560-45ca-a88d-622c519c7707", "sighting_of_ref": "indicator--f32774d8-3777-40b5-b050-42730a2284b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f9c1d8-4d62-43c3-9fa2-99e8131888ce", "sighting_of_ref": "indicator--f32774d8-3777-40b5-b050-42730a2284b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd39057-c076-4139-93d7-7ec4dbc64e3f", "sighting_of_ref": "indicator--0445114c-0119-4cea-af78-dbb6ea1d187c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e41aa2-456a-493d-97ab-8af2ecc2fb71", "sighting_of_ref": "indicator--c77e9325-bb20-4134-bf6a-a5b73e72b158", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499d9b16-fcd1-4862-adea-3458d092a5cb", "sighting_of_ref": "indicator--228cdab9-5f9c-4904-809f-14339f10441e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdad9c95-c1ff-4588-a3a0-c5ef82ad816f", "sighting_of_ref": "indicator--a805e9a7-4b4b-416b-be89-9e0535d086ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b9c477-1983-42c0-bc21-3576868fef92", "sighting_of_ref": "indicator--463fbfb3-c9d7-4218-b107-5060e853be92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031e0ab8-be5d-443a-bdbc-09530ed639d5", "sighting_of_ref": "indicator--dbc9722c-1ea8-415a-9529-68b16934832c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8853d87-e322-4088-8446-480cb3a2b9e2", "sighting_of_ref": "indicator--045cbd84-2080-4965-bd06-447a72cb07d4", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf9654f-bbf8-43b7-b6de-3ced22d17830", "sighting_of_ref": "indicator--4c2b42c2-655e-40ca-8e88-f81b1c5056df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d04188f-dd23-4dc0-902f-4c773678f1bd", "sighting_of_ref": "indicator--a5b99100-04c6-4964-847c-d67c8f912c34", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcbcd18-c2ae-47cb-b550-69439ba77582", "sighting_of_ref": "indicator--8d4a744b-042a-4ac1-81b0-b4f75ca578a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1b510b-4a79-4000-a051-c70845abe071", "sighting_of_ref": "indicator--25e82d78-64c3-41f8-bd5c-ce0321566cdd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1d8ec2-6b2e-4b89-b186-a1ab551e3744", "sighting_of_ref": "indicator--f973d22a-8486-48ef-8f6f-1a1705c7d234", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3dc1bb-0c9a-4c07-8ba2-7f34b501b03a", "sighting_of_ref": "indicator--6ecd9212-1138-44f5-8503-8fae0391130c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e105844b-8cbf-460a-85a4-ef8061b3a212", "sighting_of_ref": "indicator--c5b94836-33a1-4ca9-a8d7-57a49b0c4fbb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823fa7a3-49d0-4790-8b5a-e6af314795cf", "sighting_of_ref": "indicator--815083a9-2284-4d24-9214-6ff5ff18f932", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a4e5af-fac9-4647-834c-fa15bac5597a", "sighting_of_ref": "indicator--21fc8c84-a2af-4408-98ec-0f8d8efa5e24", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9490cee9-a97c-4877-abc1-21cdee6efe82", "sighting_of_ref": "indicator--2ce384e2-4a86-4aa3-a2fe-d9e308d9b722", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5603f446-28bb-4fd2-a6c2-cff6dd31c0de", "sighting_of_ref": "indicator--2ce384e2-4a86-4aa3-a2fe-d9e308d9b722", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd965fd-a437-48ef-a1f9-dd7d83c96131", "sighting_of_ref": "indicator--3067c85c-bb52-4e1b-bafa-31f1530fa5f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13c3051-cecc-41bb-95d9-5cf0607f194a", "sighting_of_ref": "indicator--c3e12361-a179-418c-a2b5-bf0ed6898b2d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f806e4-75ee-4134-ad21-4a42b2998ed4", "sighting_of_ref": "indicator--3a6a0cba-8042-4281-9b9b-1adc34358b40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d431be79-18d2-46b8-a027-90239665d331", "sighting_of_ref": "indicator--f075f5c8-1e6f-4722-bb67-1e01a1e57b47", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6332ecc4-a40a-4480-8989-d489921e19f5", "sighting_of_ref": "indicator--a8cf45f4-dc44-44e6-b86e-177457f83593", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d25e9db-2034-488d-bb2f-cbd453447398", "sighting_of_ref": "indicator--b8832aba-c3d3-40af-9fe9-16ec0190925f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46bca97-2f5d-4139-8f23-b8bcd5ef65ff", "sighting_of_ref": "indicator--d22703b3-8da2-40b9-a240-272c9b943af7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0032b8ef-4e68-45da-bb1a-02f2ab9c7ec5", "sighting_of_ref": "indicator--40f511f5-deae-4889-bb2b-06ffd27e707e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401f6336-498b-424c-98de-41c1beb976b1", "sighting_of_ref": "indicator--e4243a29-e264-48b2-a51d-f96eacbc2f03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eace00a-de55-4725-9ae9-cbbf3eff674a", "sighting_of_ref": "indicator--c4ee0de2-9cb1-41cd-89a0-ff1a8834d994", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8666d575-11ae-4363-b9df-4ce1a14034cc", "sighting_of_ref": "indicator--913560a7-a8e2-4e6b-9b63-46f47a0ffdfe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e6e198-d665-42de-aa5d-721b3eebd7b6", "sighting_of_ref": "indicator--0d984bb4-aacb-4c79-965c-a1776e2e3f1e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969df5ec-d491-4bc2-ae91-5fcc1eb83a60", "sighting_of_ref": "indicator--718e7d50-a1c9-43e2-b145-dd4f846a88df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a35ea1-10fd-4e89-a4b6-d863a6991cb4", "sighting_of_ref": "indicator--723a59bb-b1c0-4330-9d35-7a3fb08489be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b06f9b-db90-4970-9c30-db8c8bfcee9f", "sighting_of_ref": "indicator--d29efe61-4b0b-4a16-bf9c-2edf3f00f777", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8231047-0171-421f-b7cc-4a78fb81ffca", "sighting_of_ref": "indicator--2945507b-5e43-449c-aec2-255e808b64ab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ae1e8d-8201-47e0-88a2-b0bdd2b2191f", "sighting_of_ref": "indicator--0a5ddb77-6107-40cd-8166-d97ed15d2b12", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d1d457-bf30-40f9-a7ca-8c79729ee804", "sighting_of_ref": "indicator--8ecb69be-7412-47ea-a620-3b8ae03cc94b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc84c76-ddd2-4041-bfd1-f87054da3913", "sighting_of_ref": "indicator--22a273ab-4888-44c2-b464-650107d48adb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d931e7c4-fd5e-4de5-840d-f8433ae1e042", "sighting_of_ref": "indicator--f1bfc9b9-6f0b-4874-8737-97dd31327ed4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96be79e-02df-43d2-8482-40ed7b1c6046", "sighting_of_ref": "indicator--f6537e28-e976-4a8f-bf62-fdc3b1d83b80", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5169d780-ea2c-4d76-a29d-110181faabc2", "sighting_of_ref": "indicator--943769e4-de91-40e1-96d7-52f30e08f4b4", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadb5c54-9b26-47d9-a203-5529981be2ac", "sighting_of_ref": "indicator--43cd45ce-5e05-44a7-bfa2-d6fb8cdf503d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00fe1a6-cf59-4ef2-b015-a8abe34fa252", "sighting_of_ref": "indicator--6f5b05fa-073e-46c6-9230-c9356d78cadc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987e64c9-65c3-4df3-8cd1-19dc4f292e05", "sighting_of_ref": "indicator--8238c722-9aa7-4307-8afb-26cd146c03bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecacbe15-6cb1-454e-801d-a4593aa420af", "sighting_of_ref": "indicator--88ba7483-0f65-43be-b3ee-9a428861c44f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a191bb-dc9e-4e3e-987b-fa6554408e0a", "sighting_of_ref": "indicator--61d6659c-fc70-456d-92e7-b8c3adbe021a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908aa756-fcb0-4c2b-80aa-d8b009214a0d", "sighting_of_ref": "indicator--df6c40e6-6313-4d71-b579-80f2c409c861", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d64b6ee-0a24-4909-9d39-60bebf53bbce", "sighting_of_ref": "indicator--70b95208-36dc-409d-bd32-ce224a244b68", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d3ecfb-79a4-4ec4-9c02-470b95e49ad1", "sighting_of_ref": "indicator--accec3f6-e066-42bc-9513-0cca271868d9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6432095c-43c0-4bdd-9d36-a2d5ab6a7119", "sighting_of_ref": "indicator--16dce54d-a03a-47d0-a995-142503cb9aac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcb2a33-27c1-4c0f-80bc-0e57bdcfbb97", "sighting_of_ref": "indicator--23913f8c-51df-440b-880a-68150914b1c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606135e1-2394-4ffa-9cab-d6f5f78938c5", "sighting_of_ref": "indicator--891e655e-049e-4da2-9c2d-d6bb28dee262", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ffb110-1903-45f0-a04c-8654c937e7a2", "sighting_of_ref": "indicator--fbab0982-0ae5-43eb-b82c-a29cb660d9d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3923126b-f1d1-4141-b151-beba6c9c46a6", "sighting_of_ref": "indicator--9f38a199-7be8-4f77-8b53-da75f295a2e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd2d370-ff73-41ed-b89a-9e799f9fbc71", "sighting_of_ref": "indicator--aae5d4c1-941a-437a-a810-972c2bc7e2a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7b4334-7f0d-49cc-97cb-ff33d002a566", "sighting_of_ref": "indicator--d4c92ac5-645b-4503-b401-1b2b03d04939", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac516e24-c2f7-4c38-8b13-bf074410ac82", "sighting_of_ref": "indicator--8194998d-86f4-4670-9d54-c744ce7b423f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c754eda-0af1-47cc-be32-2c17f92440e6", "sighting_of_ref": "indicator--53c0b7a7-8242-40c7-92b6-2dc32ab253d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4cb5ae-5503-4e4f-b3b3-d47250d1f166", "sighting_of_ref": "indicator--9d63d79b-d236-45d7-8c48-930ef186823d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa5860e-3afc-416b-bb9d-2f39b9667e97", "sighting_of_ref": "indicator--717c165d-cafd-44f3-9e46-fcc528633968", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e3ed70-d66c-45af-b811-8c052fb30c24", "sighting_of_ref": "indicator--f4746815-cc5c-4b10-a12b-d4fc7278cb96", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4b8fbe-4366-4642-9a34-6eea68404645", "sighting_of_ref": "indicator--6dfb948c-b92b-4f2b-89eb-6257d4fa0b60", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63030ed8-8760-48bf-a125-b4d87b4d0eeb", "sighting_of_ref": "indicator--c49aea16-5430-4213-a3e1-d6f5f7060de9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1671c27d-47ec-450e-93ab-c514fbb7bced", "sighting_of_ref": "indicator--c0366bd9-7563-488f-b255-2a99db86edf1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8ed713-db28-4827-8601-9baf9ed149c6", "sighting_of_ref": "indicator--8fe6c281-3f17-4875-8dd9-a7424eb82eeb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c65059b-d430-40e6-9e22-968cedfba9ac", "sighting_of_ref": "indicator--9fa9f4ea-0d93-49b9-bfe6-61ab4008f000", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066d1d41-a6f6-49a4-a016-5ef037ba3403", "sighting_of_ref": "indicator--b7492c04-a23b-4130-8b8c-77a79b67e152", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24db622e-fb65-48d7-b77b-6ecbdb3b9d9b", "sighting_of_ref": "indicator--31836bdb-252e-4f4f-9deb-189c5b8864d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71983a34-53db-4ca5-be47-0eb4b6ed5483", "sighting_of_ref": "indicator--79453f1a-dcb1-4997-9ab1-75a107c95061", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a12a90-a2e6-4f9f-a8c5-525a9f63b637", "sighting_of_ref": "indicator--35228e6d-0ad0-4713-abff-d374c4e94476", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9e7aca-2b08-4d3f-84d5-3f21af4401ab", "sighting_of_ref": "indicator--086b57cf-1fb9-45ea-9a98-93ba3d3a9619", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5388b0b-b955-45c4-9855-6c33794c24cf", "sighting_of_ref": "indicator--abb51f33-0175-44ec-9b41-1b6207c88b56", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923ca0fb-722f-4c59-ac08-2782c7f9d7ec", "sighting_of_ref": "indicator--e190ffc5-6ecf-40d1-bd4e-d37ec7e86eac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d4d3c7-7793-4559-860c-e21d8df6be5c", "sighting_of_ref": "indicator--3dcdf44a-15ba-4918-873f-dd812aed4b50", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933d33a2-488a-425f-8da6-ab63c14f9b7f", "sighting_of_ref": "indicator--37451b1f-ed7c-49c0-90ac-69ada85fb1b3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d58439-9217-4108-be81-0ba226ecc013", "sighting_of_ref": "indicator--a719cd06-36df-4507-b131-628880e4db2d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67d3800-a4af-4b37-b215-66c3df9aed25", "sighting_of_ref": "indicator--800dba3b-acb0-4809-b68b-0e5a72db9b7a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4026afb7-5c20-486e-8f45-7c73c1c6529d", "sighting_of_ref": "indicator--800dba3b-acb0-4809-b68b-0e5a72db9b7a", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75df7b1a-364b-4f7f-96f8-020e5f5fdb6f", "sighting_of_ref": "indicator--0fedd6fb-46de-41a1-84fc-b8567e7c3ee2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0974f0b-acc1-4aab-9577-85408b6fa923", "sighting_of_ref": "indicator--d2075d7e-49b9-4294-93ce-3123ff2ec0fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215a2e76-ba49-4f3f-b4a8-9d1ceab2d94c", "sighting_of_ref": "indicator--154ac418-9d24-44dc-bf96-e55d98a6f490", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb163e7b-e56d-4e22-b44e-bab0b0154fac", "sighting_of_ref": "indicator--d2ec90fe-2d2f-4cbb-bd6d-554f7180b531", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32c2816-d7da-4a86-b170-d61bf2722d88", "sighting_of_ref": "indicator--d0d18597-dc66-44cb-9801-3f67c7bebfd8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9b966b-dd31-4cc0-a947-d46a2bd89317", "sighting_of_ref": "indicator--a90c3cc7-582c-4f02-b4e8-a213e543db60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3575d05-acb1-4158-8367-d6e25d1435a7", "sighting_of_ref": "indicator--2238371f-bbf5-4920-a9ab-c2614e06488b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7d0e24-0c62-492f-a5e0-9248fca42898", "sighting_of_ref": "indicator--22648291-ebf3-4ca8-9225-ac2f85931672", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710f7609-b1d9-4896-a147-db63924fd62e", "sighting_of_ref": "indicator--cc5e363f-2355-4ef7-9b90-fb1e76358065", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3a736d-ed12-4a83-baa8-3f30203b36a9", "sighting_of_ref": "indicator--46faeb39-31a6-4773-957b-4a8aea062ad8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ae1157-d01c-42ad-8a55-5344aba11605", "sighting_of_ref": "indicator--befbad7c-84fd-4d3d-b6f4-953203b09865", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91eaaac-f512-4761-925b-cd88bff94f30", "sighting_of_ref": "indicator--8ae2ac0f-3cbf-47d3-9d1a-0f2351f8de27", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d8b693-c1e2-4fd3-8277-c512ea3816fc", "sighting_of_ref": "indicator--c8d98415-bec0-4370-99ab-3129996bfa93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898edeaf-0296-4b72-9882-abd7d3d1faf2", "sighting_of_ref": "indicator--f87c2e0f-5a8e-4a79-9d49-4d0c46a47980", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee838be-1055-40ba-bc46-9a5cf44177cf", "sighting_of_ref": "indicator--9eb00bcb-47ec-462e-b282-c34c2d0f7d29", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988fafa0-3032-41d6-b899-2c96aa62484a", "sighting_of_ref": "indicator--7324f813-0259-4e8f-b9a8-2e317ef1212e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3449b97-292d-4e7a-b6d6-716f5925509d", "sighting_of_ref": "indicator--1a01fca4-1e25-4b64-a6da-664f8f9ced0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba2c0b8-1383-4745-a20a-b656c27c57d2", "sighting_of_ref": "indicator--1a01fca4-1e25-4b64-a6da-664f8f9ced0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3511b737-1541-4ba7-8b75-b22cc9b78bc7", "sighting_of_ref": "indicator--4a86b8e7-287c-4315-a349-9ca5542e3a73", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbee106c-136a-4b09-a3ca-98d01320c88c", "sighting_of_ref": "indicator--4a86b8e7-287c-4315-a349-9ca5542e3a73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6ce8e8-484f-4b94-ad19-b8b578d72801", "sighting_of_ref": "indicator--a8541a0f-35b7-467c-914b-fd1c2970f696", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6958c874-01ef-40c7-ad99-41797622442d", "sighting_of_ref": "indicator--d9f04978-9257-4a91-8163-252a85968dd5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dde32d-53ad-4bf7-ac15-e1090072eaa7", "sighting_of_ref": "indicator--013a617f-eee5-4932-9786-bb583df964cb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3823fc62-917b-40e3-9f13-fa79f74e296a", "sighting_of_ref": "indicator--b52f8820-abf2-4f1f-88ff-4f23ae27ad57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764e6867-6842-4b74-9ae5-1c22903c4ccc", "sighting_of_ref": "indicator--bd627057-6f3c-4be4-88e3-30e343ca7fd2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466464bc-ec39-4d28-9b04-31b8b624218c", "sighting_of_ref": "indicator--eec6d7e9-0a7a-44b4-977a-200d582e2d44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7fbce3-c0e3-41da-8742-dd57f8fd265b", "sighting_of_ref": "indicator--93eada8a-7aef-4503-b716-7d2a2e67214e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fc4972-2270-4fcb-b75f-a545ffcd7963", "sighting_of_ref": "indicator--93eada8a-7aef-4503-b716-7d2a2e67214e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361b534c-5c97-4960-be0c-0fc90a24949f", "sighting_of_ref": "indicator--4d73784a-6b1b-43fb-b794-076613fb2cba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3086e21-1b53-4f48-850f-28777f2814df", "sighting_of_ref": "indicator--681abdd5-3e07-4717-9715-0086467b2526", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3991a1f-e5df-4a8a-b0e2-5113f095a222", "sighting_of_ref": "indicator--9a2ea27b-2e5e-4043-8423-0c98b3a6fd98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feaa37e-8559-406c-9bfd-58a61d32f619", "sighting_of_ref": "indicator--c21afde1-ba1a-4af2-84f5-9fdc21beb686", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c7ed4a-0586-4bd0-a5d5-ccadc1d9b06f", "sighting_of_ref": "indicator--257b78c1-7f5c-4d51-b63a-65b61cdb6a27", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69e3411-8cac-4a53-8fa3-f24b47e3b820", "sighting_of_ref": "indicator--257b78c1-7f5c-4d51-b63a-65b61cdb6a27", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ddddf1-20d0-4c04-97fb-9ff6856b12ba", "sighting_of_ref": "indicator--2e1e6ecd-aa01-4ef5-96f0-175f27a0048d", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf93629-5385-494d-89b2-692d5d92905d", "sighting_of_ref": "indicator--020edb17-18b5-41ca-b7d8-89bb58e13b5f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cf128d-ef36-4c1f-b1d3-5611d202c828", "sighting_of_ref": "indicator--020edb17-18b5-41ca-b7d8-89bb58e13b5f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2f7ab3-0cd1-4bfa-99c8-b31d455c8cfc", "sighting_of_ref": "indicator--f2a30b3c-485b-4498-b571-987860068c1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99fe417-60db-48e9-bb37-b6a8542193e1", "sighting_of_ref": "indicator--a820779c-cbe9-4fbd-886b-a1e035c795df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0241d41d-4ccb-41d3-b725-0b3ee5bb7eba", "sighting_of_ref": "indicator--a820779c-cbe9-4fbd-886b-a1e035c795df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87ee6b9-bc04-4ff5-a66f-983f4d7aa890", "sighting_of_ref": "indicator--49b37a81-d9b4-4371-96fd-0740d03b8882", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228214b7-9ba1-42db-b58b-3816eff2bf1f", "sighting_of_ref": "indicator--34585773-13c8-4590-b13a-0de5bd690850", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67dcdb1-dfd0-4d4d-85b6-086596770034", "sighting_of_ref": "indicator--3fdcc109-21d2-462d-8acf-6b19eef3853e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b90034-4833-4c1a-8d6c-34cd23233540", "sighting_of_ref": "indicator--0afe9e61-c828-4128-9a0f-1739637b7a11", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a393ab74-62e8-446e-93c0-d28e482b4b31", "sighting_of_ref": "indicator--7b81ffe5-e187-4562-a4a4-ac4d688222a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2ed972-ec72-4c8d-8367-ceb087f8fc97", "sighting_of_ref": "indicator--4f978b23-3d56-4d36-b192-919428a7d8aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c468972-72df-4637-b933-b7b7e5e8680c", "sighting_of_ref": "indicator--4f978b23-3d56-4d36-b192-919428a7d8aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb6f441-4b50-4a55-a1c5-d8bdbf9e3d63", "sighting_of_ref": "indicator--82bedf98-cf12-4865-9ff8-b50608e708e2", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46461659-5c82-4ff1-9896-b7fb22423cd1", "sighting_of_ref": "indicator--88bef609-a0e8-4e37-9566-fb5c3c1e5b5e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1f715f-01d1-49ea-8643-bb562cd10657", "sighting_of_ref": "indicator--c407c7d7-0438-456d-846f-42f3711996c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636549eb-3d9e-46d2-bf1e-ecc29738b20a", "sighting_of_ref": "indicator--8eacacc9-2361-4b65-a1b6-085807fb3cc3", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e194deec-5b81-41dc-b7ab-f93ac7c911b5", "sighting_of_ref": "indicator--e1e1b7fc-1194-4d5b-a616-0ed24e5f88c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529ba9db-2936-4f4e-9558-c4c2d9bb7338", "sighting_of_ref": "indicator--e1e1b7fc-1194-4d5b-a616-0ed24e5f88c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb396c60-ccae-4436-926c-17ed453d5d4a", "sighting_of_ref": "indicator--9f5c431f-1170-47a8-8ec9-98e17a7e7e72", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b411b302-00fd-43f7-934f-4220fc8c26b0", "sighting_of_ref": "indicator--9f5c431f-1170-47a8-8ec9-98e17a7e7e72", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b68362-3515-4645-8c92-d30b923252c8", "sighting_of_ref": "indicator--7d57aa59-16ab-4f41-83b3-4956dced8f51", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7371b04b-1e1e-45df-a854-df570ddd14e1", "sighting_of_ref": "indicator--f2fe5eae-bd1f-4ec8-a59b-72fd92acc9a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f069c1c-4d06-453f-bb7d-37f008c8b992", "sighting_of_ref": "indicator--f2fe5eae-bd1f-4ec8-a59b-72fd92acc9a0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a6731a-a5b2-4195-873f-d738a6c7e127", "sighting_of_ref": "indicator--4814dd28-1845-4c73-98bb-35f7ba963a7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4870331d-44a7-4294-8d41-e5c2760f11d3", "sighting_of_ref": "indicator--4814dd28-1845-4c73-98bb-35f7ba963a7b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f39b75-8f43-410c-9d27-16f68aa56902", "sighting_of_ref": "indicator--aab87a8c-ca69-48f6-9a4b-a39f561f8483", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf536ee-afde-41dc-9d7a-62797586b9ef", "sighting_of_ref": "indicator--aab87a8c-ca69-48f6-9a4b-a39f561f8483", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a773c3e-4d72-4827-9bd7-1467761c2259", "sighting_of_ref": "indicator--017fab42-3d17-4bbe-aab7-aec6869e26ac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8799cb71-bc07-4959-b24a-3b48293b5024", "sighting_of_ref": "indicator--2d3ecc66-8bb7-4afe-8958-2d49e9d1b8cb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9963d1bc-21c8-42bb-9c3d-7a9a3366c064", "sighting_of_ref": "indicator--2d3ecc66-8bb7-4afe-8958-2d49e9d1b8cb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eef518-768c-4c32-8f0c-e40b8e6b3480", "sighting_of_ref": "indicator--4f0c6a9a-9fe8-4f60-91e1-a80fd206849f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf0c6b7-9ccd-4275-b4fe-0cee4289563c", "sighting_of_ref": "indicator--4a15c5e5-7b0e-410a-bd28-e98510139ecc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fd5297-5bfb-42a1-9bbf-1d9096f3c623", "sighting_of_ref": "indicator--de779a19-e5dc-484a-b5a6-7754a6251779", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8022136-4aa5-47b9-8813-27049070b65e", "sighting_of_ref": "indicator--982de547-c3fc-4d0c-b198-e089f7b4a383", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32948913-913e-4fa7-b944-43739dda2d03", "sighting_of_ref": "indicator--e110526a-c88f-4ccb-9a26-f981bbd7e760", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca24f0f8-cb06-4158-a091-243e03615993", "sighting_of_ref": "indicator--9a07c5ad-993c-4bf6-ab41-7869cf4f4cda", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaabc1b-4639-4d4c-ac3d-6e22665bcd75", "sighting_of_ref": "indicator--d837263e-034e-442a-a513-4bd465c41da1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d8ba29-a2a2-4633-a0b3-ccfe9c8bcc8a", "sighting_of_ref": "indicator--a2510da7-9dba-4ba1-b524-0db3d8efc9bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f8ef7b-e564-4b5b-8e4d-c3c4853c943b", "sighting_of_ref": "indicator--1856f9fc-a2f9-462d-91e0-7e9c8dcfa29a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b391d740-3eb2-4d05-936b-fa9d6c4c851b", "sighting_of_ref": "indicator--caa21c74-3ee5-47b0-919b-1d4d57ff6183", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49eafa7-d9ad-4482-8432-d7e3676c5d48", "sighting_of_ref": "indicator--b77edc7b-6c25-4bd8-9a02-00216f5f5d9d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5575674b-3c5d-4943-be19-7388f8960caf", "sighting_of_ref": "indicator--4612e251-8ee4-4040-80fb-13b84d84aa11", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d4f6c0-d64a-44f1-b4b2-340eeb996d38", "sighting_of_ref": "indicator--0e11a33f-74c0-4eb3-9917-62a3a6a1fa0f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ea85fb-d66d-428f-a649-feea674e9958", "sighting_of_ref": "indicator--00e4e140-22f6-4f0b-bb66-d675ba62e266", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621c12b5-b1a5-4522-bbed-346372489ed5", "sighting_of_ref": "indicator--fc2232e7-2f8b-4e81-b7a9-fb02ecdd3930", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e48b054-3c53-483d-abfa-53d33457d65f", "sighting_of_ref": "indicator--b8fced95-6d35-4ace-91e3-fcd030911029", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5008c6f-12fd-47a3-ad81-8aa6f0237114", "sighting_of_ref": "indicator--b8fced95-6d35-4ace-91e3-fcd030911029", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050bf3eb-b58b-46ae-90ac-9417cb8b3e1b", "sighting_of_ref": "indicator--5e790310-cbfb-47b8-b2fd-008b543df816", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d0bd88-cb2c-47a7-9add-8bd70fdac015", "sighting_of_ref": "indicator--5e790310-cbfb-47b8-b2fd-008b543df816", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8885d53d-319e-4b93-81cd-202704549327", "sighting_of_ref": "indicator--8eb04214-a54c-4814-8a3d-f18de78cd20b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5dd209-f9be-4d4e-a5d1-dec47a785631", "sighting_of_ref": "indicator--8eb04214-a54c-4814-8a3d-f18de78cd20b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53aa492-8556-4c3d-8679-3ecdd2d8e9dc", "sighting_of_ref": "indicator--5f22a10c-0f7b-404c-8348-cc1ea5e39281", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ab1288-9a84-4130-9c74-0d9a3690da5d", "sighting_of_ref": "indicator--5f22a10c-0f7b-404c-8348-cc1ea5e39281", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21816329-4454-4e85-ad7b-2ecc51667715", "sighting_of_ref": "indicator--82d55263-f616-48ff-a07b-ab6016f6b46d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a4bdb7-4bea-4260-aec6-62e874614822", "sighting_of_ref": "indicator--82d55263-f616-48ff-a07b-ab6016f6b46d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92318b56-77e8-441d-af80-ee83af8482e9", "sighting_of_ref": "indicator--e141c1a4-d4ae-4c71-bf03-a1d971e581c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482d6620-41cb-4b1d-8677-3c3e44a82d92", "sighting_of_ref": "indicator--e141c1a4-d4ae-4c71-bf03-a1d971e581c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102c4594-6a01-4787-9c5d-d159daad898a", "sighting_of_ref": "indicator--d36a4c43-7b95-495c-9e63-194c02d85250", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774df475-abcd-4f23-b4bb-9cbd3c72d2a3", "sighting_of_ref": "indicator--d36a4c43-7b95-495c-9e63-194c02d85250", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1044cf73-f3da-40d2-89ad-ef549baca2b9", "sighting_of_ref": "indicator--5761bf2d-0abd-4e2b-8fbc-8e29b5d52f23", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f003dc3d-86c8-4c89-8586-7b1a64fb7391", "sighting_of_ref": "indicator--5761bf2d-0abd-4e2b-8fbc-8e29b5d52f23", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fbaca8-604d-4439-89f0-a5df1ebda7e9", "sighting_of_ref": "indicator--79aa5b1a-fc07-415d-a90f-bd74e1eb8ec8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bcf2f9-8664-4ada-af1a-da99ca1305e5", "sighting_of_ref": "indicator--79aa5b1a-fc07-415d-a90f-bd74e1eb8ec8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1ec93b-60ad-44d7-9299-6294ac8b38c5", "sighting_of_ref": "indicator--1cf735e8-c67d-4102-8cfe-c7ee6ece1c01", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82747b59-ac21-4a23-9b63-9e2e468c0b67", "sighting_of_ref": "indicator--9c7d9d4c-d1df-422b-9e1d-709f649b49b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec204aa-4311-4338-846c-ad2199d45010", "sighting_of_ref": "indicator--9c7d9d4c-d1df-422b-9e1d-709f649b49b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a27faa5-a2f9-495e-a64c-43f832383951", "sighting_of_ref": "indicator--28b2d664-026a-42f4-9b1e-b6b70b87276f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89b84f2-4748-4010-a110-76f037d7e6c9", "sighting_of_ref": "indicator--28b2d664-026a-42f4-9b1e-b6b70b87276f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb023ce-ec33-4b60-bef8-9a8f40569d62", "sighting_of_ref": "indicator--a534743f-fb10-4aba-b646-9dd028dbc7d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86d1b1e-b9a8-4854-bdcc-2ed6c7921873", "sighting_of_ref": "indicator--a534743f-fb10-4aba-b646-9dd028dbc7d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c4bcfc-14f3-499b-843d-f0ca1758df32", "sighting_of_ref": "indicator--7ea8e02d-4175-4577-a958-299954965073", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9dd407-f7fd-4dc1-a55d-46e7239587af", "sighting_of_ref": "indicator--7ea8e02d-4175-4577-a958-299954965073", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d327aa7c-3bb3-4707-8758-aed27d3ec66d", "sighting_of_ref": "indicator--f2ef6832-8da7-4694-ad66-e6408ca4e2c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3c0002-2975-4906-a3e5-c8c28d734b3c", "sighting_of_ref": "indicator--f2ef6832-8da7-4694-ad66-e6408ca4e2c3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b05dc89-d126-416c-976b-4e5b7963002c", "sighting_of_ref": "indicator--25a630cc-b839-4dcb-ba0b-c62b0868d41f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379d42e4-ebea-4004-a9d3-e1c06e40ccf2", "sighting_of_ref": "indicator--25a630cc-b839-4dcb-ba0b-c62b0868d41f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfee1b3e-af85-4821-88ea-42dd5c75db78", "sighting_of_ref": "indicator--78b63d4c-fb12-4326-97b1-5c9be80ea6d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c5b31f-fe51-4ee3-adc5-5e113d51d074", "sighting_of_ref": "indicator--78b63d4c-fb12-4326-97b1-5c9be80ea6d0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74a6402-cbb5-4746-be88-6f4306b3bae1", "sighting_of_ref": "indicator--ff77491e-3150-491f-82da-4daad93b6f15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59ab30e-c017-42eb-a222-c1e006c64a7a", "sighting_of_ref": "indicator--ff77491e-3150-491f-82da-4daad93b6f15", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73a86d2-4112-45ea-9a35-a5d4a7cee032", "sighting_of_ref": "indicator--0d6390e5-4cdc-46c4-912b-ed0f8dc0775e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90eca8c7-56a7-4a8d-9ffc-4567b16173f6", "sighting_of_ref": "indicator--0d6390e5-4cdc-46c4-912b-ed0f8dc0775e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8086b5ad-1995-4c00-88d8-2732fa4f6a20", "sighting_of_ref": "indicator--4d673e15-ae42-4aee-bead-b5f6c34545df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302a33ae-0b0d-4a77-be5d-136eec6f2e75", "sighting_of_ref": "indicator--4d673e15-ae42-4aee-bead-b5f6c34545df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776b0e83-d5bd-4d22-abb7-5b17ec30c9be", "sighting_of_ref": "indicator--39d65f8d-c975-4d04-bb96-1b8bcc228cbe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d6352e-a8f0-4079-932c-30d81b4af6b3", "sighting_of_ref": "indicator--39d65f8d-c975-4d04-bb96-1b8bcc228cbe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25e6dbd-7ed2-476b-bc5b-0e788d29b5a3", "sighting_of_ref": "indicator--3dadab5d-b7ce-49ae-b4e4-436543751c0b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05afa68-8ad3-4967-b51f-35ec922410fd", "sighting_of_ref": "indicator--320fe0f5-fd3b-4b7c-9d17-52072d0ea669", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1190cef1-c896-4454-9f5d-d89d9f4108ec", "sighting_of_ref": "indicator--320fe0f5-fd3b-4b7c-9d17-52072d0ea669", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1ed31f-f6cf-4c4a-848e-a320399a0762", "sighting_of_ref": "indicator--dda980bc-5cc9-471b-a09c-dd6f63719dc7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235b75c1-c6cb-47fa-bcfa-345191b5781f", "sighting_of_ref": "indicator--dda980bc-5cc9-471b-a09c-dd6f63719dc7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b95bac-8e79-4a7d-ae87-a939066a5980", "sighting_of_ref": "indicator--81b39fbc-e4f0-4755-9f58-a647fc2525ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b9c552-569f-4644-b0ed-e0d3629f81fb", "sighting_of_ref": "indicator--81b39fbc-e4f0-4755-9f58-a647fc2525ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e7c03a-a225-466b-b7ef-181bcea9c7a1", "sighting_of_ref": "indicator--fdd35fb7-2761-4737-b7ec-6d7128471ca6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce487c7-8e4b-429b-b8a7-791c3c6ac4da", "sighting_of_ref": "indicator--fdd35fb7-2761-4737-b7ec-6d7128471ca6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427ce7c1-af2f-4926-8595-5a9b7c9b4e4e", "sighting_of_ref": "indicator--64ea1f18-a7cb-49ff-817a-d898da84cfd3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66234887-ccdb-4860-9735-6e5f5b0bc4ad", "sighting_of_ref": "indicator--3787c542-d267-4823-a91b-0ba6da8f8277", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2b241e-af98-4635-9b3e-72e389fa2d0e", "sighting_of_ref": "indicator--88ce8df3-5853-4fe9-b52e-cd26f68a1d9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911815e4-89a1-40c3-9209-382318e67c58", "sighting_of_ref": "indicator--88ce8df3-5853-4fe9-b52e-cd26f68a1d9e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153a94ee-3eb5-49f8-8b46-19d96aaba2f2", "sighting_of_ref": "indicator--d51d75e8-0152-4fa1-bf2b-875a20c3df1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f18573-3cd3-4e2e-a1db-3c86b8db0934", "sighting_of_ref": "indicator--d51d75e8-0152-4fa1-bf2b-875a20c3df1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad98260a-f9fc-477f-a68b-2d8d86e27353", "sighting_of_ref": "indicator--099a78e5-e5a4-4bb5-96e0-7f4ba0283649", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260cdf5f-89e2-4033-a762-fc53c3f0072f", "sighting_of_ref": "indicator--099a78e5-e5a4-4bb5-96e0-7f4ba0283649", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d45885-70bf-41a2-8cde-e7515375c9b2", "sighting_of_ref": "indicator--000ef5be-c97b-47d5-9c3a-7a6bb21f310d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad85186-7296-417e-950d-cf698fc5d4cb", "sighting_of_ref": "indicator--000ef5be-c97b-47d5-9c3a-7a6bb21f310d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70fed93-24bd-4bff-8476-05333914605f", "sighting_of_ref": "indicator--e3264674-80de-4f7a-a8f7-b83acf8f3e45", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a2e578-79da-4992-9a3a-2dbb0db2fed8", "sighting_of_ref": "indicator--e3264674-80de-4f7a-a8f7-b83acf8f3e45", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b135ec-771b-4948-b413-f96a44b5d718", "sighting_of_ref": "indicator--a3a1793a-e498-4aec-9a90-151904458528", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d5a485-337d-4903-ae7b-8d8a75e2cb1b", "sighting_of_ref": "indicator--a3a1793a-e498-4aec-9a90-151904458528", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8493dc03-3e11-4204-843b-e4755d2ed9a5", "sighting_of_ref": "indicator--47252f79-c8c3-4629-99c2-5f16396d8c20", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5f844d-d7ee-43c1-bd4e-f7a8b8f652fe", "sighting_of_ref": "indicator--b4a50658-6448-4743-b955-76311b5f0c47", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7816a7-1fad-4614-bc5e-d58f71835183", "sighting_of_ref": "indicator--b4a50658-6448-4743-b955-76311b5f0c47", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c019239-4728-4891-b115-b413b00e136d", "sighting_of_ref": "indicator--8d5fbda7-c26f-4194-bae3-305ddf003ff6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804458de-5dd0-44f6-9bfa-ad07b56af4a2", "sighting_of_ref": "indicator--8d5fbda7-c26f-4194-bae3-305ddf003ff6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58585bd-7e01-4223-a7c8-6625b4593eac", "sighting_of_ref": "indicator--12ce2d3a-de0f-441e-a32d-114b6b61bf6e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2500b4-38c5-4628-aef2-4d356b704d48", "sighting_of_ref": "indicator--c7a1d57a-7595-454f-ae3f-be2fcbb42ac0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd94340b-c612-4323-9908-71150bb4f30b", "sighting_of_ref": "indicator--c7a1d57a-7595-454f-ae3f-be2fcbb42ac0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e11159-490e-4d03-b65d-925472e79e14", "sighting_of_ref": "indicator--02191660-6ce4-41e0-a130-73966a97bdb1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4817babc-bca2-4fe1-b4d8-fb911042834b", "sighting_of_ref": "indicator--29ef03b4-d280-4194-ae39-6e682b9c4cbe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9eacd8c-fd95-4ec6-8b1d-affa2689b642", "sighting_of_ref": "indicator--29ef03b4-d280-4194-ae39-6e682b9c4cbe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a3e9b1-e712-4d87-a76c-ba8c99c60dd4", "sighting_of_ref": "indicator--320ec4e2-c697-4cf1-9d48-4b1cb94d4e92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89220cfc-4d63-4bc0-ad8c-3b402b868f0f", "sighting_of_ref": "indicator--320ec4e2-c697-4cf1-9d48-4b1cb94d4e92", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a3df0c-6859-4a1f-a8ea-12f77a16cf92", "sighting_of_ref": "indicator--28b61410-df67-40f4-a987-7dbd4d3feda8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff8ce4d-127d-4482-9554-8f336f7162ea", "sighting_of_ref": "indicator--28b61410-df67-40f4-a987-7dbd4d3feda8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab5829f-0a26-46c8-91ce-d358b287b9f8", "sighting_of_ref": "indicator--c17e98ce-e16e-4db3-b467-57fb12e1dd3e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cb9a58-1a53-41d6-905c-bfd247a99f06", "sighting_of_ref": "indicator--a57f4ed7-aa33-4f85-8c2f-86e9f242bbee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c7596c-c0ef-49ec-aed3-514614241047", "sighting_of_ref": "indicator--a57f4ed7-aa33-4f85-8c2f-86e9f242bbee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e9fc47-817b-44d6-a3e9-5b224c85262a", "sighting_of_ref": "indicator--4f9e757c-1050-42de-9f49-59200102ca94", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb43803-500e-41ad-98e5-409b282fa03a", "sighting_of_ref": "indicator--7f9ec212-f0bd-45de-bd5e-8cba361c49b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c7995c-3d13-40f5-8519-ae085a3ba2c8", "sighting_of_ref": "indicator--7f9ec212-f0bd-45de-bd5e-8cba361c49b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe096d89-a25d-4ef5-8dfa-231e87aedaca", "sighting_of_ref": "indicator--d82dbf54-dfd6-44c9-b28b-819634dddef5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6dfeefd-db70-46a8-b966-34c6a2e1015e", "sighting_of_ref": "indicator--d82dbf54-dfd6-44c9-b28b-819634dddef5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d34ef7-8030-4c16-86a1-043871c5d8ff", "sighting_of_ref": "indicator--11cfeedb-aa25-4381-ad81-414e5f99ec86", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e97b7d7-72a0-46d0-8839-97317fea259f", "sighting_of_ref": "indicator--11cfeedb-aa25-4381-ad81-414e5f99ec86", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f2e996-13dc-47c1-956b-5ae776f6a9b0", "sighting_of_ref": "indicator--5f1e7418-8955-40af-adf7-231d6603b274", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38656973-53f6-4ebc-b280-957f907514d1", "sighting_of_ref": "indicator--c2a2e845-ebff-459e-8e02-de14dddf7041", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178fd1d3-db99-4ec3-8759-d408d1f1c6ad", "sighting_of_ref": "indicator--d36df59a-c825-4214-98be-60d692af7c7c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a716e839-d704-46b2-9c73-0a5355c503ea", "sighting_of_ref": "indicator--d36df59a-c825-4214-98be-60d692af7c7c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee56a64-7ae8-4b39-b208-80149c2eaa99", "sighting_of_ref": "indicator--3b5397d4-3fb3-4aaf-bfea-c40b480aa2aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8130fa-9436-47e4-aede-84aedf9c3e88", "sighting_of_ref": "indicator--3b5397d4-3fb3-4aaf-bfea-c40b480aa2aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4693bf11-63cc-4877-ad2c-facce58f7aa3", "sighting_of_ref": "indicator--382e378a-6d7f-4889-a72a-d714f936b7d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64d69e9-7b89-4db9-b100-df62a5e991ed", "sighting_of_ref": "indicator--382e378a-6d7f-4889-a72a-d714f936b7d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8fa8cb-7f13-441d-9209-027996bc3513", "sighting_of_ref": "indicator--7725b126-b58d-4774-b97b-90e4228b2046", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46892967-9ed7-4cbe-b16d-8bdef66bfe6a", "sighting_of_ref": "indicator--116508a5-4e82-4840-a85f-53856f66403f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a965c8-0e2a-4165-9366-8f1a5d41aa19", "sighting_of_ref": "indicator--116508a5-4e82-4840-a85f-53856f66403f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae9bb14-b912-42c7-9f6f-b9f963ba9f69", "sighting_of_ref": "indicator--9dc008e9-8225-46e9-a997-edb5da7d8eb4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d105e3-2e86-4eb8-b700-2ea8943997c0", "sighting_of_ref": "indicator--121e2c33-dbd1-4e85-a715-04ab8f529a4b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04705fe4-0628-494a-9fac-8643a8adc592", "sighting_of_ref": "indicator--3b080187-8df2-421a-b00a-6c9f9f29189d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d30b5b-f7e1-467d-9a97-3f2be3a0297e", "sighting_of_ref": "indicator--3b080187-8df2-421a-b00a-6c9f9f29189d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdadf99e-a222-4ebf-ac09-4c473892ef7d", "sighting_of_ref": "indicator--68a95be3-bf2b-4c13-b21c-78525e1760e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae1eb07-b4ef-4420-9688-62a739444d93", "sighting_of_ref": "indicator--68a95be3-bf2b-4c13-b21c-78525e1760e8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1391b72d-4fc3-4809-a271-bd0aa2e3180e", "sighting_of_ref": "indicator--56274c6c-b3a8-4645-99a8-c69d5c6edfb2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32917bc2-6c40-4432-be3a-4dd8e74e392d", "sighting_of_ref": "indicator--4f90b96d-dfd5-4f88-abaa-aa200fbcce24", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973e0f69-d3f3-4efd-8f88-af6e32ee1266", "sighting_of_ref": "indicator--4f90b96d-dfd5-4f88-abaa-aa200fbcce24", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768f5d64-4a0c-495f-866b-d91499bd542e", "sighting_of_ref": "indicator--a7b6ed3f-e8b4-4a28-9473-32b6f5e4a4fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6464b6-aaaa-4722-b3bf-9571dd50d6ff", "sighting_of_ref": "indicator--a7b6ed3f-e8b4-4a28-9473-32b6f5e4a4fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9bae4c-8e90-4130-8d24-a84779749154", "sighting_of_ref": "indicator--c52cbca5-9d20-4fe2-ad98-46c8697029fe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f330ee1e-3c22-4581-9333-f0cfc2a2d361", "sighting_of_ref": "indicator--c52cbca5-9d20-4fe2-ad98-46c8697029fe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb2ae7b-dfcc-4be0-9b1d-36d47c0caba2", "sighting_of_ref": "indicator--8e3fb0b8-9ca4-4398-a7f1-4a959471c8a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cafb6f-dba1-4f3c-a450-c8e91fa82dd0", "sighting_of_ref": "indicator--48641cc2-4958-4ada-84e8-515fe29d76c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908565bc-c6e0-4184-ad54-ae76ad7b71d5", "sighting_of_ref": "indicator--48641cc2-4958-4ada-84e8-515fe29d76c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc395756-34fd-4bee-a14c-9f8c09d64a9e", "sighting_of_ref": "indicator--df6535c6-e074-40d3-b81f-4fefa9485ac3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045d148a-38a7-480b-acdc-109d3b11fbdc", "sighting_of_ref": "indicator--df6535c6-e074-40d3-b81f-4fefa9485ac3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c62616-ca47-4a11-8b3f-98a0cdf73c1b", "sighting_of_ref": "indicator--e8c2eb3c-6a6a-4975-959f-a1133b1fc6b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c46734-9a1d-42f0-9ce0-f4dbf55d6848", "sighting_of_ref": "indicator--e8c2eb3c-6a6a-4975-959f-a1133b1fc6b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede9f568-79ab-4164-97af-7aa603a081ce", "sighting_of_ref": "indicator--d414f84a-753d-4130-989e-d71553f4f3da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab52359-175d-462f-a50c-4696fc21c2f2", "sighting_of_ref": "indicator--d414f84a-753d-4130-989e-d71553f4f3da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7a55fb-ca45-4350-86a0-6022f498dbad", "sighting_of_ref": "indicator--b824768f-ee21-4356-bf80-23ce285f7d70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be84e183-e994-4d89-acee-d8b6109201ad", "sighting_of_ref": "indicator--b824768f-ee21-4356-bf80-23ce285f7d70", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb725fbe-c7e6-48ae-ad10-32ed0218ed89", "sighting_of_ref": "indicator--521f2b02-ce8f-4c5a-b5e6-41901ce19511", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62af786-62af-477d-afcf-267510acb422", "sighting_of_ref": "indicator--521f2b02-ce8f-4c5a-b5e6-41901ce19511", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1ea3a6-ef77-4988-bc17-92b3f437d0ec", "sighting_of_ref": "indicator--edbeca59-1a9c-405c-a3a3-02893e4911ab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f358e9-1653-4368-910f-455a82a54097", "sighting_of_ref": "indicator--edbeca59-1a9c-405c-a3a3-02893e4911ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6378f44-80a1-41b0-87b5-a5848be2656e", "sighting_of_ref": "indicator--b06f3ed6-15f1-4093-8f48-1889a7e115bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58868c5f-e320-4eda-925c-23d6b7989d10", "sighting_of_ref": "indicator--b06f3ed6-15f1-4093-8f48-1889a7e115bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7e6711-1220-4a11-aaf3-f23d3e902c19", "sighting_of_ref": "indicator--73bfc3aa-add9-462d-af14-ab703ddeb92f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a652cf-fd3f-4a4c-ac73-7bd86860b11c", "sighting_of_ref": "indicator--73bfc3aa-add9-462d-af14-ab703ddeb92f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f0a272-bae9-4139-ba34-1d7c3626e844", "sighting_of_ref": "indicator--a18bb599-7b7d-4e65-a75b-b761bbda4283", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec3b4c0-df80-436a-936c-b5c136b89758", "sighting_of_ref": "indicator--31bdc2dd-72e9-4188-971f-820e92762948", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c52554-0595-40b1-9459-5673aa4a7c12", "sighting_of_ref": "indicator--31bdc2dd-72e9-4188-971f-820e92762948", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c03313a-3e3a-4537-bcd6-a2bcfca76810", "sighting_of_ref": "indicator--3737ca58-587c-4e71-92ae-30630ebe7aba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16348b89-0fca-413e-972c-cd39639d99c6", "sighting_of_ref": "indicator--3737ca58-587c-4e71-92ae-30630ebe7aba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ee07b0-ae62-4124-81bf-073736172393", "sighting_of_ref": "indicator--1f2ecca3-75cb-4e8e-8768-ea0eff07b684", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8194985b-dc86-40ba-b7fa-953cef178ac3", "sighting_of_ref": "indicator--dee69a87-b855-42f7-8df8-02fa8925fa59", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0cfc24-bfcc-4dad-8f31-af7453ecb64c", "sighting_of_ref": "indicator--dee69a87-b855-42f7-8df8-02fa8925fa59", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5742630d-00cc-4f76-be3f-a5b8ad480a41", "sighting_of_ref": "indicator--68d694ac-990e-4d3b-b7c8-280beb3d57f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad83db3-ea9d-43a9-8744-160695632622", "sighting_of_ref": "indicator--3ddffb2f-ca84-40f1-a62d-044ecd307f4f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8808b33d-afbc-480f-b39a-298f2a1a04ae", "sighting_of_ref": "indicator--662b7e32-247f-48f4-ab7d-41715c11406a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11af4213-4c93-4781-ab25-eebaa069f570", "sighting_of_ref": "indicator--a4a63dac-e7c1-49a4-984e-f259ebb619ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffb5273-207d-4811-a7ce-2071a6017fdc", "sighting_of_ref": "indicator--a4a63dac-e7c1-49a4-984e-f259ebb619ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1df3619-88a0-4491-bc75-8e7294f904c1", "sighting_of_ref": "indicator--7d02b098-75fc-4aa4-84df-30e548e00c00", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac1b8a5-616f-4aee-80ca-1052d8ea99c5", "sighting_of_ref": "indicator--7c41d091-3f6f-4a28-a681-f6f1310191bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c77412-5a4f-4bcc-98ec-4c1e0b23d452", "sighting_of_ref": "indicator--efc5582d-4b3d-4982-ab14-b2f46a1289e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509a8202-729a-4135-b8ae-94fe4f113139", "sighting_of_ref": "indicator--efc5582d-4b3d-4982-ab14-b2f46a1289e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc45c74a-3c50-45c1-97ac-8c2e68b9fb7a", "sighting_of_ref": "indicator--dc3771bd-6940-43e2-bb3a-47b4548ce78a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6e9f60-3bff-4d67-be51-16fa28551db8", "sighting_of_ref": "indicator--72df214a-d1c8-4868-83c4-5fb5892a1f99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2c57fe-b43a-4612-af4c-c02df4361abd", "sighting_of_ref": "indicator--72df214a-d1c8-4868-83c4-5fb5892a1f99", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8147f06e-2a7a-40a4-95f2-e14aacd2d497", "sighting_of_ref": "indicator--26bb6202-b9a3-4bf0-a0fc-df6547c8c9f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0915dc5-d22d-4ff8-a79e-a82176d03b88", "sighting_of_ref": "indicator--0eb9b69d-6cbe-4940-bf4c-9aadc6598cc7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c896190-6f6e-4712-b7af-1e9d50a0e22a", "sighting_of_ref": "indicator--0eb9b69d-6cbe-4940-bf4c-9aadc6598cc7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0f18dd-d854-482b-bf7c-ba37f22bf567", "sighting_of_ref": "indicator--55603853-3721-4ba9-9d83-10b2b2fe2a6d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2343ed63-84ec-4a03-847a-0aa4e41d1e40", "sighting_of_ref": "indicator--2b9992e1-8ab2-4da6-85f5-052c1c7d6d41", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12bede2-4c6f-4bc0-a970-d4dea8048502", "sighting_of_ref": "indicator--dc7cb10a-6cc6-470a-b609-cb9c7a381381", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0770bc48-5ac0-4ee9-8a96-af19978525df", "sighting_of_ref": "indicator--b55d1de8-d488-49da-b313-f014056ed80c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c705e53a-d872-44ef-a7b0-a6282e7acda5", "sighting_of_ref": "indicator--fa4538b4-7b01-4a4e-8eaa-b2f05bfcfd99", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fcdeab-21f5-4ac8-bd85-dbe256d14fae", "sighting_of_ref": "indicator--147f8587-577c-4321-8dc4-2af6a248092b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97b22b1-14e6-4574-965f-dbdeba6977cd", "sighting_of_ref": "indicator--147f8587-577c-4321-8dc4-2af6a248092b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8388b35f-a67e-4444-98ca-b22c70794a9e", "sighting_of_ref": "indicator--aba94597-5736-4864-98b8-08553e57a1b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966d5b0d-be11-40a2-85c6-7583c0b4333e", "sighting_of_ref": "indicator--cff83e28-cf04-47d9-8f22-2679bb5a3437", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ec1f14-efb8-4842-83e0-36ef7f6a9f54", "sighting_of_ref": "indicator--3ff64cbd-a18f-4deb-a09b-e2ee4cb0a6b5", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5237f58c-c4eb-443c-8853-1397ad250856", "sighting_of_ref": "indicator--3ff64cbd-a18f-4deb-a09b-e2ee4cb0a6b5", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4a85e4-044b-496d-b25f-32e7909d001e", "sighting_of_ref": "indicator--3ff64cbd-a18f-4deb-a09b-e2ee4cb0a6b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031484df-96ad-4619-b173-701c5eabb48b", "sighting_of_ref": "indicator--3ff64cbd-a18f-4deb-a09b-e2ee4cb0a6b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1d04b4-94ca-48d7-a46a-dcc12115d81f", "sighting_of_ref": "indicator--3ff64cbd-a18f-4deb-a09b-e2ee4cb0a6b5", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6f11af-93bf-4417-a121-c375e53511e7", "sighting_of_ref": "indicator--a63c3c88-ad1e-4578-af46-1cec19c2e036", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36954c28-26b7-4fd7-b264-ef19aed7d139", "sighting_of_ref": "indicator--2607fb63-8d14-4559-beed-5bd88a22ac48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609696f3-d98c-4e64-acdc-1c359d38ccc5", "sighting_of_ref": "indicator--1bde2e81-2cb2-4d0c-89de-6a5acab09260", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cfd98c-93d7-4a22-85a0-2efd73a0eccd", "sighting_of_ref": "indicator--f238d562-a674-49df-a25b-ee085a80f0da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19975176-b3be-429b-8eea-02841bb9fc1d", "sighting_of_ref": "indicator--5af45c2d-d639-4bfb-a3d5-bf42d41cfef4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31c8349-65ef-47dd-9d80-21baf42978e3", "sighting_of_ref": "indicator--5af45c2d-d639-4bfb-a3d5-bf42d41cfef4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc4a4f8-3a46-44f2-9f6c-e2310133a7ac", "sighting_of_ref": "indicator--890c83a9-4635-4b12-9034-61a680703d54", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4baf741-6936-47f1-af3c-ec51071e9576", "sighting_of_ref": "indicator--2498dbb0-da2b-4ddb-8a11-d9c677e9ccfc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fff443-d39a-403c-9b56-d8b9a2194215", "sighting_of_ref": "indicator--2498dbb0-da2b-4ddb-8a11-d9c677e9ccfc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caaa0ce8-5cde-4e9f-9f40-dcffb642201b", "sighting_of_ref": "indicator--7e40e6ef-75ce-4f63-8ce5-8a9dba58550e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433c0cbf-a590-4156-b3b0-e6e99d42a35f", "sighting_of_ref": "indicator--f95f84cc-4a58-4d89-8d2f-3d8fc760c401", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3cde05-7262-482e-92f8-35ec0dae1b90", "sighting_of_ref": "indicator--e122fb23-3881-411d-bc5c-4d1f1d169bb8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471565ce-11cd-46ee-9c01-7c6fa83d4f51", "sighting_of_ref": "indicator--5c901603-0403-4d22-a0b5-c6c01fa1d26e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9881c8b9-f240-478a-8f5f-213e1617c42e", "sighting_of_ref": "indicator--a811f41a-c35c-4a75-b4fb-37bce0618791", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27240390-efe5-4b7c-9e7d-b40bd0d77033", "sighting_of_ref": "indicator--897aa650-6dd0-414b-80ae-f3a41862fea1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c837740-31f1-4735-9fab-e15de4e77fc6", "sighting_of_ref": "indicator--2241f0f6-3666-498f-ad49-e9ffa46cbbd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2561509-e00e-47b3-9dc0-8a5c90042c2d", "sighting_of_ref": "indicator--54e1426d-3a2f-4511-a437-7ac54a7d3b99", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadf34ff-37d8-4c7d-8bda-29d7a0318b96", "sighting_of_ref": "indicator--9083fe2f-4c9a-4ed5-a202-6816743a7f44", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb30aa3-c2ac-455e-9d12-dc42bc82dd2c", "sighting_of_ref": "indicator--c0234233-e982-4d26-8811-89d08fcadeb8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed93066-915c-49da-91c8-6c4e1046940f", "sighting_of_ref": "indicator--730fe4e3-c4e9-4bc9-913a-df5339d71550", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62cb7ff-f2ae-45a1-9863-71e18e963b4e", "sighting_of_ref": "indicator--028b2f40-8e69-4ad9-99a8-d3b1bb1c5e53", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bed2e4-a46a-4b2b-8856-3e1607e6be9d", "sighting_of_ref": "indicator--a08de37e-4f03-450a-b3ef-c6b7fa1deab9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49477a58-9dab-4f66-8f8a-4ec074c64d3f", "sighting_of_ref": "indicator--e50f8fb6-57c8-49b6-8137-6c0daf9780a3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d59f661-11ed-47d5-9fd4-96d4409a5adf", "sighting_of_ref": "indicator--46dbfe04-8099-4c2b-8eff-1ce88da92e40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f99cd6-b59f-4776-9144-2ed6b5ec5391", "sighting_of_ref": "indicator--a02f6b3f-fa4d-41ff-9bef-5c850123625f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb145db3-892b-4fa1-b90f-f0706c5cbce8", "sighting_of_ref": "indicator--7d12876f-7110-409f-86ea-724b7616af2b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac4d1cf-ce3c-4514-9837-68a2d5691819", "sighting_of_ref": "indicator--f79be5cd-e538-4a63-9100-d4b93d53b405", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cff650b-1e25-467b-895b-83c8a57887d4", "sighting_of_ref": "indicator--e56adb77-1da7-4312-a5e3-f31d2b5f534d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648f543f-434d-4122-80c9-d155f504aa24", "sighting_of_ref": "indicator--8b3ac612-8b5f-4d6f-82de-5d27d0bde790", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5add4c71-bf1c-4b04-9c21-1b5be91526d1", "sighting_of_ref": "indicator--e94e22d2-9819-45ea-b971-4e32cc4c623d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc62b36-6c74-4605-a591-9733b1ed1416", "sighting_of_ref": "indicator--e94e22d2-9819-45ea-b971-4e32cc4c623d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b4dfb4-82a1-4844-8fd4-1d8940341f41", "sighting_of_ref": "indicator--25e7029c-c052-4789-b36e-dba7604b8b4f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a95ec5-942b-43f0-8b62-b506c60ed927", "sighting_of_ref": "indicator--304279ca-cf34-4db1-83a0-e4d5901da80d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a204654-0aa1-4154-bb7c-0f86c00a5ccb", "sighting_of_ref": "indicator--304279ca-cf34-4db1-83a0-e4d5901da80d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d322a3a4-14b9-4236-9dfd-e9a978f861ab", "sighting_of_ref": "indicator--f41192a6-4135-4dcf-a6b8-0f0671c92fa0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee9cb9e-d90f-45be-8b83-ee34d786abb4", "sighting_of_ref": "indicator--f41192a6-4135-4dcf-a6b8-0f0671c92fa0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5a98b8-1b33-4026-b78d-a739e058041f", "sighting_of_ref": "indicator--c9282c51-6eb8-471b-97f4-9cdf84c1b4ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a040ce-b19c-4c4a-b30d-cd94afe998e5", "sighting_of_ref": "indicator--bc628956-8e5f-4974-be72-d740de32373d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3ce51c-5121-4050-958b-935427e86a8a", "sighting_of_ref": "indicator--ee2b6d2a-b69e-4e1d-9a38-4835570184a4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620d94c1-e963-4250-b1b8-cf398f38d463", "sighting_of_ref": "indicator--91102d9a-5d21-4659-9c7b-fa5ede146ef7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d706a0c6-ef65-4639-9ebf-4b1af1811c86", "sighting_of_ref": "indicator--98ce6995-fceb-49ce-a66d-437ba75721ab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54c5683-67a5-48c0-af1b-fe7e6c55aeeb", "sighting_of_ref": "indicator--98ce6995-fceb-49ce-a66d-437ba75721ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909e1abc-e9b6-45b1-b3f0-261e95a3244c", "sighting_of_ref": "indicator--3b2e7cfb-a6a8-45a3-bd92-2b2ec541cfb6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fef491-6de9-404a-9b2c-456a2cdb7fa0", "sighting_of_ref": "indicator--c2592768-dde8-42c9-9a27-e30c64a08443", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e5060e-ec2e-4b49-9616-1d3392b4de4c", "sighting_of_ref": "indicator--feefaeb8-4405-4b27-8f22-d922ae10f07c", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44896e9b-7f23-473e-8002-9495d6ac3105", "sighting_of_ref": "indicator--c57cecb4-eb55-4b9c-9e7b-0b7cbfc170d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef260056-6414-4ddf-b38c-f0493faafcae", "sighting_of_ref": "indicator--52730b53-7945-4401-9bf4-8dcc476d07bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3427308a-f7be-43fb-a0ee-96a703d12aff", "sighting_of_ref": "indicator--52730b53-7945-4401-9bf4-8dcc476d07bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ac6499-2f9b-4929-b46e-98767135830b", "sighting_of_ref": "indicator--fed0de10-cba8-4364-9d76-41f7344fffe8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7d958c-d058-4ba4-aed3-5032e60fd1da", "sighting_of_ref": "indicator--ca7a08f0-0dfa-4865-ac17-ffa44fbc89b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bbf794-7631-4d7c-bca6-e371632304e8", "sighting_of_ref": "indicator--ca7a08f0-0dfa-4865-ac17-ffa44fbc89b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d5ec7d-b0cc-46c0-b04e-a9c1403abea0", "sighting_of_ref": "indicator--a19c22d3-d96c-4bbe-b4bc-f30c66402e28", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febb7d66-319c-4544-a0fb-68e702d8bce4", "sighting_of_ref": "indicator--de6f9b57-1e6d-47d7-a676-b62c30e8d141", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2877e8ea-dee6-419b-b096-9655fbe38292", "sighting_of_ref": "indicator--de6f9b57-1e6d-47d7-a676-b62c30e8d141", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d2c025-6da0-4dc8-b74a-8e528527133c", "sighting_of_ref": "indicator--830056db-0421-4cd7-a87a-6f33b304ad21", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0504b96-b9c5-4993-a225-4f0384ba7542", "sighting_of_ref": "indicator--830056db-0421-4cd7-a87a-6f33b304ad21", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba26a893-1019-4f5b-9f51-4f42ce57a700", "sighting_of_ref": "indicator--f8906b94-081b-4685-89bd-959c6fd18220", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8df100e-96ab-46ee-83a6-57cfbfb602ae", "sighting_of_ref": "indicator--4bc794dc-cf8b-466b-9db6-f46c475b83f0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fb6b3f-7eda-453d-85d0-933004bdffec", "sighting_of_ref": "indicator--4bc794dc-cf8b-466b-9db6-f46c475b83f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99af156-b9c2-43c4-8063-59549149dc21", "sighting_of_ref": "indicator--ec98cca0-4280-42cd-b353-e402d3d5c045", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ad16f7-48a8-4b39-a611-4f77bc9a8ae8", "sighting_of_ref": "indicator--b270528e-5b94-4be7-a846-564ba8b221fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a0efca-503c-4583-9b94-2ec62d268539", "sighting_of_ref": "indicator--0df0bbc8-6578-46c4-bbf0-d7eb7b94c408", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719341c7-fc73-4b93-8c68-4673e1e99486", "sighting_of_ref": "indicator--8a5611dd-b99d-4ef2-a320-b27ebaf7aea6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f87c3e1-1d9a-4f5f-bd3a-fd769c312086", "sighting_of_ref": "indicator--f6e2faa6-25a4-4d1b-9d50-aea5b0b9977f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37e8232-898f-41f3-b217-ebec77d867de", "sighting_of_ref": "indicator--4ac9d8b4-610e-4304-a0da-537dcc4bc442", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51810222-81b2-478c-9696-ef0bccebcf0a", "sighting_of_ref": "indicator--1afe900e-6d5c-4084-9fa4-293e481b42ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25067efb-99f3-4317-ac07-cfa47d4cacc2", "sighting_of_ref": "indicator--17761108-90e2-4082-a910-d1db3ebb1d82", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48fa213-3759-40ec-a81c-34947125881b", "sighting_of_ref": "indicator--fcf0c3fa-2482-47d3-9605-cf35cc6ac385", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b415ef73-a35c-40c9-99fe-b6730cd32906", "sighting_of_ref": "indicator--bd1ed933-669e-4608-aa9f-17dd39288deb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8994d2d-fb62-45b9-a06b-022465113e82", "sighting_of_ref": "indicator--bd1ed933-669e-4608-aa9f-17dd39288deb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa5e1d3-f677-4f36-abfc-ac25f4fe4229", "sighting_of_ref": "indicator--873a98e5-8d17-42b4-8ff1-92e9ee409ef1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600ad08c-2984-4acd-8bfb-e9a99737d333", "sighting_of_ref": "indicator--c5bb3ae6-2212-4915-80b6-2a339618ff66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce1bcdf-6cfc-4d9c-b56c-01369964fe43", "sighting_of_ref": "indicator--7f28be87-9373-4437-bbaf-8b3153059eeb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84be9688-077c-4677-99fd-22be507efdbf", "sighting_of_ref": "indicator--872afeb0-375d-4dd6-a677-295299fd0e90", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6dbf2a-1654-4103-ad5c-c616578c6c61", "sighting_of_ref": "indicator--5219209e-d72e-4a00-8f3d-72411818eef3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36265f8c-86e8-41ac-8b57-74a93302f768", "sighting_of_ref": "indicator--da79a6eb-6da4-43ce-b9b6-11534153342c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e187da00-693e-4742-9e7b-17296f545b2a", "sighting_of_ref": "indicator--0d0a9719-7e4b-4891-aecf-b4ce7fa64028", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d209667c-c76b-4091-abac-515ecd23e9d5", "sighting_of_ref": "indicator--abca7c09-fa44-4578-b486-f96954d50478", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc217495-22c8-431f-bd71-98c7f7fc26e8", "sighting_of_ref": "indicator--e863baf2-8238-4c28-9ef3-13e9c3c8df9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a8c2f8-7685-4fdf-ac93-84c6433115da", "sighting_of_ref": "indicator--e863baf2-8238-4c28-9ef3-13e9c3c8df9e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b66099-ccb7-4358-8ced-ff6faac32f07", "sighting_of_ref": "indicator--dbbcad3b-fcd6-40ca-b4bb-eff8efea30e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592aa2f3-3ef0-4f50-975b-0259dfc54208", "sighting_of_ref": "indicator--4ced7553-30d2-487e-87c0-985c77c07d3f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3917c031-eee0-4c39-adc6-a591c5e25c69", "sighting_of_ref": "indicator--246eb507-6356-4f6e-a5ad-55761ec8ff22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96898ca-1b3d-4bcc-9f91-c828d2de4ff7", "sighting_of_ref": "indicator--b5775ec6-b8d8-409e-b939-e4dcd964cb26", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2bd9b3-9b3e-4407-8405-635f36525cb4", "sighting_of_ref": "indicator--ae436daf-afb4-43d3-962d-a26898f35528", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641598eb-634e-4ead-aeff-316b7ada44df", "sighting_of_ref": "indicator--78cf55b0-7a7e-43b2-953e-6b324c667a97", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e18e31f-0a55-4557-b7c0-45b3e0bb2a3a", "sighting_of_ref": "indicator--955fe851-29b6-4844-afb6-f2f9c10869ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3eada6-fbf0-45d5-9507-8b914efc1073", "sighting_of_ref": "indicator--d331a735-f3f6-424b-bae7-19e54ede6773", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85798c0f-3d3f-4316-ad6b-d61fdc6cf9ac", "sighting_of_ref": "indicator--32edc989-c42f-4923-8ace-fc7f125db632", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c65c3d4-7d37-438b-a797-747e4ccd6f30", "sighting_of_ref": "indicator--7acb3d97-74fa-4999-93e0-73da4a3f42cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b489f35-73f9-424c-bca5-05b140d2691e", "sighting_of_ref": "indicator--4add3037-bc73-4eb0-8f10-1fa6cd6eabe0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073ea5b3-24f2-4868-be98-29419717d544", "sighting_of_ref": "indicator--de4352b5-771b-47fd-83f3-b93e43e898aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7e4f37-f68a-4cba-a61e-2ae2f8f81f9e", "sighting_of_ref": "indicator--0d162b14-d89d-4ce1-9166-bc026da3242d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c18421-457e-4404-bf5a-04da8228fe2f", "sighting_of_ref": "indicator--890b562d-f990-4efd-921a-e79b574bfcf9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d958b590-5b18-41b6-bdbd-c2b57d0c881c", "sighting_of_ref": "indicator--780e66c6-b0b0-4d51-966e-98c3dc1b9c61", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42002f07-85ec-4b11-92e6-9b67bc5f7e96", "sighting_of_ref": "indicator--2147cc9f-c764-4bf3-9acb-2ac07bd82a3f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f5ec7a-749d-48e6-82e5-ef93f85c3217", "sighting_of_ref": "indicator--91fab45c-9eb3-4bd0-ae1a-a5bda95dd850", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d976a3-5da5-40c2-a96e-14dc34fc5b9d", "sighting_of_ref": "indicator--23f249d7-5fc7-4079-bd00-b1d93225973e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b0858f-cda7-4e69-84e7-cbad14f0c1c5", "sighting_of_ref": "indicator--234d0674-35f0-4fc6-b3c0-917df04bcede", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecf7b45-e67e-43f5-b6fe-de122bcc9e5c", "sighting_of_ref": "indicator--5c6f426d-6632-4f80-a737-c22f37f173b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701e844a-4ca3-4bb6-b00b-784ec1c7dd83", "sighting_of_ref": "indicator--69a0557e-88bd-4871-a6de-41a8b1ee85dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab72568-9f79-4550-abf4-f7163d4e8ca0", "sighting_of_ref": "indicator--d1df29a2-c602-4e3a-bf5a-909c4253257b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced853f8-2362-42db-9ec7-334fac08f10a", "sighting_of_ref": "indicator--33cc55f4-c1f8-4f03-ad23-b848c9610044", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dfa96b-994f-4531-ae63-186b39b41fb1", "sighting_of_ref": "indicator--ea37aaf1-56d1-4ff0-89e1-136ee9f77a7b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1bb18e-48ae-45fd-b63d-054e8d7cb215", "sighting_of_ref": "indicator--b6bf99fa-91a5-4470-88c2-2da157f38346", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed9234f-9ddf-4f48-b538-192f2335e48b", "sighting_of_ref": "indicator--0ac30920-0af1-4a34-a8dd-f981b9885234", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7da14b-6ee0-4337-81d8-0f846a851839", "sighting_of_ref": "indicator--d0110f26-a5e2-48b2-8871-64a8acb13298", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604516a9-1dc3-49de-955c-5cd2c630ebbb", "sighting_of_ref": "indicator--126eec7a-be7b-4fe5-aa4c-87573bed36ac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f0b29d-ff75-4cf9-a7ba-55d5ddc55621", "sighting_of_ref": "indicator--42c9db1e-8c55-4410-81f6-caf994ae365f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ca3954-c7b7-40f6-beb9-aa6e3de9accb", "sighting_of_ref": "indicator--c2711ee4-3e0d-4758-872d-996c5e572a33", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf54fa0-8f6f-48b6-9d2f-74d1a4e082fc", "sighting_of_ref": "indicator--d821b5ab-235d-4c61-8306-2f1626c0de03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042595a4-457b-4245-ad2c-8d4bed877798", "sighting_of_ref": "indicator--aef6f108-798c-49dc-83b0-5672072aec19", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5ecc73-8df6-49be-a6b3-d2fd2878dbb9", "sighting_of_ref": "indicator--25d7136c-68b0-49c1-b660-51d7bb28282e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49672353-6e84-4357-b25e-3d5580c2e805", "sighting_of_ref": "indicator--d5621fdb-b3b0-4db0-8e9f-0bd872d6eaa2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f882f64-0d2b-4ae7-afaf-0e9a5fe38bd8", "sighting_of_ref": "indicator--b90ad03f-6c52-4442-8513-4acdc8b2a8b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e403d933-edc3-4ea6-9799-fb9750f73eb3", "sighting_of_ref": "indicator--26e6836e-53f0-41c1-89c0-0dcc0b7493b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385d8f23-4b7c-4416-a323-c6d59e4a2c86", "sighting_of_ref": "indicator--4a10b8af-9d56-43c5-81ac-62b65908adf9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c61514e-7842-4503-a188-2da2f3225b5d", "sighting_of_ref": "indicator--250fa429-52e4-4b97-84e2-5c9a659dac66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57906eb-b2e1-4f7c-a87d-52bf73c7f1d4", "sighting_of_ref": "indicator--e50d8594-a639-4484-a41d-486d7747406d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e046b65b-083e-4785-8ee5-e48cd652210c", "sighting_of_ref": "indicator--ac8ab27d-08b4-4144-b8f4-92bd8d9ff220", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24351b5-9005-4836-8940-010721997724", "sighting_of_ref": "indicator--dca6e73b-c286-427b-b6b1-aa082985216f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5783d5-24d4-4496-93f7-d230631dcd8d", "sighting_of_ref": "indicator--f1adb9be-22b5-4047-ad6e-bb765b394591", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ce4ac6-d39a-4d25-a8ec-22dcd56e96b7", "sighting_of_ref": "indicator--be0bb296-838b-461c-8a5c-53970c882c66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3645b44d-ca30-42a2-9039-4c0bdd86b649", "sighting_of_ref": "indicator--6c4968be-c3f8-4f7f-b0aa-8aa4409f954c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581e503f-954f-4e89-bc08-558845b9bf9e", "sighting_of_ref": "indicator--57cae9af-53a3-471e-a1f8-3dddea359a39", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654b7b8f-ca88-43e7-829f-be77e8c7a786", "sighting_of_ref": "indicator--a789e401-bbf9-4813-964c-eddd1bcb1733", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9be39bc-2a42-4bf0-b1bb-ceb4a929de12", "sighting_of_ref": "indicator--6309b646-b868-4870-af79-18b0881cae32", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fbe7a7-e8ea-4382-884d-c815cc9a4e2c", "sighting_of_ref": "indicator--2f319268-b8b2-4276-9b9a-e4ac7094ca30", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d762c00-cfa9-4f2e-9a24-469febaadcee", "sighting_of_ref": "indicator--f41e23dc-b72e-4f14-911e-cefa40dd26de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6abd109-2c19-40d8-b3cc-6765df77b28d", "sighting_of_ref": "indicator--d6653b84-99ac-4a8b-81fc-06714dc26081", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e63463-61e3-40c6-81be-63ca17c43872", "sighting_of_ref": "indicator--cd7964a6-4b01-4d57-ba83-2aa5d696bc10", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4943947b-6cce-4acb-951e-605e886ea27a", "sighting_of_ref": "indicator--887335f2-acad-4ef7-8175-955f4eb3570e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fa701d-06e6-4dbd-a176-489d799aabb1", "sighting_of_ref": "indicator--d3912b6e-a917-44b7-b6f8-24e39bf812f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e535b99a-1222-4c97-9290-7942e37ffc75", "sighting_of_ref": "indicator--955e4add-5ba5-47f4-812f-7c693cd8c776", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dcc307-efbf-42b8-97e9-58b161bc4c18", "sighting_of_ref": "indicator--0375913a-6f92-48e8-916e-b8e8725ed292", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5275dcbd-7e49-481f-931d-ac9712113779", "sighting_of_ref": "indicator--6be343d1-cd51-44ad-baf8-b9d496f4a997", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c5f915-d622-4bed-87cd-783362947727", "sighting_of_ref": "indicator--87b6a8a1-ef9f-45e9-a31e-699ecb756432", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88852168-63e5-459b-92ef-b914dd0e7560", "sighting_of_ref": "indicator--82fef238-24d3-47f0-b6af-d26c3e12329f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98dfad5e-c5d5-4874-b0bf-b95e59b93603", "sighting_of_ref": "indicator--2cf7ee08-a1a6-45c8-acce-34cec036caad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d440730-1a10-471f-aa31-984bff4b43a7", "sighting_of_ref": "indicator--ea791278-106e-4969-865f-3a394c24ac44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57787505-ca1f-4839-8c66-339e99c93c6d", "sighting_of_ref": "indicator--f6affc7f-9677-4dae-8ec8-ded291c84a61", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b6ddd7-d23d-4cf9-9903-f9faedd5379f", "sighting_of_ref": "indicator--2eb0e41b-65d5-44c2-b3f4-6b8540830444", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2861e634-6e48-4e72-8d0b-2f1a7c5b3114", "sighting_of_ref": "indicator--8b583524-c2c3-4131-923d-469dbd8464ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fab7113-4a97-4107-8dc1-a080a405f8bd", "sighting_of_ref": "indicator--71a362ab-792a-49b5-b9f9-9e0604fc53e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4866806b-16d8-48a8-9aaa-eb1144893be6", "sighting_of_ref": "indicator--613b60d0-431d-4c71-9921-0ab91ece0137", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26cf66e-1850-4e82-8797-a3f7f7142f02", "sighting_of_ref": "indicator--3041efa5-5fd4-48f7-a73a-773cc522d185", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b47342-fba1-410d-8c78-b5f1a45a6eb6", "sighting_of_ref": "indicator--3eb65136-7155-412f-8022-e85948121326", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa9716e-93fa-414c-8054-4473d501d837", "sighting_of_ref": "indicator--06323a01-f440-427e-bca7-190fa4eeaf49", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07a95bb-c574-44f3-ab07-c74571dfdcf1", "sighting_of_ref": "indicator--7ba39854-bbf1-4864-8ada-9621794a3bad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1a3743-41e5-4a68-95f2-98d2b63c52ad", "sighting_of_ref": "indicator--cf8f5314-5870-47c8-a229-0a8ecb57f0d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbaf6a2-ab44-4718-9987-c8f8c9d49f94", "sighting_of_ref": "indicator--66696e0c-1898-46cd-9bff-c8a8f04dd76f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1394623c-bf7a-4346-aaee-4ce5f58f9b41", "sighting_of_ref": "indicator--3da60a47-7f0f-4d48-bd5f-d514d89d1796", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeef4422-1704-432f-828d-6d431ba5c0e8", "sighting_of_ref": "indicator--3da60a47-7f0f-4d48-bd5f-d514d89d1796", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d47fa9-7f6c-4d82-ba05-6d800466fa58", "sighting_of_ref": "indicator--86f01811-733e-4b2b-9181-531bbbae83bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a0b304-56cb-4b4b-9fb3-afdbeb4da503", "sighting_of_ref": "indicator--d3c78a91-c7e6-4e8e-b0e3-269186965737", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b5351b-5641-4ace-8f8e-8c65d5f6173b", "sighting_of_ref": "indicator--d3c78a91-c7e6-4e8e-b0e3-269186965737", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b950f39-56e8-4791-b644-4f4d59f952c6", "sighting_of_ref": "indicator--ace64ff3-a85f-4831-86e5-035b5f664161", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ada9f5-fedf-4042-bd09-d4e06bcd59f5", "sighting_of_ref": "indicator--3772fc8e-93d1-4f8f-8907-b8823ccf3d88", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac083e6a-7cdd-4535-9821-a0e34266c6fe", "sighting_of_ref": "indicator--5fbc8cc6-6f79-4165-acd8-2bec5c4c3a81", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a009b367-18f0-4af6-ad92-23790b550af8", "sighting_of_ref": "indicator--830d932b-cd03-4b98-9e0d-75b5a202e366", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f516c5b-1bee-4ac8-b0e5-cdaa3c2f9d6d", "sighting_of_ref": "indicator--830d932b-cd03-4b98-9e0d-75b5a202e366", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8bc2fd-2900-46d1-a04e-f8812eb7c336", "sighting_of_ref": "indicator--addb97f5-f60d-4fe4-8825-a4b8b651b69c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b0ee0c-4e06-4f76-a69b-e433c61ec6ea", "sighting_of_ref": "indicator--b63015e7-1aba-48cf-9389-0e3c458e6ab9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a7ce6e-b622-4803-822b-d8e8a88fcd91", "sighting_of_ref": "indicator--13b099f9-d481-4f26-8b7e-4b193f18186c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893c36c4-a247-49bb-bec0-44033a4e2284", "sighting_of_ref": "indicator--1411fc5f-2632-438d-9ae2-f4ea31343152", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a717d3-e70d-4fa1-b3c2-7c460eec14a1", "sighting_of_ref": "indicator--a38013fb-c63d-4c5c-b788-97954a692f38", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f68ea8-d224-432c-b6e5-9b780687ad0c", "sighting_of_ref": "indicator--5b4e431a-41ac-47e9-900d-4ffd029242f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab40a02-1a32-4772-8a34-2967373944d4", "sighting_of_ref": "indicator--5b4e431a-41ac-47e9-900d-4ffd029242f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9197d97-6296-43c4-be93-15a63d530a4a", "sighting_of_ref": "indicator--efa4c553-4104-44d5-87a0-2b988292f3cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2702f83-3aef-451c-8e42-e0abc8e486c0", "sighting_of_ref": "indicator--e3174d12-4838-444d-a80a-8e768829244c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418ca7b6-87c2-408a-90c2-08882d68fa7e", "sighting_of_ref": "indicator--2754a4f0-2fee-4124-aa55-807900e57c3a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f1d2bd-213f-443e-8143-0b22ac4aba3b", "sighting_of_ref": "indicator--d73acd5c-8845-4a1f-8ebb-961109f672b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20c61ba-d9a2-4923-9f70-e6291b0c0256", "sighting_of_ref": "indicator--d73acd5c-8845-4a1f-8ebb-961109f672b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28badea0-83a0-4b5d-834a-7beedf98323c", "sighting_of_ref": "indicator--f22c3661-e277-4a3a-88d8-fd45fb92140d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79277639-918a-41ab-80a4-67742f20e1a6", "sighting_of_ref": "indicator--fbacee42-07f9-4e78-887a-a8bb77f0ec30", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b5f55f-6f5e-4336-99c9-2027d1f4c174", "sighting_of_ref": "indicator--fbacee42-07f9-4e78-887a-a8bb77f0ec30", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d147e2a-30c4-4054-a137-cc3982621268", "sighting_of_ref": "indicator--2b692942-7a5a-47b7-9d52-d0dea6845b1c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00973fc-b902-4c01-a5d6-622ecd2ddd4a", "sighting_of_ref": "indicator--3446aa95-33eb-4de3-aa82-0f533847d279", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565091ce-f5fb-4c45-b779-607055eb29e7", "sighting_of_ref": "indicator--3c1e8b9f-b26f-4aed-8d96-d6fc5397d37e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98eb3d64-4db2-40fa-b235-ddbc14f2b322", "sighting_of_ref": "indicator--5e2821da-9db7-4060-a861-c5cf096e4a46", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412ecfc9-f8b7-451f-9e9e-00d366c572f6", "sighting_of_ref": "indicator--a1ad8e3b-0598-473f-bc76-d23d573b9eee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05e2e3f-6ed8-4d18-9c29-5a7af80c332d", "sighting_of_ref": "indicator--0e69c22e-01c6-4502-9b90-c67c566c34cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb98c415-fb6a-41d3-91ef-7bf7a69cf6cc", "sighting_of_ref": "indicator--92078359-75d7-4673-b0c9-ff7ba146bef0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd18a7a-4b84-41e9-83f5-7b94595031c5", "sighting_of_ref": "indicator--d5c4383b-9c37-4a92-91fb-ebed701a7094", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5f4c4b-5c48-4087-ac4b-bf54a0d5d9c7", "sighting_of_ref": "indicator--05f62c65-a2f7-48f4-92a9-c4d0008842e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626b4a7a-b473-4d07-9813-0c606029fc14", "sighting_of_ref": "indicator--05f62c65-a2f7-48f4-92a9-c4d0008842e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62861c95-4928-41ae-9a42-3fc3b40cc2e4", "sighting_of_ref": "indicator--9a8a0006-ddc8-4479-aa87-88ef2d25a422", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e68a45-f657-4395-a7f3-c5a3e190e177", "sighting_of_ref": "indicator--dcc1f831-dbd7-4010-9aec-0310157a3790", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8522bdf9-380b-4ece-b747-a9e350c8d5a6", "sighting_of_ref": "indicator--dcc1f831-dbd7-4010-9aec-0310157a3790", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c08f3c1-f33f-460a-9176-ef888d8de030", "sighting_of_ref": "indicator--548da1e2-86ea-44fe-a0c2-c511384cd880", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02b2889-5f22-4673-bd19-ba5fb77115ba", "sighting_of_ref": "indicator--5d6bfbf8-4383-4734-9b6f-b9e69c00ceb5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a1d392-61c8-4137-97e9-a84323dcb385", "sighting_of_ref": "indicator--b58c175e-bcc3-4d99-b9a2-346e99dc9d91", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6f2748-3a4f-47b7-a6ea-a498ffa5d504", "sighting_of_ref": "indicator--21587ce9-dbcb-4f0b-877b-42b9da3eba45", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc31b96-4a37-4b59-8213-e4b84fcb8566", "sighting_of_ref": "indicator--3054d7f7-0a21-4a3c-b53b-06450495f657", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0020719d-94ea-41b5-aea4-8c13db65cc7a", "sighting_of_ref": "indicator--52698226-4675-4345-bb1f-ec7f41a67e50", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e4917-ee05-4c6e-aecb-46d6b006c894", "sighting_of_ref": "indicator--850191a9-bad0-4ca5-9b11-7537a6e83fb3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665c8b1c-ae06-406a-8af0-4d8c83467138", "sighting_of_ref": "indicator--59d5405a-75fb-4480-a0f8-bd44f43efb6c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95b4b5a-63e8-4528-9953-1b81e6181a93", "sighting_of_ref": "indicator--4e463721-7189-45fa-b680-e6975ba74dd8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b99ff4c-7623-447c-a3ee-f21800e27172", "sighting_of_ref": "indicator--09f2a61c-99e9-406a-9291-fba338cc9b03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b762ab1-52dc-434e-8e63-d9f070011e30", "sighting_of_ref": "indicator--c696dc34-513b-40ad-95af-05a86ff4c5b3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e6ded1-c843-4c51-87c1-a8a180ffd962", "sighting_of_ref": "indicator--743c906a-2375-4f0f-bfa9-b43f985fe928", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a99eb6-f416-4e4b-a87d-77ad7cf82308", "sighting_of_ref": "indicator--26fbf50a-30ce-41ad-a494-daca06cd11ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec8c2c1-816c-40e9-bb68-2509402b096f", "sighting_of_ref": "indicator--a698d2df-f1fa-4cfd-86b8-59a5dd428c64", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbe2300-e0c4-461d-a355-1619a6ed6834", "sighting_of_ref": "indicator--6a35b4a4-e3c9-43a5-9673-63c4af84e30c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb9a050-c0d8-4100-9d50-23e5a9fa6dc6", "sighting_of_ref": "indicator--6a35b4a4-e3c9-43a5-9673-63c4af84e30c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa6e0c6-1d36-4986-8bd6-c159f34d1744", "sighting_of_ref": "indicator--797e076f-2ceb-42cc-86ef-0c058b59562b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64a49ad-3884-429e-b30a-605880de94f0", "sighting_of_ref": "indicator--63d9b749-fd3c-48c8-9464-8172169296dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e061ee77-e1b0-42f0-a327-59c39c95f4e0", "sighting_of_ref": "indicator--7f53c9c3-e5c0-49c4-96c4-3dae4a4d3a93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d366ae70-0be8-400d-a51d-9d9fdd108115", "sighting_of_ref": "indicator--7f53c9c3-e5c0-49c4-96c4-3dae4a4d3a93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4ccbe4-25b7-45d5-a669-8156a05fb161", "sighting_of_ref": "indicator--7dd7a7c7-94f3-4ab1-80e6-24dd35fe585d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416c0d06-8dc8-475a-bb18-0c8cf58ca873", "sighting_of_ref": "indicator--d499c02a-27dc-41ac-8429-937fc7f65182", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5cc392-34a7-45bb-8888-a7628b95e203", "sighting_of_ref": "indicator--443a02f7-63b5-4cd1-8f86-d067b1980b11", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd629b7e-fff8-4b52-87f2-0124b93b6920", "sighting_of_ref": "indicator--c592093f-6646-4b53-a98d-42968b45afbf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8129bad8-3789-44d2-866b-94bd29fce036", "sighting_of_ref": "indicator--4e8dd352-e9c8-4b2b-bb53-1b2a802e4715", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0bdcb5-8c2c-48de-8913-a378b0ecccb4", "sighting_of_ref": "indicator--478718dd-c020-4755-9243-ee13fc3cb74d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a38f79-39e9-4651-b70d-c0c152941031", "sighting_of_ref": "indicator--aecc27e1-c4fd-47bd-b697-fdce94072ade", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167de03d-fc00-4af3-9d0c-92173f03f403", "sighting_of_ref": "indicator--4ac566c2-6d26-4c8e-a5b5-13fb989508c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783a2b90-fd4f-4cf8-9b00-9540bd3db44b", "sighting_of_ref": "indicator--9993b4d5-ee3b-40e6-8f3a-74c21b3371cb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9453e801-2299-4e5f-88a8-48b52ccf0204", "sighting_of_ref": "indicator--8647b14b-b6c9-4613-9777-d33261287ac9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2ca69f-d954-47e8-95eb-c3d5c74d3ae8", "sighting_of_ref": "indicator--8647b14b-b6c9-4613-9777-d33261287ac9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3116baa-3423-4250-8015-c3cedda62a81", "sighting_of_ref": "indicator--8b175f86-2994-4c89-b659-906b93fb16ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ec53b9-3524-4b30-a7ea-503c46a7603b", "sighting_of_ref": "indicator--e3082974-06c0-4a40-866a-26f7d4138e5b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f544db1-85e0-4e6f-9556-c923429d28e2", "sighting_of_ref": "indicator--14f07070-b786-47f3-aad9-54a732ac336c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40be602c-5313-45b3-a340-37939fdf5b88", "sighting_of_ref": "indicator--e7cad208-7960-49c7-9d13-2fd4f040e504", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e9c471-5677-4d14-b054-6562275dd4c6", "sighting_of_ref": "indicator--09a24204-acbb-4877-a1e3-8b9fa419aaf7", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63115136-a3ac-4772-b6c8-bbef387c7965", "sighting_of_ref": "indicator--bead843e-db36-4e3c-b90b-eca90b11fe4a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debb7fa3-5e8c-46cf-85fb-891e4c3dbef4", "sighting_of_ref": "indicator--71015d64-54d6-4fb9-af32-ecc6f8f137ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b39f39e-ba8a-448d-9a08-c376b64b5823", "sighting_of_ref": "indicator--b28c613a-7fc8-4f01-af74-553fe8ab8ac3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb34d28-316e-4e82-8129-6a0a75838d50", "sighting_of_ref": "indicator--21a1297e-dbb7-4ae9-881e-47acd7399cdb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1d83f7-787d-4847-9fa2-4842774231d8", "sighting_of_ref": "indicator--9f3685ba-b216-4847-ae09-6d7640805281", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d0c50d-c470-464a-b286-d6c699766dbf", "sighting_of_ref": "indicator--f8d2147c-a427-4e31-8608-1a0e788ebcd2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b760b568-c436-4f0b-8803-35d5b49413da", "sighting_of_ref": "indicator--c2610c05-a7f7-4c01-9830-048494784225", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cfdf8a-e737-4d28-8cb3-5db0c8d6b333", "sighting_of_ref": "indicator--f1eb4d04-a043-446a-b020-14447536b588", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551ea21a-3021-4ba7-b14b-da74c4d9f212", "sighting_of_ref": "indicator--0fdf3a6a-8048-4cb2-99c1-907a9a90bfe8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f23c1c-b8aa-45bd-8da1-453d50cd738a", "sighting_of_ref": "indicator--5660eff8-30a2-4824-8153-512e0419183f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eae118-2b49-46ea-bca4-6b51e6fdaef5", "sighting_of_ref": "indicator--41bd15a6-67c8-49e9-a2d0-1f9a6f376f42", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b0b18b-ab24-48c6-bc06-9ef10f08b4d7", "sighting_of_ref": "indicator--d6a9304a-5fca-4de9-96e8-af24c78ac1c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc05bebb-c8f2-4124-947f-ccd519675ffa", "sighting_of_ref": "indicator--7232d19d-8b9c-4f90-af6f-09dfb28c6d90", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077ae464-22d0-433a-b69c-df69d575bb98", "sighting_of_ref": "indicator--057dae0b-02df-41ff-b0fa-c92fb02718b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306c3424-deaf-4a31-8100-58e8eb97b143", "sighting_of_ref": "indicator--4771713f-1d51-40cc-8572-72c184323f51", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb411e2c-2698-45c5-b0d2-af6bbaa90e33", "sighting_of_ref": "indicator--8b2b70c6-76f7-439d-b11b-ede72f6cb8f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af5f695-7ae9-4501-8107-74140837abaa", "sighting_of_ref": "indicator--453d432c-7061-44dc-b7ce-53b66f934639", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1470a7-6309-4700-ac2d-1bea2bc583e5", "sighting_of_ref": "indicator--b182d764-f2d0-4c9f-87c9-3b2b27714fb0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04583fd7-5586-4563-b823-cd85297e2db5", "sighting_of_ref": "indicator--7172a95d-8bb1-42c4-9393-a38ba88faa5e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadea97e-d136-402e-9a4d-34205ff8812c", "sighting_of_ref": "indicator--63b58ec9-6342-4a51-91b1-81e4a6923253", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b1ffe6-bf4f-4957-817f-2d4ae12017d3", "sighting_of_ref": "indicator--a2b85c5f-97f4-4c8c-852b-581f6cb5252b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8794c721-8db1-46dd-86c1-4aa3dc47a966", "sighting_of_ref": "indicator--76ad5b81-9257-46c5-b2b0-5c672927a4a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9fba51-d339-4016-aa47-993eb7a99261", "sighting_of_ref": "indicator--16fd3ced-fcff-4bf3-a470-7e2c356f8f0d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133c82a0-a376-4ac9-b147-5f25b824acde", "sighting_of_ref": "indicator--1b3b970f-00c0-4d41-9ba8-8220adb7f45c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6ed8e2-0bc3-417f-ab94-dc480602af0f", "sighting_of_ref": "indicator--76b3d4c2-50c9-4c11-a31d-39bd3b2a143b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5af90e7-6459-480e-96cd-d48430f13af4", "sighting_of_ref": "indicator--c7d062ae-a0ff-48fd-9b13-16b7ffcf6ffa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b6d094-0d99-47c0-8522-a101ff75e56e", "sighting_of_ref": "indicator--5e66d8ae-ce33-4b6e-8a5d-dbb228373fbb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a964dbaf-7fa6-4c46-80d7-1d59f89e8806", "sighting_of_ref": "indicator--5e66d8ae-ce33-4b6e-8a5d-dbb228373fbb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6164b0b4-df3e-41da-8356-ac89b7391284", "sighting_of_ref": "indicator--f8e9aa35-6255-463d-9ba4-f54f4a020081", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c54a30-597f-4c78-a366-152f2db5386d", "sighting_of_ref": "indicator--f8e9aa35-6255-463d-9ba4-f54f4a020081", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e41c72-7a62-4e6f-a9de-586bb8be7dc7", "sighting_of_ref": "indicator--e298ef43-2f67-442b-8a0d-cf3fd9138041", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d5fdc1-0366-4b72-b537-c69d1ee1d916", "sighting_of_ref": "indicator--e298ef43-2f67-442b-8a0d-cf3fd9138041", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d40e116-eafd-4995-8ed9-2e3a60b55588", "sighting_of_ref": "indicator--d62a7678-71f2-4d2f-ba4c-b54e6b7ecf4c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d31ada0-8c4c-412f-8560-c6e76c8e6136", "sighting_of_ref": "indicator--d62a7678-71f2-4d2f-ba4c-b54e6b7ecf4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e54263-c7ca-425e-8a1d-de3898b8d54e", "sighting_of_ref": "indicator--34d4a363-bc9b-4bfa-a648-1cb360caac90", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4baa00cb-b204-415b-a760-d31d1d8cd9c0", "sighting_of_ref": "indicator--34d4a363-bc9b-4bfa-a648-1cb360caac90", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a23989e-7335-4e84-8ff2-04c5f3ecc032", "sighting_of_ref": "indicator--8c180f06-6713-4704-85a4-c017538522a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6274f12c-6225-4e45-9361-61a38cabb733", "sighting_of_ref": "indicator--8c180f06-6713-4704-85a4-c017538522a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c84fb50-194d-46d6-967c-c417052a1bc3", "sighting_of_ref": "indicator--5f729071-547a-4f58-9bc0-23be92afc087", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4021c5-579e-42e1-b130-c9e9483ed72e", "sighting_of_ref": "indicator--a202198a-1c7a-436b-9a6f-6f2034706402", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dde179e-3669-4631-9eae-fcd5de6c57d7", "sighting_of_ref": "indicator--41e0e687-fc58-46ef-b480-623644ffb7ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb754ac-8b59-42a7-a035-5906a3bd47e5", "sighting_of_ref": "indicator--98924482-aafd-454a-ad95-8798d79bda67", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94f2257-67d0-4768-9e18-21155efd6fa1", "sighting_of_ref": "indicator--98924482-aafd-454a-ad95-8798d79bda67", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b08fa58-6d46-48bd-80c5-4e7413b963db", "sighting_of_ref": "indicator--c1925d7f-9018-430c-9879-cf4a706e3dde", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66863c4-72b3-4ca8-af64-ad55e0225c31", "sighting_of_ref": "indicator--b9b27f75-4983-4bd4-8e8a-427c30f56ed6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c68f1f1-f12d-4901-8e38-df1a57337437", "sighting_of_ref": "indicator--96cb0822-84dd-4bee-82a2-2df201e45522", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d399bc-7d0c-4593-aac4-1422d9d51b89", "sighting_of_ref": "indicator--9ca84f8b-dc98-4a0c-a38d-a03f8af1d41b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebc3709-6a4b-4b87-ac25-ff47012b31ab", "sighting_of_ref": "indicator--5e5350c3-4aab-4b20-bd5a-281db08149f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0198eb3-da22-4738-a0d9-c01758ced5c2", "sighting_of_ref": "indicator--afcbb118-6f48-4de6-b604-a346605d5254", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4d2618-57f9-4005-936e-d021496aeddb", "sighting_of_ref": "indicator--afcbb118-6f48-4de6-b604-a346605d5254", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a77697-552d-471e-a27d-05fbd7b8e4b5", "sighting_of_ref": "indicator--0fe926c2-bdc3-42ba-82fe-a716a8c3037b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d53d106-ee02-4de0-9459-e92d4c32a1d3", "sighting_of_ref": "indicator--3ca6a3b7-6170-44c4-b51d-ba731a1b68d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab10ba76-26c7-4345-bf0a-91d20f2d7c9b", "sighting_of_ref": "indicator--6021db2e-2192-4076-aa3f-d59de25bd3c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3adc40-7a79-4408-a36f-86d60a21cfa6", "sighting_of_ref": "indicator--d448b88f-c079-4db5-bf40-fe24a1312150", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75257a32-e58b-4d76-8f92-9a214aa06994", "sighting_of_ref": "indicator--5c52db6f-7b60-4aa3-a880-063975a34945", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cfa39c-e694-4e1d-9b40-3d2cce502f14", "sighting_of_ref": "indicator--5c52db6f-7b60-4aa3-a880-063975a34945", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d28de1b-91e4-4e52-a8e3-0ebdb0ecad39", "sighting_of_ref": "indicator--2f973a36-c46b-40fc-afb4-5cb00917223e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5920ce-f72a-40b9-a5a7-1391871ebf84", "sighting_of_ref": "indicator--4b716d72-6898-4030-8c4d-83b06aa8727a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8668ad-6d87-4e41-a1bb-a4e6aef12204", "sighting_of_ref": "indicator--eda53d10-ccf2-4690-921c-6aa4038dba86", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd25b0c-dc5b-487b-8f67-ee033a0211bc", "sighting_of_ref": "indicator--677fff56-faee-4eab-b1a5-856b7fa9482d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8da8de0-2b02-4698-8853-85a6a3859857", "sighting_of_ref": "indicator--49d305d7-77b5-4e30-98a9-41935fb35925", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877fd193-1b2b-4312-93cf-93ec0d66c4e7", "sighting_of_ref": "indicator--cea78e26-3bb4-48c3-909e-3a178a7fcb9f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf4c81c-8092-4347-a49d-eec5359b64c4", "sighting_of_ref": "indicator--207630fd-a06f-41c2-bf3c-097965a74a0b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20057b75-f5c9-4307-ac1e-d7eaf3bbb354", "sighting_of_ref": "indicator--7ce35037-0ba9-418a-b853-a6bc06b56c9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451482f6-090f-4e70-9811-3ecdf19e1754", "sighting_of_ref": "indicator--61fd4168-1803-4353-aa42-a4de8df3962d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae91ff6-3b80-4b63-ba11-9f76595604e1", "sighting_of_ref": "indicator--f5f8c745-cc12-4b7d-92c7-5188d9b11ce6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84703770-916d-4390-a4bb-40bef1ad4b9b", "sighting_of_ref": "indicator--60dbdeae-3d8b-4a62-9119-d9588a5b2326", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fab34fa-2637-4ebe-9202-151627eddc20", "sighting_of_ref": "indicator--e8713900-d40c-4e63-abb5-52401be2d3a8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7745c90f-52d8-41d2-a8d3-7e3626a42f48", "sighting_of_ref": "indicator--c51efc4e-9c89-446d-b2f9-59ed07ec98e9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd2f25c-2190-483a-8b74-9af9f209e935", "sighting_of_ref": "indicator--c51efc4e-9c89-446d-b2f9-59ed07ec98e9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a39ab6-336d-4d49-86f0-d4d73c71197b", "sighting_of_ref": "indicator--35f0932d-2c0e-40f0-9052-2cc13680289f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e8c875-796a-4e8b-ba41-0dc2a941a503", "sighting_of_ref": "indicator--fd90fe9d-72ec-499e-9350-c3af28751071", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6910fa08-556c-4223-a460-fd62a0a30f78", "sighting_of_ref": "indicator--2737a622-c73d-4549-88c0-305fd05c265a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76339c55-6f9a-481e-be1b-691d4efd81c3", "sighting_of_ref": "indicator--e58277c0-5b1e-47ec-a5dd-cf4a2041119b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6596b57-d761-4733-8b51-9bea6f3acd19", "sighting_of_ref": "indicator--e58277c0-5b1e-47ec-a5dd-cf4a2041119b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dae9a9-67f2-4aca-931f-7f6ca6352aa5", "sighting_of_ref": "indicator--f1727a8a-d728-4452-86ce-38ae36bc91f0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f3eb49-d46c-49fb-9d55-5bd1f333871f", "sighting_of_ref": "indicator--dfaa588c-ef6f-4542-b523-5b7e1305b229", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b7b8de-15b4-40b8-a88c-f02a1f262a39", "sighting_of_ref": "indicator--1ac20257-28cf-443e-a2a4-b3ee95d61b98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d43ebc0-9fcc-4285-83d3-dab792a7171b", "sighting_of_ref": "indicator--1ac20257-28cf-443e-a2a4-b3ee95d61b98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35333fee-4de7-4e97-a396-c9a4b9744fba", "sighting_of_ref": "indicator--aaaca504-3f29-4727-a384-7fee00c246ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90575b58-5442-4207-8f3c-90a074d53c42", "sighting_of_ref": "indicator--dcb3062d-f812-4ab9-881e-1626f11a9b0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee21647-a315-4d4d-b7f7-e9a19e599c36", "sighting_of_ref": "indicator--dcb3062d-f812-4ab9-881e-1626f11a9b0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7625e3f4-4fef-4680-8d4f-f44e9bdf3720", "sighting_of_ref": "indicator--eb45a5b9-b23c-48f5-b724-b1f9eaf4f45d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe49b772-2cd6-4fa0-aa39-7a661706aca0", "sighting_of_ref": "indicator--eb45a5b9-b23c-48f5-b724-b1f9eaf4f45d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd6a21b-3af9-4f28-a928-356356a7b7f8", "sighting_of_ref": "indicator--059078e0-caa9-4748-8f79-f3532abb8e94", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0005abc9-b07e-4837-b979-3f38110777ce", "sighting_of_ref": "indicator--059078e0-caa9-4748-8f79-f3532abb8e94", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e96474-d204-432f-acae-db7188d17496", "sighting_of_ref": "indicator--d1d2d1a6-fcb2-4364-be80-083d566c62f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c900be54-c300-4a5c-9a92-8a16b0252280", "sighting_of_ref": "indicator--d1d2d1a6-fcb2-4364-be80-083d566c62f4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5aadc3-c788-41ff-873f-6eb80d4eaa4d", "sighting_of_ref": "indicator--87c86af6-fe1f-480d-a259-cc740fbd0841", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a943106-d7ea-4e75-acf3-90cd547ea3aa", "sighting_of_ref": "indicator--87c86af6-fe1f-480d-a259-cc740fbd0841", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41b9b43-275c-4cf5-899d-4e670909fc59", "sighting_of_ref": "indicator--ba1af5a6-ef01-49ec-a4f7-8b2b597b00a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0374dd4-d58b-4209-b8ff-185b911e059a", "sighting_of_ref": "indicator--ba1af5a6-ef01-49ec-a4f7-8b2b597b00a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3505c2bf-eee4-4763-a212-a094e628c498", "sighting_of_ref": "indicator--69d76e0f-e5c2-4516-ab98-f9470aceb802", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04ce51f-8d5f-4660-8f1d-9369fb55a03f", "sighting_of_ref": "indicator--a3c5e988-326a-45d8-8469-5f01770ff906", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcbcbfc-a3fa-40e1-b947-4fe89af535f3", "sighting_of_ref": "indicator--5a89f5c5-92bb-48b9-84b9-99c59b492045", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7bb4c0-28de-4196-8232-18d4256ac2ae", "sighting_of_ref": "indicator--7daeda66-743f-41c1-af9e-496431926a27", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b4ed02-46ac-4afe-b5f0-87e569f57ae2", "sighting_of_ref": "indicator--5840357f-94ce-4802-b4d0-6a8cbd9a76ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6f1c56-2716-45e6-a939-2ec2787c6503", "sighting_of_ref": "indicator--5840357f-94ce-4802-b4d0-6a8cbd9a76ca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b556b6-f198-462f-a1aa-f85762699a12", "sighting_of_ref": "indicator--74636943-29d1-419f-bd84-663a433d0b4b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e56149-d986-485c-a29f-76f7aa19fd9e", "sighting_of_ref": "indicator--74636943-29d1-419f-bd84-663a433d0b4b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f98fd8-29fb-49bc-8a7a-3524d8e4201d", "sighting_of_ref": "indicator--4f0ab51a-3ca4-419d-95e9-c5c3eb872eee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85d1fe8-474e-4f05-85fe-9c02d6f61f0d", "sighting_of_ref": "indicator--4f0ab51a-3ca4-419d-95e9-c5c3eb872eee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564104b3-124e-41e0-964b-d1a7286cbd60", "sighting_of_ref": "indicator--edfaab65-38f0-42d8-b6ac-8e21e2716eac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfdb6ba-d00e-4b5b-badf-71321f842f9a", "sighting_of_ref": "indicator--6e152cad-b803-49f0-8237-309e6b68e6aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dec5ad4-0e44-4ed1-99ae-09cc1b11aa08", "sighting_of_ref": "indicator--6e152cad-b803-49f0-8237-309e6b68e6aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b927322-c35f-459c-988b-afa9933cbf11", "sighting_of_ref": "indicator--a398e488-1113-4459-adea-4dc65f8b59f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94673f9c-ccda-4569-949b-8f7c2347b4f4", "sighting_of_ref": "indicator--a398e488-1113-4459-adea-4dc65f8b59f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72291ea4-fc86-43ac-bab5-7e216d730966", "sighting_of_ref": "indicator--21aa1ac6-96e1-4f95-b172-7c697846b6ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227daabe-6c79-41e4-8521-e312d7a276ee", "sighting_of_ref": "indicator--28edf86b-8204-4a65-b1b1-e0bf45c0dc55", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f644577-333a-4624-8437-ac30bdd15a7c", "sighting_of_ref": "indicator--02789eff-51d4-4c1c-a95a-69c97ad16610", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68833c92-d94a-4dc5-9f5f-25399f372fc8", "sighting_of_ref": "indicator--02789eff-51d4-4c1c-a95a-69c97ad16610", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3438f45-ebff-4fc5-a1a7-826c44836647", "sighting_of_ref": "indicator--85a9ac68-44df-4cfe-be8d-f283c8c5fdce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f4ff96-2c99-432a-ab74-4a1199e683f3", "sighting_of_ref": "indicator--43566583-f2d1-401e-92cf-2d05a0f9fa3c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e30728-9e56-4f37-af71-5f87b43b94dc", "sighting_of_ref": "indicator--43566583-f2d1-401e-92cf-2d05a0f9fa3c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2db0d9-7765-4312-aab4-929233b1de99", "sighting_of_ref": "indicator--32019495-41d3-40ea-b2bb-0b9d2e5b410d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1901c4f-6896-4d6c-9a8b-f8f0d14502a7", "sighting_of_ref": "indicator--0dcb743e-1a8e-492e-9699-12831ea6eeaf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93811752-4828-4b4b-a1b9-f607493b8c1f", "sighting_of_ref": "indicator--0dcb743e-1a8e-492e-9699-12831ea6eeaf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657d868b-1d06-4182-8512-b46b422dd714", "sighting_of_ref": "indicator--64cab329-24eb-482d-92ac-e755ccdb6f4d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ffe5e3-e725-4c30-b804-281178f8f09b", "sighting_of_ref": "indicator--7a2dd60a-759a-463e-a24c-771cba9a47de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6df1cf-e5f6-4a31-bb22-f28b2528c232", "sighting_of_ref": "indicator--8489aed0-3342-4c5a-aba2-94875ec08cfd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffaf8d0-b672-4071-9ea2-4053b591832a", "sighting_of_ref": "indicator--8489aed0-3342-4c5a-aba2-94875ec08cfd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7385adad-3bf7-4491-9626-72715885a926", "sighting_of_ref": "indicator--ee4a6451-576e-4287-ae7e-db9ead1f2724", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c95d521-ca2b-446d-9a27-68af2ce7dc1b", "sighting_of_ref": "indicator--ee4a6451-576e-4287-ae7e-db9ead1f2724", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773078fd-ef4e-4821-8caf-9b79539bd12a", "sighting_of_ref": "indicator--2e9f72b3-75a5-4c6d-ab78-30cb2c61206b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de43ada2-2536-44df-bcae-ae3f41f2c717", "sighting_of_ref": "indicator--82e5225c-b6bd-412f-bf67-748227f81de9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f4a534-c05a-44c7-a4c5-c092a1f919cb", "sighting_of_ref": "indicator--798df3bf-80dd-449b-be0e-312c053175a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba5a225-7fd5-4977-9b18-938f5c05ae32", "sighting_of_ref": "indicator--da6ac85a-c6a8-4571-8514-411152b9446b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7a3ba2-a518-4ce1-8d92-9536a038c40c", "sighting_of_ref": "indicator--da6ac85a-c6a8-4571-8514-411152b9446b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cb2371-bed4-41c8-9ef7-bcb8afa26081", "sighting_of_ref": "indicator--672d0ae7-7f01-474d-972c-1faa3e40534b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0d28ab-8101-4b97-8da0-06208836fc78", "sighting_of_ref": "indicator--672d0ae7-7f01-474d-972c-1faa3e40534b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4372917-5a51-42e8-b795-68978ff4b243", "sighting_of_ref": "indicator--d970a51f-60fb-4de1-8086-e2e3810fa8c6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c05ea6c-fe84-4b04-a487-0a81a8061384", "sighting_of_ref": "indicator--40e48ac6-cb92-48be-9ac2-c39dd23d675b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e99c69-6139-46a8-8300-d64f93e60506", "sighting_of_ref": "indicator--25318b47-6249-4572-84ba-faab5ee9bc89", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73d668d-59c2-4064-bfe7-9f1eb4f0476d", "sighting_of_ref": "indicator--25318b47-6249-4572-84ba-faab5ee9bc89", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc95e16-455c-478a-8f1f-3156037f8795", "sighting_of_ref": "indicator--8bfcdebe-410c-4fda-acbd-e9cab9738d4e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bec110-ceca-467b-af1c-393a77c73c8d", "sighting_of_ref": "indicator--8bfcdebe-410c-4fda-acbd-e9cab9738d4e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c456092b-b993-4c90-ab6b-60cfd5755b40", "sighting_of_ref": "indicator--f4731558-6767-4d0b-930c-32c77a179995", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1df3717-c06d-4efa-818c-e0f752180e32", "sighting_of_ref": "indicator--f4731558-6767-4d0b-930c-32c77a179995", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b0442d-f3fa-4f96-a85e-74006da4135c", "sighting_of_ref": "indicator--db4bdc36-f439-4668-a33f-a4ec028d4161", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7105d7ae-7ec5-45f6-b3f8-cb53a2e0969c", "sighting_of_ref": "indicator--db4bdc36-f439-4668-a33f-a4ec028d4161", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9976662a-bfdc-4766-95eb-1be259e3ab07", "sighting_of_ref": "indicator--6c43fabb-20c7-434b-abf0-2bfce9cf7b83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9966771-6627-4745-9a5c-e90c77f104a3", "sighting_of_ref": "indicator--ef7f2abd-24eb-4d9e-bc57-1ff923a32116", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f01f41c-05bd-41f7-a976-1a3aa782dd42", "sighting_of_ref": "indicator--ef7f2abd-24eb-4d9e-bc57-1ff923a32116", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa58d43-dd18-4a84-ac58-e056c4bf7ab9", "sighting_of_ref": "indicator--0eaf3c47-36c8-4d76-b4f5-b3130a8677f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2a3849-992a-441c-b28e-655c7b64b573", "sighting_of_ref": "indicator--78fa919a-189a-4cb1-9603-60bffdd2f6f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75e0337-9fb5-41e0-9af4-0103a11ddf3c", "sighting_of_ref": "indicator--aef1151e-375e-4c90-a1e0-e3570d223ab4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ca4e30-6252-4aa8-be16-e964491ee204", "sighting_of_ref": "indicator--0d34806d-4334-4c10-b639-57fa7a584318", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105bd45f-8f7f-47ea-a7bf-c76b5558abfd", "sighting_of_ref": "indicator--777113f3-824e-427d-ab23-84752b50f6fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78bfe8a-7f0b-4bdb-8c73-e0757fd8b11d", "sighting_of_ref": "indicator--777113f3-824e-427d-ab23-84752b50f6fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee030f03-03a4-4d7a-960f-fdd01e63a7f2", "sighting_of_ref": "indicator--d9981f8b-a867-4276-95ad-2e4158269b8e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30a8b7d-8363-48c0-bd75-ad5308b1f339", "sighting_of_ref": "indicator--f4f22807-66d5-4f8e-941b-92f0745fac9d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15034b4-3b44-478b-9831-e6aadb1d97b4", "sighting_of_ref": "indicator--f4f22807-66d5-4f8e-941b-92f0745fac9d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c30d909-b20a-46b2-9dda-3e22d2ec0e32", "sighting_of_ref": "indicator--236b8326-549d-4f1e-95c3-26ce0835e28d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045bc00b-f4eb-4368-9ed6-d73ecd78ab8b", "sighting_of_ref": "indicator--f2536874-a698-4606-89dd-560bba8cc1be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7952bdb2-1bb6-4b92-9c9e-a8d46c1bc7b4", "sighting_of_ref": "indicator--f2536874-a698-4606-89dd-560bba8cc1be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576c0727-a0b5-4704-b30a-7c3c66946fdf", "sighting_of_ref": "indicator--59293f9e-91fc-49a5-b83b-3b10dd1e8730", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4caf4be-422e-4548-8867-9b6d876849ea", "sighting_of_ref": "indicator--59293f9e-91fc-49a5-b83b-3b10dd1e8730", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9454c08a-865f-427a-8667-318ebd347093", "sighting_of_ref": "indicator--7972057c-8e8b-4783-ad32-e94545772f53", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb410c70-cfa3-44e5-b8cc-b7c2a5a30b33", "sighting_of_ref": "indicator--3092845a-9c64-4737-ac76-8f0d5a0fa588", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cf159a-58d7-4eec-ae1d-8e647da8cc35", "sighting_of_ref": "indicator--1b2c6cf7-0d7e-496b-9335-5235794189dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf0dcdb-cdc8-4fe0-97c7-7724104215b0", "sighting_of_ref": "indicator--23e587e8-ab67-48b4-8b73-6dfbbb7757cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70362d7d-fb43-4b15-979e-f5be1064b18f", "sighting_of_ref": "indicator--7696e17e-6baf-4aa7-a70c-88861c1dc91a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6281695-d1fe-4f99-bbc0-429609475dcf", "sighting_of_ref": "indicator--7696e17e-6baf-4aa7-a70c-88861c1dc91a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a3ac01-ce63-4f34-a384-0194d4f2db32", "sighting_of_ref": "indicator--400f47fc-c09f-49ca-80b6-cae1e55168be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e67fb8-7020-47ac-9a1e-3672d89bec32", "sighting_of_ref": "indicator--400f47fc-c09f-49ca-80b6-cae1e55168be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d6aae6-7d8e-44aa-a0a3-d2c96009c191", "sighting_of_ref": "indicator--9bb8a274-f5b3-468f-ae57-7ceebfa328e6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86069ee2-863b-4c2d-91fa-9b5452faf1de", "sighting_of_ref": "indicator--a82b2cf2-a5de-4874-8a61-62efebbcd42f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e716bd4-9ee7-4ef1-9e7c-721b6c5c936c", "sighting_of_ref": "indicator--a82b2cf2-a5de-4874-8a61-62efebbcd42f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5339848-206a-4192-9770-59f8b326760d", "sighting_of_ref": "indicator--0456db42-72d9-4a98-85bf-8f597a22fa52", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ca82ff-62ae-4ec5-bbae-a078fd1b1aa0", "sighting_of_ref": "indicator--4314abcd-c7e3-42dd-bc72-29d46238689c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e5dbd7-b26b-4696-ae28-190850eee858", "sighting_of_ref": "indicator--4314abcd-c7e3-42dd-bc72-29d46238689c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fc41e2-db2f-4bcb-b652-eb1ec315b0c2", "sighting_of_ref": "indicator--49ea3aef-4b45-45db-8a34-26bdba7fe0ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7644ec5-ef81-498a-868b-eccfe9054cb0", "sighting_of_ref": "indicator--49ea3aef-4b45-45db-8a34-26bdba7fe0ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5cdb1e-f16a-4ae1-92cc-eb6f2d0b54eb", "sighting_of_ref": "indicator--27a76289-46bd-4eda-a826-6e75d5a5075a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca19af95-f0ee-4a67-abf9-c80fde629cb6", "sighting_of_ref": "indicator--ad52fea2-6b4c-4205-970e-4a703d021262", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0908b6cf-97e4-4f9a-99b2-de0a6b09a6aa", "sighting_of_ref": "indicator--d64926f3-ff28-4ae8-a395-c6b8d99d9766", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54b1e1d-2e86-44a6-a524-b561d3d40a89", "sighting_of_ref": "indicator--d64926f3-ff28-4ae8-a395-c6b8d99d9766", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8973f1-2988-44aa-988c-41cc3440ac21", "sighting_of_ref": "indicator--4d38c4bf-3aca-421f-8f76-cbd617fcbd8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f15800f-024b-45e1-aa83-fde564107464", "sighting_of_ref": "indicator--5b454858-ae69-448f-b840-8e6d603f614b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745de136-b320-48eb-8439-91df85c1a536", "sighting_of_ref": "indicator--22d61d10-6803-4105-a5d6-129af03193ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874c1418-9909-4b17-8c3f-399184dd5825", "sighting_of_ref": "indicator--f5e99c4a-bd8e-44b9-895e-d2932f6aa3d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e842f0-f159-4336-b210-4bc2268f97c0", "sighting_of_ref": "indicator--8a10e90f-6734-45c1-8db1-e59a6bc19449", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749d3c73-c55a-4f6b-b07d-bc2a243c7b2a", "sighting_of_ref": "indicator--424a6160-890c-4e6f-bffe-beb53f2ccef8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f305b93-04ee-4ced-a4c9-98f5a0bd67ad", "sighting_of_ref": "indicator--424a6160-890c-4e6f-bffe-beb53f2ccef8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c03755-c65b-4b35-9696-33cb9ca1f8c1", "sighting_of_ref": "indicator--6cb0dd59-3734-4eda-ae47-b4e6269a0ed8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f82c38-4052-4e98-98a8-d15e9bd56a03", "sighting_of_ref": "indicator--c57ac14c-0bb3-4a21-9b09-6fe5f055283f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f028a1d1-30b0-44b7-9599-c32f29e97b20", "sighting_of_ref": "indicator--6d4d2316-a65d-4776-a33a-2d7349074a1f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e04f50-44ee-42c6-9141-011c3810904c", "sighting_of_ref": "indicator--6d4d2316-a65d-4776-a33a-2d7349074a1f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e139107c-39a5-481e-950b-56a2b6fb5000", "sighting_of_ref": "indicator--6bbf3498-7985-4b84-b6c7-63130a960018", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea40e827-838b-42b4-b0a6-89c54f55689c", "sighting_of_ref": "indicator--62f2c5ce-7209-4f23-8190-8fad171ab7e6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fb80b1-3437-4778-8525-338f30dec34c", "sighting_of_ref": "indicator--b2be97f2-2e49-49f4-a72e-c01655874ff3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e8a615-3e78-4291-b485-5ab6b0a11819", "sighting_of_ref": "indicator--2a33f388-ef3d-4218-b289-b99261f92030", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc295ae-a8af-49bf-a3e0-a864238a3e87", "sighting_of_ref": "indicator--2a33f388-ef3d-4218-b289-b99261f92030", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4034a769-ba55-459d-87a3-4eaec35cc0a6", "sighting_of_ref": "indicator--a7b7de17-6856-41ab-b2e9-3cc1410ab99f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ace437-e600-4e81-b65d-13f900d09067", "sighting_of_ref": "indicator--c34b9304-cee3-47a7-bde9-3f2570f17d98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739f50f5-e0df-4491-bb72-5a020b878cc5", "sighting_of_ref": "indicator--80e416e8-d486-4bed-9c8d-c314cdccbe49", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac3a20e-d905-4b9f-bd1c-a77f4bf76ed1", "sighting_of_ref": "indicator--80e416e8-d486-4bed-9c8d-c314cdccbe49", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5267d221-31ee-4d44-a7b2-e198baec6357", "sighting_of_ref": "indicator--cb0f331e-8f71-4041-ab38-2fa9259be2f5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18b6195-3a3d-4963-830f-c6be48bc1046", "sighting_of_ref": "indicator--2f2230eb-9db1-4954-a0d3-9dd41e1fb8dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec5354f-6ab9-446b-a4e3-8cf1702117f4", "sighting_of_ref": "indicator--5b0fa083-e2ce-4c7b-9c8d-c9c843a3a52e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9a6581-f4c9-431c-98f6-4ed608b9ed88", "sighting_of_ref": "indicator--15be11b1-8591-4c64-b492-8fa49351680e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2395503c-c4e6-494b-ac3b-9cf647c7a2d2", "sighting_of_ref": "indicator--58a7ac01-fdc9-452b-9062-f246019aad9b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a21fbb-61ee-4e5a-9579-e9b0cc19722f", "sighting_of_ref": "indicator--17889322-e817-4473-8d71-2c21858d633b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5529cfae-66aa-4bd2-b6ed-2ec68331d728", "sighting_of_ref": "indicator--73285e02-49fa-4d26-9573-8187687d2869", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeed84d5-da13-4cef-882c-b0f56e09150e", "sighting_of_ref": "indicator--50d8837b-6faa-4bf6-870a-8fd580c13888", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5dbac7-5439-4012-abac-49b9b0e86ca7", "sighting_of_ref": "indicator--bea07f90-7c33-4908-859d-0f3cc7839b03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f853ac-4963-4275-8874-79413bdeb1bd", "sighting_of_ref": "indicator--bea07f90-7c33-4908-859d-0f3cc7839b03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd3cf56-a71b-490f-a3ac-98c5b2991588", "sighting_of_ref": "indicator--fb662a76-4cd1-4fb4-be0e-4aebb69e3661", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650c928b-b9f4-4b8b-b339-8af039b79fee", "sighting_of_ref": "indicator--fb662a76-4cd1-4fb4-be0e-4aebb69e3661", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490edd49-b84a-477b-a02b-387835247a9a", "sighting_of_ref": "indicator--4325dc7d-ae57-40d8-92c7-6c3b9f27ef25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3415e6eb-53f2-474c-8fbc-d89d24d70c45", "sighting_of_ref": "indicator--924dd072-c70f-4968-9465-7fd96fba3b9c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6beab3e-83fe-4ec4-9987-1be13f754b12", "sighting_of_ref": "indicator--25db0041-4af5-402b-ab42-35a14b4f0d9f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141ba134-69e7-4c90-8cc2-03f8b18675b8", "sighting_of_ref": "indicator--25db0041-4af5-402b-ab42-35a14b4f0d9f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ce1d64-3abf-49a3-a663-d67016a92126", "sighting_of_ref": "indicator--26213d21-63df-494f-ad08-d98dab375e75", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f167f8c0-8a8b-493a-b808-946bf0373071", "sighting_of_ref": "indicator--1134c45a-4b99-48c8-a6fb-7101fdb96986", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31add490-512a-499e-b583-03622ad0c30b", "sighting_of_ref": "indicator--91b252e6-9852-4f5a-ab3a-fc78e053bc18", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb3587a-2ca8-440c-8849-c3f017150ca2", "sighting_of_ref": "indicator--45ed5ccb-fb23-4e1e-8e89-32e228c681da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bfa991-e5e7-477d-8051-3ab0a7ce66c1", "sighting_of_ref": "indicator--60788765-05a1-4e2e-a3c7-2838347ec4ac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354ea70b-f1f0-46e1-ae04-458453b15062", "sighting_of_ref": "indicator--60788765-05a1-4e2e-a3c7-2838347ec4ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed740aaf-a1db-4422-b252-dd26790b94c4", "sighting_of_ref": "indicator--4b4a40fe-3f1c-4a8d-bc19-fdded5337957", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c15c29-4ed6-4134-a1f0-15fa62291359", "sighting_of_ref": "indicator--4b4a40fe-3f1c-4a8d-bc19-fdded5337957", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04c03f8-1a57-40e2-9b07-4f63ba497cdc", "sighting_of_ref": "indicator--5a845f30-13d8-409f-86c9-b1aee216f889", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f211d237-9c3c-4b89-a086-351ce445f01f", "sighting_of_ref": "indicator--1fae7898-1f38-4db9-9659-9175e715e696", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b237c6-0f03-4adb-8b91-413e7fb6ebcb", "sighting_of_ref": "indicator--50ce96ef-9c26-49b3-bd96-447894955128", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f1946a-d339-48f9-9690-b943d4c5375c", "sighting_of_ref": "indicator--54b3b2a8-743c-4862-a682-b1ffd159b250", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97326fdf-16a4-40e8-b7e4-4faff0da3266", "sighting_of_ref": "indicator--84a7a63c-f8ff-4d5c-a2fe-6b0d33ce2143", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192cce9e-949e-4422-8083-c7fe86037fcc", "sighting_of_ref": "indicator--cebe40ca-9e72-4941-bcfa-cb4bbce1cad9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873be2ba-f37a-4f2c-b46e-b4e893640993", "sighting_of_ref": "indicator--cebe40ca-9e72-4941-bcfa-cb4bbce1cad9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a11a109-5fae-46f5-8734-554a9bc6a9f9", "sighting_of_ref": "indicator--10f10f82-ed99-496e-a2a1-3261a1c00d28", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e827e0-943a-48cf-a11a-167e17c84277", "sighting_of_ref": "indicator--24f24615-49a6-4e58-998b-8e1d00258684", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aad030a-58d0-4c62-8be8-76d8f7bb172b", "sighting_of_ref": "indicator--24f24615-49a6-4e58-998b-8e1d00258684", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf29ad15-a5c9-432e-a5f9-0821b5fb456b", "sighting_of_ref": "indicator--57a8343c-ccb6-4fe8-8bb8-ffbffefe8d78", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918fdef3-70cf-49a8-937d-65eb443eb120", "sighting_of_ref": "indicator--8ca3b3f2-72ea-4f6c-8eba-191a7c9549bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24d7c47-aa49-411e-9e45-5117dc8b4230", "sighting_of_ref": "indicator--8ca3b3f2-72ea-4f6c-8eba-191a7c9549bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463fc1dc-990b-4b32-a830-f647c01ea4c8", "sighting_of_ref": "indicator--e4e34449-e2d6-487f-8082-7e136d3d9173", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a844a7d-ce8e-4dc6-9b24-438ca5501b6f", "sighting_of_ref": "indicator--3ceaf70e-82ce-4697-bc92-bdded6bcad0f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022bb9d4-0761-4f46-8581-5f5ce6d93886", "sighting_of_ref": "indicator--3ceaf70e-82ce-4697-bc92-bdded6bcad0f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a02738-3d66-4299-98c6-83364a349e90", "sighting_of_ref": "indicator--5f95cbef-b96a-4b4b-8125-c6c816f95ebf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c16abaf-02d4-4983-98e7-540a087a158d", "sighting_of_ref": "indicator--7733d574-324b-4605-9073-06ec6a0989f9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05d0083-8321-4ba1-a8d5-604aa642c12f", "sighting_of_ref": "indicator--7733d574-324b-4605-9073-06ec6a0989f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b555273a-05d1-4277-96e8-0f5bfaec875b", "sighting_of_ref": "indicator--78116a65-6214-40c2-8e80-8edc6976c8ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20615fc4-e8f1-471b-ab46-eef5f4dcae3d", "sighting_of_ref": "indicator--8179a255-ba02-4649-9628-2ee023b804f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c4a80a-a241-4876-bf7c-ef4af350c5f6", "sighting_of_ref": "indicator--f7792355-94d9-463f-8ae9-99eb1dded397", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5bf294-28a4-431c-b809-094b61be7dc0", "sighting_of_ref": "indicator--35a225d6-c874-4e93-b309-04327f1ab668", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64db2712-bcd8-4351-a010-0a38ad26e308", "sighting_of_ref": "indicator--35a225d6-c874-4e93-b309-04327f1ab668", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ac2eb8-aab2-4d47-811a-8bb89260990a", "sighting_of_ref": "indicator--aab2a652-428c-42eb-a129-7aa91cd6a714", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e31da4-7e46-44af-9c3f-bbae1258bfc4", "sighting_of_ref": "indicator--4087a8fc-51eb-4792-a6fe-85a8fd1d4046", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93813e2b-d46c-41b9-9a67-f1a708128ca7", "sighting_of_ref": "indicator--4087a8fc-51eb-4792-a6fe-85a8fd1d4046", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c02dd3-3aed-47d2-a996-a6f0712b445a", "sighting_of_ref": "indicator--af01edd6-339f-492c-8ceb-2aef77e4121f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8def161-1083-42df-b62c-a9102416eace", "sighting_of_ref": "indicator--b6251f20-aecb-42e2-be07-79b0676a5214", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50667afe-6442-4aa5-b22c-4e244e18954a", "sighting_of_ref": "indicator--024f00f4-83b9-43db-b8d7-47041ef6aa07", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e370278-a609-4211-aa6e-271073ad6ead", "sighting_of_ref": "indicator--024f00f4-83b9-43db-b8d7-47041ef6aa07", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fdaf8c-18a9-4f19-81bd-1befb4933c86", "sighting_of_ref": "indicator--1743a530-0fb5-4699-8736-119fc3a6be2a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241819bb-e8ed-40e1-b725-e8f8e695fa64", "sighting_of_ref": "indicator--84c726e6-fe88-4674-b65b-b2abd81d795a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c215bdb7-4e83-4e7a-9547-4536ed26ced6", "sighting_of_ref": "indicator--84c726e6-fe88-4674-b65b-b2abd81d795a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2154499-b475-4edd-9bf9-e9272174b346", "sighting_of_ref": "indicator--fc81e015-9d80-4b37-80dd-0651362c5d50", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fe12dc-51b0-40f8-b8c8-a00cf4f1c5c4", "sighting_of_ref": "indicator--fc81e015-9d80-4b37-80dd-0651362c5d50", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95c0706-a2ec-46ec-bef2-99c98789b08f", "sighting_of_ref": "indicator--76cdd68b-ba29-44b4-b839-4fb58e863bed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67fe478-b570-4261-b669-bf064ed3dd51", "sighting_of_ref": "indicator--65298526-f088-4a12-a377-9b4f8f2c6321", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cf8fa9-60e2-4212-b17d-2d10085d7ceb", "sighting_of_ref": "indicator--1d09ff6a-6a80-4bdb-8e9f-2835843faef5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0a463d-275f-4527-b856-0af4f3cd21e7", "sighting_of_ref": "indicator--febfe8a0-f5c5-4554-bb00-5a3c57919817", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc8cabf-f075-445e-87c4-06a7a80518f4", "sighting_of_ref": "indicator--0d281a31-0bcc-4044-be87-266947a6cfaa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7d8c73-375a-4205-a2bd-d461a21b79dd", "sighting_of_ref": "indicator--4177edfd-0dbb-4fb5-b51a-54dd9feb2fe2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45875bfe-4f21-401e-898d-74c226305608", "sighting_of_ref": "indicator--ce1a8800-d765-4271-9f74-2f64b4038bc8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c381087c-c588-4bec-91ac-9f676b1ea178", "sighting_of_ref": "indicator--ce1a8800-d765-4271-9f74-2f64b4038bc8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a84f5e-1336-4e3a-9c2d-bdb6e87ca6f2", "sighting_of_ref": "indicator--406641a1-dc1e-4033-a0d7-c5ffdac78e67", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceac318a-a8aa-4b50-a7b9-03d4ca295e6d", "sighting_of_ref": "indicator--406641a1-dc1e-4033-a0d7-c5ffdac78e67", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867dd8b6-010d-4d0c-8307-09bd7ab0dbb5", "sighting_of_ref": "indicator--3d3194a6-315d-4739-82ee-3e017e8823ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf30e042-b2f8-4de3-9d12-4aec53ffbc18", "sighting_of_ref": "indicator--5ea7b4d8-23d3-4270-b87f-6a28defa1647", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4d6548-a9b7-4e3c-80c8-8dbbc76f494a", "sighting_of_ref": "indicator--76549c64-a981-4446-86cf-94bf0bc5ef65", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8dbd05-e3ed-44b2-ab17-795ceb1d183f", "sighting_of_ref": "indicator--75c65c20-05a5-4c97-99ab-fcea763d45df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c3865c-3eb2-4b24-8193-9618c26dd203", "sighting_of_ref": "indicator--029abca9-0031-4b90-b877-462f810f8bc9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de98c1ea-a217-4d33-974f-e92314eaaa60", "sighting_of_ref": "indicator--5a8183d9-f733-49fc-a94d-74d292119b34", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8021dd-fffa-437b-bbfa-24da2f1de6c0", "sighting_of_ref": "indicator--5a8183d9-f733-49fc-a94d-74d292119b34", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d62ef2-0934-4014-8410-edf196fff403", "sighting_of_ref": "indicator--314d9db0-5602-45c5-9193-f3833a7950f9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c529fd-e5c3-4846-a3a1-eb11aea0e3ee", "sighting_of_ref": "indicator--314d9db0-5602-45c5-9193-f3833a7950f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a707e0e1-3070-4dd1-b072-9c78205ddeea", "sighting_of_ref": "indicator--ee42cf82-5893-4ee5-982c-45bf3ac46ef2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb72f2d6-e7ca-479a-a472-d5bb0f80c651", "sighting_of_ref": "indicator--ee42cf82-5893-4ee5-982c-45bf3ac46ef2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61735574-4b64-477c-bed5-06552d4e6479", "sighting_of_ref": "indicator--757acb51-af61-4552-8ea7-4a0ba0c48e5b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c193bcc-78ba-4f17-8acd-a16f2e1f5d3a", "sighting_of_ref": "indicator--757acb51-af61-4552-8ea7-4a0ba0c48e5b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af00e58-81fa-4172-aba1-3d072cf20149", "sighting_of_ref": "indicator--4e239b07-92d0-40c1-9849-173f97a15f47", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffdf372-e0f3-4e47-9cfc-123dde48d342", "sighting_of_ref": "indicator--4e239b07-92d0-40c1-9849-173f97a15f47", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8cdacc-1fc4-4d61-9338-200def7f9e79", "sighting_of_ref": "indicator--952e5917-3fab-427b-bf6e-ce5166c4f141", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5524f349-a2fc-42b5-9a37-065d04ff486c", "sighting_of_ref": "indicator--952e5917-3fab-427b-bf6e-ce5166c4f141", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba14cb9-7942-4b5e-8df1-68dcf75b5dfe", "sighting_of_ref": "indicator--19f2e698-f4e7-4ab6-88eb-82aad7c850be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f82d64b-3c2f-4c2e-b830-99aba366f3fe", "sighting_of_ref": "indicator--19f2e698-f4e7-4ab6-88eb-82aad7c850be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5820f91e-868b-4c51-9015-f18320de7edc", "sighting_of_ref": "indicator--6f1b50ee-5983-4504-b765-d801c90f51f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5224fcef-ea8b-415a-ad5d-69eb4dc0204c", "sighting_of_ref": "indicator--6f1b50ee-5983-4504-b765-d801c90f51f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5712324-c50a-432c-80b8-3e986ae98bce", "sighting_of_ref": "indicator--a2895c25-a0e9-411b-9823-2d38745464ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdb8c2a-fcb5-44ce-b1cd-fd7f696ae7ba", "sighting_of_ref": "indicator--2d6f2dbb-b310-42b7-9ec9-8eccad6a46b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fb774a-32e7-40ad-8f23-62ce2302b67b", "sighting_of_ref": "indicator--2d6f2dbb-b310-42b7-9ec9-8eccad6a46b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9959c3-53de-4184-843c-430264600cea", "sighting_of_ref": "indicator--5b8c848f-c5d2-43fe-9f98-2d2b5aade7bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23953bb-31eb-4cf3-8b12-58d8f989f860", "sighting_of_ref": "indicator--1bd2176b-345a-476d-8abc-7dceb871921e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0e0d65-71f6-4411-a104-f0aee4d80424", "sighting_of_ref": "indicator--1bd2176b-345a-476d-8abc-7dceb871921e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e44808-37bc-455a-a6ac-2ebc943827a6", "sighting_of_ref": "indicator--10c66418-2016-4a53-ae9e-a7500a341306", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51eb00f-2483-47b2-808a-99f0793d48d8", "sighting_of_ref": "indicator--10c66418-2016-4a53-ae9e-a7500a341306", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ec2b04-7ffa-4310-a9e6-ecfcb8d4f87c", "sighting_of_ref": "indicator--48ed87d7-708d-45e0-afc0-43d2a79cb671", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9d6b7e-af7f-4f1c-85aa-525ebcc73ab1", "sighting_of_ref": "indicator--432bcae1-97d8-4b88-807b-cb06d525f0e5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0051dc27-7f85-4c46-acdf-254cc8b09fce", "sighting_of_ref": "indicator--432bcae1-97d8-4b88-807b-cb06d525f0e5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c07d9ac-4f9f-40c2-be7b-5021a520a9f0", "sighting_of_ref": "indicator--78d4b118-157e-489e-980a-ce42997b0782", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6625e9f-c5ee-4289-9d89-b25cdde21d8f", "sighting_of_ref": "indicator--944039eb-d5e8-414d-ac41-d83896bd4296", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8bd3e1-3ac5-4aa2-91d1-1875953c8e3f", "sighting_of_ref": "indicator--506e5f5b-d197-449c-98d6-a1f971872e98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48f1975-0a13-44c9-a77a-6d166fe62f99", "sighting_of_ref": "indicator--2e3270cc-b9a6-424e-9a46-686ab65a4c2d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af067bd-31ed-4c21-b8ae-c1edb4fb627c", "sighting_of_ref": "indicator--40af5feb-ea06-4d73-be39-5ab9cb5303dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3c713c-6c79-4309-853e-44a83ea1a979", "sighting_of_ref": "indicator--360011db-8f50-4907-b6a4-848bf6d75bce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337f725d-ce7f-43ea-9aee-6f982eb6b383", "sighting_of_ref": "indicator--6e9c2dee-2eed-4517-b985-3e34094c0aa1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6844cba1-2b61-4230-9767-f2a1e51bc08e", "sighting_of_ref": "indicator--72dc1738-b24c-46da-983c-f1beafaa194f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea12ed2-59cc-485c-b107-edc077a87c27", "sighting_of_ref": "indicator--d904b217-a590-42e1-8672-c040e56ed5be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf657ea-8e2c-4261-b5e2-27c72b78b01b", "sighting_of_ref": "indicator--afe1c4ee-78c6-4915-8607-d2a91990ac7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73151d24-2e3a-49f5-afab-9cbe32db0800", "sighting_of_ref": "indicator--93f638c3-2c93-499f-bf63-0268f65115ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcc49ec-0540-44f4-ae3f-ff31514c37de", "sighting_of_ref": "indicator--a5ec15aa-6299-434a-bb64-0f2dbc242209", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d3e331-75ad-4b95-ace2-e8055e9cbfdc", "sighting_of_ref": "indicator--9d4970a8-6106-400c-9148-b7db78c6b479", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e897726-3569-43bf-bf13-d7d0062425db", "sighting_of_ref": "indicator--23dd78ef-257f-4b36-85a2-6cd2b42e004d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d117ec7a-e96c-44c4-b9af-5fba5ee0064a", "sighting_of_ref": "indicator--e06ebd80-da49-48d7-a87d-25366b8190f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec34a9e4-3682-408c-9495-97336d6eeded", "sighting_of_ref": "indicator--57e14840-3bab-4447-b2cd-1d303428ee1f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bad4dfe-4ad1-44c9-8ef4-4887064c2182", "sighting_of_ref": "indicator--57e14840-3bab-4447-b2cd-1d303428ee1f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10065d84-931f-47bb-bd19-845209cfe1ec", "sighting_of_ref": "indicator--55931945-f012-49fa-b7d8-b1eeba0a5b37", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99dc466-9d3a-4ddc-8d14-43784c19b23d", "sighting_of_ref": "indicator--55931945-f012-49fa-b7d8-b1eeba0a5b37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2088ac5c-f50d-4226-a77a-93ae7a7e075a", "sighting_of_ref": "indicator--812fcb79-e9a0-42fe-b94c-f18ec75eff4a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeb795c-6e46-4cc4-890e-4a09323e8689", "sighting_of_ref": "indicator--32ccc5e7-c9f9-4d16-b216-94d8ab7987b6", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cef7b3f-0ed1-4258-8f4b-13c3facd89e9", "sighting_of_ref": "indicator--32ccc5e7-c9f9-4d16-b216-94d8ab7987b6", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47272b35-a370-4d07-b200-3ce2642e42da", "sighting_of_ref": "indicator--32ccc5e7-c9f9-4d16-b216-94d8ab7987b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669f0aae-3df7-4bd3-974e-3f8d12cb4ac7", "sighting_of_ref": "indicator--32ccc5e7-c9f9-4d16-b216-94d8ab7987b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf17c11-108b-45f4-a2fa-785b104028c2", "sighting_of_ref": "indicator--32ccc5e7-c9f9-4d16-b216-94d8ab7987b6", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5c550e-4a6a-4958-8772-d67d7f3beca2", "sighting_of_ref": "indicator--a1ef9d1b-2c2c-47b0-b7c4-5f18a6e17835", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f835ec-6593-4161-994b-cce0f8d8a963", "sighting_of_ref": "indicator--a1ef9d1b-2c2c-47b0-b7c4-5f18a6e17835", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fab4123-3041-469b-87b6-680c9ab57aec", "sighting_of_ref": "indicator--a1ef9d1b-2c2c-47b0-b7c4-5f18a6e17835", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b65652e-d749-445f-b22f-2b1fe94784f4", "sighting_of_ref": "indicator--a1ef9d1b-2c2c-47b0-b7c4-5f18a6e17835", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5503b4e-a3b2-4e91-8b31-f88f17ffc661", "sighting_of_ref": "indicator--a1ef9d1b-2c2c-47b0-b7c4-5f18a6e17835", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf021bdc-9885-4446-aab1-b040d24afcf7", "sighting_of_ref": "indicator--dc8cc048-df90-42f2-8d32-98e5f0281f69", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75603b32-6c58-4274-93fc-25d611da3218", "sighting_of_ref": "indicator--dc8cc048-df90-42f2-8d32-98e5f0281f69", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665084e6-2e22-4fb1-ac0b-613084a9b489", "sighting_of_ref": "indicator--dc8cc048-df90-42f2-8d32-98e5f0281f69", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5ead66-e29d-4271-aa22-ff233272b963", "sighting_of_ref": "indicator--934d64f9-8361-45ba-afc0-0b86637e3063", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0481168-4286-4fc7-8b39-beb9cc7a2a63", "sighting_of_ref": "indicator--934d64f9-8361-45ba-afc0-0b86637e3063", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf7b3c9-3891-49d8-a580-0de52ab122b1", "sighting_of_ref": "indicator--934d64f9-8361-45ba-afc0-0b86637e3063", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1336065-1857-49a0-9b31-38f096bfa2db", "sighting_of_ref": "indicator--39154827-096b-451e-b518-563e916cf846", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1240454-5100-4be8-a0e7-4fe9944d301e", "sighting_of_ref": "indicator--39154827-096b-451e-b518-563e916cf846", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bf210c-5515-42af-8f80-3d6ffcbd289c", "sighting_of_ref": "indicator--39154827-096b-451e-b518-563e916cf846", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4edf79-5898-45f1-9ace-47da6739833c", "sighting_of_ref": "indicator--cadad26b-164e-48f1-87ea-c272d1b3e947", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfa12c4-3738-4537-bd10-4152a635822a", "sighting_of_ref": "indicator--cadad26b-164e-48f1-87ea-c272d1b3e947", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3b665b-b477-44fb-aa88-f9493f6f65ff", "sighting_of_ref": "indicator--cadad26b-164e-48f1-87ea-c272d1b3e947", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181d1749-f519-40ea-9b4a-83a6bef8246a", "sighting_of_ref": "indicator--d4b30af8-322d-49f1-9b8d-dbac219dfa39", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37509cf8-2c46-49de-8ca7-16a2948bbc1f", "sighting_of_ref": "indicator--d4b30af8-322d-49f1-9b8d-dbac219dfa39", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22d7116-863d-4fff-ab78-e11fbc19f9f1", "sighting_of_ref": "indicator--d4b30af8-322d-49f1-9b8d-dbac219dfa39", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f91bd77-5ded-4929-b39a-90a120041802", "sighting_of_ref": "indicator--36a286f6-2d2e-4835-bd0f-f983e3d41745", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877778e1-2471-40ac-b9ab-8d6170bf5c8b", "sighting_of_ref": "indicator--36a286f6-2d2e-4835-bd0f-f983e3d41745", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d870e28-bb50-4de9-8580-6c0f0430317d", "sighting_of_ref": "indicator--36a286f6-2d2e-4835-bd0f-f983e3d41745", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e23323d-321e-47ef-9080-5bd617807295", "sighting_of_ref": "indicator--cbaecacc-8775-4934-9c33-8310576b19ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c25ce2-dad9-4f6f-a545-729c42b65131", "sighting_of_ref": "indicator--cbaecacc-8775-4934-9c33-8310576b19ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8b5ca9-7e3c-423b-80f2-709af1037511", "sighting_of_ref": "indicator--cbaecacc-8775-4934-9c33-8310576b19ee", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699fda31-fed0-483c-b401-0fae1b4d773f", "sighting_of_ref": "indicator--98cb3949-e1dc-4a94-b19f-eb5f1e07c2a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1972564c-45ca-46da-b4f3-4d0cac86ed3f", "sighting_of_ref": "indicator--98cb3949-e1dc-4a94-b19f-eb5f1e07c2a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67138d9-81ba-4462-ae2b-271722ba39ee", "sighting_of_ref": "indicator--98cb3949-e1dc-4a94-b19f-eb5f1e07c2a5", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f562c498-3154-4320-a046-f48482443d6e", "sighting_of_ref": "indicator--439a787d-aa0f-42e2-a74d-97a53a43858c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f69ed81-5184-4215-9b9d-a09f7c57bafe", "sighting_of_ref": "indicator--439a787d-aa0f-42e2-a74d-97a53a43858c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d926f8db-8f44-4a39-bb84-270269348872", "sighting_of_ref": "indicator--439a787d-aa0f-42e2-a74d-97a53a43858c", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657fa959-241b-467d-a429-7cb3580fe4df", "sighting_of_ref": "indicator--9f388627-e2c1-4385-83b0-1580ea929cb6", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e06442a-c18a-4d73-a1ce-45d174926036", "sighting_of_ref": "indicator--9f388627-e2c1-4385-83b0-1580ea929cb6", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e780170-f13f-48be-953e-bcdc66385164", "sighting_of_ref": "indicator--c1ae6717-981e-4039-9f54-fe04bef974d9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37d8c26-83f7-4e00-ae83-44f578a652b8", "sighting_of_ref": "indicator--c1ae6717-981e-4039-9f54-fe04bef974d9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc5388f-71d4-4d29-ba58-869b32ab5bec", "sighting_of_ref": "indicator--7c626e1a-d708-4683-9196-845bef9c5a37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e17c71-6a83-4396-ae38-3f0784069201", "sighting_of_ref": "indicator--6996da36-e5f8-4368-b8d9-c454a7ecac74", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14259123-e86f-45dd-b7d7-77655be8bb47", "sighting_of_ref": "indicator--545459a8-eb93-428a-acf8-b05d431a6427", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e667a8e7-da26-4bc8-9008-596e4caa8f25", "sighting_of_ref": "indicator--5a5903ce-3b04-4632-8364-2ef773f973a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ea4fd1-e458-458c-9a30-3e64007d434d", "sighting_of_ref": "indicator--8c15a511-59a0-4fb7-9caa-f9633cd10c5e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bc584f-836c-4830-9e90-e3e3051c85be", "sighting_of_ref": "indicator--d2f4cca9-04be-4842-85cc-3457a198da86", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d5d76f-8833-48c9-9f4b-e5989c103176", "sighting_of_ref": "indicator--d71f5656-c921-4af6-881f-ef21fbb34147", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b12ede-0399-4ea2-a384-a0221f16c11c", "sighting_of_ref": "indicator--4fb7699b-fa8b-45a5-bf07-a47fe7186642", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cc9502-69ce-49bd-92f2-47cffc239e6c", "sighting_of_ref": "indicator--1c7d0688-c0ef-47e6-9f96-2983a276abb5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6089ba23-267b-44ec-8e44-d37f77064b24", "sighting_of_ref": "indicator--4010525a-16ae-41d7-a972-3f7c09892a3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960c00e4-a4ae-4c82-8d5b-af858017b39c", "sighting_of_ref": "indicator--d29e21c7-c6e4-4009-9548-8423c67d63c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f041684-c418-4c2b-b615-668e8d3b3d71", "sighting_of_ref": "indicator--21ba296a-ca55-4827-b6f1-78adc998002d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2004922-3c20-4478-b82c-e31a50dafe12", "sighting_of_ref": "indicator--feb6ea3b-0762-481a-95ca-9e50707f0cb9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e7aca7-62eb-4275-8959-f34aaebd22bb", "sighting_of_ref": "indicator--748729d8-1e09-4c35-81c1-63cd00b9051f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc93e868-bec6-465a-901e-c68f5628c170", "sighting_of_ref": "indicator--1473a18e-857a-4976-81bb-ab5bf816247a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909bd1cf-76b3-497e-8afc-94fe611154f4", "sighting_of_ref": "indicator--2fbb4885-bab7-47dd-9b75-28d369ce89f9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f1ec37-554e-46b0-afad-8750b0c35cc1", "sighting_of_ref": "indicator--f648ac4f-e8b2-45e1-afea-427d44c3c495", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9ef0e4-1e11-4089-8ae3-168ef7fa3837", "sighting_of_ref": "indicator--f53ff513-a241-4ce2-84c4-39eab77dfe93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d72b48c-378a-4992-9543-469ae27c409b", "sighting_of_ref": "indicator--a15b9d22-0915-435a-aa75-4f045bab8c14", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72103065-4a44-454e-be5e-86e2a5a1734d", "sighting_of_ref": "indicator--27af2fef-460f-4e49-a8cc-a05df4b80fc4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3888ce87-710c-44c0-af00-d1e385d1e978", "sighting_of_ref": "indicator--38f3670c-7c27-4b47-b963-f7fe35742024", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca1fce3-cf4e-4a41-8e08-920d586dfca7", "sighting_of_ref": "indicator--2f61e34c-f361-4095-9443-c703bf775ffe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0eab24-0ca1-4cbf-a72b-6a83452a9e3e", "sighting_of_ref": "indicator--4a421523-6a2b-4d3e-905e-f48b253691cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6d763a-5d99-4d6b-bdcd-a064727a3d08", "sighting_of_ref": "indicator--106b8ca3-79fb-44d8-974d-2d75268ef1bd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1949df-e3cf-4abe-baae-deff40f2248b", "sighting_of_ref": "indicator--7844e20e-5465-48d0-b892-4a42d45d61e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3a12f7-8358-4471-8923-5ba9d130f5aa", "sighting_of_ref": "indicator--64ab5410-ee9a-4b7a-b073-6f846d50f212", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3eb12b9-d4b0-4848-88de-4f1e35aed8eb", "sighting_of_ref": "indicator--a3f74f6c-ac3f-49fa-a908-7fb46924deca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633d4ba2-8b86-427e-a077-170447f1629b", "sighting_of_ref": "indicator--d71e8a36-cbb1-4304-a64a-8cfc0a0db939", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb869a0-a2cb-45c0-a290-5bbe67bc4923", "sighting_of_ref": "indicator--d3147d5f-dc99-444f-94cc-7a5f6103d1c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478f7134-a4ab-4897-8864-18f2cf991f4e", "sighting_of_ref": "indicator--c6a71833-d524-4a9c-b752-79bb1d6b0d79", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775d6034-f932-4899-81ea-0b046a47e56e", "sighting_of_ref": "indicator--e1348ca6-ab74-4126-a6f6-810123621b47", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d880ff7-ef08-42b3-ab49-d2f3c0247b02", "sighting_of_ref": "indicator--cd558bd2-9591-4b3b-9e21-9854d3aeb29e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0076d9-dd09-4fdf-ac61-a171ac896d4b", "sighting_of_ref": "indicator--c7958542-6fad-4556-840f-db5af58b435d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0147e3-f680-4d7c-94c8-a15c62333aeb", "sighting_of_ref": "indicator--d098c3e5-170b-4dc5-b80e-3a730af8f776", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f828a59e-90a8-4607-9292-06e3cc90a4d4", "sighting_of_ref": "indicator--7469a255-c11a-4a78-8be1-ea020412c6c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f626969-3dd3-4a82-b883-de60392e965a", "sighting_of_ref": "indicator--ff6d9083-cd93-4c4f-8c12-231d5f305760", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b6714a-7cba-4303-8a4b-d79de97415e4", "sighting_of_ref": "indicator--d2c4f118-5a69-48ea-8e4b-817dce4a06cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba961647-ce2c-4302-9922-cdd368417599", "sighting_of_ref": "indicator--fa26130e-35f0-4114-9007-270756e227a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d5128a-3e72-45a7-aab6-3442c473199e", "sighting_of_ref": "indicator--473c13b9-d0ce-4317-abbc-c075f71a0d4b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dcc9b8-815e-4953-bf5e-becd1d14a8d7", "sighting_of_ref": "indicator--f5757515-9d18-465a-a3c8-ad0f2b410f1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14719d1-5984-488b-a836-73fb5995ae11", "sighting_of_ref": "indicator--423a5cfd-4aac-4a4d-8ca1-518734b5b5d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e263669f-916a-41fd-a19b-7ff8dcc43fa1", "sighting_of_ref": "indicator--2994c01a-046b-412c-9bbc-441e6f912b1f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918485e1-69ec-46f6-9704-0df3bf94af9c", "sighting_of_ref": "indicator--70e9b8bc-7c9e-4e51-97b9-fd5fcacd9219", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c84b25-58f5-48c2-99e4-ccbfecaa4214", "sighting_of_ref": "indicator--548dd450-1128-4ba6-875c-54674a210835", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bec7831-8b01-4445-ba6b-69f5e2740b0f", "sighting_of_ref": "indicator--9df9e342-0c6b-4f88-9311-5e322b8a4150", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8928633c-0615-4bac-bc36-dd15a10484c3", "sighting_of_ref": "indicator--f6612975-e782-4ac7-b37f-a1a9af734a58", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2645350-8a17-4603-8ea3-dfdeaef47e99", "sighting_of_ref": "indicator--db8cfd13-287c-4563-9d98-5eb786402125", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ec0320-7157-4c81-8b37-68b82814ef79", "sighting_of_ref": "indicator--db8cfd13-287c-4563-9d98-5eb786402125", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9848765a-1ae1-4cb1-ae31-97fc3e9225d1", "sighting_of_ref": "indicator--a4a02c20-9437-4c23-8ace-e034ca6645ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7db11e-6b2a-4484-ac04-e40b3f999c43", "sighting_of_ref": "indicator--53faad4b-4a63-4d62-bf3f-31c75306c843", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521bcab7-f833-4c40-8c27-af60b6eb6815", "sighting_of_ref": "indicator--4ca7aecb-ddd3-4729-9096-2011c3cb090a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5d5ef7-3d11-470b-b479-821c432be21a", "sighting_of_ref": "indicator--c0d24b50-3a38-4be6-9661-3c886bf6e7f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21462234-f134-4b86-a3ed-944cbd7b7097", "sighting_of_ref": "indicator--a922a9b4-0537-46a9-a4fe-c0799beca08e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06abe0d-45f9-456f-8496-4a7e61771def", "sighting_of_ref": "indicator--b165400e-c560-457c-9c0e-2227ce1ec724", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08170d18-fa04-4d79-bc83-82ad406b59d6", "sighting_of_ref": "indicator--9044f8a3-08b5-464c-8e9f-8292e593fd57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef89e75b-8991-4029-a0ea-060db4bd6be2", "sighting_of_ref": "indicator--f2cb2ba6-588f-48ad-a195-f7e354e9827d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7430cdaf-1974-4c3d-a95d-0db930dcc932", "sighting_of_ref": "indicator--a078a9b4-92f0-4d0f-ac49-bff46f3e31c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea964851-d993-4c62-95b2-97a8d895277f", "sighting_of_ref": "indicator--cafb1a28-3f4e-456e-be61-22ab7ecc875e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902ba0bf-3e19-49b0-b23d-225f0963aa61", "sighting_of_ref": "indicator--c290bf8d-c06e-4e6f-a4eb-e23df16f39a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f24b523-25d9-4880-8422-8ec49d831224", "sighting_of_ref": "indicator--a4fb3cb2-d152-47d6-b069-a06f38c471af", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd487cc-2f25-4824-8958-f8456a78ed3b", "sighting_of_ref": "indicator--130199e4-5b55-4dc5-87b9-d4262d310ba4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d406713-dab7-40d2-903d-5fabac26cd24", "sighting_of_ref": "indicator--caef2b3f-4c63-4f86-aea5-f6cfa0285349", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031a397e-9f72-4d98-8899-d33af4aadd14", "sighting_of_ref": "indicator--ac5eb825-3df9-48e7-b371-1bf9af028feb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab5b541-b20b-4518-9145-12d54af71829", "sighting_of_ref": "indicator--5b2d668c-5319-4d15-ba75-fee2c974e2bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a86431-b143-4927-93b8-c2be996baf8e", "sighting_of_ref": "indicator--1fdba91c-8fa2-40ea-8e8b-30b3182d6b62", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b27dba8-e072-4315-81b3-680fd746d2df", "sighting_of_ref": "indicator--8b158f95-ffcb-4d92-9fc5-13af963f489c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af244e22-f558-4edb-b72c-d69270d313a8", "sighting_of_ref": "indicator--a31d60fa-e9ab-4dc9-ba29-78aaaea7e362", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45e8f2b-93fd-462c-a4ec-5d0136ed898e", "sighting_of_ref": "indicator--6dbbd21f-882f-488d-9522-e3622334539e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7208f9e-78f4-4e1d-a8a3-a42884841a0f", "sighting_of_ref": "indicator--b939e969-32ae-4a16-9636-5e1dffd684e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af976c22-7be1-4543-934e-e6be4067d552", "sighting_of_ref": "indicator--b939e969-32ae-4a16-9636-5e1dffd684e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e29d04-27fa-4d5a-a84b-933308b6c2f9", "sighting_of_ref": "indicator--79d6367a-74fa-433a-be70-b16d8e802a7c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e2c092-ac2a-4522-8eb5-55c9cb992940", "sighting_of_ref": "indicator--8b4b63ee-b391-4833-9d84-877469adf960", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79d4bbb-d774-4e2f-b3db-a0d3b8ae7b20", "sighting_of_ref": "indicator--1aa1884c-0326-4367-bf85-1d7a33448bd0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf441c38-df6c-4f2c-b097-8913552e1678", "sighting_of_ref": "indicator--c0c7c425-333e-42f7-b65c-6befb5324922", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9faf45eb-71c9-4ea9-9da1-b9f74ac1a91a", "sighting_of_ref": "indicator--6e73dbf1-5e1b-4f02-9c42-f24fcde498ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338c4793-1aa0-4cd1-9476-77b22b59016e", "sighting_of_ref": "indicator--202d591c-126e-44ad-b001-fbfa795b886f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a6ec5d-569d-4256-9ef8-60a677ef2401", "sighting_of_ref": "indicator--84209a49-685d-4d78-85a4-60597f79be4e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4addd618-e6f8-4d66-90cb-a51fac6f7bde", "sighting_of_ref": "indicator--9dfadf09-72d8-460e-b107-cea9c6b597a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e88c72-553e-46e9-8d1b-8edc14f800b9", "sighting_of_ref": "indicator--8854955b-cb1b-4bff-9998-1c3483086491", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c981d6-1c96-4a2b-a90a-ce318cb7de56", "sighting_of_ref": "indicator--f7484b51-6371-4360-ad96-848573b8b10d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b28c27-021a-43cf-b285-5fbd954ab398", "sighting_of_ref": "indicator--26c37022-3010-4560-91ca-46aa181c85a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c4ccf5-fed6-4dbc-a355-64d4bc9c7ebd", "sighting_of_ref": "indicator--5ff0f4f1-b7eb-46b3-b6bb-982bda317234", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb697dd-b9eb-4d8f-9398-966f80031eaf", "sighting_of_ref": "indicator--4c3bac34-6a91-4c67-919e-0ecb1a281722", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7dd68b5-3e00-4212-8ea1-3fbc63491581", "sighting_of_ref": "indicator--f1605329-792b-4771-899e-6e6a5938b572", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe96422-c7ea-461f-9cf9-5e08a45f3f4b", "sighting_of_ref": "indicator--9bfd84d6-1296-4738-99f6-42efde843ed6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a49025-d5f5-4721-9ad9-b2f733cffe03", "sighting_of_ref": "indicator--9bfd84d6-1296-4738-99f6-42efde843ed6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118a8db7-2b7b-43f0-9431-6de475bd2aad", "sighting_of_ref": "indicator--c2ac48e9-14f0-410b-bd7d-72558c7c13f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2252376-e343-402f-b84a-e94706dd72ba", "sighting_of_ref": "indicator--80a8925b-a9aa-451d-a408-6592c24b6894", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678d30e4-1c91-43c9-ba25-e60b098fd9ed", "sighting_of_ref": "indicator--932bfe7b-691b-4437-94df-b4a5e8fd3eb6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dd252e-13de-4e60-90ce-7f47cbe85d8a", "sighting_of_ref": "indicator--52cc42b8-9e1d-4857-8766-99809b1ee3c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905bc5b5-9349-47ce-a073-d49607cf12b5", "sighting_of_ref": "indicator--89c8ab66-6935-4fa3-bbc3-0fc83f9dd655", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30902af6-e188-4706-891f-c50a6ae3df06", "sighting_of_ref": "indicator--7e912521-78ce-42fe-abd0-2285490ddbf0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3bda15-e852-47f2-8190-ef129dfecbcb", "sighting_of_ref": "indicator--a346c8ca-a377-49db-805c-cb2fb8006767", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df66a367-68ed-4020-8835-8892c23d600d", "sighting_of_ref": "indicator--aa5371bd-772c-4fec-a621-ae7ee8930a33", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3163af85-e508-4486-b4d3-f40093ea4768", "sighting_of_ref": "indicator--025b5e87-66fc-47e0-b9bd-bea19a722ca9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd2d264-e587-4c0f-8026-757f630dfbed", "sighting_of_ref": "indicator--8d296570-4f54-48c5-83d5-d83caaafa5da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9af404-0f2b-46fa-ae5a-9edee3bd329e", "sighting_of_ref": "indicator--6aae46c0-0742-4409-8361-d22febbf1a2c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8f32b5-c25f-4e92-a80a-4d55ee6d2fb4", "sighting_of_ref": "indicator--0c69acf0-a7a9-4a60-82aa-c58febf2c1e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9ba5b3-f875-44f9-895f-82830fee7e2b", "sighting_of_ref": "indicator--ec9511d0-7907-443a-8b11-6c0c22116c4f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1ba16c-32b0-4d57-97e7-fa4216d62760", "sighting_of_ref": "indicator--9b28517e-1b3a-435f-a65a-b979ad4fbf20", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3db7bff-0e0f-4481-b3c3-0af446efec95", "sighting_of_ref": "indicator--86cd6f21-6c59-4d62-97ea-66f343909545", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6b12bd-3367-464b-b03a-250e0085b3cf", "sighting_of_ref": "indicator--66e2b9ba-db51-4c14-94a2-e44f8bd849cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39a9c4e-9707-4582-ab8a-53d931e1e083", "sighting_of_ref": "indicator--80c7dc0d-0737-4308-b22a-45f99ee12a0c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cade486e-25f7-4c42-9c94-8dad218f9ccb", "sighting_of_ref": "indicator--d375b702-8cce-4e0e-a35e-3cc3093f9266", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3be343-fb7d-49f9-ba6b-3f3076857f38", "sighting_of_ref": "indicator--698a2ebc-df7d-4a07-b954-110cbcf652a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202dd638-94da-43a0-bafb-05949ed11d57", "sighting_of_ref": "indicator--f38d3956-bd67-4df4-9e38-599fbbcb2305", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28c7329-e70d-4034-8e1a-ffd7aebd6729", "sighting_of_ref": "indicator--6d3e146b-0749-4114-bfbd-22c2e6ec969c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc74bc8-f74f-4e08-a83e-e3cc59f75386", "sighting_of_ref": "indicator--5b3ee049-b409-43f8-b146-72d63636ccb9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bf0222-ff8c-41b0-8fdf-0cf83d86dcdb", "sighting_of_ref": "indicator--4c8b76c5-f46b-4fd5-854a-67da2f8d9b2e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90919bd-0752-4417-b1fa-2277f4d0264a", "sighting_of_ref": "indicator--8a1c863e-6a31-44e8-94d2-562c4c746b3e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fe6cc4-862a-47fb-9796-c8b9acb697c8", "sighting_of_ref": "indicator--a807e9f9-9d3a-4771-bd80-cf0f7f697106", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c13644-6df9-4a31-9ada-a7c09e3c6b7a", "sighting_of_ref": "indicator--845f5375-7aa8-4c85-856e-5b78e99c1558", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef938876-4618-4942-9ece-38548af0b288", "sighting_of_ref": "indicator--f6b6bf3f-38dc-4e5d-9042-b4d5d77b8f65", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf2cd43-001c-4e07-8ebe-a4eab71b20d2", "sighting_of_ref": "indicator--121a46be-fc8f-41e5-90fa-2abccc8d16e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4dabc4-21e1-4e0e-ab28-627952cb31a6", "sighting_of_ref": "indicator--901d441d-81c6-4508-9ec2-c85ce0c26ed0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cd57a0-a8a6-4083-9bbb-2e28032d00fe", "sighting_of_ref": "indicator--480ff3d5-4da9-4844-be35-c6614d23ed62", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e545e94e-d0f4-4cc9-9f4d-e06bf7854571", "sighting_of_ref": "indicator--270ed843-7d8c-41c1-922c-ebc4d20ba741", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dbf129-9656-4f15-99e6-652957734668", "sighting_of_ref": "indicator--693ac64e-3ed1-4b83-be1c-5ac89cb6d41b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99428ba7-27d3-4886-b4db-2cfd5b9c49fc", "sighting_of_ref": "indicator--d72cd008-ed77-45aa-a7d8-b8b959f57684", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa520be6-38d4-4894-adbb-016c5f7e0052", "sighting_of_ref": "indicator--ebad76d7-19b6-449c-90f7-a89e997c0f3a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3f16ab-5e80-4a42-aae2-8d79da6181f2", "sighting_of_ref": "indicator--ebad76d7-19b6-449c-90f7-a89e997c0f3a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3033f4-33cd-4d8e-909d-74c7fd333977", "sighting_of_ref": "indicator--1ed649bb-a165-42af-8705-d98553c4eba8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97f6134-b11c-4cc2-bca4-7ce043538014", "sighting_of_ref": "indicator--0f8ca5ab-b17b-49a7-a9b2-17f8e67b56e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0f9faf-be6e-4ccf-923d-3ff04dc62322", "sighting_of_ref": "indicator--b150e662-a2aa-4eda-bd82-465cd1fdd76d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08a5da4-49af-498f-b821-6220ce529b66", "sighting_of_ref": "indicator--8c4cab96-7543-4b74-b68f-e05973053605", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75227064-5015-4fce-bec6-eed999aa663f", "sighting_of_ref": "indicator--88b14f99-74f2-44e5-87bb-1926ca800cdb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2b12b3-ac1b-4ba2-a00c-3cb378053808", "sighting_of_ref": "indicator--c990dbfa-baa5-416b-8317-f3ce9ee8847d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c229eb7f-df1c-4500-b4f4-92a9d2bebfd6", "sighting_of_ref": "indicator--c9b8f63c-7096-4770-85c5-6919b2156bb8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677e8ce9-5975-4c59-9cf7-c116150de191", "sighting_of_ref": "indicator--fa756962-ff59-402c-9016-3a65c803a00c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc712c3-62c2-4c0a-9fe5-909616694e28", "sighting_of_ref": "indicator--7b5d0f13-5b75-4a30-bb70-9ae3a2adb8d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f063b51d-eb68-4ba0-978e-dbeece00cb32", "sighting_of_ref": "indicator--a4624a04-6e43-4708-86e7-2ee2c4137a0c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb82a05b-75c6-4227-8c83-b73cbd51791b", "sighting_of_ref": "indicator--a4624a04-6e43-4708-86e7-2ee2c4137a0c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117900e2-5efe-46f2-914b-c41b5faf2517", "sighting_of_ref": "indicator--6d1ed0bd-58ca-461a-af0e-6f2dde155def", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295cc5cc-63d1-4094-9324-ed2f83716c5b", "sighting_of_ref": "indicator--afea676b-19fb-499c-b417-52be35866344", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c420ab-483e-449e-b75d-55dd4ec788d8", "sighting_of_ref": "indicator--4a06b1b6-c3be-432e-8146-3fdc30f027ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2bd6ca-f7d9-4e70-9898-c9bcdfcfbe2b", "sighting_of_ref": "indicator--f2d058b0-ba6a-453e-a5ad-76ad2e8020b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf1d916-2406-4c05-b305-bdfd4faecd53", "sighting_of_ref": "indicator--5ded35e3-1705-43d0-a265-a2705927f3c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b9d3b8-194b-491a-af5f-14024e413818", "sighting_of_ref": "indicator--1878f5ea-4a20-4db4-8de2-a007083fa867", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d0cc5a-840d-4deb-ae33-e755e1fb522f", "sighting_of_ref": "indicator--1878f5ea-4a20-4db4-8de2-a007083fa867", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70494d8b-95fe-450e-b642-1bcd68609da4", "sighting_of_ref": "indicator--b2ddd1b1-1af8-42ff-b270-850f0cbe70cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4577520a-2e00-4baf-8f27-4b796468a9dc", "sighting_of_ref": "indicator--8d58e067-4014-44af-9509-7fe196260392", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf76ec35-472c-4b59-a688-60d1426943b6", "sighting_of_ref": "indicator--10fa5c01-b4c3-48c8-a691-1c16041bd7bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43f94be-f0fb-47c7-b0f8-7d9954d918c3", "sighting_of_ref": "indicator--1c209836-41fe-445e-9f63-d377ae0aa2d9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdbee4e-011e-40da-889f-6c0a1871cd89", "sighting_of_ref": "indicator--e02dd3d2-2e59-4b7d-809e-da732941af1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87975f5d-f5f4-4ba3-91d0-1d74d0e42ce3", "sighting_of_ref": "indicator--aba37e82-877d-44e5-b757-a2002f3a9bc2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef400973-1293-46e0-8531-760ea9057f71", "sighting_of_ref": "indicator--0ed2d8bc-3584-4a8c-bf2e-b4f6ddec897a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3beabb12-271d-4c73-aa04-a5239b3e4e35", "sighting_of_ref": "indicator--e0f6b264-654c-4955-9be9-0d77028d8c82", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d71f96-1bd0-4765-ad72-3f6cc7a21a6b", "sighting_of_ref": "indicator--57cdd267-8619-4f6d-9899-d08c3ce0da92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b225ae-9e13-4044-a6a4-1e9b8969ee65", "sighting_of_ref": "indicator--089b1352-67b0-4884-8c26-da1cbd132707", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5769b015-177a-4ccd-9bd4-2e0dff03d98e", "sighting_of_ref": "indicator--7640797e-1e1c-406d-90ad-aba53db7f878", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6cc948-9077-474b-bf0f-c8c6a3455e7b", "sighting_of_ref": "indicator--418ddf60-788d-4ccf-878d-20a40831f3ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f16f749-51c9-41cf-94f0-ea7a6a8714ae", "sighting_of_ref": "indicator--e3b9bc2d-0d8a-46a4-b088-3fea92e27e70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5cff04-5c5c-49b2-b526-24561eb6275d", "sighting_of_ref": "indicator--5871f95d-0061-4122-88e4-58636ef1ae2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85da8055-70c5-4037-a5c9-d8aa298b18bc", "sighting_of_ref": "indicator--c4ee02f6-d3e8-42ab-8d17-b9fc1daa154b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c017ad-bd30-4bf6-aeda-19eb9f70474f", "sighting_of_ref": "indicator--2761043f-e4a3-49c1-bf76-75e7eb497fb3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd7706a-95e9-4828-a2be-fa97741b8f74", "sighting_of_ref": "indicator--494ce407-9277-4113-90bc-e30a0dfbb999", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac07d870-4d79-4658-91c1-0404b1097b88", "sighting_of_ref": "indicator--ddcd22ef-0f30-4c46-9f1d-87fe3e7579db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a881a8-6220-4da7-8d31-418a22fd5473", "sighting_of_ref": "indicator--08be9857-386d-4a38-b4b3-afc94b84f46b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6d8875-88fe-4116-91da-ea3710e971ae", "sighting_of_ref": "indicator--751b9cdb-cf1b-4aac-9eef-184411035b9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f0d571-535d-457b-b995-7c450656944a", "sighting_of_ref": "indicator--c45503b8-9ef9-40f8-8186-a10e425c8497", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c271bd-dde1-43d5-8141-ba302892574c", "sighting_of_ref": "indicator--ff088852-6eea-43f7-87bd-eeb0d4a6c2ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed43b401-2b16-404c-8218-79050a4239f5", "sighting_of_ref": "indicator--f48b5ade-8a68-49c6-9558-7bd788cf7eb7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d81c11-b10f-4178-8102-b388176c4e89", "sighting_of_ref": "indicator--d0e8a412-a48b-45ff-acc3-5ef4fdb10806", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b533e3-418b-462a-b068-7ecd7cc4a92e", "sighting_of_ref": "indicator--ad156de6-7fd2-4ee6-9cdf-4911f048973b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309a76a1-3ea6-4223-9353-4bb55edbd0ae", "sighting_of_ref": "indicator--28c94349-2545-4fba-a6ca-f216dcc55881", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af5e057-85cd-4718-801a-14b6839c7b35", "sighting_of_ref": "indicator--d624b08d-db2f-418a-a85f-bf587df8b3f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaa375c-64e2-4e70-9fa8-51b011f1a627", "sighting_of_ref": "indicator--909255c8-9bf2-4fb5-a171-ea3fef93322c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aeacd35-e77f-4dd2-bb45-05c3af8d7c43", "sighting_of_ref": "indicator--19da81d7-cf94-4bec-9929-2c8de78f12ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ab70b4-72ee-40c7-afe0-0aba0dda5ec4", "sighting_of_ref": "indicator--f63a553f-4b53-48bf-89f9-7a3fba39d0ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a4696f-f8cc-445a-b1d4-8422039443fa", "sighting_of_ref": "indicator--25000999-8603-443a-9a68-304b2caa7df8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3afdf5-277b-4d70-9c40-1845117ca978", "sighting_of_ref": "indicator--13b8a9ad-dc20-4fa6-9e99-d8f980acff57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aab50f3-40bd-4e67-80e7-786dfa190196", "sighting_of_ref": "indicator--80180bfb-e664-4f29-b632-439fbe728fe8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f37bc88-a815-4946-8ffd-ada7a076e3ca", "sighting_of_ref": "indicator--cc7a0d3c-84e0-4175-a65e-e24fba67058d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a927260-a994-4f01-9088-528a9fd7dda7", "sighting_of_ref": "indicator--28a59d76-3fd0-4890-8fef-4f485d7301d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada77c41-ecd6-47ed-87e5-58844e60d452", "sighting_of_ref": "indicator--1ee813c2-0612-41b5-bb9b-b340b7f62364", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d502c9-57aa-437b-8938-524cf17b13fb", "sighting_of_ref": "indicator--2af6859e-7a11-4b46-a3b8-ab6a00aec86a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6502d670-60b7-4a94-816c-7e2422bc83b5", "sighting_of_ref": "indicator--9e500577-4dc4-4994-a15c-0164839eaf04", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729aefa4-8567-4131-b80b-038860b4d513", "sighting_of_ref": "indicator--997736e0-2e9d-4e94-8d4f-fb007464d7d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6811685d-fd22-432f-aaf8-427617ade78e", "sighting_of_ref": "indicator--ebd11c9f-38fe-4e97-a91e-257a6a553b92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c6369c-9b92-4c59-be56-f823bd8447df", "sighting_of_ref": "indicator--033570a5-54c2-47ad-ac14-19ee5fdbfa6c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a69639-14ba-432c-9beb-40babf2920f2", "sighting_of_ref": "indicator--cdfe5f7e-ad38-4ebe-bf68-23a49b0a2ce2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbc41ee-cc9c-40e6-98ae-d232a60ab9db", "sighting_of_ref": "indicator--6933376e-032d-4f39-a2f8-54ec61b085b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c308ca0e-d93f-4a0c-86cd-8d5c9ca38a7f", "sighting_of_ref": "indicator--6933376e-032d-4f39-a2f8-54ec61b085b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4871332f-0f19-4650-8d35-3e661b18a137", "sighting_of_ref": "indicator--076fae41-11c5-4010-a210-066b256f105d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dbdfb1-8553-4f3e-82cb-38121d69d4cd", "sighting_of_ref": "indicator--ba6a833e-314b-4825-b8df-2571181b2ecd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd67f75c-f05e-4893-b851-57fa2e6cc507", "sighting_of_ref": "indicator--e98dd1b0-de5b-4257-9cab-489495b0860c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815faca0-b709-4b54-9629-b841e9af74fc", "sighting_of_ref": "indicator--8e96a3db-2ff1-45fc-8a7d-dfa1dfdc2718", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc316b4-5399-454c-ae20-932b2dd45c12", "sighting_of_ref": "indicator--b05b02fc-a3e5-4061-898f-5f5a49a2e99f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bceea171-158a-4dfb-8cdf-557d6a8ff9c4", "sighting_of_ref": "indicator--6cc7f02d-4baf-4fb8-9c67-2702ccea2d53", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a02d7ad-967b-49d5-a739-a14f215da772", "sighting_of_ref": "indicator--68265b25-3035-4a01-992e-9f8b47c68977", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0beac62-842b-459b-a394-659547c3ebba", "sighting_of_ref": "indicator--56a0a347-78c3-4725-a8a2-637f0dee3355", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2480ff8f-d289-4947-bc54-9311c394772d", "sighting_of_ref": "indicator--94766238-dd45-4045-94ca-02f9af7c9df7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c29d026-1a5d-4a60-ad93-fe7e9b209599", "sighting_of_ref": "indicator--2a645b2f-163b-4cbe-a9d5-7c9566b9c5f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42af258c-dd22-4d9a-be66-d787c34725f8", "sighting_of_ref": "indicator--33c0deb5-0a30-45b0-83c4-35ca61337a34", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8afc65a-e7da-472f-a8da-929cf5d79f9c", "sighting_of_ref": "indicator--5d9ebc54-07de-4dc8-9cf3-ec59146389a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fb44bd-237e-48fe-8967-6e5f27e62060", "sighting_of_ref": "indicator--c85e4e34-6673-4498-8ff4-9651c45d059e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb12093-255e-44a7-a2e9-17f565f342d0", "sighting_of_ref": "indicator--fef00a7a-29e1-4756-88c6-a4986ba2b992", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f51195-7ba9-47e6-ab43-9b8ac4f08068", "sighting_of_ref": "indicator--db7c7f32-9ec2-47ed-99ef-27ee21ee5c7b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09af190c-3b8d-4732-b432-22376e852026", "sighting_of_ref": "indicator--925bc6c2-e34d-4f05-815a-05b10d8efa0f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b58ffe-d581-4200-a41d-52064dee56f1", "sighting_of_ref": "indicator--925bc6c2-e34d-4f05-815a-05b10d8efa0f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e093f29c-4fb9-43ca-bf6a-cc347a6cb2de", "sighting_of_ref": "indicator--61d0fb0b-324b-468c-971c-251e8cb5e911", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab0609b-c7e5-4214-b558-44f81fb423cf", "sighting_of_ref": "indicator--920ada72-0035-4178-b7ec-56b5a6c6f401", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2e3e6f-235e-4fc7-b6b2-0dd74ba1a60a", "sighting_of_ref": "indicator--920ada72-0035-4178-b7ec-56b5a6c6f401", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f56493f-b4ec-40c6-b72b-141b9fd9e0e0", "sighting_of_ref": "indicator--9a5ff16b-423a-4735-92a0-0a0912821cbb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd99d44e-d929-4021-94e2-015cf2d7afcb", "sighting_of_ref": "indicator--58189fea-229e-4cda-a0ee-67e5991623fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65927c8-e1bf-4c37-8b0d-b3402ee1d096", "sighting_of_ref": "indicator--58189fea-229e-4cda-a0ee-67e5991623fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade866da-c897-40ca-9777-256cb1fca96a", "sighting_of_ref": "indicator--7580a502-2e64-4f7a-90bd-429c74569a5b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49811ed3-3680-4980-9ea0-c7c27cdca504", "sighting_of_ref": "indicator--6c542166-9aa9-4f35-8052-81df06570157", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8386114f-8e8a-407a-a838-82c4d51cf313", "sighting_of_ref": "indicator--d9fa5609-3c23-4c1f-8440-092855f4a1d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877a61e4-bcca-4bbd-aae2-9651ab56890f", "sighting_of_ref": "indicator--d9fa5609-3c23-4c1f-8440-092855f4a1d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c2708d-15ab-4cd0-b142-890f2318875f", "sighting_of_ref": "indicator--ce6a2faa-63b4-43b3-b339-24bee6865e11", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2237a13c-a20c-4c89-a1e9-907bd12220c1", "sighting_of_ref": "indicator--8de196e9-5b53-4a6b-8da6-5e387d58be06", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836eacbf-33b0-498e-8845-a24634b45604", "sighting_of_ref": "indicator--a11472ee-6875-47f0-ad1b-47209a44b4f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29a6cee-553c-4e4f-b8db-52cf61b8c60b", "sighting_of_ref": "indicator--e550b85e-8b5f-43dc-be29-b51a754c2aba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2a72d3-6f9e-48c1-8bf8-18024bc4ae89", "sighting_of_ref": "indicator--1b94154a-657d-4dc5-b37a-82528a1f7fb9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3f1703-afb1-4a9b-94de-638e73dc10e3", "sighting_of_ref": "indicator--3426e251-8a26-4ab9-84fe-8845af03e85e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc36163d-c2a6-4f57-a2ea-6d59f3358c74", "sighting_of_ref": "indicator--9bff95b6-a7c2-4a46-be52-199ed01b0dca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047a38da-71ce-4e2f-b908-e75c04550c8a", "sighting_of_ref": "indicator--e88ebfe8-cf12-40f8-85de-450cb39091c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163f7ecd-4199-4735-a3a8-994c5a8a07ac", "sighting_of_ref": "indicator--f11b3e95-5fd7-4e27-badb-679466bc65a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c00ca6-dd64-4f03-ad14-b5bb79ac7027", "sighting_of_ref": "indicator--2e0c3bb4-1da4-40cb-a7f9-7da60201e7cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c42657f-cb9b-4bb4-b049-bcc626f673f7", "sighting_of_ref": "indicator--38642b91-25eb-49c0-af28-390cbf3b8599", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d093d31a-85b9-490a-8f49-ae0e7e229625", "sighting_of_ref": "indicator--dde13d12-d7cd-4b23-a7d3-5043a6859847", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482e405e-014c-4057-a82d-124527e17443", "sighting_of_ref": "indicator--7c9d7302-25cf-4b4c-9730-dac13e107d09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c300d5fc-0499-4d4c-9a8f-1d7fdac57460", "sighting_of_ref": "indicator--ec2d7d52-e8a0-48b9-a000-03547185f425", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e18f91-c8cc-4c80-9ccb-bc7c6bc274ba", "sighting_of_ref": "indicator--12417722-ba66-487c-bc55-6af3ed1d2821", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445f7c23-d744-4e28-9386-b9d63ad2cff7", "sighting_of_ref": "indicator--6497c7e8-37fe-41b6-b5ab-6823d99d3737", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324ab1ea-f0f3-4832-9d86-36881db088ca", "sighting_of_ref": "indicator--9ec86c96-6ac9-461d-be50-f5015279c41d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332d7929-f391-4f0c-99d3-4789a1af0d92", "sighting_of_ref": "indicator--d37d58a7-a076-4568-8385-fed9f670da5a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6383b39-681d-4eb7-9efe-94718c8daa8d", "sighting_of_ref": "indicator--f8200001-b80c-49f7-a042-87f0b76b6316", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd62a2eb-14c8-448c-b39a-126e4b4c4185", "sighting_of_ref": "indicator--c22bd15c-329e-4a21-95de-ec5780c831e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545ba78c-065a-44a9-a6dc-8e16d690787b", "sighting_of_ref": "indicator--4b8ff3ca-2e9c-4d58-b951-437ad2b5aa91", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a354ddc1-2ee3-4a7b-8f8c-e2b3e4dd8898", "sighting_of_ref": "indicator--7266c316-0a1d-4df0-9d73-604eb3e15409", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd53841b-032c-4c5f-9c2f-d58938be5b44", "sighting_of_ref": "indicator--df45d29d-85f3-4efc-afc6-03e92623b1b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78be944f-f692-4ce8-9a64-a88a621378d5", "sighting_of_ref": "indicator--4bfc5b1d-3684-487a-97d9-7d66ada63ed4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dabd76-919e-486c-a5b9-ce8a50f6eba3", "sighting_of_ref": "indicator--636c85c3-a58d-4354-9074-814604f61ea4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d939d003-29a2-41cb-8f16-bb7efca435ed", "sighting_of_ref": "indicator--9a0c8ee6-5056-4ea8-938e-c8a5fdddc213", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cfe587-33cf-40d6-b15d-d75d0fca9662", "sighting_of_ref": "indicator--cf33e5fe-6592-4466-89aa-8da028108978", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e031b57e-ed42-494c-9a20-723e6e1f0a60", "sighting_of_ref": "indicator--5bd99de8-51ef-4ad8-b857-6fde256e596d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d542b70-950c-4e5c-aa8a-27bf037f87c9", "sighting_of_ref": "indicator--90f31a11-c260-4692-8f52-08c354189f68", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95c0f80-414e-49bc-bc91-ec6d48a0e246", "sighting_of_ref": "indicator--4a8e1ab7-25ff-4a68-a63b-a8b4f42d40ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef7b6d9-e557-479c-b3a0-0611e6f8b82d", "sighting_of_ref": "indicator--d31461a7-e531-4e90-a0d3-d4f411c04e3f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dffb9b-8864-42f2-8ff7-2208a2221f9b", "sighting_of_ref": "indicator--568bd958-35b8-4fc0-bfab-9bb53bd24342", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9684588c-6808-43eb-a345-140f5a232039", "sighting_of_ref": "indicator--da1cd43d-53a8-4d20-b5e9-1a03d672580c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb669d1-77c4-4cc1-aa06-fa5fb8b1293c", "sighting_of_ref": "indicator--ded2e6f0-4c8c-4532-a575-9a85415a011c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba75d8f-f849-46ef-909f-c18419cd47b4", "sighting_of_ref": "indicator--5712927b-1b2e-4569-9f86-207f2f89555e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8ef90a-658a-4aec-acdc-a337990c5892", "sighting_of_ref": "indicator--b088834c-c6a2-43d2-af77-accd3711c538", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8610d63-efd5-4c03-9b32-48a741b133e9", "sighting_of_ref": "indicator--532299a8-4a75-43f6-a424-0c3cae1ce14a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac4b4c1-3eaf-4cc2-a93a-b7a2d5dda9e1", "sighting_of_ref": "indicator--9c57c6d1-5be7-4ad9-baf5-00f7a99f7e92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb837810-1f89-4835-bbe0-c86a25fc1d64", "sighting_of_ref": "indicator--8763297f-4790-40eb-8c0f-1a8df94e560e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7963dad-d6fd-46dc-be86-8a56dab3aaf6", "sighting_of_ref": "indicator--35cb64a7-919f-49f7-95bb-724edcfbe1fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6735fa-4462-4759-bb95-3d78458a1454", "sighting_of_ref": "indicator--a12b0398-8a1a-4a48-a18e-0e45ab7519bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171073dd-d230-4738-803a-60cfc810c434", "sighting_of_ref": "indicator--a12b0398-8a1a-4a48-a18e-0e45ab7519bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f1e765-3b12-4e39-8064-ef750e636665", "sighting_of_ref": "indicator--c330d15e-c092-4f9f-ba3f-b99043094f49", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e83d2e-1d7a-4ff9-a6e3-25fe244e322b", "sighting_of_ref": "indicator--accb1256-76de-4e12-95d6-b0e5ef13d9dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c32119-970b-4bbe-8286-46e3968fd079", "sighting_of_ref": "indicator--accb1256-76de-4e12-95d6-b0e5ef13d9dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33869fb8-c2db-4280-a153-97e68e03d3cc", "sighting_of_ref": "indicator--5d0c88be-dd71-4896-9909-042bc58ef720", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98205830-bc40-480b-958f-fb90145c1089", "sighting_of_ref": "indicator--72d29b24-ed99-4391-8e1c-d744323c9e91", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6cad60-8931-432d-85fb-41a09a0bda53", "sighting_of_ref": "indicator--5f991a94-2385-4e00-af2c-f69d9591389f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972d6996-4938-4ce7-bc8e-e64550ae98d7", "sighting_of_ref": "indicator--26e7977e-0a88-4e66-afcf-238d8161cdc2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ffdbd5-a08a-4f09-a9d2-fffddc8e032f", "sighting_of_ref": "indicator--ddf0112f-49a2-45cd-a970-31ecb41385b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367f20ae-09df-4592-ae12-b769d36c4ba5", "sighting_of_ref": "indicator--88a1997b-e28a-4015-8fe3-713326341e13", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc7c368-8799-4086-83c1-203583539e95", "sighting_of_ref": "indicator--b0ffc041-0287-4c3c-966a-63708d898c79", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02673acb-9ff2-4ed3-a723-1e234c0dcff3", "sighting_of_ref": "indicator--e39a0b27-ac0c-450c-a0ce-0e1badfcca1f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb00595-363a-4ced-9f12-31313280298d", "sighting_of_ref": "indicator--876792b1-fd75-437d-8464-41d35ece4d6d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6a1843-1705-4154-ab63-f64332a0f124", "sighting_of_ref": "indicator--11efeb92-cdf8-4fd2-baca-02086798b740", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c052136-85b0-4737-a920-16b6542cd765", "sighting_of_ref": "indicator--74a34bc1-55bf-4033-8f65-753a9eb33e78", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4950720f-2446-4546-99bb-1be9ae1e26d9", "sighting_of_ref": "indicator--954fdeee-9932-40ba-bfed-2e77c61c87e6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e832a789-f068-43c4-8210-3491c69d7c10", "sighting_of_ref": "indicator--242a9c97-0d4e-467f-8708-5c0fea7b679d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664db462-5c4d-42ab-a290-f122dc185088", "sighting_of_ref": "indicator--7e1d0964-2621-478d-87c1-3b3b36762375", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbfd26a-7e51-4e39-9dc3-9f80a0e4678d", "sighting_of_ref": "indicator--ea3445f8-e9a1-4234-a183-2651649dd4ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074b6bf5-4a9e-4e96-a7ca-8472bfe5ea98", "sighting_of_ref": "indicator--b37d637b-c4fb-4f08-a597-80f97f9ba5d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306cb3bf-ae81-43b0-b9ff-d1cdd06eca41", "sighting_of_ref": "indicator--b37d637b-c4fb-4f08-a597-80f97f9ba5d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ec78a0-cc04-4a61-be0b-4e1f1ca3d1df", "sighting_of_ref": "indicator--fe4ca467-2fe6-4c94-aadf-e3689217b22f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6bdd08-4bce-46fd-8a04-8deef0909c52", "sighting_of_ref": "indicator--4207eb08-2e98-4cfd-ab71-c711f3fc6074", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995a44b0-24ba-4562-bbaa-b63c9ac3f337", "sighting_of_ref": "indicator--3c67fa03-902b-48c2-8a55-1265d04f662d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e7a125-3f0a-4e62-9e3b-31e072b582bb", "sighting_of_ref": "indicator--3c67fa03-902b-48c2-8a55-1265d04f662d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce5de25-c9a0-4c99-bda4-a4a3d715f546", "sighting_of_ref": "indicator--bf392121-fda7-4f2e-a05a-47e6f7cf755b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3bcab4-bebd-4af3-b39f-5dcb2ada827c", "sighting_of_ref": "indicator--60c5a02f-d8dc-44f5-a4ed-42f0026521ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd59620b-5db0-4003-9a0d-420ca93b21e3", "sighting_of_ref": "indicator--661e6e4f-92bc-4258-8691-7874557023ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6ac0db-90b8-4a71-832a-28957d8d4b10", "sighting_of_ref": "indicator--afeb684c-d5ab-4355-99ab-71246461de00", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d84815a-d009-4364-b3ae-7a35b07826e9", "sighting_of_ref": "indicator--53134e59-662c-429f-8747-2282547d4a20", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90eb7efc-80c0-4c05-93f8-9057aeb20b15", "sighting_of_ref": "indicator--3291579b-e214-49a0-ad21-c68828f5f27d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde8efaf-e8f5-412e-b8bb-8135e3777c50", "sighting_of_ref": "indicator--1a7858a3-fb1e-4736-8d93-16aec6b1317c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdebff3-9f6d-486b-9805-bf93e93114da", "sighting_of_ref": "indicator--6e1c21de-deb2-4b0b-85d7-a5fecd06de5c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab93fdd-afa3-4251-aaf6-35ff0188e16f", "sighting_of_ref": "indicator--fb8409f9-618e-4b46-8156-df5fcd3516a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13820287-a509-4ae2-82c7-169947837260", "sighting_of_ref": "indicator--d67d2d55-2208-49a0-81cb-267f37e3a492", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d8fa56-4f9d-442c-9ffa-f41deeca8195", "sighting_of_ref": "indicator--8cb6c883-5dc4-445d-ac53-99eb4ff1ad77", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f5ca4f-8ffa-4db6-9c3a-91959dfb43d1", "sighting_of_ref": "indicator--bdca8ec4-60db-42ae-b634-8d4abc273346", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5059bd34-ad71-4686-952e-36da59dbc8a0", "sighting_of_ref": "indicator--043642b6-ba61-4845-898f-c5be138013ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cceff5-2b2d-4acd-9d19-5c377cc69a20", "sighting_of_ref": "indicator--2923b0dc-4a97-4d39-a362-381681aa36ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e7b011-cc60-4e7e-aec9-e56d778d9d4a", "sighting_of_ref": "indicator--fe435ed3-9a74-4fdf-828d-c3aa6a3f4376", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370a4ef2-8b83-4ec3-874f-2780d8f850a5", "sighting_of_ref": "indicator--9b1e9e30-71a3-484e-a78f-60f2b2c915d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e4db56-6705-4a9e-a50f-330910fb2b97", "sighting_of_ref": "indicator--a8fb61ee-4174-41ab-b3ef-e6d7aa819059", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee51a49e-a9f1-4592-974e-57522b25e78e", "sighting_of_ref": "indicator--decf61d2-cda9-43c0-9820-d75bbbf96168", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0d1340-c1f1-4c0b-968e-0b7f41f92f7a", "sighting_of_ref": "indicator--7737c5d9-e25d-49c8-960a-caf5d131af21", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa5d693-6e6b-41cc-bfd1-6936f0a0d388", "sighting_of_ref": "indicator--327d9eb4-8884-43fd-bb92-f36fa6de1034", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532884b5-a32e-4c2f-8045-ec8c1cb3d4ce", "sighting_of_ref": "indicator--158e783f-aeff-4ce5-a826-f3f217a4a594", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbf8e0a-0d60-4bb9-8eb8-d24bd60ee475", "sighting_of_ref": "indicator--9ae9888f-ab8f-4fdd-81fa-34e7667ba26d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafc2da8-fb90-4ca1-af9f-68f550e490e9", "sighting_of_ref": "indicator--9ae9888f-ab8f-4fdd-81fa-34e7667ba26d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d41e31-9961-49c6-a148-dd5d756aa9be", "sighting_of_ref": "indicator--61d16e3e-62b5-4c54-b68a-3c1b716ed525", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b15716-d141-4628-bb28-7fa49ba675cc", "sighting_of_ref": "indicator--9a6b1409-5151-4a75-8037-a8cdbd720f0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43e34e6-2e83-4454-a27e-e9f7cc77e23c", "sighting_of_ref": "indicator--831abaab-caec-43fe-85e5-96b914e099ca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9630980f-4244-47c3-b8fe-bcc298456aaa", "sighting_of_ref": "indicator--f862dd2f-c304-437d-8ee5-142b90e79e85", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c4bd90-0536-4e62-b209-356146609679", "sighting_of_ref": "indicator--6c5da335-dea0-4ea5-8ddc-72cbf640320a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40de8b6-f7d4-4241-bfcb-07f24c0c2ce5", "sighting_of_ref": "indicator--313655df-ea4a-4d52-97e1-811fdfbcfd03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74648c9d-503b-40aa-ad41-e19e578d6163", "sighting_of_ref": "indicator--3e44864b-b8e3-4694-8217-c62979cb2f0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7333a58f-61fe-45d0-b069-3aa512f43581", "sighting_of_ref": "indicator--b12425a9-735d-457f-ba8b-03df2a478541", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4374dcd8-08c8-4dbb-8f34-03d0789b0c02", "sighting_of_ref": "indicator--67f53344-2de6-4d5e-8b95-d86c6c4b187e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c59a92-339a-4f56-8cb9-19ccb1a41ef1", "sighting_of_ref": "indicator--7e2987cf-7205-4439-b8b9-f2ed623b4773", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6da0127-f8b1-4759-ba96-88a7a5773def", "sighting_of_ref": "indicator--eeff538c-40cb-4786-91b5-241034697817", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083b8496-c778-4e45-8554-f4c5e835ea4a", "sighting_of_ref": "indicator--d1d8a1a9-1f6d-47ef-a57b-bc5873c145c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77791b80-689e-4a2a-82e6-39f9edb71380", "sighting_of_ref": "indicator--39fffedc-4dd5-49f0-aa92-a6042352e94b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df814fd-9f7d-44ac-8c89-7af73a8ad817", "sighting_of_ref": "indicator--add0f287-32e0-403b-82a1-9ef4909aa9f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bc9f3e-f9ba-40d6-b63c-f9ba520b1f75", "sighting_of_ref": "indicator--f2c9ce29-ae1b-40af-b574-6195f2b1bdf2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e099ce-71f0-4e86-8e47-5cf50bde6f6c", "sighting_of_ref": "indicator--7817f129-d8cb-4d37-9a0a-3923a7599185", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0a90ec-0d20-4a65-b0f6-249e996f60a9", "sighting_of_ref": "indicator--971f52e7-3482-4d3a-a288-4f7bfc077dc5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802dfb41-75c4-4e7f-b9e5-89ff77a2958f", "sighting_of_ref": "indicator--7448e187-3ae0-4c5a-8ac2-270631f2b8c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0854cccb-a134-4828-bf88-af89b7da9513", "sighting_of_ref": "indicator--c74e7f06-b2aa-49e0-a400-44328e1a836a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cae607c-8c29-4d75-aa97-2b3a7fb54e2a", "sighting_of_ref": "indicator--bcb18f67-1649-419e-9aa5-fac42485115c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ada64c1-cb26-4de3-a873-4595b2830621", "sighting_of_ref": "indicator--58f6f2e7-069d-491c-8a2e-6b88a737ed32", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1576078-7f01-43b3-8fe5-566f029b9cc1", "sighting_of_ref": "indicator--3a8fa389-c7c2-4789-a15c-e4b124edf221", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b48e8be-b6e7-4508-bf0c-6a210d22d0d8", "sighting_of_ref": "indicator--fff24f75-e77a-406e-b694-bcee88e14e1c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f811732-6d7d-4a64-a4c1-097c45fe4904", "sighting_of_ref": "indicator--fff24f75-e77a-406e-b694-bcee88e14e1c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439a666a-2422-41c0-b341-371737298c2d", "sighting_of_ref": "indicator--8922ff56-f955-44a5-b2aa-a577f030b4e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442f24c7-100d-49e2-9ed5-7dcf7b1ef440", "sighting_of_ref": "indicator--73244f8f-e83b-4aae-8ed8-95a64b4ca85d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a816cf3-21ee-49b6-9a5d-5a0581e4fb30", "sighting_of_ref": "indicator--62f8bffc-97f2-45af-a6df-ad3b861b9e32", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2831e6-e810-4842-9539-6745386ef2cb", "sighting_of_ref": "indicator--7305909a-b840-490c-ad07-be4ca4e518e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0c6ae0-0cfe-4694-87ad-8e55cf292a62", "sighting_of_ref": "indicator--f63ed021-e865-44c4-b6c6-1205a1e5f653", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6193288c-2774-4893-9953-a76fdb99bd07", "sighting_of_ref": "indicator--c6590e00-064c-49e3-af7b-c1fcf24f1230", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c37d9dc-4dde-4268-9970-4b622efa9a35", "sighting_of_ref": "indicator--43456a1e-8694-49ec-a2b5-894d05e16a6c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96be1f0e-01a6-444b-a156-4354435d3bbc", "sighting_of_ref": "indicator--f0313dcd-efa7-4496-ae7c-36583db03004", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cfe522-568a-4a3c-b520-0b502eed16db", "sighting_of_ref": "indicator--8940f302-7aa0-4c96-bb30-1b95a4539075", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1513d43f-0fc8-4f26-91a5-32e96f839a9c", "sighting_of_ref": "indicator--859ba54e-2cff-4e8f-bd3e-4e32e05df7de", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8e378a-24b3-4f8f-b6aa-76b630e45ae5", "sighting_of_ref": "indicator--16354f9f-2ab7-4c69-b8bb-36db77f54244", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbacad7-7ddd-43dc-b57f-03b74539a559", "sighting_of_ref": "indicator--429ede44-bd95-44a7-b870-9c6bc9b85417", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d109a044-c1e5-4fba-902f-87c554b7cbef", "sighting_of_ref": "indicator--66bf476b-8f74-47a0-9282-452f6709fc83", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0455881-b8f5-41ec-931d-98a44057bc15", "sighting_of_ref": "indicator--7ecc25aa-dae8-4f85-a10a-855f2b50f165", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17945aad-de18-4952-a8f2-a1ec63217a92", "sighting_of_ref": "indicator--30800a79-defb-4fa6-ad42-aec4919fb301", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561dd664-788d-42ac-bb4f-7f74caa6eabd", "sighting_of_ref": "indicator--bfa3249a-3526-43d4-82b0-731b72cb3ab5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591c0f5f-a07b-4163-90d4-a18f5111d01c", "sighting_of_ref": "indicator--697e454e-11bd-46b0-b652-d84c4024f298", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554396a5-d2fb-4a5b-a426-b1b2702b6c12", "sighting_of_ref": "indicator--c30affeb-71e4-4f8f-91b0-8b16f8b84b8a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c445b379-86f8-4d13-bbba-d75c276aaddf", "sighting_of_ref": "indicator--bb8056ca-7c53-486e-b18c-f1654b24b77c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44685816-e490-4372-91be-e3aceb2e9184", "sighting_of_ref": "indicator--4be0227f-f036-4ce3-84ef-6617eae228a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee344449-7e5e-45e4-8a1f-40ed523e7391", "sighting_of_ref": "indicator--bc1d6ff4-017f-48b9-bb43-4408b571c772", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80fe310-0a77-48bf-aaeb-31d6d05f247c", "sighting_of_ref": "indicator--ece5cf7f-f703-43ae-887e-7ea9e8bd009d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16848050-a124-42ad-9341-9713ff5cb614", "sighting_of_ref": "indicator--b937e8d5-0607-48f0-88fb-00cb01fc2907", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0aadf2-c46b-4771-8ddb-6879e547c6e4", "sighting_of_ref": "indicator--b937e8d5-0607-48f0-88fb-00cb01fc2907", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1898e1-eb1a-466b-a4ec-60ebde222d67", "sighting_of_ref": "indicator--f1c3d66b-4089-40a5-9c02-f95863c21189", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56eca18b-b172-41a0-8680-47081f2580c1", "sighting_of_ref": "indicator--60231cc3-e7fb-470a-96c9-7f4a6dd854fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3c1f44-946a-4ae2-9e54-e0c21952ca43", "sighting_of_ref": "indicator--c818bd39-22de-4aad-954c-1519958241c1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5ef041-1c4f-4bdb-8c7a-f3e86d8cb922", "sighting_of_ref": "indicator--48f8fd9c-7097-42ce-b7e9-4ac6c4954237", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67093f95-8352-47b1-a25f-0015ec0f975b", "sighting_of_ref": "indicator--8e0f8794-eb44-4916-a8dc-60d32e4f423c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133cb5e7-c063-424b-af5e-52ef9d10b050", "sighting_of_ref": "indicator--5f7f914e-5e2d-4d7a-8633-bf1ad28b0cc0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80305b1e-adba-4789-b8d0-1013c2212cba", "sighting_of_ref": "indicator--bf42cf3b-60b3-4de9-adc4-d39581a946c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b67cf3-9c33-44ad-8590-3134751183d7", "sighting_of_ref": "indicator--bfd50e32-22a5-4986-9652-8dd5f44cb400", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2366da-c368-427d-a1ef-6b4c8951784d", "sighting_of_ref": "indicator--3b485cac-8784-4d9f-b872-f3f784fdbb10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8000e2d-6323-4857-8103-cbc1ca2bcfa1", "sighting_of_ref": "indicator--08269f01-c275-4b7c-9a82-540e5ca99ef7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc014175-53e5-4dcf-9145-294f5952829a", "sighting_of_ref": "indicator--ae1b681c-9753-4e35-96ff-ef5fac533b2a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fd2c8b-accb-48b9-8edd-c2871b4ee1d9", "sighting_of_ref": "indicator--ae1b681c-9753-4e35-96ff-ef5fac533b2a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a35b896-af07-469d-a3bf-06dcfcabca73", "sighting_of_ref": "indicator--388e0bc8-ff96-40e5-8d76-33568e9850fc", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c131e946-33e8-4bd0-96fb-008eb7dd03a1", "sighting_of_ref": "indicator--018243ac-88c7-4cc9-a22d-b8e18a22567e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def33f3d-a599-4e82-b3cf-4b1fc202d7df", "sighting_of_ref": "indicator--eafa312e-0894-4709-8f0c-15b6ae533e6f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7f0cd3-0e96-4335-9cd7-836d84d4cd80", "sighting_of_ref": "indicator--252c1458-c676-4208-959a-00580cc50285", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76319b6f-fd9e-48c0-a283-e2bedf2db049", "sighting_of_ref": "indicator--48bebe48-2ee5-4910-87a3-662554e16325", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6e7fb7-6e70-4c76-8a7d-e093ba062a79", "sighting_of_ref": "indicator--7251d480-ef6d-4d03-b115-4bc42f8fbfa0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e96bb7b-7148-47c1-bb97-bacc062c400c", "sighting_of_ref": "indicator--80c60fa7-1aa3-46db-b02e-07d631a7508c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d3680e-e129-4566-a7a9-af50dc18f7cc", "sighting_of_ref": "indicator--c21229d4-fe4c-4877-8232-150f463741df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6a8a05-2fc4-40ac-b9e9-9a93ff0e47af", "sighting_of_ref": "indicator--3639c92e-a750-4b4e-bb12-9aaf08973973", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24165801-bff4-4204-af52-747a30784520", "sighting_of_ref": "indicator--3639c92e-a750-4b4e-bb12-9aaf08973973", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8137aa3-601b-4eb6-b3a3-3c68c2287e97", "sighting_of_ref": "indicator--6bceac4c-e75e-4a60-824b-d220fe47dbef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669b07ad-d52a-4020-9ff5-af39b0eddc2c", "sighting_of_ref": "indicator--c37c4c90-b2e4-4698-96a4-c9e2a994573b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fade2403-8cea-4fef-9cf7-919d48b746aa", "sighting_of_ref": "indicator--ba656387-8e80-4c3e-a7be-af12fc4d715e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb76f96-f824-496c-b4f9-55336dc8f9de", "sighting_of_ref": "indicator--bfe41b8f-5d33-4692-8e82-874ddc5411f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8ac49b-5122-489d-9ba8-a23f69abc759", "sighting_of_ref": "indicator--3877e421-6fde-4cd8-aa89-584cacf93c97", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da88d14-528c-4262-8cc5-18e2100388b6", "sighting_of_ref": "indicator--201de686-b29b-4d0e-acb8-0a3ac6212d37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1902fd-e272-4811-ba7f-fa43dd44c45a", "sighting_of_ref": "indicator--3319132d-1545-4afa-ab72-357cef1bee40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b414c2eb-d52b-4ed6-9025-1cef1704b07a", "sighting_of_ref": "indicator--ff5cc248-7596-41d0-97bd-0d6597c83a80", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803f2668-1ad4-4969-8c5b-1d483c2426ea", "sighting_of_ref": "indicator--8b4203c6-8578-4c8a-9f09-f3a9d0d11a40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce9d026-b91d-4ffb-8871-e78ccfd59dbd", "sighting_of_ref": "indicator--8b4203c6-8578-4c8a-9f09-f3a9d0d11a40", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0513d55-f263-44d6-9210-709ac0cc757b", "sighting_of_ref": "indicator--b6e6e7eb-89e9-4f88-99f2-6cbca2a43273", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e91e56b-3458-4cab-801d-afa82b6e3bfb", "sighting_of_ref": "indicator--b6e6e7eb-89e9-4f88-99f2-6cbca2a43273", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6f09fd-811b-49d0-b3f5-0975a855137e", "sighting_of_ref": "indicator--3c73072e-1d8c-4b9b-b1a5-dcc76bc642ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51abe4c9-d321-4222-b30b-88338ee45599", "sighting_of_ref": "indicator--3c73072e-1d8c-4b9b-b1a5-dcc76bc642ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c933dc-9b67-4928-a36f-4e610cec1c16", "sighting_of_ref": "indicator--7d2c0611-0e98-496b-9081-cd5a1695c797", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a0ca67-da08-4eab-91f1-3a360dcb90b6", "sighting_of_ref": "indicator--4d3d0623-0138-45dd-b82a-ed06907e9767", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adc606c-33ec-43ae-acf6-0bd352b25d2e", "sighting_of_ref": "indicator--8b85d6c0-b63a-419d-b609-710e2caf436e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e641f04e-9e1d-4d2f-a4d1-5178cd8aabc4", "sighting_of_ref": "indicator--8b85d6c0-b63a-419d-b609-710e2caf436e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3bac48-bf38-4152-9e4c-23f9e6a233ca", "sighting_of_ref": "indicator--3bf6b64a-a584-4c7d-ac19-7a133455d37f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eefa025-843c-4415-a05c-66de70ca20e5", "sighting_of_ref": "indicator--2d12367c-72ff-4206-ad21-d92425255dc4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65964729-736e-4c23-bf79-2e4b0fb9515f", "sighting_of_ref": "indicator--2d12367c-72ff-4206-ad21-d92425255dc4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9217ac-134d-4b42-8701-ce3691d73015", "sighting_of_ref": "indicator--fc6bddc4-0a12-41e2-9dd8-726c0fefdde3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b532c51-e3ac-45f1-8c33-4eaa18b39af8", "sighting_of_ref": "indicator--fa2a4047-0ea7-4e94-969e-959946e82c87", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efac801e-4064-4b45-ab8f-241d550e7fff", "sighting_of_ref": "indicator--f78d1746-b0f0-4f57-b4a0-1337cfe00957", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752bb51e-0a53-4a5f-8264-d2cd80f63f4f", "sighting_of_ref": "indicator--f78d1746-b0f0-4f57-b4a0-1337cfe00957", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa6d7ac-6a3f-48ad-8c7c-23f2c41db58e", "sighting_of_ref": "indicator--0f6bdd1a-9ac9-4b39-b9ee-57b7414a3b90", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8885bfae-2516-45da-b879-bd49dc97838d", "sighting_of_ref": "indicator--095985bc-8ccb-4dc1-8f6f-6ee2f5bb7308", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c200ba-bb02-4810-a3fa-b4197370e2b2", "sighting_of_ref": "indicator--a1017eb7-80c1-4148-bfe6-4d789e1cdbe1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c8c55e-bc19-4bde-9a91-d0a8caced5db", "sighting_of_ref": "indicator--6e77fc5c-d5d6-4c50-a35c-f8f9b7d4b19b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65101f59-6dba-4105-bd5b-235a947c4a31", "sighting_of_ref": "indicator--1c935629-bf7f-45dd-a9bf-c56eff5185ab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b91d62-5e01-4bea-9bbf-e985f230901e", "sighting_of_ref": "indicator--1b63d95f-a6aa-4c85-99de-87c5060b3b29", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8f8c45-89ad-49cc-8aad-348271926a16", "sighting_of_ref": "indicator--98f64631-b23d-491d-9f21-75f630fe52b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc2688d-b44e-4de6-b73b-b52501839633", "sighting_of_ref": "indicator--98f64631-b23d-491d-9f21-75f630fe52b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df075983-b0a9-4fe3-97d0-aade4a8f0e3d", "sighting_of_ref": "indicator--3a42d0f8-8ba0-4775-a462-36645d47b13a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83a5b47-e0f4-4985-8abb-8d29de5696bb", "sighting_of_ref": "indicator--21e62169-1350-4fb5-822b-c6f6528b78f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff4f2ae-462b-4291-a675-5e7cba9dec05", "sighting_of_ref": "indicator--21e62169-1350-4fb5-822b-c6f6528b78f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14895eec-0b64-425a-babf-92766ff733b3", "sighting_of_ref": "indicator--a87e02c6-9fd4-4f60-9286-30f01e6b001c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d6011a-7aec-49b1-bc12-a80ba1ea0b39", "sighting_of_ref": "indicator--67826f1a-66e9-443a-8da1-da48ed6a56d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b582bef-453f-4088-9c41-0c19f9e77943", "sighting_of_ref": "indicator--67826f1a-66e9-443a-8da1-da48ed6a56d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999c5d1c-ee83-4fdf-891d-17c0da77a663", "sighting_of_ref": "indicator--1e389e00-8ae2-495b-857e-12193fe07bbe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f87758-d681-4d2b-9e47-5d9a1a24c0ec", "sighting_of_ref": "indicator--f598252c-4c6a-4cd9-9c6c-18aa0ccd2bcd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71d6c61-6de7-4c59-9d7f-a6200617b46a", "sighting_of_ref": "indicator--a8fd85c6-3bde-4664-94ed-3c57911cc030", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af0063f-3ce3-42de-ad0b-a086e012e845", "sighting_of_ref": "indicator--a8fd85c6-3bde-4664-94ed-3c57911cc030", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e618ee7d-7fe7-4c05-aae6-f69afb13ec7e", "sighting_of_ref": "indicator--14c95c9f-8fea-4c76-894f-fe16982d97a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b97f5c-315f-4e69-b328-7f3b545697b8", "sighting_of_ref": "indicator--14c95c9f-8fea-4c76-894f-fe16982d97a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb170e76-3908-44ba-a8d8-250ba8393b49", "sighting_of_ref": "indicator--c4ff32c0-0411-4ef6-9b40-42cf0853f568", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b373de3-62af-4c6a-8e3c-7882a8cd977a", "sighting_of_ref": "indicator--c4ff32c0-0411-4ef6-9b40-42cf0853f568", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e2741a-9d4a-421f-935b-2ef131f04e4b", "sighting_of_ref": "indicator--8d2c04e1-6464-4525-9f98-d64d39b107aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2dad06-fca7-449e-9f4d-e56b7ac39dc0", "sighting_of_ref": "indicator--00f2242c-73d3-420c-a104-ba6392989e6d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa3523d-5a37-4b36-b9a7-cc452f6a6bc8", "sighting_of_ref": "indicator--9e99555a-6e08-477b-8373-8fce32693267", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fffcc4d-26a2-4902-81cf-175464fb92f5", "sighting_of_ref": "indicator--3045ebde-ee6c-48f7-b872-9a3c5219314a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f877c44-0c51-4e9d-adeb-d05be1f3f638", "sighting_of_ref": "indicator--e7d98cde-442d-47c8-8d58-4400e5d2d7cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9624661b-79bb-496f-8f9b-755ba3e37ad7", "sighting_of_ref": "indicator--380d6828-8a77-44d3-bcfb-8937b6479d09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf98276-2663-46dc-9bac-fa01ba6e429f", "sighting_of_ref": "indicator--94667a4c-c6c4-4e9c-8cde-5d78c650994a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda4fc18-0a18-4f33-b11a-cad410291917", "sighting_of_ref": "indicator--9e715c22-973e-4b75-a91f-949282f02e0d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0d2e53-6a69-4f87-97b6-63a8eb883403", "sighting_of_ref": "indicator--39c31cbb-2b94-499d-85c0-7ca1b5ef62ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dc710d-3032-4e4a-856c-178e3d454fec", "sighting_of_ref": "indicator--39c31cbb-2b94-499d-85c0-7ca1b5ef62ca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29bffb3-0ce9-49ee-8c90-fcdd610b37a9", "sighting_of_ref": "indicator--fd1591fe-163e-40f1-95dd-681022375ef5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7eb977-a2d2-4881-8820-0d15782f29cb", "sighting_of_ref": "indicator--60109197-867a-464a-8d13-a6ec04104af3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad25745c-2063-45ae-b188-14c109f1007b", "sighting_of_ref": "indicator--60109197-867a-464a-8d13-a6ec04104af3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7535b0-0a46-4ebc-9e4c-0cbf8231f392", "sighting_of_ref": "indicator--60109197-867a-464a-8d13-a6ec04104af3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba777fa6-07a8-48fd-a83f-f936b155591e", "sighting_of_ref": "indicator--af5b95c2-7f4e-42ee-89b1-9918e46b8441", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0be328-bfa6-4754-a69c-0c505e348995", "sighting_of_ref": "indicator--af5b95c2-7f4e-42ee-89b1-9918e46b8441", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e1a8bb-2bf1-4dbd-8415-0ce472b29f3c", "sighting_of_ref": "indicator--a0c84141-3a06-4347-84dd-80cb89598618", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e632fd-317d-49be-8813-23a3e8920ba8", "sighting_of_ref": "indicator--22092fda-c078-4d7e-b65b-4177cad0d045", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab425404-e65a-42af-91a1-0f16ea7462d1", "sighting_of_ref": "indicator--22092fda-c078-4d7e-b65b-4177cad0d045", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd60304-0ad8-41b2-891e-260c6ea78f0b", "sighting_of_ref": "indicator--ba47cd0d-00a7-47f2-bb6d-0783a970a2b3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2968e7-8afd-41b2-99f6-3f16f02d2d17", "sighting_of_ref": "indicator--f504468e-9d39-42ea-938c-1ecb3499021b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982118dc-b6db-4e09-b9b9-504833d75b90", "sighting_of_ref": "indicator--f504468e-9d39-42ea-938c-1ecb3499021b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a232a41-3dc2-4014-b0cf-4a76b0ba6222", "sighting_of_ref": "indicator--0d688dc6-a852-4a00-86fa-7cbd5f816be8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811c4755-2d67-4e35-8ee6-ad7733f8ddb5", "sighting_of_ref": "indicator--a55f9381-dc46-467e-a694-5f88b877ddd9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80933e0a-4e51-4359-8122-4eaf9d08253e", "sighting_of_ref": "indicator--170502bf-e348-47d6-9d28-270d0dbeaccc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec5da00-6010-495d-bf45-b1bde600efc9", "sighting_of_ref": "indicator--690507d2-5246-40b3-a45f-c85c6b2be7bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99ff71f-622f-4501-81b6-0dfd7ecb63b5", "sighting_of_ref": "indicator--2a8b7d67-ef5c-46da-a35c-771f121e9901", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d905976-bd39-47ac-92b3-cbb50d5694c7", "sighting_of_ref": "indicator--5d3937d9-b07d-4c41-adc0-1bc726d9454b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e22940-6122-45c6-b8de-a296070d1787", "sighting_of_ref": "indicator--c2503936-4fa4-46c2-8671-095baa09abb6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b468ea-e780-48a1-a7eb-c7f420f7651d", "sighting_of_ref": "indicator--c2503936-4fa4-46c2-8671-095baa09abb6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ee28d4-a003-4af9-a952-17b0c9e483fa", "sighting_of_ref": "indicator--00de385d-9110-4439-a0e0-07369d0db36e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a46e60-8009-4306-b3ed-28645da0de1f", "sighting_of_ref": "indicator--00de385d-9110-4439-a0e0-07369d0db36e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec517827-cd46-4362-92c0-3bb96c3b0795", "sighting_of_ref": "indicator--6a318b67-be25-470a-8eab-c9303ff71ad0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828d371e-6b8e-436e-be23-066425c6520a", "sighting_of_ref": "indicator--4e4c243f-3737-497b-a8ad-7d5f20d791e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ca6305-b380-4889-aad8-e549ce7b8cf8", "sighting_of_ref": "indicator--d258c754-ee95-4e03-9fe0-8d2af4016685", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e158d0bf-7967-414a-9667-d837eb27ab13", "sighting_of_ref": "indicator--d258c754-ee95-4e03-9fe0-8d2af4016685", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2abc2f6-5f23-468e-bb2c-856d0da17b7e", "sighting_of_ref": "indicator--9dec6ca7-07bb-48fb-8811-36a84232ffd9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5884fb-0814-4d59-892b-d81699138129", "sighting_of_ref": "indicator--9dec6ca7-07bb-48fb-8811-36a84232ffd9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0201530-6ff8-4fb9-af4b-0b680f740eeb", "sighting_of_ref": "indicator--237558f3-b64e-4df8-80c5-c72541267ba3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c94d551-a3d8-4ec7-879b-ff4d59f17796", "sighting_of_ref": "indicator--13b96346-2052-4959-855d-bc9f8890d510", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc684fc2-0d6a-48ce-9bca-c3a74854c267", "sighting_of_ref": "indicator--13b96346-2052-4959-855d-bc9f8890d510", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541497de-71a5-40ff-b7aa-3888265fd57e", "sighting_of_ref": "indicator--9dd58755-deac-4a27-8341-18aeeff93ba2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87382eb7-f9e9-470a-91e3-eca5a9ecf384", "sighting_of_ref": "indicator--14daf30b-3b44-458c-8a5d-2866f309432e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0096c049-4144-4b6d-9f19-065e686fd9db", "sighting_of_ref": "indicator--05b0484f-9dbc-4aaa-8f2a-9e93508d0630", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e09f436-8179-4d9a-8553-bf634425c670", "sighting_of_ref": "indicator--05b0484f-9dbc-4aaa-8f2a-9e93508d0630", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4254d735-40d0-4130-9e8c-ed9e4163a7fc", "sighting_of_ref": "indicator--49400996-2547-4b57-8a59-84959d2131d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40ee787-6f05-45b7-bad4-d730f5b26c5d", "sighting_of_ref": "indicator--5b872e0c-216a-443a-880a-88a14971b583", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfae7a1f-12eb-440c-9cba-6361c49dcc12", "sighting_of_ref": "indicator--5b872e0c-216a-443a-880a-88a14971b583", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5addb7eb-c0f4-444b-bd12-4c53bd9f47a9", "sighting_of_ref": "indicator--f7627451-178b-433b-b3dd-bd98b2145a4a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e9e84a-9c58-4f7e-a972-2fd6bb19e3ad", "sighting_of_ref": "indicator--f7627451-178b-433b-b3dd-bd98b2145a4a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d10ad1-85ef-4be1-a4c6-e2859246956f", "sighting_of_ref": "indicator--7b6ab424-efba-480d-b14a-75271501e125", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbc66a9-f5f9-492c-95f8-13d8aebde86c", "sighting_of_ref": "indicator--7b6ab424-efba-480d-b14a-75271501e125", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e7336e-a32a-4c0f-85d5-a2f74e251386", "sighting_of_ref": "indicator--a78171ee-9b85-4b1f-8777-e039f8388b39", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc98f498-ef53-4d74-a4ab-ea544d2b8a50", "sighting_of_ref": "indicator--f12c9f99-7a58-477a-a7cc-4b332564a955", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34641041-2d09-4353-8bec-44bd2e596666", "sighting_of_ref": "indicator--f12c9f99-7a58-477a-a7cc-4b332564a955", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1851021-17e8-4471-afae-826f3df32074", "sighting_of_ref": "indicator--74c3874c-a500-4892-acf4-0ba5132ba7b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac7c80e-cd58-4b14-9a6c-b0b022d56aa4", "sighting_of_ref": "indicator--befcb9d0-42d2-46e2-90fc-e6775f308773", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e9c20e-2082-4b42-b936-e710a9c320e9", "sighting_of_ref": "indicator--42afb67a-c370-4aaf-a862-48bac25e0a75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818b2177-fdc2-4b71-881d-aa9649ee1e5b", "sighting_of_ref": "indicator--f38fa32e-2538-4bde-94cb-fad005ffe845", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3920d4-295a-4edb-a657-75d21ca720cf", "sighting_of_ref": "indicator--4af67951-e04b-4e14-aad6-d5e03859ff4f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686a9ea6-1358-4c64-989b-bfdf099b67c0", "sighting_of_ref": "indicator--4af67951-e04b-4e14-aad6-d5e03859ff4f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21442e0c-e023-48a9-9fb1-68def2f3eca3", "sighting_of_ref": "indicator--444311b8-235e-4fd2-919a-874f2a843906", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcec0802-f774-4fe6-81ef-4ebdcb15efa5", "sighting_of_ref": "indicator--444311b8-235e-4fd2-919a-874f2a843906", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e49c5fe-6677-47cc-9c18-1e34735cb43d", "sighting_of_ref": "indicator--e632d69b-3fc0-4ac2-9182-16849fc00553", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466882c1-0fee-4325-93f8-b70d3df27d24", "sighting_of_ref": "indicator--292f4793-fa20-4d8c-b53c-14716ba3ea78", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c47b31-5848-4760-abaa-a0b060e6e0c4", "sighting_of_ref": "indicator--292f4793-fa20-4d8c-b53c-14716ba3ea78", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ef2560-6fd2-4627-80c9-a25acad582de", "sighting_of_ref": "indicator--c23ff7da-7b85-44eb-b658-1d8c6ea4b493", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559441bb-bd34-4ec0-8d85-16e0687df257", "sighting_of_ref": "indicator--12493359-c5fc-4cfa-aa61-92705ea28d01", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f0467c-8536-4bfe-86e4-8badbc36213d", "sighting_of_ref": "indicator--dae87493-a5a4-4006-bdba-dd74d3366be4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328ff756-fea9-41ed-8cea-4c1f081478c7", "sighting_of_ref": "indicator--f7df6bfa-2a7e-4502-9718-43c374549bd4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96963b6e-260c-4857-b973-a9a639dd896e", "sighting_of_ref": "indicator--14dfdc4d-134e-4132-9449-403c1cc2db3b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4425582b-872d-40ae-a271-b73e32546343", "sighting_of_ref": "indicator--14dfdc4d-134e-4132-9449-403c1cc2db3b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e47c54-e4d4-4b5e-9475-8d1c973435c9", "sighting_of_ref": "indicator--2c57af54-4a4e-4a66-83a7-dd15b9ff0564", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b48f7d8-00f1-44b4-8aea-057fdf058eb5", "sighting_of_ref": "indicator--25bd22a1-4f05-42a4-b4e6-9786ccce00de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c513c40-a91f-4976-8a94-942afb324564", "sighting_of_ref": "indicator--25bd22a1-4f05-42a4-b4e6-9786ccce00de", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328d6a24-9988-4157-bd83-125ec8760feb", "sighting_of_ref": "indicator--71b3d254-e8b8-41dd-b703-25ce702d4093", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b237789-baf7-4e42-a0fe-8575ac614f23", "sighting_of_ref": "indicator--994917c7-d952-46a1-9426-3b786a229cc8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c210b2bc-e88b-44c4-bec1-c0cc292eba32", "sighting_of_ref": "indicator--e26975ac-2d20-4852-b5bb-a3ed7313e73d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef98eebf-c281-45bd-9f5b-7d925bac2779", "sighting_of_ref": "indicator--345c7395-46d5-4949-91ae-0e6f29d7a0ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef42d223-ba5e-48ad-9325-e4cb8e55bcbf", "sighting_of_ref": "indicator--da495964-7b7d-464d-84b9-bf955c4554b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dd4c38-6794-4af8-b9c6-748034b35d9f", "sighting_of_ref": "indicator--48125117-98bb-4abc-9264-3ab88747535f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32574307-83d5-4e12-95d7-d1c9a9753dcf", "sighting_of_ref": "indicator--1ab5a18e-9e73-410f-b7b9-02c6c22bd105", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7df51f-7496-495b-8fbb-f8918ac8a716", "sighting_of_ref": "indicator--1ab5a18e-9e73-410f-b7b9-02c6c22bd105", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d31f741-b28e-44b6-b8a6-70b0356239c7", "sighting_of_ref": "indicator--0c9564bc-837a-4659-a635-155967681c28", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70a0f47-8e4e-446e-b3d0-cc6d4a9b2746", "sighting_of_ref": "indicator--f7508928-1ce7-4dc1-be20-757be363a065", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc36643-3d70-4ce0-97c5-ae79e02f8894", "sighting_of_ref": "indicator--0f11881b-46ba-4d68-8923-8a09e02ce38d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e01957a-d999-4294-8ae1-d073dbb16098", "sighting_of_ref": "indicator--a8f54352-d3c5-464f-a7a3-cd2d2f227f2a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76c98a8-987c-4b3d-bed5-473d6e7ab89b", "sighting_of_ref": "indicator--a8f54352-d3c5-464f-a7a3-cd2d2f227f2a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae2cdb6-1065-4c9c-b451-13aed53400ff", "sighting_of_ref": "indicator--84539db0-45fd-4d5d-8c54-da9549f3d01f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0348fe6-ce1e-48a8-8fca-231f5b26afdb", "sighting_of_ref": "indicator--98acbd42-37ef-4cd6-8af4-7808483de355", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f157718d-61b3-4c75-94bf-aee936f547ea", "sighting_of_ref": "indicator--5532cd46-956a-49c9-aba2-93ab43ce3342", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f84904a-9fb3-405d-abd3-e419e5e8e335", "sighting_of_ref": "indicator--e747ec18-4422-443b-9061-6a8132f51771", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2963a865-acbf-475e-88d9-8b9491134d09", "sighting_of_ref": "indicator--bb74a062-228c-44a0-bec9-a31e27b0b0a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff40603-956c-4d3d-8756-fb9b57c4e3a9", "sighting_of_ref": "indicator--76bdfa02-c2d0-4ebe-b450-ee86d5ef0c8c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd6c1cb-c7d9-4d23-a2b2-27bfa070f11c", "sighting_of_ref": "indicator--4a3b84e3-d0b6-4aa3-9304-6721c0ac6cf9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0037b482-7c3b-4247-92cd-3ced58395fed", "sighting_of_ref": "indicator--15ab77e0-d1ef-4757-997e-54724f525826", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb90e48-fff7-4bc1-92f8-fed75d3344a9", "sighting_of_ref": "indicator--15ab77e0-d1ef-4757-997e-54724f525826", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236eaf52-998f-4c5e-a8dc-0cc493b43e80", "sighting_of_ref": "indicator--d221d820-f818-442f-b7f3-0c1afca1dcc1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027e549e-da27-4598-9b6b-2e972da22d2d", "sighting_of_ref": "indicator--b5b31a0b-0c51-4578-b7c4-055b00f9c9ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ac8b38-9ffb-416a-b00b-8a74b9e9e6ff", "sighting_of_ref": "indicator--9ec5a762-236b-4725-85af-d55f69272198", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2227792-c30c-4147-b7b6-931c62b8fe1e", "sighting_of_ref": "indicator--bdc29b3b-2e92-4534-8066-e24ce0d6b16c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f118b8-ddac-43f3-bf38-eacdbe15c60e", "sighting_of_ref": "indicator--bdc29b3b-2e92-4534-8066-e24ce0d6b16c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfaca6ac-41f4-4f5e-b314-a912ea3c9037", "sighting_of_ref": "indicator--c1df2244-4e6a-47b0-b646-5f2ba790a633", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d735a3f-9bcb-4ebb-9f3c-eb604487c9d3", "sighting_of_ref": "indicator--c1df2244-4e6a-47b0-b646-5f2ba790a633", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09f249c-7c60-4786-b845-64c92daf3319", "sighting_of_ref": "indicator--719ae503-2b42-434f-a3c3-83ffe38d6307", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796943e1-8dd7-47dd-bbeb-98245494c61a", "sighting_of_ref": "indicator--a3011d73-6bc3-4064-9405-3311d89378c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de887528-6ca5-422a-84d0-f6226b123795", "sighting_of_ref": "indicator--5b182ca4-7013-458f-bc51-d6b81e45b245", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2846732-1975-4cbf-885d-9cbcb30f6591", "sighting_of_ref": "indicator--6de69975-cf39-4a1e-9b77-4d792118faf8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23d5eeb-21a9-411d-bcd2-434eae50c8c1", "sighting_of_ref": "indicator--0c1b1ee1-ee96-4d98-9ca8-d16c60a21fe4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2d8798-826b-469e-8d55-38965a932d02", "sighting_of_ref": "indicator--2e952bcc-d554-40b2-9940-eaba2aafcd24", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f08dcc7-d0e3-4821-a32e-154d3b0fdc62", "sighting_of_ref": "indicator--69c6d5ca-ca83-4d7b-8022-29ee7dce58ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a93f09-7cf3-4ede-b699-6e899a6c6766", "sighting_of_ref": "indicator--c5c3241b-cda4-4b1f-82eb-edd9a9871ecb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089f082f-9458-4fa8-83a4-3efe50606b2b", "sighting_of_ref": "indicator--fcb36f1c-cd06-4151-9045-122ed068c59e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b91c5c7-4992-435c-8f6f-727154b69ae3", "sighting_of_ref": "indicator--fcb36f1c-cd06-4151-9045-122ed068c59e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507db1c8-a56d-4d46-ad5f-079e8166f34a", "sighting_of_ref": "indicator--5ce5db51-2852-4c8e-ab4c-181fb580a61c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2ca058-fcd3-4dd5-a500-05d4bdc8ae98", "sighting_of_ref": "indicator--6876c226-d428-4d73-8f74-0d77d57e2f18", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e10b9f-2ea3-4f65-a073-91d5716c267f", "sighting_of_ref": "indicator--95061385-17a1-4d09-b573-958ee1ae2405", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49f54ba-22c7-4f81-bd0d-e1b376ecac04", "sighting_of_ref": "indicator--95061385-17a1-4d09-b573-958ee1ae2405", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25740c81-0eed-4241-98ba-6a8205ade639", "sighting_of_ref": "indicator--9fe8a465-6690-46bf-b61d-193ae9771477", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afbb0ef-1e93-4208-bdbd-a008202df506", "sighting_of_ref": "indicator--41123a19-5f14-480f-a008-6b689c347559", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b09288-b4dd-4afe-9ef2-0a7d56db9702", "sighting_of_ref": "indicator--16b66426-f5ad-49ae-9cd5-136c87218c55", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f535c5df-dd20-424b-89fb-520c9c140cef", "sighting_of_ref": "indicator--16b66426-f5ad-49ae-9cd5-136c87218c55", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12658d80-318a-4616-b89d-ccce9f715866", "sighting_of_ref": "indicator--70e2f23a-69ce-4531-b16e-fb007f0256e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2dc3709-1454-4876-9a6e-d23848896c44", "sighting_of_ref": "indicator--70e2f23a-69ce-4531-b16e-fb007f0256e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063430dd-85ec-4909-b594-826be5345c16", "sighting_of_ref": "indicator--f5034977-31fc-458e-9c93-371491ebe80e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c36fc8-0faa-4129-8da0-fec7d6ad7348", "sighting_of_ref": "indicator--f5034977-31fc-458e-9c93-371491ebe80e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564c93d1-bc79-4c1a-b2a3-56b0c65d33db", "sighting_of_ref": "indicator--56a6e647-10eb-4916-8cce-458306f23b8d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738f2467-bdd0-4da3-99f4-8a2a14b05e61", "sighting_of_ref": "indicator--56a6e647-10eb-4916-8cce-458306f23b8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f76f78c-ffa1-41c5-b2d6-531a1e69f229", "sighting_of_ref": "indicator--a257d66a-a925-4f87-ae8d-1e3983831f2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5075b9-1e4f-489f-8570-8a855a2c0245", "sighting_of_ref": "indicator--a257d66a-a925-4f87-ae8d-1e3983831f2c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5362100c-76df-4bca-94c3-3e268323097e", "sighting_of_ref": "indicator--c6e302af-1d5f-474c-99c6-d55a9f530fea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b290a58-f53d-4dfe-ac73-046412394e38", "sighting_of_ref": "indicator--c6e302af-1d5f-474c-99c6-d55a9f530fea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a114552f-c28b-4e05-a631-9fca8f02bf79", "sighting_of_ref": "indicator--91af744b-7357-4234-9f56-a9be03c5f79a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c2124e-980e-455e-a1ff-28144f915e4e", "sighting_of_ref": "indicator--d9d6c632-06bb-42c4-86f8-3401fb025372", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd03d24-84d6-49bd-8a7c-117b2ece2470", "sighting_of_ref": "indicator--370cf872-5751-49d6-b605-2deea5706f00", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551588f0-e968-44b8-b2c1-64244023dfb5", "sighting_of_ref": "indicator--130c7025-376e-4503-8405-9d948b9d28a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133cabd6-238b-46a7-b3c8-fa5ce7795c46", "sighting_of_ref": "indicator--130c7025-376e-4503-8405-9d948b9d28a0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0340d372-192f-40dc-837b-d3193a02b447", "sighting_of_ref": "indicator--8fd753c8-ea97-4d3d-acc5-03b54ddf7279", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af775a89-5ecd-4e6c-8ab1-4d100364832b", "sighting_of_ref": "indicator--c2224683-2887-4f93-a11f-5fabdfe6dee6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1efbe0c-769c-4359-9d55-44880351136b", "sighting_of_ref": "indicator--4b20476e-8b37-445b-93ba-fe76b385c63a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af50077-d859-448c-b89d-40035f2dc56a", "sighting_of_ref": "indicator--0581f5bc-2607-4c64-8ba2-a40ecbb57d76", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca2d696-f9a1-4c7b-82b4-69d0ad8925c8", "sighting_of_ref": "indicator--93447643-cb43-4c02-b7a8-de7888c770b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461ce82e-19d8-41dc-bfe7-d7ddfb7c9f33", "sighting_of_ref": "indicator--b5779219-8fbb-492f-a4cd-b30c703d9e6f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c46ec8-1f48-4850-a123-87726d1d2798", "sighting_of_ref": "indicator--81f73193-e025-4582-8c4f-fb50a30c6f2e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbaec4e-35ea-4bc8-aed2-dccd94f5cbe1", "sighting_of_ref": "indicator--81f73193-e025-4582-8c4f-fb50a30c6f2e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e6ccb2-7961-46ad-a30e-ab75b2aeb3d8", "sighting_of_ref": "indicator--83e8671e-b046-44da-8a90-ee5b7b024f02", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14f2230-7aaa-4375-bebf-b4921596aec1", "sighting_of_ref": "indicator--83e8671e-b046-44da-8a90-ee5b7b024f02", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343e945f-de87-416e-b2f4-e75680bffcdc", "sighting_of_ref": "indicator--4729b2c7-8684-4e93-9a4b-ef3b68722df3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2696eb1f-4251-4156-91f0-1c0e7e85850b", "sighting_of_ref": "indicator--4729b2c7-8684-4e93-9a4b-ef3b68722df3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a586d639-09ce-4740-9d7d-cd50327804da", "sighting_of_ref": "indicator--b07bac9a-a707-40ca-8cd1-d8b8a7d72f0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fa8e79-33c7-474a-9de3-76cf0a8476ed", "sighting_of_ref": "indicator--b07bac9a-a707-40ca-8cd1-d8b8a7d72f0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95df312-cf44-463d-8ac5-08e5cb93b1ab", "sighting_of_ref": "indicator--504a8237-8e00-47e6-949a-001cb9612f34", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4e62ba-83d9-40a6-bbb8-0b2e947eedf2", "sighting_of_ref": "indicator--504a8237-8e00-47e6-949a-001cb9612f34", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2167cc5f-4239-4efb-a896-15597ec8a475", "sighting_of_ref": "indicator--d6f8cf5e-c624-43f6-a1ff-6531e10a3592", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157d642c-7312-4389-bd4e-b83d98b57f5d", "sighting_of_ref": "indicator--58a07b41-076c-47ac-b685-5fb8bbc0ebce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cb428d-f132-4c3f-855c-4215662c41f4", "sighting_of_ref": "indicator--58a07b41-076c-47ac-b685-5fb8bbc0ebce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4ca1bd-ceae-42b1-9a8d-ac88d482c670", "sighting_of_ref": "indicator--b0083f48-d172-4a40-b949-2d71c0f5315a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b2f0e1-fedd-44fa-b634-d1794ebafa66", "sighting_of_ref": "indicator--b0083f48-d172-4a40-b949-2d71c0f5315a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45251fa1-c265-422f-8287-6ad6f55e0c65", "sighting_of_ref": "indicator--9cccbed8-181c-40c2-8e6f-28c92a5eba57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec680ea7-4c3e-4468-a494-4804abf6858a", "sighting_of_ref": "indicator--f9a38f08-6e09-405b-9a5e-7250bdd6e57d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09891d84-cb4c-45df-94cd-310f40ffedb5", "sighting_of_ref": "indicator--9baf2875-7661-409f-a20c-7f3c25af9d58", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d728d1e-7111-42af-80fc-45fb9740f574", "sighting_of_ref": "indicator--9c24de32-92d6-4616-8255-ad3b53a29a9d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e96b414-399d-4bdd-b8fe-73d31c205c46", "sighting_of_ref": "indicator--9c24de32-92d6-4616-8255-ad3b53a29a9d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eeeb20a-aaeb-4f77-957e-63baa18b92da", "sighting_of_ref": "indicator--9c24de32-92d6-4616-8255-ad3b53a29a9d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d493a2d8-8f15-4c67-968a-1e46fa852a04", "sighting_of_ref": "indicator--143c827c-0990-47ba-a0f1-f9729749ac51", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7322adad-d1f2-434f-b912-5449d784e077", "sighting_of_ref": "indicator--d221a537-6809-4e86-ab9c-fa10ef871f9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f941217-887c-4b9d-a953-a7a2760c03f5", "sighting_of_ref": "indicator--cc192de2-add2-4dda-9e28-d97c202b6210", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f431a0a3-7ac4-44ae-8f43-041d6d5bd7e1", "sighting_of_ref": "indicator--36ec80ec-8514-4775-a07d-07274332338e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063b7c31-c40d-4cbc-ad52-927a9978156b", "sighting_of_ref": "indicator--d1a57bb4-5f63-4d49-bf12-79cd14f54638", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5f1547-8fde-43a7-bd6d-8668cd6ad473", "sighting_of_ref": "indicator--f247d6c9-eff2-4184-8b16-08f8b1b9f9ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f4779c-e545-476a-a0f0-458bfa3caae4", "sighting_of_ref": "indicator--4d09916d-82ea-45df-b654-5ee2a6d9456a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac8bc93-a33a-4ddf-a6b8-a05212c6f3e9", "sighting_of_ref": "indicator--f17d3c25-627f-4be4-83f6-1e316e395953", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cd6fb8-34d2-46ab-87d1-5965c85dff47", "sighting_of_ref": "indicator--f17d3c25-627f-4be4-83f6-1e316e395953", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb49d31-0f8a-4af4-85f7-d8c30ae36bd1", "sighting_of_ref": "indicator--c40263ab-9223-43b9-8a92-0e8aed735e0a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f75b7f3-3149-43e0-b9f5-3b7eac935ebc", "sighting_of_ref": "indicator--9826c1d3-d8d1-447f-b5b9-479b0f03193b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1203e3b2-8aba-400f-9818-9e4aa930c694", "sighting_of_ref": "indicator--f2a1506f-d9ad-4451-8d26-5eedb13312b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04737ffa-fdce-45d5-9d8d-1944ce36f8f3", "sighting_of_ref": "indicator--4238cc3b-1152-4a7b-bf20-593c35099fc8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caaa6de2-e492-4853-afc2-4bfc36879fd2", "sighting_of_ref": "indicator--5586e797-aab5-4507-a347-096f2b4de296", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4432a76-8a23-444c-a96b-441600392ed4", "sighting_of_ref": "indicator--db700982-b3ac-4669-a931-275b3cc554f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e40f182-40eb-4893-8b8e-83b4bfa9fb5a", "sighting_of_ref": "indicator--db700982-b3ac-4669-a931-275b3cc554f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba57dde2-0d63-4961-99c8-f94d6aa3957c", "sighting_of_ref": "indicator--f241898b-86c3-4e64-9c09-ece0511b3333", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affbd446-1ea2-4f31-9657-9104a41671be", "sighting_of_ref": "indicator--d8a905f0-5f71-4539-889c-8e5f816b8743", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe4686d-4895-4d19-af96-9d5c563ada90", "sighting_of_ref": "indicator--d8a905f0-5f71-4539-889c-8e5f816b8743", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce0d4c7-2406-493a-ac17-6fb5c4bc082e", "sighting_of_ref": "indicator--569991e6-91f4-490a-bd79-039550958b93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe25a2ac-0c1b-4bbb-b778-f0a23a1af481", "sighting_of_ref": "indicator--569991e6-91f4-490a-bd79-039550958b93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddcee13-13ac-401a-936e-43ddb7685a98", "sighting_of_ref": "indicator--027ada2b-866f-4de0-9506-4d0928c15ed0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d1e5ff-fdcb-432c-8ca8-ca7076f5c8cf", "sighting_of_ref": "indicator--5c32a2ee-cea6-4b23-a32c-437a12c7af52", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029ce4c0-778c-4c91-8519-01c584167ad2", "sighting_of_ref": "indicator--003f4e7c-16f2-4422-a4c7-79affe1738ac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4a710b-2e87-44c0-83e8-ff6aaa736776", "sighting_of_ref": "indicator--afef2b85-0276-4c17-9f2c-a0ad26b52cd9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728d8b07-026c-42b7-b037-f3a99cb0848e", "sighting_of_ref": "indicator--3c5f45b6-248e-49c9-902b-0957c86d5481", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8626fb7d-72c8-4287-9727-e07de0c21552", "sighting_of_ref": "indicator--3c5f45b6-248e-49c9-902b-0957c86d5481", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cf2492-6d27-49f4-afad-66df30bc2177", "sighting_of_ref": "indicator--88a3e80d-5026-49dc-98ff-362ca0060cb0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc90484f-abdf-4dd7-a217-6b8e1ec53f3c", "sighting_of_ref": "indicator--88a3e80d-5026-49dc-98ff-362ca0060cb0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a79148-74f1-4711-8dde-7201802955e8", "sighting_of_ref": "indicator--6ba349d9-7f3d-408a-8ab1-4d1c2d867665", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7d925c-5947-48ec-a8d2-571cf95a38fe", "sighting_of_ref": "indicator--de749b7d-5b1f-4232-ad0c-e62df6336629", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358cda48-0867-4be1-91f9-8f18a332cd91", "sighting_of_ref": "indicator--12b5abc8-25b8-4002-9601-873c60d6852a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e83f55a-bee3-4b0c-9993-113ea1e1e3be", "sighting_of_ref": "indicator--a4995e4e-60bd-4ffe-a9a9-9c90abdadb1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f966ab3a-9ff2-4fad-be57-1ca6eef83e16", "sighting_of_ref": "indicator--e34864ae-e234-4062-b163-5fec2f309369", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0a7eb0-fccf-4b55-8669-3a6eadf8af6c", "sighting_of_ref": "indicator--75bfa7ce-fae7-4400-bc5d-9ebc022bba29", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db392d1c-10c5-4225-a7ed-76396cd72a79", "sighting_of_ref": "indicator--75bfa7ce-fae7-4400-bc5d-9ebc022bba29", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9139a26-6efa-4502-a337-7214b4c9cc94", "sighting_of_ref": "indicator--dbc1b865-ee20-4fc1-99a4-f096864a81f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ec65ba-db16-4198-87ee-1605fb32b68b", "sighting_of_ref": "indicator--dbc1b865-ee20-4fc1-99a4-f096864a81f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50fc1b7-3204-4f30-82b0-0cb8f809b498", "sighting_of_ref": "indicator--5f366daf-8ef9-4c7c-8da8-471a0c4b17c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f07a872-51b1-42be-a942-4f435f02c19a", "sighting_of_ref": "indicator--5f366daf-8ef9-4c7c-8da8-471a0c4b17c3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a4e687-c47d-418d-ae21-a191042994a8", "sighting_of_ref": "indicator--81ecbfc2-c027-4b84-bcd2-5a41e6f2c91b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6559cf6-dbf6-45f6-8c43-056414d75202", "sighting_of_ref": "indicator--81ecbfc2-c027-4b84-bcd2-5a41e6f2c91b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee20007-728a-452a-8615-87dafb3fe0c4", "sighting_of_ref": "indicator--cb94e0d7-550c-4ce6-b53c-c8ec8b2540ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ff37a3-f201-41ce-8cb5-9a6b1d9b4b1a", "sighting_of_ref": "indicator--cb94e0d7-550c-4ce6-b53c-c8ec8b2540ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0967c8-d56f-453b-b3c1-bd4ec43d104a", "sighting_of_ref": "indicator--8f29a828-cef7-48b1-a25c-7207e4d50453", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bf8c32-44db-44fd-b79d-b7befffe21c3", "sighting_of_ref": "indicator--8f29a828-cef7-48b1-a25c-7207e4d50453", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e36e223-b163-4988-8ec0-1d20c8b20366", "sighting_of_ref": "indicator--f8c26b50-058e-4415-a4ce-6b3d0e8c9e63", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927adbf3-8e2c-4e1c-9ecd-0d2c1600e8d9", "sighting_of_ref": "indicator--f8c26b50-058e-4415-a4ce-6b3d0e8c9e63", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c34e21-0748-453d-98f1-3227b19d622d", "sighting_of_ref": "indicator--659b2364-cd9f-43d5-88b1-2996d53277c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8b1c0d-641b-483d-b8a7-15561e529897", "sighting_of_ref": "indicator--4c4472ba-86f5-4721-ae83-70a5378a1335", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d205b0e-6ce0-4113-8771-8e54b86675fb", "sighting_of_ref": "indicator--eab086c7-57cc-44fd-a173-255c0a8f0a9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa78705-4324-4eda-8af9-a253ad2573b7", "sighting_of_ref": "indicator--e8d81524-fa9e-4419-b8ee-26c0c54e7f55", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c934e28f-605f-43a3-afb3-297ce7335d80", "sighting_of_ref": "indicator--e8d81524-fa9e-4419-b8ee-26c0c54e7f55", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1a435c-28e2-4ad4-8604-316345a9739a", "sighting_of_ref": "indicator--891438ad-8a61-4f99-9ac1-e81f7c8fc7b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12141cf8-4f4b-40d6-a4bb-8c5ed17b7567", "sighting_of_ref": "indicator--891438ad-8a61-4f99-9ac1-e81f7c8fc7b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abf15b5-b21e-4852-9c75-87ec2418c715", "sighting_of_ref": "indicator--67aeafc3-5c89-4230-88a9-d000bce8a30e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3245735b-77bb-40e7-b35c-d0349f831681", "sighting_of_ref": "indicator--684c1377-0da0-4020-a179-fe1910e50e27", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59d4187-461a-4c79-a044-3280fd3ba3ad", "sighting_of_ref": "indicator--684c1377-0da0-4020-a179-fe1910e50e27", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e9a42f-fa2a-4818-9686-529a60244400", "sighting_of_ref": "indicator--b55c9750-8ffa-4dd0-b34e-e05aa171b885", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52c1a12-1d18-4a9e-b397-814943bd1817", "sighting_of_ref": "indicator--1f3a452b-2847-4113-b3bc-6ebc502c6533", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d1589f-33d6-4f8e-98ba-ed61837817d4", "sighting_of_ref": "indicator--1f3a452b-2847-4113-b3bc-6ebc502c6533", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2175fa-e38a-4c25-88ad-81c4ddce1e65", "sighting_of_ref": "indicator--2293e1ef-ba70-4c32-8768-e2c71dc911be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e39dad-9066-46a3-b1a2-b1fb6c95f467", "sighting_of_ref": "indicator--2293e1ef-ba70-4c32-8768-e2c71dc911be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3022a17a-ca04-4ac6-8f32-cfca36bdfe54", "sighting_of_ref": "indicator--2a79fed1-1dc6-47a9-ae42-65a49a5ce536", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebec501-3290-459b-9ca6-371a4363964c", "sighting_of_ref": "indicator--5975d3c2-6d4b-4462-a014-aac2312d78b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1d3154-c2f9-4f34-867a-5b2fd9442024", "sighting_of_ref": "indicator--47e0b6fa-858a-464a-8387-8dc142e6a43f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14b8316-f4df-46f5-ba26-38422191dfbf", "sighting_of_ref": "indicator--98d3f161-c0cc-4d7c-992f-826cb83c2b2f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900b1d86-298a-4208-b9f1-1c4f39d977ee", "sighting_of_ref": "indicator--19272d65-e617-4965-9aee-888e64388503", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ab4096-e2fa-459d-89b2-6debb0d8a1c3", "sighting_of_ref": "indicator--2c804691-0084-467a-acff-c78569a3d977", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c635bcf6-3837-4ea7-b1c6-618bc9512a8f", "sighting_of_ref": "indicator--d34037b9-ad05-4660-8f21-5dedd61a7788", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70aba759-dd5a-4626-8823-aee2e1f90f40", "sighting_of_ref": "indicator--c358c194-7079-491e-bbe7-fc708d9358d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8f5bb1-930b-4078-8dac-b026731a602d", "sighting_of_ref": "indicator--f9112d97-eea2-4c92-bb0c-9384a3fc3840", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f804c88-28ce-4573-ada6-10d379c162b5", "sighting_of_ref": "indicator--f9112d97-eea2-4c92-bb0c-9384a3fc3840", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94793fb1-a783-437f-a384-962a22986f87", "sighting_of_ref": "indicator--0f5f7f37-eb58-4ffb-a2fe-e9a45e098f40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c739db98-c407-4018-93e4-987965412391", "sighting_of_ref": "indicator--80ab7e66-a7d1-49d4-987f-12df959d63cd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31c9a14-c119-432e-91c5-58be8131ca8c", "sighting_of_ref": "indicator--07e637c7-72bc-4efe-a790-e62a5b18fd46", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4573083-95bf-4b8a-b2ed-d80292f7d3a5", "sighting_of_ref": "indicator--9e4c2c0b-2755-45da-a584-a8dbc940b5d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac000051-07de-441f-885f-816e34228e5a", "sighting_of_ref": "indicator--91571620-8eeb-41ed-af56-c46f46a58c78", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc36adb-f80d-4af1-b939-df3dab0ba763", "sighting_of_ref": "indicator--91571620-8eeb-41ed-af56-c46f46a58c78", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bcdcc7-aa68-473f-a53d-c79049b7792c", "sighting_of_ref": "indicator--06f5d52a-606d-4525-9cb9-1dff35283153", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1067fe-75ed-451d-92b6-f287aebb395c", "sighting_of_ref": "indicator--422c72e9-4991-4d03-ad3e-a99e81f01461", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070b57f9-3203-4857-a8a7-625dbd48ee5f", "sighting_of_ref": "indicator--0485721c-d988-4d14-b73b-63fb59b5b01d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9f5ac3-385d-481e-a6e8-fce0fe73b08b", "sighting_of_ref": "indicator--0485721c-d988-4d14-b73b-63fb59b5b01d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329e2c01-e399-4554-8b0a-748aa7b8326d", "sighting_of_ref": "indicator--ad69d482-bff6-499c-bb66-2ab666572c13", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e368da6-510a-45b7-8d08-e023e8046bf0", "sighting_of_ref": "indicator--98256ba6-fa94-49aa-8ff5-f8ab70755a7a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702231c1-abcc-442e-a099-c5cbbba8174f", "sighting_of_ref": "indicator--df1edd91-9017-42ad-86a3-b66f506b481c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7ae1e8-ad5d-466e-99cf-f9621e32e6e5", "sighting_of_ref": "indicator--df1edd91-9017-42ad-86a3-b66f506b481c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee36305-a41a-4e1e-86e9-af5c26bbfb8e", "sighting_of_ref": "indicator--6d608cc6-1d14-4adb-a33e-41e15324625f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d502dc89-d0d1-49f2-8b57-9f76a1710100", "sighting_of_ref": "indicator--6d608cc6-1d14-4adb-a33e-41e15324625f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea517af0-ee45-4a73-904e-fb45ec06140b", "sighting_of_ref": "indicator--c382321b-dca0-45d1-aabc-796b0606af32", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea1bca8-840f-4767-b478-c9202b76c18d", "sighting_of_ref": "indicator--aacbb9ee-33b8-42a4-bfe3-61390d5a65e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fc64f3-8861-4558-9602-37988a8d6df2", "sighting_of_ref": "indicator--fc22e108-8cdd-41e2-844a-244a6b8eb350", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96edb8d-7cd9-47b3-81a3-cbadcd02ef77", "sighting_of_ref": "indicator--2873d750-80e1-46e9-8811-6068d1a3d8b0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a71904-cbc0-4596-8705-4a387e3efa54", "sighting_of_ref": "indicator--a4f98744-3a47-46b9-be4a-50803bd7e466", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a56a8e-478d-4052-ad46-5e12ad1fd9af", "sighting_of_ref": "indicator--a4f98744-3a47-46b9-be4a-50803bd7e466", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf76011-c46b-4f81-956d-cab8a33a85a2", "sighting_of_ref": "indicator--6e078b96-51d5-4b1c-b2e1-ef27aaf6f8b2", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cba8266-27f6-487c-aa75-cadcd29c8d4e", "sighting_of_ref": "indicator--2c616316-2f20-4784-8970-f5e43e597838", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e41effd-6549-483b-bfc6-717ebc3aa41b", "sighting_of_ref": "indicator--f23a3449-b681-425e-9edd-885f889346ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f456b0-2c7d-42b6-b28c-58da98522a65", "sighting_of_ref": "indicator--a76865c3-d5e0-49b0-852d-266145471e91", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53508458-a2f0-4b5c-b281-2091d369787e", "sighting_of_ref": "indicator--e6dcd2d7-1fcc-45f8-a6c4-6ca52ad3d7cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3816a375-3cb7-41a7-aabd-82d19ffc2e39", "sighting_of_ref": "indicator--e6dcd2d7-1fcc-45f8-a6c4-6ca52ad3d7cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e592f3-91ad-4d68-a35c-a08a7e0ebbf0", "sighting_of_ref": "indicator--fc0af8c4-eb35-4e91-8d83-4f7c28b959c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71e5b78-e5d0-443c-87dd-82f8565c580a", "sighting_of_ref": "indicator--fc0af8c4-eb35-4e91-8d83-4f7c28b959c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c6b3d9-3157-44f0-a25e-165dd5e38cde", "sighting_of_ref": "indicator--2a86601a-ba80-4fa8-be1b-f953dc9f62e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be1e3f8-66d4-47e2-b7a4-1ed2143c5ca5", "sighting_of_ref": "indicator--266cd8c0-6dd6-4e93-8324-813b617b6a60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93667e51-91b3-4250-8d36-371a96cb8f63", "sighting_of_ref": "indicator--881758f5-c865-4c58-989f-d3fa174a05d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da7f839-0d77-45c2-934b-dd8039dc97da", "sighting_of_ref": "indicator--1abdd935-c48d-4c62-ae9f-feb41ad63b35", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdec654d-6ffa-46da-957e-271a93e83336", "sighting_of_ref": "indicator--2cf32c49-0aa1-4e30-a8a0-2f1a4f9adef5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f916a445-00df-4a92-9d00-182f23b12a3a", "sighting_of_ref": "indicator--98114f8b-018a-41c4-bb8d-31e3775b44cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f609c39-6551-4088-a8ad-6c9f0d89d918", "sighting_of_ref": "indicator--44820fe3-43b7-487f-a404-e18d50902441", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8751913-1301-482e-bfa6-b279bc698d0a", "sighting_of_ref": "indicator--2c2dcaa1-62a9-41ce-8425-f2c6b3b1f0aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34100bc-fc3a-473f-bb44-7ae3008bc400", "sighting_of_ref": "indicator--792fc524-3162-4360-9e6d-27f03d58f1d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916e4776-b634-4716-a0a0-2ec4c0b335e4", "sighting_of_ref": "indicator--6a8ac064-0243-4b30-b2bd-f906653ee362", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ccdcde-551b-4f0f-914e-de0e696b8d5d", "sighting_of_ref": "indicator--6a8ac064-0243-4b30-b2bd-f906653ee362", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2620fb3-5636-4ec1-a986-52a53337c5ad", "sighting_of_ref": "indicator--782cca40-689e-4c0c-a220-1d7b1a8a87f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53793023-b521-4bc3-9807-d74d327915d8", "sighting_of_ref": "indicator--64b7fe25-42f1-4156-bf8f-f3b31c849c38", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd30028d-225c-4b81-9222-4f2bd104ded8", "sighting_of_ref": "indicator--64b7fe25-42f1-4156-bf8f-f3b31c849c38", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aec7939-e789-4c42-807d-fb154a9cd10f", "sighting_of_ref": "indicator--6f7c2330-12bf-4cb8-a532-af430ae9c5a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10becab3-848f-47be-81b3-c6be976f2f2c", "sighting_of_ref": "indicator--9e31e347-c17a-4c3d-a687-2ab511a15534", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c5ded7-6e20-4246-80c9-969c2f017e3c", "sighting_of_ref": "indicator--5ac7760b-af49-42cd-8aee-2dbd526dec1b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6e0b9b-8175-4eac-a73c-ddc19feb6341", "sighting_of_ref": "indicator--5ac7760b-af49-42cd-8aee-2dbd526dec1b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01a5add-9abc-4581-b7ba-d5a33dd5704f", "sighting_of_ref": "indicator--fdc4297f-c3c5-4fba-bda2-5a77724d4616", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb9b2d7-064d-4fe7-996f-fb9a0edde9eb", "sighting_of_ref": "indicator--a6151c7b-4fa8-4d08-a066-47c0b469e2c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7003c43-d58a-4835-8c19-74944c2fc2ff", "sighting_of_ref": "indicator--06f2a39b-b3c0-43c1-a5d3-e663d7266f1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bf2411-b945-4d4b-9849-5fde50799931", "sighting_of_ref": "indicator--06f2a39b-b3c0-43c1-a5d3-e663d7266f1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c36beef-41e6-4b2b-9805-721dd0d23e52", "sighting_of_ref": "indicator--8a7d69a5-ad54-481a-9cd0-6db3bf0fa6ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a24a75-3ad4-46e3-b46a-ba823f76bef1", "sighting_of_ref": "indicator--247726c4-8cfa-49be-8624-ab237e5dbc28", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8611e455-3b7b-4f50-9b21-6bbeb2b5929e", "sighting_of_ref": "indicator--81fd4ed7-0744-42ba-aaf6-3ad96890c117", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a30a0a-e5b7-42c6-9cca-4881fa0b3883", "sighting_of_ref": "indicator--81fd4ed7-0744-42ba-aaf6-3ad96890c117", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6102cf5f-b7d1-48de-8f5b-1f8f322ea97e", "sighting_of_ref": "indicator--2822c558-aaa8-4b9a-ada3-19c9efa4d82b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705ed2b2-3dd6-4885-b577-e1ef2361b14d", "sighting_of_ref": "indicator--f31632ed-7688-44d6-aed6-457d68bbf200", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8db275-17b2-4d35-b5fd-625be2ec813d", "sighting_of_ref": "indicator--f31632ed-7688-44d6-aed6-457d68bbf200", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60f48f3-27af-4a32-82db-dd72410a6034", "sighting_of_ref": "indicator--57dc749a-9da9-4375-91fa-519914065bdf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7dacb2-8932-4698-a685-ae35ad5d5433", "sighting_of_ref": "indicator--4ee25de8-8d39-4e16-be22-dbe62f5c1766", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93978e82-2335-49af-90e6-cc0f2e343a83", "sighting_of_ref": "indicator--e4fd8597-3f67-4163-86af-b0e0f5f032b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c12d17-c970-4b20-a979-47278f77fceb", "sighting_of_ref": "indicator--e4fd8597-3f67-4163-86af-b0e0f5f032b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2415262b-6d15-4c59-9adc-4b1aba74cd8e", "sighting_of_ref": "indicator--f78c6ffc-f3cb-49ed-875d-a097b30e22fd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35bdb22-a934-46f6-9707-7d9aca8d559b", "sighting_of_ref": "indicator--f78c6ffc-f3cb-49ed-875d-a097b30e22fd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901475af-e03f-4242-95d1-ffe352a27b76", "sighting_of_ref": "indicator--4d2c94ed-fe2f-4f06-9186-685a2f241236", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62069c7b-d314-443e-aa88-922cd64ba317", "sighting_of_ref": "indicator--bd299df1-6dfe-4f6c-b898-cc0596521654", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653fc686-92a8-4d76-8a0e-fba783c9603b", "sighting_of_ref": "indicator--bd299df1-6dfe-4f6c-b898-cc0596521654", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9c7c81-0b19-4c91-95de-32b28c2afd02", "sighting_of_ref": "indicator--9a73c352-6d1d-41e7-a168-27b8dd320184", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c43cff-b3da-406c-95b8-a717a9eb40ff", "sighting_of_ref": "indicator--c1461e28-6d9e-4e61-a846-a71a667a0c7f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcaf535a-d29f-4df5-8a74-9c20b4c63d6a", "sighting_of_ref": "indicator--84c9e214-0d83-4cbf-a5ef-4628608923da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1153e2d4-ac23-454d-bdaa-fd246ae7fb73", "sighting_of_ref": "indicator--d6c97e2b-f31c-4ef9-9bad-a638c59ccbf7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b19b7fd-f490-4c98-8391-7b2c012f7a13", "sighting_of_ref": "indicator--4b982da3-afa1-4656-9d09-8d1d42c596c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631a7651-517d-4afc-afa6-c05aea42dce4", "sighting_of_ref": "indicator--3439f8e5-ea1d-41b4-89a2-bceb1a3b36c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4e3cd5-b31d-4890-8cc8-0737bc34f133", "sighting_of_ref": "indicator--732534a3-43bb-44ff-bddf-182fcfacd1bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152224b3-3f1a-46db-b06b-f111b7228abf", "sighting_of_ref": "indicator--732534a3-43bb-44ff-bddf-182fcfacd1bd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3412ef91-1e16-4752-8fa4-ecc8ee90061f", "sighting_of_ref": "indicator--d606b976-1893-491a-ac77-60d90a5df547", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca5d1c3-fcdd-464b-9bdc-3b2be7b0487f", "sighting_of_ref": "indicator--80028592-ad52-48af-8530-82d5a8878f62", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5124b73-bdee-4e7c-89f2-e7caa046a24e", "sighting_of_ref": "indicator--0d39ecb9-d92d-4636-9715-2ebfc2cee841", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b041e5eb-c370-46d6-899d-5f7c2a20a20f", "sighting_of_ref": "indicator--0d39ecb9-d92d-4636-9715-2ebfc2cee841", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024d522e-0233-4620-8659-7bd763abdd48", "sighting_of_ref": "indicator--94540ee3-c641-4cd4-8091-e4b0be6bd1ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94d90f6-236c-4ef7-af17-230bcbbb131a", "sighting_of_ref": "indicator--e9e55268-b067-46b6-aa7f-68cba3cd076f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a758352-dbf2-4a85-aa4a-351452d639fb", "sighting_of_ref": "indicator--f196e65d-e54a-450d-84f3-93770723a293", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59765852-fd39-4abb-9569-fc37814cf62d", "sighting_of_ref": "indicator--231b31d8-d2bd-49b3-bdba-af596f6b0918", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15a5d7b-6782-4749-88b8-ccb2832439e5", "sighting_of_ref": "indicator--4f42cee2-a0da-429f-bed5-d04b221a1c30", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d91065-299e-4b02-9198-dd3ae5693a09", "sighting_of_ref": "indicator--23add5f4-c868-4f3c-b371-8df99a546c24", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c73513-b7d5-4113-9719-5a7c2c8aee70", "sighting_of_ref": "indicator--e6cc637d-6f5a-4d11-b365-43e126bb4064", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76d15ea-f822-4781-9292-4614704a79a2", "sighting_of_ref": "indicator--e6cc637d-6f5a-4d11-b365-43e126bb4064", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d0f0fe-2f58-4b7b-ab66-d09b3f535d3a", "sighting_of_ref": "indicator--cb9464f8-228a-4dc7-8aa2-08bb3c2f3b59", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409cb370-be21-4c72-9994-aa6d419e2a46", "sighting_of_ref": "indicator--d2322a7a-66da-4200-9193-5bcceb5a6799", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ec87ba-c098-46d8-805d-ff196ecd3fb0", "sighting_of_ref": "indicator--f633c277-f8df-40b6-8d3e-db51e2364e8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6bebfa-8829-4fbe-b6a4-41f7f79c2663", "sighting_of_ref": "indicator--d735d3d7-f648-4d57-8d37-009b56e4adca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a2009d-7e57-4092-8167-da5e2a0bd30e", "sighting_of_ref": "indicator--c18e5a33-279d-4d70-86cc-6113f8dfe314", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33fc0e9-304a-4f9f-b531-e114be1cd7aa", "sighting_of_ref": "indicator--79b92ef7-d8d5-4084-a2d3-81cd907a6d2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead57f19-ac8d-4d55-a36b-018dcb0d217c", "sighting_of_ref": "indicator--568f5622-a158-4406-a076-1c657784b93e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0737c0c-0e7f-4666-bd85-3f619083f8a3", "sighting_of_ref": "indicator--d9a3f0c6-55c7-491b-8f39-b5be2ff8eee3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b684eac8-c3c4-4967-8b42-8c555b117769", "sighting_of_ref": "indicator--d9a3f0c6-55c7-491b-8f39-b5be2ff8eee3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11ba027-3437-42cf-a3d7-5dfebc98eb63", "sighting_of_ref": "indicator--0adcef31-0f62-47b6-8508-2d36a14301a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c014f2c9-8159-4f3d-84e8-85b78e180fd5", "sighting_of_ref": "indicator--0eb21777-1bfc-4a47-b68f-8b9e7a4c873c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d324bf37-a20a-4027-b755-ebd5493559ea", "sighting_of_ref": "indicator--0eb21777-1bfc-4a47-b68f-8b9e7a4c873c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b159191-2cd1-43d4-a019-22a83e92b1ae", "sighting_of_ref": "indicator--3ce3ab02-1e32-4f9b-92ac-b3f4da6e9d1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baedbe1-a6f4-4ead-ad9b-b359da9ea33e", "sighting_of_ref": "indicator--3ce3ab02-1e32-4f9b-92ac-b3f4da6e9d1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be52e378-1b46-4c27-9c0d-24c94dbec4cf", "sighting_of_ref": "indicator--bf863b60-9f80-4f8e-be1c-86104aa9aadc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acce320c-99e0-4d79-a149-48b3f3f70e6c", "sighting_of_ref": "indicator--8713dda2-d411-48a9-aae8-6a976e89a18b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b785318-fa06-4f11-be7a-e035b4b5bd35", "sighting_of_ref": "indicator--8713dda2-d411-48a9-aae8-6a976e89a18b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1d2076-c789-49a9-8bb9-8c7ed297ce5e", "sighting_of_ref": "indicator--b970311e-81b3-4229-9537-316f2e37b3f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3eb6aa-7672-487c-b5cc-26444c217acd", "sighting_of_ref": "indicator--562572a0-792e-4fb4-baaa-da2f4e58828f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a719be4-1b99-4943-91cc-3ed45e1932f7", "sighting_of_ref": "indicator--0bf82eb4-0cfc-4a74-9e22-14fe854f54a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d52e02c-7be9-40c5-9e4a-c8ca0ae23e24", "sighting_of_ref": "indicator--52541cfa-fa35-4697-a073-18484b651af1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77da5252-e8b8-4d86-a4be-0e490718395b", "sighting_of_ref": "indicator--d54a7230-5d68-4566-8f55-38c122b847dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb70dacb-ca33-4379-89a9-3caf78ca5358", "sighting_of_ref": "indicator--ad51a5a7-7bd5-4c41-bab7-6d72749a8f8d", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98f02f4-50b9-4430-b291-1c064791711f", "sighting_of_ref": "indicator--ad51a5a7-7bd5-4c41-bab7-6d72749a8f8d", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ff1b8c-bd7e-4248-8052-81ecc8a77342", "sighting_of_ref": "indicator--ad51a5a7-7bd5-4c41-bab7-6d72749a8f8d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9bb0a7-707b-4596-8c61-a5d426cd4054", "sighting_of_ref": "indicator--ad51a5a7-7bd5-4c41-bab7-6d72749a8f8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf045c1-0171-499c-8f7e-7abcf4110223", "sighting_of_ref": "indicator--ad51a5a7-7bd5-4c41-bab7-6d72749a8f8d", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311c9b59-b328-4e13-95d6-0847d3ba83ab", "sighting_of_ref": "indicator--0351e9ab-a2aa-4bae-bc11-2181de7506b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73de4d6-7271-45d6-a55c-ff2730c32396", "sighting_of_ref": "indicator--2f609747-3570-4f25-9337-6174f7039446", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704b2a0f-e1c2-4827-b93c-941e103e3381", "sighting_of_ref": "indicator--632a526f-ca7c-4a2a-bbe7-d0debe93f11f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f0e34e-07ec-40b7-a8e4-ec7289696a3d", "sighting_of_ref": "indicator--d10554e7-9cfc-4bb1-b79e-617f1ba1fd87", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25412056-1bde-4918-ab77-999a664bef67", "sighting_of_ref": "indicator--2c42a8c4-4682-43c9-b5b8-57005f564436", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5605399b-0484-4c01-a9e2-20a205d6abb5", "sighting_of_ref": "indicator--147a4596-8b0d-4754-b354-098b9baf6c87", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fafb9b-4bc0-428b-8813-7af698718a70", "sighting_of_ref": "indicator--b0b6d8d4-4a75-4c74-bde5-5c79ee4c1a45", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8392b4ea-2dee-40ad-9230-bc37e11958c6", "sighting_of_ref": "indicator--b0b6d8d4-4a75-4c74-bde5-5c79ee4c1a45", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef4bd28-0da9-4062-9ef2-467c652b75ee", "sighting_of_ref": "indicator--24cce55a-8c4e-4f04-bbbd-04d05e96d007", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70052696-37cd-41b0-a1b2-0f2e3ded0a2c", "sighting_of_ref": "indicator--f2808eb4-b0fe-412b-bf91-d0095d772bdf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c476a07b-d591-4207-b4dc-c34b385e5be5", "sighting_of_ref": "indicator--e01a7896-0b53-43f6-a4a7-a8aa46f26c72", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bce42fe-43e9-426b-a0c6-93a91cb75933", "sighting_of_ref": "indicator--e01a7896-0b53-43f6-a4a7-a8aa46f26c72", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217672c8-7005-428b-8064-901ee2196fd6", "sighting_of_ref": "indicator--47466e71-37b3-4d56-9658-411da485da13", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7638b24-c612-477b-8905-5cceef35de70", "sighting_of_ref": "indicator--1d3ef8ef-59d1-4faa-b932-51ae3a5b4d98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f81323-1b7d-4826-a7e6-25a2b5db59a0", "sighting_of_ref": "indicator--3ddd5392-1b35-4fd4-a68f-831a4be8ef4b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cce5e18-bd7d-49ae-91e7-3a2486526b94", "sighting_of_ref": "indicator--9304d933-ef20-4ae3-84d7-e7fd2fe8b439", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36420c0b-a068-44aa-aa7f-b7cf2f73f73d", "sighting_of_ref": "indicator--32710132-4a0f-49d2-b72c-1ec0091348f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721b07b9-9e02-4560-b40f-b886919b9fe9", "sighting_of_ref": "indicator--6eeccf7a-fec7-4dd6-864c-2a7e7b79ceec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccf625b-d500-4173-a94f-801cf14c71df", "sighting_of_ref": "indicator--6eeccf7a-fec7-4dd6-864c-2a7e7b79ceec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3ae2c8-355d-4a7f-860a-1222f85c6476", "sighting_of_ref": "indicator--e9880500-85ff-41f7-a6f2-a3bb6d15fbe6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801a5245-7606-48da-8e0b-184dec77398c", "sighting_of_ref": "indicator--1c97485a-1fa3-431e-b30b-b70bfba7660d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e7cf01-eeb5-4005-ac34-73b6ee5c439c", "sighting_of_ref": "indicator--4bb92b4b-6253-4551-9c18-fb13ff8b2c3d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41813871-c4ba-45c1-9d57-b39648bc29a3", "sighting_of_ref": "indicator--523249db-7cb9-4d41-a578-a4497e880937", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42acd3b-e7fe-40aa-a56a-7c97b197eafa", "sighting_of_ref": "indicator--4ca30a44-ee3f-495f-9fb9-a340f3b30e2a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c569bf6-0b26-4432-a084-82053e6fdb09", "sighting_of_ref": "indicator--d42aa532-f5ec-4c33-b0c3-08f78bbbb011", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a464832-dc84-4ee6-9e0a-b25560149a98", "sighting_of_ref": "indicator--08c9bf36-f3fa-4480-85f5-2c7e21992ad2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8e1882-84c0-4e07-9ce3-da94314c8681", "sighting_of_ref": "indicator--f52638ac-2bed-4be1-a0f2-023c8d651ac7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315680ae-de27-4025-8321-dd5b4d62f686", "sighting_of_ref": "indicator--f52638ac-2bed-4be1-a0f2-023c8d651ac7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ce3d6a-9724-4433-9bee-63a7f75271b9", "sighting_of_ref": "indicator--434f1630-1e24-4ee8-833d-bc9714e4ee77", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a166b6-438d-4f30-88a6-8f5fb855dd84", "sighting_of_ref": "indicator--0b6c1115-c9be-4ef7-83f5-6802904a2963", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5fd3a4-808a-437e-9843-595b7950e8f7", "sighting_of_ref": "indicator--f27bee01-a654-488c-a751-e139e206be96", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb9d952-25a9-459c-8e86-beb16f8f5083", "sighting_of_ref": "indicator--ef2614fb-a25c-4e77-b831-117ebcc05e26", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c7e3dd-1476-4503-8567-27d4fe6f37bc", "sighting_of_ref": "indicator--af443640-4e32-4b52-a843-60c1dcebd7e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed44dcb-7826-46ec-86ad-b3ff6c2e70f1", "sighting_of_ref": "indicator--d9214bd9-ca0d-4b87-9ffa-5f115bda2b9d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da6727f-e9fe-4869-a4a3-502734055046", "sighting_of_ref": "indicator--3999b7df-f716-4bf2-b91d-0bf2bcf48cda", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cefb2e2-f788-42cb-b593-cba3c37bf4bd", "sighting_of_ref": "indicator--1e27488d-a946-4d0d-b547-d8d39d38588f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94377528-d30b-4f36-b490-9070be82a26d", "sighting_of_ref": "indicator--498abc87-dc88-4cb1-bf47-97d6df0f4641", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a47bbbf-a380-4f74-8416-b480d5f72a6b", "sighting_of_ref": "indicator--671ca8dd-9074-4707-b949-ee02ebd75de7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac192b4-18c8-4439-b2ff-93546f326bb4", "sighting_of_ref": "indicator--d7f32007-d6d2-4e7c-8067-dc3012eb51db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13e1f4b-f268-4bc2-a811-b83efeea7834", "sighting_of_ref": "indicator--1a13b72d-8614-429b-9a09-1a6185ea16ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed4e9f5-49e1-437d-ae80-eeb1b3397095", "sighting_of_ref": "indicator--edcfc014-d362-4af8-a15f-e89a4483825b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118933e1-6868-44b2-b495-95bb2d7c3f6a", "sighting_of_ref": "indicator--27f9d1b3-cf0d-4b4e-9e10-2309bc7c8571", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65182859-eef4-4988-aa9e-058500dd8b84", "sighting_of_ref": "indicator--bdcdb317-7faa-49b1-ad56-dbd7da27bbe4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1448e671-500e-4d5f-8b20-f8594eb6c33f", "sighting_of_ref": "indicator--87fe031f-155a-4221-9f53-2bfb59b13d38", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03db68c-1ff2-4da8-8243-ac2f28660433", "sighting_of_ref": "indicator--87fe031f-155a-4221-9f53-2bfb59b13d38", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0d654e-4bc5-4760-9e36-4504891e58e0", "sighting_of_ref": "indicator--c38a729e-4006-413a-8ace-26f846d89b45", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dec07a-ea8c-4169-b399-99bd23042bb0", "sighting_of_ref": "indicator--c38a729e-4006-413a-8ace-26f846d89b45", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a929bba-4215-4f29-81d8-fbcb989149af", "sighting_of_ref": "indicator--3044a22b-cf00-4dad-9172-0a6dd866d318", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8a1b18-b0d4-4fce-9e22-d12161d72134", "sighting_of_ref": "indicator--ab5f7437-2e11-4ccf-8036-8c6e191b6d03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920292e1-e57e-4158-9ac9-b9a7bf760f41", "sighting_of_ref": "indicator--ab5f7437-2e11-4ccf-8036-8c6e191b6d03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5901fc2d-a87d-4112-9fb0-eaee6f555a5d", "sighting_of_ref": "indicator--72c3f7f5-e745-4d18-afee-897774d30920", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dd52f7-76e4-4aba-b97e-9fa2eb71f3f0", "sighting_of_ref": "indicator--ce742f65-1d0f-4502-b288-cc7ca02c689d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1c629b-72cc-4b45-ab0a-36567d4b86e0", "sighting_of_ref": "indicator--ce742f65-1d0f-4502-b288-cc7ca02c689d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91e4491-33c2-45d9-a5a4-0ade27fb8746", "sighting_of_ref": "indicator--cc7a4950-a387-4a7a-ba3a-1b4925e8c618", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea48ea9-3294-40dd-bd9d-b8e44697e36b", "sighting_of_ref": "indicator--380965c1-1a66-4fe4-a57b-cad69cbc15d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79fbfb7-38c4-44cd-8cde-49fe49b053b4", "sighting_of_ref": "indicator--380965c1-1a66-4fe4-a57b-cad69cbc15d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be87ffb-3f5f-4918-9d31-2a57f4677477", "sighting_of_ref": "indicator--dbc11dce-6fb6-4245-bf21-88e057403518", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bd05ab-1e05-46ae-9352-4d3de26f43b5", "sighting_of_ref": "indicator--dbc11dce-6fb6-4245-bf21-88e057403518", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b427013-2b89-40a3-93b6-1d47c08a6ccf", "sighting_of_ref": "indicator--8221cd78-4c56-47a0-8932-736ad943163f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45cbf8f-276a-4dd9-a95a-31ccaef8823a", "sighting_of_ref": "indicator--58f95714-7ece-4111-b957-b31e0a8a787e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991f5e96-21da-4891-9134-d0948fb200f6", "sighting_of_ref": "indicator--58f95714-7ece-4111-b957-b31e0a8a787e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d09d2c0-d8e0-4e06-9096-00b9ce04fd0a", "sighting_of_ref": "indicator--224ee389-412b-400f-ae74-90208dc0f812", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b303d4f-2dc0-4e0b-b204-f3df609f27a7", "sighting_of_ref": "indicator--72d1f167-19a1-4cfb-8404-a341b2b17400", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e2e43c-7b37-4d5f-a7e7-2a46dc5111d3", "sighting_of_ref": "indicator--72d1f167-19a1-4cfb-8404-a341b2b17400", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682281e6-cd85-473c-a2db-547ab3e89727", "sighting_of_ref": "indicator--65a48cf6-dd1d-42a3-8419-85310ea9a8c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d639cbd3-d9de-4c6f-8f86-89cd35b873df", "sighting_of_ref": "indicator--882b3b4e-69d2-48f8-81da-6f61ac2de5f9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6017d1db-cf86-42a3-bd8c-daa7a2173257", "sighting_of_ref": "indicator--882b3b4e-69d2-48f8-81da-6f61ac2de5f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c4ef38-fea1-4b4e-819f-fd59d2809c08", "sighting_of_ref": "indicator--1d4289dc-ef13-4f61-ba6c-af60bee53f83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb4e7e3-f1dc-439d-b486-67967ddca5c2", "sighting_of_ref": "indicator--a09670bc-06ff-4936-82d2-92c4ad65dd3c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10768506-7113-4053-a00e-2983364a6478", "sighting_of_ref": "indicator--abeb4ff5-4600-4db8-b2c7-d8464a3984b3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c296b5e-0043-4da1-8875-2e53a2261501", "sighting_of_ref": "indicator--4f240bf6-360d-4a54-b784-1501f77c2307", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd75b12-bdc1-4532-8a4e-60a2796e2ed2", "sighting_of_ref": "indicator--4f240bf6-360d-4a54-b784-1501f77c2307", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230634da-93f6-4cdd-90b5-bd45f8ff18b4", "sighting_of_ref": "indicator--65060d53-8e58-49e1-a500-10ea48c8c171", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd33cf70-81fe-484c-bc1a-de64f80afb5c", "sighting_of_ref": "indicator--be2d95c1-d04e-4659-b6ae-609b18aae5a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fe3527-9412-496d-ae3d-70d456081552", "sighting_of_ref": "indicator--be2d95c1-d04e-4659-b6ae-609b18aae5a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b862c5d5-e478-4e8e-b352-57ea6f35600e", "sighting_of_ref": "indicator--815d07bd-6884-4daa-b07a-6a7eda6680d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008637dc-5818-45ea-9a88-0ea7731a4b46", "sighting_of_ref": "indicator--c68536c3-b211-4531-bbde-07e78b80e4f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9aaae6-64f1-42a4-9073-e4952bcba82a", "sighting_of_ref": "indicator--5cf418fd-2585-487a-86ab-5727c16d687d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ccdd65-ae28-4644-907f-dab03be4a1e4", "sighting_of_ref": "indicator--975dfd9c-dd84-4e20-ac32-27c857e19372", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d686db-4757-4793-9e8f-81fb7c4c57d2", "sighting_of_ref": "indicator--975dfd9c-dd84-4e20-ac32-27c857e19372", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a719c63-1bdd-43e4-9357-203c738c5dc2", "sighting_of_ref": "indicator--1dedd45f-ad56-48b5-91e5-c34ae4aba21f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4cd5e7-e969-4da8-bfe2-357f608f5b5a", "sighting_of_ref": "indicator--1dedd45f-ad56-48b5-91e5-c34ae4aba21f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19cf676-5b91-43d1-9845-4a0a00fd35cc", "sighting_of_ref": "indicator--1bef0f6c-c385-4721-8cdb-d473744e78de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b380d683-e22d-4b5c-a493-a26b4e64d581", "sighting_of_ref": "indicator--f2e8802d-a9d0-425b-bac4-8ebb21546ec0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5627c0-f560-47e5-86b4-5fe0697e0939", "sighting_of_ref": "indicator--f2e8802d-a9d0-425b-bac4-8ebb21546ec0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0593c412-a4ee-46bb-aa1b-b3d43377b597", "sighting_of_ref": "indicator--34811642-ec83-43bf-8df8-a6e558666b06", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcb074d-a2d4-402e-84be-5d94481a1dac", "sighting_of_ref": "indicator--34811642-ec83-43bf-8df8-a6e558666b06", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc1ee4e-d4ef-4fde-8998-d749cec4ca5c", "sighting_of_ref": "indicator--2df46b25-492a-417e-9a5a-40becb9b3793", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3005b818-c1e0-4f92-8225-027e6b459f2a", "sighting_of_ref": "indicator--327ca543-4758-4324-b2f0-8fffc2d7e6ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495b66c5-7efd-4ee1-8c9a-6a964086e766", "sighting_of_ref": "indicator--327ca543-4758-4324-b2f0-8fffc2d7e6ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4f3fe7-daa8-43b7-a3c8-b80448d91792", "sighting_of_ref": "indicator--88c16294-c150-4285-a49a-411f84429772", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81aaa3a4-bab4-4429-8f3c-3e008be22831", "sighting_of_ref": "indicator--ba3934e5-5e03-40a2-997e-bf8ba9c2c778", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9c0926-2e18-4492-8ee8-41167f10c4c7", "sighting_of_ref": "indicator--d00e9bc4-1069-48ea-bfcd-10a4e62fa213", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe2de09-b75d-4bd8-9d1b-44ac3b445639", "sighting_of_ref": "indicator--e116cdb1-d15e-448b-b180-e5fbc88718ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867dae66-0352-4bf5-93a6-06b35b52f605", "sighting_of_ref": "indicator--6a2b4c34-9796-438a-be07-471a9115e784", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc9f12d-4a86-48d5-9bc6-ff8848f9408a", "sighting_of_ref": "indicator--65723ba3-3eac-47ea-8a5e-f968f05d8029", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf099958-cff4-41d9-8796-ebb114565f9a", "sighting_of_ref": "indicator--65723ba3-3eac-47ea-8a5e-f968f05d8029", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d0aaa4-04b7-4729-a659-e8fd5f5767f1", "sighting_of_ref": "indicator--7d55436b-9fc6-480a-9a11-bb175205299d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fa8661-f1ac-414a-928a-0c95a437f9fc", "sighting_of_ref": "indicator--385360c3-6393-425c-b842-bc42b4f6f3f6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9550a3fa-61e7-47bf-a8b5-9df0383e02ad", "sighting_of_ref": "indicator--fed6ff58-4e0a-4165-a9fa-c59cdea5cc8e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570bde4a-b8bd-4a2d-a032-4eb725630552", "sighting_of_ref": "indicator--fed6ff58-4e0a-4165-a9fa-c59cdea5cc8e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a7b801-aa7e-4588-9872-a9d728a81a0e", "sighting_of_ref": "indicator--d23eab18-878c-4e46-a200-8a40a1d77cb0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948b40c7-0ba8-4602-ba61-2cb64ae8bd42", "sighting_of_ref": "indicator--2f7ae4a1-f5b6-4952-b17f-566646fabc60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bacd37-b35c-431d-8fd2-a06185a5d396", "sighting_of_ref": "indicator--2f7ae4a1-f5b6-4952-b17f-566646fabc60", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b54565-ad8b-40ce-91bb-e2d1e6a0dea3", "sighting_of_ref": "indicator--99a33f19-232b-4ad0-a027-b7f80fc6b5d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b893af6-0b11-4150-8e1d-89d0abd8fd21", "sighting_of_ref": "indicator--99a33f19-232b-4ad0-a027-b7f80fc6b5d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a058c214-6fa3-4232-a4a8-33b5c2fd195c", "sighting_of_ref": "indicator--e88c8e93-22eb-4eeb-9597-c494dedb1b2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e787de3b-615b-433e-997a-31d4201649b1", "sighting_of_ref": "indicator--e88c8e93-22eb-4eeb-9597-c494dedb1b2c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256d535a-e2cb-40ab-99c1-601dfc32616c", "sighting_of_ref": "indicator--5d2819cf-804b-4186-acc8-e24930ee7057", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac458c9-89a6-44fd-b08c-7bf9827f0614", "sighting_of_ref": "indicator--5d2819cf-804b-4186-acc8-e24930ee7057", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf15c67-05f7-4867-a193-d884e3d4c98b", "sighting_of_ref": "indicator--fd978db8-74a7-4ebb-bbec-aedb8bfed3e4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e4038a-49aa-4600-97ad-464a0651d596", "sighting_of_ref": "indicator--808b4316-b017-469b-b2ab-5b44ecb0c65b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed337a6-04c7-45ff-a5dc-879cb82307b0", "sighting_of_ref": "indicator--808b4316-b017-469b-b2ab-5b44ecb0c65b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fce8893-deb5-43ca-8967-d4948c07e83a", "sighting_of_ref": "indicator--c6f38d64-398a-4e93-9d29-5098197a4376", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f47d7e-c24a-4582-a109-9c0dc3341f42", "sighting_of_ref": "indicator--c6f38d64-398a-4e93-9d29-5098197a4376", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c544649-0dbc-4787-8e69-dce7db51bdc2", "sighting_of_ref": "indicator--60ffeef3-95f2-4144-903a-9c4e0f6362cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64064d4c-bb41-4787-bef7-d89dd1c53b75", "sighting_of_ref": "indicator--a8658f33-2078-48eb-b906-2596bf4a5180", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f870e5-197a-4563-baef-a686278a6a98", "sighting_of_ref": "indicator--a8658f33-2078-48eb-b906-2596bf4a5180", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1038d2-483f-4736-8c07-dc64f61ae99c", "sighting_of_ref": "indicator--7c1ef4eb-ade2-4174-83eb-54da3fafd26c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e373b2a-7b2b-4bc8-8398-1d5af6772c31", "sighting_of_ref": "indicator--c9cc30cd-fa7a-4fa3-9411-e87b06dc2fdd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19b7574-7f19-4e38-afc1-f2b9071c028b", "sighting_of_ref": "indicator--1c4568a8-08c9-4e64-8c0f-d82da638edf6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acb0b6c-31c9-4bf6-be63-effa8500da84", "sighting_of_ref": "indicator--fed33626-4faa-40f9-8e6a-62399b8c1748", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d65e86e-f924-4932-a24b-a27cc0fb7472", "sighting_of_ref": "indicator--fed33626-4faa-40f9-8e6a-62399b8c1748", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e50c281-23aa-4ee9-8e30-91617570d284", "sighting_of_ref": "indicator--83e79e52-99f8-49ed-9d7f-8ef8723922db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305aa2f5-b999-4939-8e5c-9834f2c082b5", "sighting_of_ref": "indicator--83e79e52-99f8-49ed-9d7f-8ef8723922db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace157ba-e37a-4bb5-b3be-735cec7932dc", "sighting_of_ref": "indicator--d76ab7e6-6fbd-4275-ae7f-48b27ae56cd2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ca8d22-1364-4890-bf56-d95249e7d15b", "sighting_of_ref": "indicator--d76ab7e6-6fbd-4275-ae7f-48b27ae56cd2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8680b0e9-39e3-495a-924a-bacc61fc3471", "sighting_of_ref": "indicator--1b84132b-c2c5-4159-aafe-bb7b3e6683a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7872a2-065c-4346-849f-d50724e8c1a3", "sighting_of_ref": "indicator--b8e51c74-9f54-464b-8fc0-15eae458c956", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7d11f9-02b1-42fb-9cee-d3b73a575f45", "sighting_of_ref": "indicator--58594534-ca17-45a4-b062-df51773bd706", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5427e3-1344-49f7-9381-6e49df911a97", "sighting_of_ref": "indicator--305f6071-ebad-4c8e-8ea1-42a3ee46b538", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42786e2d-302b-4130-85d6-4b0d9c34734f", "sighting_of_ref": "indicator--305f6071-ebad-4c8e-8ea1-42a3ee46b538", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7622943-89a5-442d-a7a6-931d39176e33", "sighting_of_ref": "indicator--32880a67-c308-4b37-b644-56c2f9a0101f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806a29ec-8691-474c-a872-3fbb9ace611c", "sighting_of_ref": "indicator--7b845e8f-58d0-4d03-9ddc-45b8feadc233", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d338fe0a-24c9-40d3-84fd-ebd7904e566a", "sighting_of_ref": "indicator--5a173d01-3a29-43b3-b7ee-36e2a66bae6a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ab3dcc-7cbe-45eb-9d78-eee760e4235c", "sighting_of_ref": "indicator--5a173d01-3a29-43b3-b7ee-36e2a66bae6a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36268385-d73a-47bf-8510-6dc9a9a3bc05", "sighting_of_ref": "indicator--fea8a0f2-d1f7-49aa-8498-0efa0c8f3d63", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2557cf-44f8-4457-afba-9aa3a5047feb", "sighting_of_ref": "indicator--0d688055-4c1a-4ac5-9c11-cde254dfc25c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f11f52-4356-44c5-a61e-dd4a458fe6b5", "sighting_of_ref": "indicator--b79136ec-5b24-4295-91da-c69ae9797fd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b640aa37-afbc-4f8c-94f8-220316e5dad0", "sighting_of_ref": "indicator--ac71077e-1a98-413e-baa0-492e6f9ca58c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7f98a4-1c98-4baa-b546-b705a0eeb0ff", "sighting_of_ref": "indicator--3fdc92b2-cce8-4b7d-96cf-10bd5134c59b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709dd8b2-4750-45e8-b240-fdeedb6487a9", "sighting_of_ref": "indicator--29457054-5028-4870-949f-d0e5a699244e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4fbb79-5bd9-4b16-a4ea-4e2e16034711", "sighting_of_ref": "indicator--2d457414-db89-4a35-864d-87d34ec0f691", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7486a987-58aa-4c35-9a0c-095af7bff459", "sighting_of_ref": "indicator--4f597d5b-2435-47ed-beee-9ed09b0c96ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8a774f-1a8e-4605-96a4-6f243c673ef5", "sighting_of_ref": "indicator--5daef880-8d47-4107-8754-8fa7f0d85611", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe0ea49-4985-462e-847c-523d3c7b9bfa", "sighting_of_ref": "indicator--5daef880-8d47-4107-8754-8fa7f0d85611", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36bb98b-4b2e-4d7a-918a-8880f09eb20f", "sighting_of_ref": "indicator--2a89791c-e076-4f13-91b3-869d8eb24c85", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802fcec7-cb7b-47c1-a16a-781a8a75c7d5", "sighting_of_ref": "indicator--af5b6315-a58d-4f1d-8017-82d24f11b127", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702efcc2-416b-4f5f-9dc7-63517ca9b428", "sighting_of_ref": "indicator--2cd63d01-e709-4dff-baf0-dee4813653e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d2a155-1860-4bc3-a0c4-0385a8312a13", "sighting_of_ref": "indicator--b021774f-cab2-4fdd-a950-37af5a851aeb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ddfe4b-2e12-4d3c-a47b-da90e4fd02c4", "sighting_of_ref": "indicator--bc8b73d4-619c-43d9-8d3d-a7742b3fb45c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c75924d-33f6-4474-9f8e-0058778550d8", "sighting_of_ref": "indicator--bc8b73d4-619c-43d9-8d3d-a7742b3fb45c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a728f8df-0170-4b6e-a5c7-96442439d5b9", "sighting_of_ref": "indicator--24cd5e7c-7b88-4ca3-9bde-b97d6664d5af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9087234-8aae-4d25-bf9e-24ad60ccfed9", "sighting_of_ref": "indicator--71e59f30-1cd3-4c81-92b0-f70bea7308a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31476bd5-6c48-4f5f-a740-8e531acd72df", "sighting_of_ref": "indicator--65ea804e-b9f6-4e1c-bcd4-aa71a3cac2b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f27e120-5e6c-40d9-a19b-de85e2cba09f", "sighting_of_ref": "indicator--2b4fc7c8-f339-4cd4-82a4-39b05ed66d5b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc36878-a4fc-4525-b5dc-87547fb8b8d0", "sighting_of_ref": "indicator--4b37b68f-544b-41c7-a94a-42e5416b2a7e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3160abc-e109-4f25-b4ff-3020330ec928", "sighting_of_ref": "indicator--4b37b68f-544b-41c7-a94a-42e5416b2a7e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4cb134-e39a-44e7-a53d-6a954ed27960", "sighting_of_ref": "indicator--f83fbbb6-e2d7-4f01-ac97-7f21131d684d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07be035-bc8a-40ab-8f99-59f840864dd3", "sighting_of_ref": "indicator--3fa3fe5e-0194-4462-8068-363cdede5c29", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e86b6cf-8934-4401-927d-d6fbb5fbc135", "sighting_of_ref": "indicator--56f8fda8-9e0c-416e-8d08-dbd1758ac965", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551297db-c73f-4f0f-8e21-43d556eaba22", "sighting_of_ref": "indicator--01d38e78-8270-4a82-8bde-2777d6ed4fc1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac1fb84-54bb-42b0-a390-508ea4070b57", "sighting_of_ref": "indicator--479f1d39-5f5d-47ba-85d2-70ea3c9231a4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98d48ff-fd91-41eb-810a-cafe60979311", "sighting_of_ref": "indicator--31fd0faa-5e44-4fde-96a0-e57fd0474a72", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce3106f-a5bb-49b9-b957-c24159199308", "sighting_of_ref": "indicator--7e7a2cea-d61e-44e1-a9c6-7bc02389b63e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7042e04a-f652-4f27-9b99-4240d5b82aad", "sighting_of_ref": "indicator--7e7a2cea-d61e-44e1-a9c6-7bc02389b63e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2e4120-4ab1-4435-ae35-7a68ef0c3856", "sighting_of_ref": "indicator--a229b5d1-72ad-4970-81c3-5e848ebb067c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fe4508-2c12-4d7f-9327-e570418e025d", "sighting_of_ref": "indicator--c604b9f9-5775-407c-a69c-0f5b99cb81f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b91b9f-fa7c-427a-a517-d8b37e64fcab", "sighting_of_ref": "indicator--7612b206-32ba-488e-9347-0b596591e901", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66273ccc-301a-463f-b95d-e72380f45131", "sighting_of_ref": "indicator--324419f2-a062-4ba7-bbaf-4b683ac709c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c512f643-2e8f-4571-a0ad-9cdffce89da3", "sighting_of_ref": "indicator--ccbbdee4-0ddf-439d-a226-82c28949f932", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e67a763-6291-4995-bd36-5440f19d80a9", "sighting_of_ref": "indicator--7c4f5c54-a356-4bf5-ab3f-ed0a92a3fbbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a190ec6-cb9c-4003-8d2d-7b3a9ce55907", "sighting_of_ref": "indicator--188b9e1f-d6b0-4ea6-9979-8828fb85ac52", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfc2b01-1e13-430b-8b4b-6a0d429c526a", "sighting_of_ref": "indicator--db586dc1-d66a-4694-b705-fb1f4387a7ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6587faf7-6bef-4543-bb4f-d178337da9d6", "sighting_of_ref": "indicator--83232912-aabb-45c7-a5cd-a246887abff5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f68050-a036-4e66-ac64-93e433ca7a85", "sighting_of_ref": "indicator--bbe7deec-f0ea-4e6d-a4fa-4be89d09ea41", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707ed233-8038-45dc-8e57-3da5a011cf74", "sighting_of_ref": "indicator--bbe7deec-f0ea-4e6d-a4fa-4be89d09ea41", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f63b69-13ef-48ed-a0cd-4ab692b45aab", "sighting_of_ref": "indicator--66c5ffe2-00ee-4ca6-a088-d2a2d6404a2d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957e1294-537c-4fa6-b180-3363f9a628d8", "sighting_of_ref": "indicator--cf4bae3b-c701-4b6f-8385-ab0f848f6eac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3574e821-d691-4072-bef1-40c205c38d63", "sighting_of_ref": "indicator--2a6450a2-bc6d-4d23-867c-858d068ef0e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8fd7cb-5d8a-44dd-a49c-7c93a4444b26", "sighting_of_ref": "indicator--d1537031-3163-449e-b431-1c92f9e4b99b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939f69ef-a746-4006-a079-dc13771263b1", "sighting_of_ref": "indicator--7c3e90dd-058e-4ea7-989e-b32038fa5d83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f0631c-edeb-4264-b5cf-17f742543138", "sighting_of_ref": "indicator--f5998a76-f591-48a5-8d66-24ccd2002806", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b3f239-2a6b-403c-9e8c-b27ec8c0f7da", "sighting_of_ref": "indicator--7eb7d233-cc51-40b3-b694-a497a094b349", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87e7e3c-8a8a-443a-818f-f808e3a263fa", "sighting_of_ref": "indicator--6313e624-dd35-4ea1-aa01-9ed09d2940b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6545fbb6-9224-462d-aa28-2887cc1843ae", "sighting_of_ref": "indicator--ff14228b-ad21-448b-8745-d85340a3e3c8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13e8603-ec61-4b26-832d-c83041a3062a", "sighting_of_ref": "indicator--90289216-0458-4061-8d1d-1615b6297601", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c162bc6f-6b0e-4b09-8621-f20ae4245567", "sighting_of_ref": "indicator--c297aa44-e43c-4c86-885a-c4f7dc3ac1b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d6ee1c-0959-4bda-940f-d5cd9c4bcb0f", "sighting_of_ref": "indicator--7b80320c-93a4-49a1-a9e5-328a9cdd49f5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15935def-fb34-440c-bb7a-41cdcac49310", "sighting_of_ref": "indicator--7b80320c-93a4-49a1-a9e5-328a9cdd49f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e5a6ee-34fa-4488-9cf3-dbf140ba7cdb", "sighting_of_ref": "indicator--4155b3c7-71cb-48d9-8944-cf737b01070c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748c6cf5-2648-4b7d-b705-f1c16938147d", "sighting_of_ref": "indicator--3dde0dea-f162-40d1-9dd2-ff7f8e6a4f35", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b420f882-d4e6-4e3f-a023-cc69fdd690fe", "sighting_of_ref": "indicator--498bbdfe-5053-4978-a81e-d47b90895ef4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3af4f26-db6e-4f47-b20e-656efb8de285", "sighting_of_ref": "indicator--bfa72578-1a9e-4b56-a634-2d6e0ca36fb6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5aebf4-e780-444d-8633-45bdd9881e0d", "sighting_of_ref": "indicator--9a00309a-3079-4dc0-9a1e-6f63e624f57c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b464012-0eb8-4c98-86b3-d83c759c57d7", "sighting_of_ref": "indicator--4e1d5f37-b406-4644-b3a8-5d6df75eaa20", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da2b1be-8fa5-4f1b-97eb-977c9b7ea1ce", "sighting_of_ref": "indicator--f2a60784-342b-45e6-9a40-f0ef42d92349", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15415146-2138-4443-8c2f-1649f8213b33", "sighting_of_ref": "indicator--c48945d1-febb-4b74-a4d9-4c9d812425db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54081f64-1663-4585-bff2-6f41de1922ea", "sighting_of_ref": "indicator--c48945d1-febb-4b74-a4d9-4c9d812425db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefb9cf1-5c20-463e-897d-a6a2ba015654", "sighting_of_ref": "indicator--1e5c6547-a3f1-4457-bad4-6b83d4f4018a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf9490d-7fbf-4c7f-9149-b117eda17907", "sighting_of_ref": "indicator--2fffd90e-2cbf-4bce-8e55-e8c892ab0cfd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f258f4b-d22d-4a0f-b596-ae9b43a701ca", "sighting_of_ref": "indicator--808e6f66-02ca-4256-9f03-3a354a4e81b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1725ae93-be94-4a4e-9f41-ae9e5681772c", "sighting_of_ref": "indicator--8b192d75-97ce-45e5-b376-79b435f460b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee4aa7b-880e-4bc0-9d3b-ed1ca19cf30b", "sighting_of_ref": "indicator--8c86b99c-2c05-4098-ae0f-1258777fe4f0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c8c3dc-421d-442c-a1e6-3a85a8c62616", "sighting_of_ref": "indicator--337b9e7a-b171-4110-8b67-59c341bf889d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ecf7e1-0e51-4d93-95a7-d2be236fc971", "sighting_of_ref": "indicator--337b9e7a-b171-4110-8b67-59c341bf889d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4244e7a4-477c-4c4f-b52f-b4332a6cdb16", "sighting_of_ref": "indicator--e8ad538d-0984-4126-8c0d-96cad0c24222", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6adc1eb-6f93-4c68-be96-8ac63027395e", "sighting_of_ref": "indicator--fed7e772-ef27-4974-baeb-9ad0f6705ad9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d25baf-7088-42b1-9006-1e243e96640c", "sighting_of_ref": "indicator--2e72c35f-d9b7-47e4-a8ed-d15a7b73ca53", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be177da-f875-4278-95ef-6972076ba4c5", "sighting_of_ref": "indicator--586a1160-8195-4da7-b26f-143e43f32c82", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ce90e4-2614-4d44-8d1c-690884fd130e", "sighting_of_ref": "indicator--586a1160-8195-4da7-b26f-143e43f32c82", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e89164-022a-4b64-9f58-7f893931a432", "sighting_of_ref": "indicator--f3699880-1e08-4d6f-92e0-2ea7294f2c51", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9b1158-98a7-49b3-b539-c26757ce0155", "sighting_of_ref": "indicator--f3699880-1e08-4d6f-92e0-2ea7294f2c51", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8fca78-3c28-4855-af12-30ff15a38e21", "sighting_of_ref": "indicator--73b2d969-603d-43f6-92f0-91e1192f98ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64c38c5-6a91-4ebd-b796-464e83da4778", "sighting_of_ref": "indicator--b19d1b26-1a41-410f-a9d5-2bb3fc5918ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a88546-cf23-452d-9dcc-b4e49db7fee9", "sighting_of_ref": "indicator--2a0d5210-8586-4899-be4b-9449ce1d5d2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3245a541-bb92-48d7-a5cd-4e47448161ed", "sighting_of_ref": "indicator--2a0d5210-8586-4899-be4b-9449ce1d5d2c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5807cc0a-44e8-4c00-88ce-9eed32b59b21", "sighting_of_ref": "indicator--a5698599-657c-4f20-975b-8d0c741356d5", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c145e0e6-c493-4661-bc21-41b2ab607f04", "sighting_of_ref": "indicator--254c5b9b-8552-43a4-9e17-ad396676e1f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa7178a-c8a6-43e7-98d9-576d21edc271", "sighting_of_ref": "indicator--254c5b9b-8552-43a4-9e17-ad396676e1f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b293dd-1a9d-4020-aee3-51f858b622d8", "sighting_of_ref": "indicator--949c293f-09a3-4655-ab43-0b47882afd71", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791b419b-1536-4319-b638-3d60fa12a32f", "sighting_of_ref": "indicator--949c293f-09a3-4655-ab43-0b47882afd71", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5c3f2d-ef7c-471a-8acf-c3b4375d5623", "sighting_of_ref": "indicator--a333d8f2-1e74-450a-8eb3-c39a434b2f41", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3362b6c2-ed99-4b30-83ba-1a7acff70b3e", "sighting_of_ref": "indicator--a333d8f2-1e74-450a-8eb3-c39a434b2f41", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca8b34a-8777-471b-b15d-9edd2c692de7", "sighting_of_ref": "indicator--26c7a241-3de2-4232-8eec-a9d751111e25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639eba68-3431-4f2a-a5ab-8d1dbf1e28d6", "sighting_of_ref": "indicator--029bd47d-ee9e-47a9-a969-d94053bb0426", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17ecdbf-0abf-4214-a0d2-bf2d89c6ac41", "sighting_of_ref": "indicator--029bd47d-ee9e-47a9-a969-d94053bb0426", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80165371-e81b-4e76-ae93-4760b9820086", "sighting_of_ref": "indicator--fef5d1e4-1750-44c9-9972-7e9cf3ca19cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fa268c-38a0-4b2c-b485-430858000003", "sighting_of_ref": "indicator--fef5d1e4-1750-44c9-9972-7e9cf3ca19cd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38ecaf3-6538-46d2-b015-216ab6d93b18", "sighting_of_ref": "indicator--f841be37-dccc-43f2-a317-a12ad7e2c032", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a907bb4b-52e5-4e01-80f2-6b28900e6b92", "sighting_of_ref": "indicator--daf46624-a2b6-42cc-aa06-738b28fa0775", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258dce2b-8758-4e10-b1af-d00359b38a49", "sighting_of_ref": "indicator--583c31f0-582f-40c4-904c-4ea55ab8249d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41107949-9cf4-4fa3-bfa4-1369f57c0b47", "sighting_of_ref": "indicator--583c31f0-582f-40c4-904c-4ea55ab8249d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cd6e39-d495-4035-93ac-4b12a97f4973", "sighting_of_ref": "indicator--a040ffa2-cf5b-4f80-9b55-c6e7d6470f6e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ae26d9-eb5e-416b-bba5-052e05bedd3a", "sighting_of_ref": "indicator--dee8aff4-0ead-4738-a5c1-a48807cbebb6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93489d4-54f7-49fc-9e91-d8872a9b4ea7", "sighting_of_ref": "indicator--1128a678-4bbc-4e9c-9187-118f1b84083d", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6432de07-8b89-4879-b776-0f7a3ec79bda", "sighting_of_ref": "indicator--cbfd6fdb-c2dc-4acc-8b7e-c00d05674cee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0fecf9-435c-418d-8b9f-a77efc643623", "sighting_of_ref": "indicator--cbfd6fdb-c2dc-4acc-8b7e-c00d05674cee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49166049-942e-4a72-b296-cd456debc6fc", "sighting_of_ref": "indicator--531735e4-2da2-455a-9d4b-bc3bdeb2b3e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0746a8-aaae-474e-a92f-7ea9b82d30dd", "sighting_of_ref": "indicator--c0a84323-e96a-490d-80ce-48c75a0952d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573f8c47-3165-4108-8820-fc0c4217b482", "sighting_of_ref": "indicator--9d0ff190-9d20-46e6-8b35-758b2421df5d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e7affd-4472-4587-a76a-6f3e8f445e3b", "sighting_of_ref": "indicator--f8b0fa4b-a58f-4bee-94f1-5ccfdfd1ceea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39342cc1-f625-40a5-9e7e-d0df58c1c238", "sighting_of_ref": "indicator--006afc49-2518-4eac-a335-a8e4b8fd8eef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97115e56-27dc-439f-b6d1-7b3cd28fd7e9", "sighting_of_ref": "indicator--fac483d1-6266-447c-89ba-63e9d8e3b733", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64b111d-e70c-4489-9c8c-9cd6272ecd67", "sighting_of_ref": "indicator--cf4d4f75-7fb7-42d1-be84-f5198b7ad292", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d124f89e-7091-46c3-85f6-5e82d6747816", "sighting_of_ref": "indicator--aad0e843-6ab6-4abb-8169-3eb10b8ef6f4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bce35eb-9c31-45df-9eb0-f595a73ffff9", "sighting_of_ref": "indicator--52effdc1-97ef-4c9e-94aa-263eb608f78d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7d9729-0fa0-42e8-b43b-d1483e916f91", "sighting_of_ref": "indicator--423e4ee3-0caf-4606-a63e-a1983e6ecb74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dade2152-0d22-4f7c-954a-7aab232a4981", "sighting_of_ref": "indicator--8b5dbf66-7e22-4364-8f6e-5fce331137e9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a4f243-0858-4bba-88dc-5c67a3affe13", "sighting_of_ref": "indicator--0b670541-98b8-415a-912f-0a67ca48c7b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd11749-fa23-4517-9bf0-dc2a005ee676", "sighting_of_ref": "indicator--a1f76b77-8ec5-410c-b1cc-84620f60c17d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f18649a-5820-4e07-99ec-bd2525ee1a81", "sighting_of_ref": "indicator--a959da97-29ae-4502-9b1d-e1ecaa9141ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c9369f-4d63-4aeb-9658-d12635130683", "sighting_of_ref": "indicator--19484b77-763e-49d9-a441-5305b49fc3ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9271e67a-6b7f-445d-92ec-837c4efd4309", "sighting_of_ref": "indicator--8612a381-1711-45af-a0d1-e4be210d15c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aed675-c415-4edd-9af2-6b1397a95e84", "sighting_of_ref": "indicator--3aca2f7e-6bec-49de-b4fa-b168cfe149be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969c7d97-ff76-4d50-b18b-9209b85b7b18", "sighting_of_ref": "indicator--3699189e-8273-4cb9-abd0-00e880ba0a47", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e9bebe-b135-4c8a-8e5d-0b57b7f52575", "sighting_of_ref": "indicator--cc0acbe2-e524-4137-be0a-300533807541", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162f64eb-6051-4db4-8fe4-d522e57f98b3", "sighting_of_ref": "indicator--cc0acbe2-e524-4137-be0a-300533807541", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea663fdc-0813-4040-97a2-ab319877e1c1", "sighting_of_ref": "indicator--cc0acbe2-e524-4137-be0a-300533807541", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa412800-44fa-4fbe-8c97-5f6b5fb7e68c", "sighting_of_ref": "indicator--cc0acbe2-e524-4137-be0a-300533807541", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8bac69-4534-4e47-b650-92138dee09cb", "sighting_of_ref": "indicator--cc0acbe2-e524-4137-be0a-300533807541", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da50d061-d288-4c5e-9b14-e47d92c0f411", "sighting_of_ref": "indicator--aa102436-b9e5-495e-8197-a3ded2b79f05", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355154ac-6e99-44f6-9caf-f1b908d210d4", "sighting_of_ref": "indicator--aa102436-b9e5-495e-8197-a3ded2b79f05", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81c45ad-95ac-4d2f-8985-54ceb7417fce", "sighting_of_ref": "indicator--aa102436-b9e5-495e-8197-a3ded2b79f05", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdc50e5-a1a3-48e7-8031-0d45521feef1", "sighting_of_ref": "indicator--635f25f4-6505-45b3-ac0f-f82c4ca48f1f", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e148a751-937b-40ba-96ea-ce102251e464", "sighting_of_ref": "indicator--a11c47fd-5208-4ab3-aaa6-f909fae1e0ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d947db-afcf-4160-9425-7e523a75c853", "sighting_of_ref": "indicator--5e550be3-4f4c-42db-a669-df80124b7ca7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9c896c-1a78-466f-9d7e-b5dd234f8245", "sighting_of_ref": "indicator--8a223eec-652f-4ae0-81e6-e448f41edb28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b703c3-f36d-4ffd-8ff7-7eb742d1bb3b", "sighting_of_ref": "indicator--aab9c28d-235e-4c13-8c9e-e0164845e219", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b10f5dc-1d26-4713-bfae-484a222d6c1f", "sighting_of_ref": "indicator--1e76f09c-f96a-496e-bfbd-aa0dd59fdffa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a814cf-aba6-43fd-b838-2bd8403a57e3", "sighting_of_ref": "indicator--8ebbf7ab-54db-425f-ad75-3c2ee740cd90", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3801130e-172e-40f5-88c2-2a7e8f40ad16", "sighting_of_ref": "indicator--509274e8-99fa-41f7-8494-488293b2ce6c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271e7cb0-cbc5-42d4-ac20-e277bb4b11c8", "sighting_of_ref": "indicator--e29aadd9-74e2-4ff6-8c8a-0a3913aa61af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f054c72a-e93b-4f52-93e1-2dd6cff6a5ee", "sighting_of_ref": "indicator--47aa7186-3425-473b-bea4-3715bdf56c91", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80c6d7b-f857-42e1-905d-f300eae226db", "sighting_of_ref": "indicator--47aa7186-3425-473b-bea4-3715bdf56c91", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f902ecb-1b08-413e-b754-4c7bdd02e379", "sighting_of_ref": "indicator--36b24924-b15c-4643-a275-34f84c9ff1ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb19cb1-2ccc-46be-95d6-45538d4c6821", "sighting_of_ref": "indicator--4fa82153-7054-4b87-a9b3-1f4f31e72b42", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d99b7f-d52b-4111-959e-44f3ba9b35de", "sighting_of_ref": "indicator--4fa82153-7054-4b87-a9b3-1f4f31e72b42", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51bf4ec-375e-4d23-8f23-67d03c746f60", "sighting_of_ref": "indicator--58da03f7-57a7-43c9-b34f-b8cebc288aa2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11b4c8d-e622-47bb-9c31-ffbacf82744d", "sighting_of_ref": "indicator--b1b379ac-1013-4de1-a11c-b679d29ac194", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64361a25-c7d9-4bca-a767-7f4912a7b450", "sighting_of_ref": "indicator--b1b379ac-1013-4de1-a11c-b679d29ac194", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7ae93c-f5e9-4f9e-b237-b3b69a510870", "sighting_of_ref": "indicator--87d1f7a7-660e-4f77-868a-2a2cc8c8e680", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d85e59-abaf-4c77-945f-73d451c9dad4", "sighting_of_ref": "indicator--c95119ff-9263-4ad2-a4ec-01e58de5d713", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbd4fbf-104f-44ed-a362-5da4933344dc", "sighting_of_ref": "indicator--82d3a7db-1e34-4e7d-a407-c16ff78e086a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a7120d-383f-4c05-8dd7-025a49bab66e", "sighting_of_ref": "indicator--0f9940ea-1f0f-47f2-b0a8-a95d195af158", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee43239-5d74-4da9-8c6d-e32c0f2b7ee7", "sighting_of_ref": "indicator--0f9940ea-1f0f-47f2-b0a8-a95d195af158", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb415793-1b7c-413e-b251-88c12cee6b8e", "sighting_of_ref": "indicator--055626fa-031d-4167-9738-777e760b4775", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8eb693-7ab7-4c00-bd14-4d3e9eb369b1", "sighting_of_ref": "indicator--fb1c56bf-fae8-4eea-99a0-fb680d21eb36", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da4f7dd-46f2-41cf-a4ad-361cd60a7f35", "sighting_of_ref": "indicator--74cfa9f0-3f28-4d11-96b6-f06732cdbbb0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897cbf9f-f586-4a1f-8560-8ef13cf07223", "sighting_of_ref": "indicator--0fd0d2bb-39e3-45cb-b0a6-89262840b6c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517402b6-b38d-48fa-a89d-431f4c3860de", "sighting_of_ref": "indicator--4650a880-48ab-4bab-9108-ea1343987a58", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e777b4-71f7-496c-bb39-c790c91468f1", "sighting_of_ref": "indicator--ee095420-8368-498f-b9b0-0d56ec7d80f0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5b9186-b9c6-4026-b161-972304bb61eb", "sighting_of_ref": "indicator--ee095420-8368-498f-b9b0-0d56ec7d80f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2732f6f3-1ab8-4f65-8ac6-36a95bb3cc1c", "sighting_of_ref": "indicator--9fbf8292-77e4-46d7-a0bb-ae947a15d694", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17841393-fcd0-4942-847d-56e0cfb46797", "sighting_of_ref": "indicator--7551c152-5543-462f-97bb-a61fa647c6eb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a2f2a6-d252-448a-98c7-bb96e3ea7e83", "sighting_of_ref": "indicator--32dab301-e586-4e79-aff3-0daf691f5100", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddffc5f-6947-41be-b4c6-cba72c2e79a8", "sighting_of_ref": "indicator--b5b2f853-17b0-411f-9fd1-829d27ec7947", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3ac221-6fab-40d6-931d-1ce9feb274d8", "sighting_of_ref": "indicator--b632eee9-e92c-4083-9f7f-6192b4e69e5c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7feac1-6a01-41a9-befa-6a0ac20bcd80", "sighting_of_ref": "indicator--568c05b3-3e71-4d57-b6be-bb4560ec07f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5e3346-b021-4aab-9e10-53209bf9fb3e", "sighting_of_ref": "indicator--bf99b03e-3096-4d93-b28b-4ecb8723cdc5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01df281c-1dfe-447c-ada6-1c0c8b12f78f", "sighting_of_ref": "indicator--e8ec0824-9165-416c-96a8-b56dfbbff57b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b23fede-fba0-4c54-8289-e4df2d4cc978", "sighting_of_ref": "indicator--458468c5-d89e-4f97-97b4-2f6af34f942c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1be37b-0e5f-4cfa-9a06-12645db5373f", "sighting_of_ref": "indicator--ddec98de-d112-442d-91da-c984687473dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae7d1be-150e-4648-a592-82a98171407d", "sighting_of_ref": "indicator--66b2eaa2-900a-4f49-9b83-0a0d6654daaa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9e59b8-ac42-4a97-b483-4ff6a47e33ea", "sighting_of_ref": "indicator--30987ec4-c516-42f2-af1c-4a9655588146", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ac597a-add8-4b25-a77c-e605ad769b6d", "sighting_of_ref": "indicator--dc018e68-c08d-4dfe-bb9e-a6666b1e8ff5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dd1721-d474-4306-9dc3-265af2149002", "sighting_of_ref": "indicator--dc018e68-c08d-4dfe-bb9e-a6666b1e8ff5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506ce5ac-7cec-4c79-b512-5de8da6a9846", "sighting_of_ref": "indicator--33ec6d87-ae7b-4c41-bacf-948f6b8f0bfb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34b4ff6-f135-490e-a2af-5dd7ad4d6fc7", "sighting_of_ref": "indicator--33ec6d87-ae7b-4c41-bacf-948f6b8f0bfb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c42804c-dba3-4bab-a307-34790e33c46e", "sighting_of_ref": "indicator--6d40c8db-6c7f-4740-bfa2-ff05e8e8739b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eb1c48-d575-4c7f-81ce-11ac4d1baef8", "sighting_of_ref": "indicator--6d40c8db-6c7f-4740-bfa2-ff05e8e8739b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96026c42-6aaa-4ef2-b33a-0c5ea4c10d34", "sighting_of_ref": "indicator--579dd95b-c57f-4208-92e3-2bd085878fe5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8edd035-63b5-4a3c-bc66-c29e3992992d", "sighting_of_ref": "indicator--579dd95b-c57f-4208-92e3-2bd085878fe5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0891faf6-23e2-4392-8ed1-76046cf8e351", "sighting_of_ref": "indicator--8361a0c5-5f61-409d-8651-a4755b6725ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4920ea07-57ff-438d-8cfa-dc75c93fc3cb", "sighting_of_ref": "indicator--8361a0c5-5f61-409d-8651-a4755b6725ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9b752f-0330-48bb-aa2e-bcb963fbc488", "sighting_of_ref": "indicator--a05df950-5853-4c21-a1c5-e788d824af95", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7aaebc-1070-4efe-a5e0-da39d4f2ecb2", "sighting_of_ref": "indicator--a05df950-5853-4c21-a1c5-e788d824af95", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0cd3f1-dc85-46be-8b66-772d46f3f1d1", "sighting_of_ref": "indicator--0f27c284-5e91-452b-a29c-ba5609fc8192", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01c7b9f-77ac-4a0d-9ce4-581b947144a9", "sighting_of_ref": "indicator--28c3ef2b-3c65-4bb8-a7c8-9fbe78bf13b2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24e32a3-2a78-4cde-99eb-f4ba6385a147", "sighting_of_ref": "indicator--16b02fb0-c4cd-4580-8b3d-bd186296df34", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74b00cf-3fc4-4420-ae3c-056aed0c9b2f", "sighting_of_ref": "indicator--c4462678-4c87-47c2-a0e6-ecfd6a93937b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b9ba86-a9cd-4644-bb81-53e0229881a7", "sighting_of_ref": "indicator--ccc10690-b785-481a-8ff3-033e75905fcd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eae043-1cfb-4363-85ac-282afa8508c4", "sighting_of_ref": "indicator--b92494d9-9010-43dd-9d84-6ec2448aa0a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faaad49b-0105-4089-8769-d8076e9e1ced", "sighting_of_ref": "indicator--d88ffde0-0bea-4b83-bb04-b78327e97840", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5961bde4-eeec-4f17-8652-b40e2ea23c50", "sighting_of_ref": "indicator--d88ffde0-0bea-4b83-bb04-b78327e97840", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b36267-5609-4704-9f5b-dca9a8a9b839", "sighting_of_ref": "indicator--733480ad-5790-4bc8-944e-137844d681fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12439a05-e22e-4473-8232-be2f905a3450", "sighting_of_ref": "indicator--4de42e10-752c-47fa-bdd9-aca93f5fddff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9669206a-d274-421f-ae56-3fdf833b0235", "sighting_of_ref": "indicator--4de42e10-752c-47fa-bdd9-aca93f5fddff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf7b844-8309-4674-b49c-a672870c33be", "sighting_of_ref": "indicator--c30f515a-4cc2-423d-816d-82ba45790afd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c19179d-6e02-4a80-89f4-a846fbbf502c", "sighting_of_ref": "indicator--dcbcd3f9-f9da-4284-a37f-f42d20e4d857", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73e360d-1d63-4d9e-a46d-2ebf449a6d1f", "sighting_of_ref": "indicator--0e133626-9b66-483d-bf53-fe3842090b0f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51330fd3-51c9-48c9-b686-56626dd0cc58", "sighting_of_ref": "indicator--90b85b09-c76f-4d86-80d9-14ed8b9260a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c484746-f44c-4136-ac9c-558779f5f624", "sighting_of_ref": "indicator--b9ec4e5a-a906-45b1-9aff-b759f936252a", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c71aa2-9dd5-411d-8ff2-6921a4a3919d", "sighting_of_ref": "indicator--32b276a2-a825-4850-99a0-aea73cb93b1e", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675c354b-e823-4035-868e-7c343db87ff5", "sighting_of_ref": "indicator--84acbe4f-57be-4729-a2c7-7adc0a8ee184", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040f263d-b854-4d8f-8d69-b704e250c029", "sighting_of_ref": "indicator--2f05eb7e-ec8d-46df-a22d-b206fd455136", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7916142-d7f8-49be-a02b-036cc4cccc7b", "sighting_of_ref": "indicator--df0ba202-0014-485d-b1ea-78f7b80b3155", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1967fe-506a-4b44-bd14-5faf5636977e", "sighting_of_ref": "indicator--df0ba202-0014-485d-b1ea-78f7b80b3155", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b349481d-cab3-4700-92fe-b26ec5952ce7", "sighting_of_ref": "indicator--f5577803-70c5-4af3-bca7-2a4ca104dfae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aaa0173-6a3d-4908-ba97-59607c10bc3e", "sighting_of_ref": "indicator--1999d40e-4bf7-46f3-9d7a-a7c86dadcb98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3476c40-1cae-4a6f-93ef-c3f93aeffc32", "sighting_of_ref": "indicator--1999d40e-4bf7-46f3-9d7a-a7c86dadcb98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef18bd53-3227-4588-8ea2-016b8a3b3fb8", "sighting_of_ref": "indicator--32f7ab85-8118-4b7d-b25b-39764870e59d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff564f6-c5ce-46eb-9a91-9130807a491a", "sighting_of_ref": "indicator--533fb6dd-157e-47c7-86e0-d55dbbc4001e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1319be11-b84a-47c8-af16-a4f07e38111d", "sighting_of_ref": "indicator--533fb6dd-157e-47c7-86e0-d55dbbc4001e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b729ce8-3ba2-4c59-83b1-48cde914da4d", "sighting_of_ref": "indicator--7ee4cf5d-4a4a-4361-b037-26c8530d88bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e2bd67-f712-4640-8355-d4152a1f5d7b", "sighting_of_ref": "indicator--7ee4cf5d-4a4a-4361-b037-26c8530d88bb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d26f97-72d4-45c8-9437-616f784d0804", "sighting_of_ref": "indicator--6ec13221-b80e-443f-a8e6-99628503267b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5047ae0a-2e96-44d5-9a4a-618d85627ecc", "sighting_of_ref": "indicator--11bb2e50-7e67-4520-8c5a-da1c49acb3e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bfa76e-cdcd-46d5-a0dc-01f4c4f1daab", "sighting_of_ref": "indicator--11bb2e50-7e67-4520-8c5a-da1c49acb3e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdd36b9-44ae-422a-b623-da044b1fb075", "sighting_of_ref": "indicator--2504b0e8-24d2-4d47-a2ad-c4926e0ad0bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6472fa-c6f0-48e3-b402-318fe6982969", "sighting_of_ref": "indicator--d65b18b5-5a7c-43f1-9668-c376a62457bd", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc68495d-31b3-4305-a370-691ddaf6110d", "sighting_of_ref": "indicator--d65b18b5-5a7c-43f1-9668-c376a62457bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c73bf08-2ff9-45a7-a774-0aa1c82dbb68", "sighting_of_ref": "indicator--5c6ecfe0-af81-42d9-a41a-fc11aa67673a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7268b940-5433-4392-a4fe-b70380b91e5f", "sighting_of_ref": "indicator--bbdb8bd0-c869-4c19-bb82-60b02f5eeb71", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b43707-744a-4ec6-86a4-2a38136944e7", "sighting_of_ref": "indicator--bbdb8bd0-c869-4c19-bb82-60b02f5eeb71", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c52c46-1343-44a4-a734-5ff83b70d03a", "sighting_of_ref": "indicator--d844b53a-420b-4a2a-9ac8-5c8f8136a216", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400f330a-fcde-40ae-8170-b24223107ee3", "sighting_of_ref": "indicator--e5b930c1-0c0a-41b7-ab8a-2310c5241333", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e318df-7719-41bf-b9d1-51404715de0f", "sighting_of_ref": "indicator--e5b930c1-0c0a-41b7-ab8a-2310c5241333", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e73a27-f67b-46f8-af73-e61369957139", "sighting_of_ref": "indicator--b7eeb264-0619-45f5-ae32-c6e42ff2264e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0c25f7-3eca-46b3-8fcd-31b2ca418220", "sighting_of_ref": "indicator--b7eeb264-0619-45f5-ae32-c6e42ff2264e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0564a6c-2313-4948-8d65-76a2a62112c5", "sighting_of_ref": "indicator--552db74d-740d-49fb-a206-101f20d4ae7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff55a26f-924a-4b76-b94f-df9694396720", "sighting_of_ref": "indicator--975cef25-9874-4016-ad6c-6208b81c3fd7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f207b9-e147-43f4-97f9-fe5458f5c8fc", "sighting_of_ref": "indicator--dcaa5545-22d4-4f46-b73c-268d3df67f74", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4eb1b5d-51d5-45b6-b57c-0c8560395c1e", "sighting_of_ref": "indicator--b5de8315-2475-4b03-8018-ff1f6513be4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62881bd6-24a7-45fc-ad30-3fc6da3e4e50", "sighting_of_ref": "indicator--20e5a5e7-4020-4df2-babc-23a5ca4dcb9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc37bd5a-bbab-4dad-9fa5-001912c14af4", "sighting_of_ref": "indicator--20e5a5e7-4020-4df2-babc-23a5ca4dcb9e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8977dd42-4354-4d7a-a7cf-a1d6c7267dd8", "sighting_of_ref": "indicator--23b9c783-8490-4a2b-9ce3-6ef8631bb524", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab6b117-3098-49dd-9b3c-91e418056ef4", "sighting_of_ref": "indicator--0778df50-df9a-4e00-afbb-66d9ac24ec64", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1564ed54-9fb1-4149-b2da-381d4fbea3cd", "sighting_of_ref": "indicator--a843a3b7-53d9-4a21-a280-8145561ebf17", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d01c2b-03f1-41a1-8f9e-688f16313a1b", "sighting_of_ref": "indicator--a843a3b7-53d9-4a21-a280-8145561ebf17", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbef90d-2f7d-4435-bfcc-3e9d1bccfd2e", "sighting_of_ref": "indicator--7f93ae7f-b7c0-4ff2-b08e-74d81585f949", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae76fd5f-da42-4592-8ea7-5324d290bee0", "sighting_of_ref": "indicator--e25bd967-d2a4-4ce6-8575-fb334088d3a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a39feaf-25b5-4e8e-a205-ace37604f0be", "sighting_of_ref": "indicator--c8d87da1-c923-417a-b482-378ccc175984", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1001dc8d-7194-4557-9555-b56467a5247a", "sighting_of_ref": "indicator--48577cc4-a781-47fa-b004-806f8c4f45bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae762db-52b4-4c99-a356-5c547509157b", "sighting_of_ref": "indicator--48577cc4-a781-47fa-b004-806f8c4f45bb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cf124c-9946-40cf-84e2-9456a887de7c", "sighting_of_ref": "indicator--dbc892d7-8d2e-4ff2-830c-9e90b9bf18a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0d7cd3-e91e-4cd5-8024-870c6ecfa14e", "sighting_of_ref": "indicator--dbc892d7-8d2e-4ff2-830c-9e90b9bf18a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0095aab-d3e8-4a1a-8d87-e1597c033b23", "sighting_of_ref": "indicator--2de737cb-d560-46a5-ab59-77b8a732826c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c2df40-bd1b-4af5-9611-d63629b72c15", "sighting_of_ref": "indicator--2de737cb-d560-46a5-ab59-77b8a732826c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08adcdb7-3082-4b66-b648-d11a56faa8fb", "sighting_of_ref": "indicator--1aaad37f-2661-4489-835f-8b22c1f2a7c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5ee245-792d-4a47-9359-8c336de9bc9d", "sighting_of_ref": "indicator--606ba8f2-7cf7-4b20-91b2-c0522b62d616", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0e40c7-e329-4d86-9a37-3bde74fe5428", "sighting_of_ref": "indicator--3eee47c2-7ee9-4ea9-8618-9e2a1e6d9ee0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd15d34-2fad-4084-a836-64bcf4195e43", "sighting_of_ref": "indicator--4b079549-c9eb-4472-841d-c91e078de201", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8249edf3-ff33-4f54-9f9b-5bd3e87c9731", "sighting_of_ref": "indicator--493f1cf2-f8db-495c-a151-cb4aee582dca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d198e0cb-06d6-483f-96df-42c46ea504c7", "sighting_of_ref": "indicator--afad7c3a-36f9-4cf5-bb5a-0b33889af14e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a35fbbb-616a-45e3-ab05-8ef1afa4d23f", "sighting_of_ref": "indicator--9a140076-6706-4703-9105-8333857fe65d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef57d08-912b-4a4d-9beb-6ea2932ca6fe", "sighting_of_ref": "indicator--37bc3f38-9793-4235-8f52-d346c16daadf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5182e7fb-5a32-4b3b-9073-c5650aba32fb", "sighting_of_ref": "indicator--97d5e286-148a-4f6a-8137-3b5385cbac0d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1d8967-da86-4af3-87b6-ed7c75926402", "sighting_of_ref": "indicator--93017c62-915f-4a14-b5bc-c8ef582ab3d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7f0e4a-5bf8-49c8-b012-3c9b9eba1046", "sighting_of_ref": "indicator--afe3020d-575d-423f-ad11-71dc19dc9896", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e157366-edb5-4915-bd33-97e3ca1f8ffc", "sighting_of_ref": "indicator--fc6edb00-9f04-4704-9761-f2f2804338d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43eb927e-7c5e-45a1-9011-860a22d86e21", "sighting_of_ref": "indicator--fc6edb00-9f04-4704-9761-f2f2804338d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ddb9cd-dbeb-4f10-b63c-0e1f154ad9ba", "sighting_of_ref": "indicator--05f82244-f34c-4335-9da8-d275e808ac2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5765aeb-9c20-4b0b-acd0-6a5882530c60", "sighting_of_ref": "indicator--21bc326d-581b-4588-8d5f-039949c0aad6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1547e383-ef1d-4d90-9416-58995f266362", "sighting_of_ref": "indicator--db33a914-427c-4740-8aa0-686cccb504f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf847b2-2590-4464-a57f-b15dd4e71346", "sighting_of_ref": "indicator--db33a914-427c-4740-8aa0-686cccb504f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5059e1cc-a4ac-4912-b132-6b5e6bfa0226", "sighting_of_ref": "indicator--0ee23b04-45b4-4426-b92e-a3436b98d071", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14f5ac7-1153-474b-8240-43b9ec4517bc", "sighting_of_ref": "indicator--5e0bb671-7bd2-4fc6-a539-bca0784fb396", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8d4acc-b192-49b3-9f04-3b567987d204", "sighting_of_ref": "indicator--b8bf4af9-e98d-4ff8-a540-f6497d9f5e7e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7d3dc1-5f0d-4280-ba09-51f2b586ed40", "sighting_of_ref": "indicator--b8bf4af9-e98d-4ff8-a540-f6497d9f5e7e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2a86a5-c68b-4eb3-9ba5-c7233339aaa9", "sighting_of_ref": "indicator--388edf85-b6c1-4e9f-9e68-3116328775ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62a2c8d-2bd4-457f-9973-1d07779b6397", "sighting_of_ref": "indicator--91b33a85-80b0-4691-a19a-034f0585c27e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eef9f5c-1656-4bcb-b11b-2446145e66b6", "sighting_of_ref": "indicator--e52c93f7-3ce6-4b68-b169-2b8d1b1eecf8", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab780d7-7607-496e-bbe4-b617096ec44a", "sighting_of_ref": "indicator--5e119f18-181d-45e8-9aa1-2a0d8bac1544", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377a34f0-1dcd-4a66-beb5-b27ed83836c9", "sighting_of_ref": "indicator--ac0949ad-9894-46ca-8893-c9ccd77f9f51", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde67de5-f9fb-431a-8bf5-1d5b9980cc23", "sighting_of_ref": "indicator--ac0949ad-9894-46ca-8893-c9ccd77f9f51", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112c5b9d-dfe2-4559-9853-f935380bfc74", "sighting_of_ref": "indicator--fa6b2683-66a4-4f9d-94be-c723e0226122", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32408b21-3936-404a-aff4-513d165a1848", "sighting_of_ref": "indicator--fa6b2683-66a4-4f9d-94be-c723e0226122", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b8b910-9671-4ea1-afbc-e5a48a996db8", "sighting_of_ref": "indicator--f88ea1ad-75a4-4abf-90b0-7c2257f1c5d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57657a5f-8540-439b-9ce6-9a488238aeb4", "sighting_of_ref": "indicator--6e17a772-1f5a-49e0-9544-187c0c1101ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dec323-4cd9-4f48-ac0e-5baaaec4a102", "sighting_of_ref": "indicator--6e17a772-1f5a-49e0-9544-187c0c1101ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c869f79d-8dd0-4088-81f5-6d2c799af36b", "sighting_of_ref": "indicator--b0ef718d-01e1-4d98-8adc-6b89463f711f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765bf9c3-5293-4d4d-b1a3-d583879f1958", "sighting_of_ref": "indicator--9a2b8257-a905-4c10-8784-ce5cbf1eb23f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b05709-1f1e-48c6-9072-d8b438a4f63f", "sighting_of_ref": "indicator--c99eb8d3-4582-45c0-8daf-4cc6eb64651d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25862864-3c25-402e-93c6-9557bddcbc6a", "sighting_of_ref": "indicator--605f0ddb-5d0c-4286-9de7-db390892d372", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da49070-beb0-4564-ba09-b01b1aeaee7c", "sighting_of_ref": "indicator--605f0ddb-5d0c-4286-9de7-db390892d372", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6add7e8f-0eef-4de8-b922-d1b18c13ed5b", "sighting_of_ref": "indicator--bda28364-f8ca-4758-8dc8-0a6823c4b8a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897beabb-f378-48ba-937a-a2e0288745dd", "sighting_of_ref": "indicator--7cf5f88e-ab6a-4ea0-8ec4-c37c4caf60b9", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca0475e-449f-46d9-86c8-186ed8868712", "sighting_of_ref": "indicator--5ec2d71b-4450-45bf-bcaa-24dc6ccba9d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42511e05-9816-40bc-86e6-3c1b70221894", "sighting_of_ref": "indicator--5ec2d71b-4450-45bf-bcaa-24dc6ccba9d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83c4434-87dd-4ceb-bd43-daa3e19d7361", "sighting_of_ref": "indicator--2baaf07a-fb3f-486e-8a8e-c28542f29fa7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeb8eb1-19f4-4053-b45d-5f2319531922", "sighting_of_ref": "indicator--2239a5b6-9d3b-449b-826e-269725e2ce8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ca545e-32c1-470d-ace1-aea232f81fb1", "sighting_of_ref": "indicator--0a7d026a-b075-4c95-be65-2fc7c139010f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53b73fe-9723-49a2-91af-d4634fc01ab3", "sighting_of_ref": "indicator--167ae579-73a2-4243-b6f9-6ce48ad03bf8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb98d20-9f9a-4717-a69c-f4b197eecdb2", "sighting_of_ref": "indicator--d17e1972-4689-46d4-9c12-b10885137561", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6d9979-f447-4f03-902a-a7278c9c9ad6", "sighting_of_ref": "indicator--751d8bf8-395a-47c9-9ba9-9e241d82c4b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c2af94-7275-4cbf-b611-0957fc5dd5b0", "sighting_of_ref": "indicator--cd948ed2-df9a-4af1-807b-0c323475953e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab176f37-3de9-41d4-abc2-24e8063b18a6", "sighting_of_ref": "indicator--cd948ed2-df9a-4af1-807b-0c323475953e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f66528e-55df-4075-ba00-56e0abb49c37", "sighting_of_ref": "indicator--ed900508-9ee0-4fd8-82d0-37bf0b59c450", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6dafb8-a331-4f1b-ade2-92caa24ccf05", "sighting_of_ref": "indicator--1f8aef66-6f90-4f52-a9a8-b03486915756", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0798adec-b166-4f1a-ac43-52608819ca48", "sighting_of_ref": "indicator--995c7c21-45eb-4266-977a-c861cba98fe6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b3eb3d-4c2f-4c15-94d4-63355cc26fe0", "sighting_of_ref": "indicator--995c7c21-45eb-4266-977a-c861cba98fe6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef86432-2e6d-4e60-9e1b-3a062cd54788", "sighting_of_ref": "indicator--0f91b82a-beaa-4bbd-b90c-129322541403", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01836504-1ad4-4fde-b537-756f511ec8c3", "sighting_of_ref": "indicator--dbd669cd-2bc8-47fb-8552-0bcde10f2441", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48924e1f-7cdd-40c0-952b-a033bfa11011", "sighting_of_ref": "indicator--b590596f-d6c0-4607-ae25-6c847559c729", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c58e7e-a1aa-4431-b859-b7ca86050a78", "sighting_of_ref": "indicator--c03c36a7-b450-4159-8152-7fc3ecdba435", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dba6d70-3d9f-4ec7-964b-e7ed69dedbbe", "sighting_of_ref": "indicator--cb9e525e-a5e2-4539-b180-36ecd56e9fa8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4687bd-5960-4404-8cda-92dcf7320c07", "sighting_of_ref": "indicator--34d4eed1-09a4-45f9-9a9d-66c33769353e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c4cc0b-b737-4c2b-a3a3-8cac540bae33", "sighting_of_ref": "indicator--3d56a72c-52e6-4a84-8e39-6750d0413b1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5816bb76-e178-4ac9-9e90-324ec4c664b7", "sighting_of_ref": "indicator--d6014016-a349-47f5-9af6-7f772c48dba0", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d921ba6a-138e-427e-9ddc-969a281574f2", "sighting_of_ref": "indicator--466ae4c0-408c-46bf-9b97-9ea439bfb01e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0327bc75-61da-424b-99b3-d3be4d90b7b8", "sighting_of_ref": "indicator--fa8786ce-ccf9-4c0c-99c6-9bf94bb9f2d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cb41fe-33ac-42f7-966d-1d6b6b3c7677", "sighting_of_ref": "indicator--fa8786ce-ccf9-4c0c-99c6-9bf94bb9f2d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49e36e2-1114-48d8-8a07-44cc5f64a7d8", "sighting_of_ref": "indicator--bb74756a-3d5e-4c39-8a71-d7251529d746", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398bc4a5-acb1-4585-abaa-da2d4afe1a16", "sighting_of_ref": "indicator--bb74756a-3d5e-4c39-8a71-d7251529d746", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e41ddf4-bf92-401a-beaf-00735bd7d918", "sighting_of_ref": "indicator--3341717a-dbf5-43e4-b417-32e8d10c4d08", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a186bd22-9ec5-4d2e-939e-1556b6eac902", "sighting_of_ref": "indicator--0138472b-d698-4ef3-b305-77d5155e17a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c21da81-875c-41c6-94a1-c10652846e35", "sighting_of_ref": "indicator--0138472b-d698-4ef3-b305-77d5155e17a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0715c3-f2c7-4bb6-9caa-52adb00933c8", "sighting_of_ref": "indicator--661c08a7-40e3-42bd-b85d-d8efcb2ee23c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7040e3a0-d0ca-4360-8545-f0867b9458bd", "sighting_of_ref": "indicator--c905cc93-0a01-405c-b489-e25057cb1d97", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e58027-500a-42b5-b8c5-b039a9e0c09d", "sighting_of_ref": "indicator--e652be76-3213-4890-9c29-e023a9f65d36", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255dcd38-c4f9-45b2-8563-ce0eac1dd3c6", "sighting_of_ref": "indicator--9b011f85-33a4-438f-8654-e4711654a9f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b9c481-26da-4808-8648-9e20d3043294", "sighting_of_ref": "indicator--a9d89010-02d7-4b65-b2e1-fad9b0f2835a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0c0a3d-7d56-47c7-a02c-2121dc0a73f1", "sighting_of_ref": "indicator--a9d89010-02d7-4b65-b2e1-fad9b0f2835a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152fb2a8-6c9a-4f6a-93ea-c3461e0ebe01", "sighting_of_ref": "indicator--09608750-a165-4025-847a-91d3a0bd2809", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0442f174-7675-4326-9359-2ad71b17b795", "sighting_of_ref": "indicator--f05f9202-60b3-4a61-8c0c-cde2c38c9c05", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6df9d6-1719-4eac-b846-a746fe6754cf", "sighting_of_ref": "indicator--e1d31cc0-6a04-433f-8217-7da165290a50", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a7026a-eacc-47b2-a57d-5dc87e3dccdb", "sighting_of_ref": "indicator--9eed917d-6d8b-411c-84ad-05faad0b752d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ebdfa8-d596-4e9e-8c6c-ee9b2e64afb4", "sighting_of_ref": "indicator--13d74fbc-0bfd-4065-846d-08f6c0cf0082", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca4cdf5-5ed5-4149-9d92-ad9861b622bf", "sighting_of_ref": "indicator--13d74fbc-0bfd-4065-846d-08f6c0cf0082", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ff6b68-425c-43fc-b5a5-cdcac31d7068", "sighting_of_ref": "indicator--2454c989-d485-4bcc-84eb-001e9bbdd8af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1f05a1-a1c2-44cc-a926-17f9d51c4e2e", "sighting_of_ref": "indicator--e3c6db92-c82b-4530-9410-c78e0e6e14df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcce24c1-c0e8-4875-8720-3e2a7dac50ec", "sighting_of_ref": "indicator--e3c6db92-c82b-4530-9410-c78e0e6e14df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29a18c7-c000-454b-86e9-1f8c43d779d3", "sighting_of_ref": "indicator--daf2d1b8-8df6-4c51-96e1-57f9526b6af2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabbcb77-1d48-4446-a370-a36903df16f5", "sighting_of_ref": "indicator--daf2d1b8-8df6-4c51-96e1-57f9526b6af2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879e8d67-630d-4d4f-86c0-9587caca2b72", "sighting_of_ref": "indicator--59ec82ef-83f4-4a91-b394-bf77f1f34e29", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38516b6-7465-4fb2-9589-cac66f58d292", "sighting_of_ref": "indicator--59ec82ef-83f4-4a91-b394-bf77f1f34e29", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adde3af-cd17-4f36-b3b5-7777bb5fe285", "sighting_of_ref": "indicator--e9637ea9-ec62-44d4-9ca4-b9564d09acde", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100b71c6-3746-4bbb-b550-cc4aaad9eae2", "sighting_of_ref": "indicator--e9637ea9-ec62-44d4-9ca4-b9564d09acde", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c3ffec-acb9-4bf1-a608-9b0481b53a16", "sighting_of_ref": "indicator--34c5cd39-8b7f-4860-b960-7bbd4e326ca8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f373e5-46db-461e-b34a-92ff21b903e9", "sighting_of_ref": "indicator--141cc365-000f-45bc-b7fa-3a70489a522f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f37d472-349a-4891-882f-396269b700be", "sighting_of_ref": "indicator--fbd9d390-db18-4bb5-b862-ddc72c6a123e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2040dbd-438e-4b76-b204-845fee6f7d97", "sighting_of_ref": "indicator--a83128c4-67ad-4888-b472-22f49707ac3f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d043850a-4995-4dbf-b580-aca938be82b5", "sighting_of_ref": "indicator--82cb79ad-a7af-4f90-bcd3-fd8c960db351", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57fc5d4-70f2-4c0e-83c2-f97230dc0cc3", "sighting_of_ref": "indicator--82cb79ad-a7af-4f90-bcd3-fd8c960db351", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194ed78b-524a-48d7-b195-640cd2d045e9", "sighting_of_ref": "indicator--b73d2950-b0b8-4b58-8925-dae388986506", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61a9099-e022-4b57-8c3b-7c2f60620a94", "sighting_of_ref": "indicator--75d8f9e6-6497-4dc7-97f9-818b416d7f0d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fe2656-4099-4fdc-b52d-f6ea4a5f405e", "sighting_of_ref": "indicator--75d8f9e6-6497-4dc7-97f9-818b416d7f0d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400d6190-0ca6-487a-b56e-6e7f601ded11", "sighting_of_ref": "indicator--2f151184-2f3a-4fd1-af0d-998ecfd10290", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa310ae-4187-4191-9a70-68bfffa1d66f", "sighting_of_ref": "indicator--bfb42391-94d0-4c27-b998-b6906b0d1589", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafdd7de-acf2-4ed8-81b2-a9d59ddd8988", "sighting_of_ref": "indicator--88e872ed-6e15-4f3c-8f7b-590af2aecc9d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e1acd7-ede8-4253-82d1-1e90aa6272c8", "sighting_of_ref": "indicator--b37cd35a-4c97-4a95-a6ce-98b83f787b7f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432b5fb6-907a-4b6f-82d3-9c2fc8d5270a", "sighting_of_ref": "indicator--b37cd35a-4c97-4a95-a6ce-98b83f787b7f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f19fe44-bcb3-433b-954c-c850f862295b", "sighting_of_ref": "indicator--b84d291d-7471-492c-a655-c573ddfb5d5c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0502d10-f625-4b6c-ab6f-2ec06615eace", "sighting_of_ref": "indicator--b84d291d-7471-492c-a655-c573ddfb5d5c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7513e38d-7410-4875-b4d5-fe08f6a3949f", "sighting_of_ref": "indicator--136261f7-bdd9-4c08-af35-3e3706ec3ed1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fa202d-e194-4385-bddb-39717b420925", "sighting_of_ref": "indicator--70aadb21-47b1-4991-9d4e-b5c099e6de7a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6ff239-25fc-478f-9aac-1542918ed901", "sighting_of_ref": "indicator--3bf5fabc-c23c-4aba-adb4-2fc9f42ad6d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c909c9d-5332-4af0-ae88-896194e15720", "sighting_of_ref": "indicator--a276ab06-a73a-4f26-a4a3-2874db8b9674", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad494250-94f8-4192-b646-0fb1f98eda47", "sighting_of_ref": "indicator--f781fdad-c5c3-427a-9753-c8bd6893544a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4205ec22-72ba-4cfc-b8a4-e1a4af5f14f1", "sighting_of_ref": "indicator--1bb5501a-f870-4005-9630-737052b51ad8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d89b9e-3101-4a81-9dd1-6987169a926c", "sighting_of_ref": "indicator--1bb5501a-f870-4005-9630-737052b51ad8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb80c0d-4871-4089-9352-56a2ef628f0e", "sighting_of_ref": "indicator--aaec26f0-3dff-4c18-94e6-0657841e0118", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169243d1-f1ab-477a-ba23-24eeded28c5d", "sighting_of_ref": "indicator--41b6e9f5-a533-4a14-b049-3bf53aa67661", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0cc1fc-2d07-4d35-a0d2-db4d4de9bff4", "sighting_of_ref": "indicator--07e2b1b5-f9d2-4979-aa1b-09330eaa19a4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9db8949-e3c9-4979-b520-5b7029c2ae6b", "sighting_of_ref": "indicator--9951cfa1-fd86-435b-a213-822b419e7568", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd6c983-185c-4f3f-a01f-3057308c4ffb", "sighting_of_ref": "indicator--9951cfa1-fd86-435b-a213-822b419e7568", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc683f49-1f17-40be-8fd8-2dadc21f52a5", "sighting_of_ref": "indicator--2088c4ed-7994-481b-8712-7bcb9927b4a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263c8caf-1c7a-49c5-92e3-50589990f5d7", "sighting_of_ref": "indicator--de9e11c4-a058-40a3-b045-90e0ba349ec0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b05665e-3200-4a87-81c0-4c4b31e031c6", "sighting_of_ref": "indicator--452a3ccf-b10a-4280-84d8-ff5844731a98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d21e4f-86fa-4cd4-a5e4-1623cfce19a1", "sighting_of_ref": "indicator--9b6e27a9-7ab1-4396-8a9b-f6e9993cf035", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a3efc6-5753-4001-ab2c-e911f1d0f471", "sighting_of_ref": "indicator--503803ce-086e-487c-a119-31cce5c2b7a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547bd1af-f36c-4471-9865-07dc126e4c8f", "sighting_of_ref": "indicator--9b85ee52-13b1-43e3-8c00-b36d21558654", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2432aeb5-57c6-4edd-9a4c-1a2b1f2fb013", "sighting_of_ref": "indicator--f604dd05-f756-4f7d-a511-75ddf6cc0073", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7855ca73-f309-4374-9a7c-471a2a2bb870", "sighting_of_ref": "indicator--d2933241-62a8-405c-b6ab-48192619f562", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1cd69a-8378-46dd-84e8-12163387574f", "sighting_of_ref": "indicator--43c7863e-105b-4b1c-afc9-618ef91db7d8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27094998-1f5e-47af-9c4c-35b9ab7f67ab", "sighting_of_ref": "indicator--43c7863e-105b-4b1c-afc9-618ef91db7d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b71472a-b456-43a4-bc70-3c0df7abc275", "sighting_of_ref": "indicator--eff98208-6fdd-439f-94cc-8c84d69ebbf5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac3c893-264d-4afc-bbe4-41e91352a675", "sighting_of_ref": "indicator--3b831a76-bf3d-4b10-9821-78b9cf17c2af", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c5bffd-d1d7-4824-9104-897e00b06408", "sighting_of_ref": "indicator--3b831a76-bf3d-4b10-9821-78b9cf17c2af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3dad74-c182-4b5a-86f3-56298cefe664", "sighting_of_ref": "indicator--a12be849-8a28-47f5-a349-2d217d57558f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a743be3f-81ef-487a-bf7f-ca1e39d7354e", "sighting_of_ref": "indicator--89f1122c-f5ce-4b5c-9427-e46ce1a93bfb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5397c743-245f-4715-b772-7681bd1e127d", "sighting_of_ref": "indicator--fc06b1b5-4f13-48a9-99b1-b4919d9ece30", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1525ff76-b135-4086-9184-555803f5700b", "sighting_of_ref": "indicator--b083229a-adc7-4ca8-bc25-54052634e2f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8672ef-e7bd-4421-83e5-c1553128831d", "sighting_of_ref": "indicator--018669ac-f1b7-4c87-b3c0-ce4475214294", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cd5dd4-ff6e-4b2c-aa4d-b1779e531200", "sighting_of_ref": "indicator--b8924e60-0293-42a4-86eb-bee28d7df759", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fce489-1a1d-412a-ae60-40ada64edcd1", "sighting_of_ref": "indicator--39f497f0-6fc4-4529-a6c9-f0a633bd0100", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07579294-fd29-4ef6-b396-05fc324e1d16", "sighting_of_ref": "indicator--517d0791-111e-4ef6-9a08-253fb70ed30e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28901396-6782-44f3-ac61-3922a9c6171a", "sighting_of_ref": "indicator--517d0791-111e-4ef6-9a08-253fb70ed30e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f21a0a-fdf0-4fff-b226-5026a8de435b", "sighting_of_ref": "indicator--5470e8b0-eb07-470e-a06c-e8ea7acf3b3c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da5f777-7988-4b1a-8b33-89e8918aff31", "sighting_of_ref": "indicator--74b1a0c0-43d6-4b3a-839e-991930228a62", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742d9a03-2d4f-4348-8fbc-3217b08e94be", "sighting_of_ref": "indicator--2da21316-182f-4194-8c39-31f16752cf46", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc65c868-0164-4256-960c-ee1a29779dc0", "sighting_of_ref": "indicator--d285eadd-0942-4a8b-b163-ae62c175b6ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256a496e-be5d-44f2-8536-3d2209554249", "sighting_of_ref": "indicator--5257ef77-d92b-42a3-8ef6-ba882115796f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e2eef8-b0a6-4156-953a-5cc02577710d", "sighting_of_ref": "indicator--5257ef77-d92b-42a3-8ef6-ba882115796f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5a74d6-dc26-430f-b61a-0efd1090c87e", "sighting_of_ref": "indicator--42367186-9364-4b70-a6b8-745f8dc81e37", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47910ad1-9fc1-4e15-a511-0bfd3e5c9c26", "sighting_of_ref": "indicator--3e3805fe-c2c8-479e-83f5-3108c0174d80", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7147e47-4537-4a6e-8d7e-b13dd2d2ae35", "sighting_of_ref": "indicator--7d0a9e20-cbee-4ae8-b81f-4f9556bbe2d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91198dcf-a636-4b27-9419-777ce3436095", "sighting_of_ref": "indicator--4c59b786-429a-45d5-bf76-0c197d92f26f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8150ae73-b29b-4452-b1df-74c38fc70b8f", "sighting_of_ref": "indicator--4c59b786-429a-45d5-bf76-0c197d92f26f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d380cca5-18b8-4847-8059-cf36fae99a4a", "sighting_of_ref": "indicator--9a0b373b-c3d9-4ed1-b523-725f038b9381", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073592c0-ec80-4400-840f-1bead8aab390", "sighting_of_ref": "indicator--9a0b373b-c3d9-4ed1-b523-725f038b9381", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7359068-a0b5-4eaf-8656-204e15ace122", "sighting_of_ref": "indicator--1f53c9a6-de29-4c41-93f4-3e46cef59e0b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d270f7-e76e-4fe8-8063-b91a606bf185", "sighting_of_ref": "indicator--1cbf63db-16cb-4443-8809-86fe70094301", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d37f16-91b8-4ded-8d0e-83b72787b6b8", "sighting_of_ref": "indicator--01230b46-469e-4d7f-bac2-6f909da8e302", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5dfe3db-760a-4572-806a-33b070a12cd6", "sighting_of_ref": "indicator--677ccf95-b42d-4260-8504-9ffc958d22c6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac21bca4-923c-4963-96c5-405a5b7aa036", "sighting_of_ref": "indicator--677ccf95-b42d-4260-8504-9ffc958d22c6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b415b3-2cf0-44b2-aa66-ee22bbf6c4c4", "sighting_of_ref": "indicator--a52c56ab-66cf-435c-a7c8-74d230c40f27", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3256404-3a07-4e25-ab68-040431f58e21", "sighting_of_ref": "indicator--58e8297f-5b91-4e6d-9eda-9a194aaa6568", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de9e4af-a780-4ddf-9665-dc00613e71ed", "sighting_of_ref": "indicator--88d1a693-0b9a-4054-81eb-2e06abd85544", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e154d9f3-6b26-472d-9742-d346606e68f9", "sighting_of_ref": "indicator--88d1a693-0b9a-4054-81eb-2e06abd85544", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0806118-e599-45ea-b40c-1e6cea907abe", "sighting_of_ref": "indicator--04833951-6d4f-474f-960c-8f5976bfd28d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de0cffb-bacc-48ea-950e-2a95d879d471", "sighting_of_ref": "indicator--ab751c41-125f-4d63-8058-088bc397add5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5bea3f-c000-410e-b36d-c3f50cc54196", "sighting_of_ref": "indicator--54ee7c55-729c-4736-8c25-65c0247194ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c4651f-848c-40a3-97fc-b82f063c69b7", "sighting_of_ref": "indicator--0765e415-2c5e-451f-aaed-252484868c47", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f10017b-db3c-46f3-89a9-de73403fa26b", "sighting_of_ref": "indicator--0765e415-2c5e-451f-aaed-252484868c47", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1c84c1-92bf-4d94-a1f5-17ec15925944", "sighting_of_ref": "indicator--aa9021c3-1bb8-4a33-beaa-50842c637430", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8da615-1a7b-4a5c-a6ba-47b2324b3345", "sighting_of_ref": "indicator--a79d07ac-381a-415b-aecb-5a59404a1777", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6c0c44-66e4-4ca5-a214-6160f7a936dd", "sighting_of_ref": "indicator--a9c0da91-355d-49ca-8125-c4c4142cca38", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479bea3a-d311-4f02-97ae-eed2292786a3", "sighting_of_ref": "indicator--c6aeb780-6cea-4d1b-ab08-ae9d642f12c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8907533-957e-4df2-a431-94c5824bf9f4", "sighting_of_ref": "indicator--36360682-48b3-4d79-bcd5-988cb0b33881", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3657dbf-b1e5-4f43-940e-76d1b1d8bb6f", "sighting_of_ref": "indicator--23bf8434-7b32-401e-b71f-0c84595998a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c84ddf-7528-4d48-801b-45d6dd353ce5", "sighting_of_ref": "indicator--9a0295ea-9ab2-4120-a08a-8adb509eea26", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9152437-38f1-48f3-a064-d9fc12c3499c", "sighting_of_ref": "indicator--9199f773-6bc7-4f37-ba7a-9b653ae03d83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0759e6-d6eb-4909-84dd-1fde7d817119", "sighting_of_ref": "indicator--9199f773-6bc7-4f37-ba7a-9b653ae03d83", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7e0de3-aa41-472b-bbc6-6cfa1acdcb3b", "sighting_of_ref": "indicator--68ae1c2e-bc8e-4911-aac7-a6c8ad88f8d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa07c9c5-b896-4435-8efb-11abf2ca2d3b", "sighting_of_ref": "indicator--68ae1c2e-bc8e-4911-aac7-a6c8ad88f8d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fafc40-334b-4e36-99b0-de332cc2f266", "sighting_of_ref": "indicator--211bf4e7-225a-4f40-a63e-f6fabebe127d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f71c73-60de-436d-ae5c-2b28785e918f", "sighting_of_ref": "indicator--0309fbc0-d204-438b-8f20-c5558b13b561", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d1b8d2-a518-4ba9-a84a-9440a633e588", "sighting_of_ref": "indicator--f9aad5a0-b7d7-4b91-9fdd-20f74289fd1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a612ed0e-cb05-4b97-a837-69817c5bbed9", "sighting_of_ref": "indicator--95d4b227-3c16-4b60-8826-9830de1c6548", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852a0eb1-02dd-4ae6-9c62-1e2047e5f27b", "sighting_of_ref": "indicator--95d4b227-3c16-4b60-8826-9830de1c6548", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2646957-59e0-4283-9c38-d39c16a5db90", "sighting_of_ref": "indicator--843d5645-0fa4-43af-8b46-ededfc7ed69b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a75c70-bfd1-4730-82b0-d11e9c7567b7", "sighting_of_ref": "indicator--a835f717-b726-4011-82f4-0c97a13d86a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a52d1fe-6a55-4fc8-a899-a38b73bf0b2b", "sighting_of_ref": "indicator--f4166eba-7dc7-4572-88c0-6a307be4c79e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d7db74-b63a-4797-8035-636a6417d646", "sighting_of_ref": "indicator--4c5db706-f2ad-47f4-80e1-ed941910ae7f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc98863e-8275-4193-918b-a565e096b84d", "sighting_of_ref": "indicator--0e9d0661-9214-4050-9610-1f80c160e544", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b996ec7d-65e9-4527-b08f-8e9de031b7ba", "sighting_of_ref": "indicator--9f7aa347-7f38-477a-b612-2c95270a497b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b9c5cf-65db-4b21-a595-f8e30f665a7b", "sighting_of_ref": "indicator--df76a354-29be-4db8-894d-f62208f841b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d019c077-fb5b-4811-a413-0b7153a60cd8", "sighting_of_ref": "indicator--b1c97443-3a41-40d8-b948-a54538214ffa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363ebf8c-592f-4dd5-8c08-02191272ffe1", "sighting_of_ref": "indicator--0ac2df8c-e147-487e-8cbe-92f6464565fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08852b32-8098-4b94-bc32-a38e2d9708e1", "sighting_of_ref": "indicator--db30dd34-3a1a-4e95-84c0-43472456bf2a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137f295f-bc14-4d80-8fab-4475501e74f7", "sighting_of_ref": "indicator--e0c56fd3-7002-42bb-8df2-9ad4f624aa48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4821c814-c892-4f07-ae6d-b7d5b4490882", "sighting_of_ref": "indicator--e0c56fd3-7002-42bb-8df2-9ad4f624aa48", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594b2a15-400f-421f-ac6c-891b130d798d", "sighting_of_ref": "indicator--c6d00666-1478-4930-9f45-a2820dce4b48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c94bac-0b3e-4750-bb06-e32bc87bab9d", "sighting_of_ref": "indicator--a480672a-aaf9-43ca-9981-e4a0c7de7cdf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269a7202-132e-43d5-afc5-95ddd97b6923", "sighting_of_ref": "indicator--e7b108d5-8fe2-432c-9e2e-872cc3b7a1e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a844a961-c0fc-4674-87a4-18191095bdde", "sighting_of_ref": "indicator--e7b108d5-8fe2-432c-9e2e-872cc3b7a1e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5650fc-4a92-4183-9290-38428cd5e5b0", "sighting_of_ref": "indicator--8fd6acc7-b974-4907-931e-540952c2f669", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75dac67-ff07-4530-bdbe-d7eb8776a9f7", "sighting_of_ref": "indicator--0ce89f0c-e9ea-41a6-8ff0-eca14d8a9b6c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60607f0-331f-4f38-9ed9-aaca5fb7a6d6", "sighting_of_ref": "indicator--9b8ea496-f9b7-42b8-9be0-d6a8cc6779d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d8881e-3c7f-4d0c-9b63-d134f57341dd", "sighting_of_ref": "indicator--34b073c6-4e5c-465e-9fdb-7f0af407821b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e369b69-0168-4263-8f17-70d9b9b0639d", "sighting_of_ref": "indicator--34b073c6-4e5c-465e-9fdb-7f0af407821b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac27867-982b-4a84-b29e-2eb47e8bd18a", "sighting_of_ref": "indicator--632b6f3d-405d-42f6-bad5-754931e3c5d9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dcb693-2a55-44f9-a19b-6f2b604094c2", "sighting_of_ref": "indicator--8dd24fd9-8529-4fbc-84d1-ef499ddf749f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dca0af-22b5-4415-9402-73a2cec0c15f", "sighting_of_ref": "indicator--af3261c7-0a7c-4cfd-b486-66103d871d40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0b677b-94c6-42ea-8e62-b273278f9170", "sighting_of_ref": "indicator--1e822a2d-ff2f-47d2-9ca3-2ac7398cb52c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9398569a-acea-40bf-ac97-8d9e220013c5", "sighting_of_ref": "indicator--e9e6b823-4ba5-4fd0-92d6-d6e152d9fac8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597eb8de-c055-49a0-8422-87da7abc89e1", "sighting_of_ref": "indicator--e9e6b823-4ba5-4fd0-92d6-d6e152d9fac8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8420335-0cfb-4a48-8c89-626ea36450de", "sighting_of_ref": "indicator--3ebc9e4b-e63a-4a2a-b060-a3d1a81bf323", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c22da08-cfca-4e0b-b640-c9424ee83ac6", "sighting_of_ref": "indicator--3ebc9e4b-e63a-4a2a-b060-a3d1a81bf323", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d176bc-f75c-412a-876a-1c71c2f31b27", "sighting_of_ref": "indicator--abbf5c79-ed96-41a1-bb67-18f41ba08571", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4795eb0c-19cd-4a70-bc82-b2401c2e99eb", "sighting_of_ref": "indicator--abbf5c79-ed96-41a1-bb67-18f41ba08571", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf1d848-ad08-452d-b9a5-17af070da267", "sighting_of_ref": "indicator--7a73c70f-9173-420f-83e3-5a950848275e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ac41cc-3422-4ee7-b8ee-bdb519843c78", "sighting_of_ref": "indicator--f3ea97e9-0136-489d-9335-e007e1fb4f19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16d5b1d-7354-4dfb-9c58-4d816ce43c7d", "sighting_of_ref": "indicator--fb94dee6-7e4f-4141-9c69-2940dd239c45", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f3f515-285f-41f4-9e54-0a59ea64de1e", "sighting_of_ref": "indicator--e80709a9-1e27-4911-8afd-b966e9801ead", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8775374a-7f26-4545-8e7a-7516725670f4", "sighting_of_ref": "indicator--e80709a9-1e27-4911-8afd-b966e9801ead", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e63f59-1e78-450b-9ba1-0accb3a0ca87", "sighting_of_ref": "indicator--a0cd5699-5a0c-4fc3-99ed-047693f14342", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9721e4c-42e9-4a21-a8ad-758aa5e25e42", "sighting_of_ref": "indicator--3e79903f-e3a7-4297-b272-261ee9d1f255", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c324901-cd0a-4eb4-9a6e-7ed2469a9cca", "sighting_of_ref": "indicator--4deef254-1fe2-4ac0-b265-17bf2a147b6e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea388c3-5685-4c28-921b-320a25e49c26", "sighting_of_ref": "indicator--8d631a86-2dbc-4ade-8002-6568f4b89417", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f203dc-3660-4907-bd25-f0d88a00ac77", "sighting_of_ref": "indicator--848ec805-aeab-43c3-a82f-a0797daa9189", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bab0f76-ddf7-45b2-ada8-7597160cd7da", "sighting_of_ref": "indicator--6d67f169-e117-4d47-a50c-bda72f2be9c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10be26aa-32fd-44ae-a271-69c0651c5bb4", "sighting_of_ref": "indicator--02e817a3-5f09-4108-ae02-0aa583bd3569", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acfe984-4480-408c-8bbe-538242c82ebf", "sighting_of_ref": "indicator--02e817a3-5f09-4108-ae02-0aa583bd3569", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea452030-1e13-4cb8-89d0-218bc492bbc3", "sighting_of_ref": "indicator--847db4d2-b1b5-4c6f-8fd8-238022ce96e0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1485a6-9c07-46b9-b785-53000d8f5ca7", "sighting_of_ref": "indicator--bc9bd632-2348-4a05-83fb-90869277f1ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb0aec8-97ac-4fd9-aa57-c8db86a424c1", "sighting_of_ref": "indicator--f272efd0-5c2e-4ba4-a984-1a8be1f41a00", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccde581-7631-4fc2-ab92-05c9cec173fb", "sighting_of_ref": "indicator--f272efd0-5c2e-4ba4-a984-1a8be1f41a00", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4fc7ea-68b8-477c-8ace-6d2981c59d9d", "sighting_of_ref": "indicator--1281d9ea-62b0-45db-9724-b7b431f35feb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f8bdb5-987e-4035-9175-a8bc9ff59837", "sighting_of_ref": "indicator--9647afe8-abeb-4334-9161-b20039c031ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc32236-e7d4-4316-be04-49213077a36d", "sighting_of_ref": "indicator--d1c0abd6-fa1a-4da4-bc25-d796d053639f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0664955-1087-4f33-880c-9ac823957533", "sighting_of_ref": "indicator--17952e28-3a58-49b5-80ac-267a7eda2475", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3cc233-ab23-4c78-8bff-e36367675568", "sighting_of_ref": "indicator--0c5549c2-63ef-453b-9fb4-caef0481934c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596314ad-78c4-42ea-9484-b043890a1fc6", "sighting_of_ref": "indicator--0c5549c2-63ef-453b-9fb4-caef0481934c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd878c5b-1b49-4470-854a-738ef2270cc4", "sighting_of_ref": "indicator--c1e8142f-258f-4a80-a2c7-34760dbb346a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef31ec2b-2db8-4541-9882-7bb1e22077e5", "sighting_of_ref": "indicator--1e1702b6-9d06-4572-95e3-9f72e84849c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618e8455-37c7-4fcd-8438-4f445079504f", "sighting_of_ref": "indicator--dff23f14-7a4a-4f53-91c0-6de10751d22d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7b1523-eb09-4359-b6fe-d655f49d0ce8", "sighting_of_ref": "indicator--61d631c6-f123-43d4-b426-a2ded8ac6086", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f520fcec-eb19-40c1-aba6-b8d3e72415d5", "sighting_of_ref": "indicator--61d631c6-f123-43d4-b426-a2ded8ac6086", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af96721-7e81-407c-b9a2-1a91451ed5e5", "sighting_of_ref": "indicator--63456dbe-a35b-4b2a-a455-f0507d627692", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b3bd89-71b1-4a08-ad65-8fca2a2eb6b8", "sighting_of_ref": "indicator--63456dbe-a35b-4b2a-a455-f0507d627692", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b87ab54-429e-4a84-87b4-dd58e5b3e096", "sighting_of_ref": "indicator--4b6ecd67-a64e-4b60-b1d6-72e4d6a925f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd304c61-a1cb-490e-880b-068a0414bb6f", "sighting_of_ref": "indicator--c325771e-8250-49b6-a058-e60a38282c1d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3a2a9e-9047-41e4-a118-ce96e7823ce1", "sighting_of_ref": "indicator--282a553a-c9dc-4843-9af7-d39a0a990ce1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c05c13c-011a-4212-a660-775f1fc02a23", "sighting_of_ref": "indicator--282a553a-c9dc-4843-9af7-d39a0a990ce1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622cdbd9-3384-4cfe-b757-bd4889271dd1", "sighting_of_ref": "indicator--a293cd5f-2d4d-4718-ba26-1f16c6a531e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9eafccb-3c9a-4985-969a-7902ed773fb4", "sighting_of_ref": "indicator--79cab962-0037-4858-990e-68828dc9eb35", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10497480-e621-43ca-8d91-d474359b18f0", "sighting_of_ref": "indicator--79cab962-0037-4858-990e-68828dc9eb35", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977296fb-dafa-40da-b589-edde1be409a8", "sighting_of_ref": "indicator--a7ee2c12-794f-418e-b342-7c53aae8ad7e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc288e59-5612-4597-9891-dfc911ccc117", "sighting_of_ref": "indicator--bd1bebae-1271-4757-a8e3-eeef6bb7d970", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f1fe13-5429-43e5-a1cc-8397c1372a0a", "sighting_of_ref": "indicator--23aa33c2-7ace-4c8c-9c1d-eece1067f6f0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af63f92a-9bee-4114-b244-5db38b911aef", "sighting_of_ref": "indicator--9b7c9068-b647-4ecc-b2c4-3c73a4d78447", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beab5f26-f7c2-4db1-a102-788aefc81baa", "sighting_of_ref": "indicator--96d20686-756b-4891-84f4-c1f99dc29bdd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2545f23f-5b2b-4691-8ff6-f73ea6c56279", "sighting_of_ref": "indicator--2554d4b8-cbaf-47a4-afbf-a7ecc1961b80", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15edd21d-539c-4f83-a3f3-ea18819c038f", "sighting_of_ref": "indicator--2554d4b8-cbaf-47a4-afbf-a7ecc1961b80", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8085ec41-dc18-46b1-88c7-e9284d9f51e4", "sighting_of_ref": "indicator--0ad8358a-a061-4ae9-b9db-95ee50f6f5ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb12a704-b3ba-4e80-966e-865a8b650bdc", "sighting_of_ref": "indicator--0ad8358a-a061-4ae9-b9db-95ee50f6f5ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbaf23e-ab3d-465e-bb63-aa59139503bf", "sighting_of_ref": "indicator--a41e6dea-711b-4d5d-a0b7-f49430315d75", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb0e5a1-9e3b-4c87-9ff7-be4c73deccd2", "sighting_of_ref": "indicator--21b89402-b7be-40be-88d3-0d1c9c4730fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0897972b-9364-4b05-94dc-c72731fc87bc", "sighting_of_ref": "indicator--503fc6b9-e825-49b3-a764-28ffdaff61be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5436669-7bf3-4a24-b239-1abe6bfd5e0d", "sighting_of_ref": "indicator--d79057af-3342-45c1-8c6b-0a4b0a406a14", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05303ae9-fc98-4e1d-b815-dd0efd007661", "sighting_of_ref": "indicator--ae703516-b08f-46e0-ac09-eb0e000be3aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e657ef42-a8b1-4f83-ae41-d2b51a6394c4", "sighting_of_ref": "indicator--09193767-beaa-42f7-8bd8-f2d0bcb1075f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10599175-98bc-4477-b371-41577177d36a", "sighting_of_ref": "indicator--09193767-beaa-42f7-8bd8-f2d0bcb1075f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989efc0d-df52-4a84-9b9b-349530745416", "sighting_of_ref": "indicator--435a60e2-2741-42a1-9b52-6e54cd03278b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb250db-549f-4ae9-a713-a7b31ebfba42", "sighting_of_ref": "indicator--0a739c97-96ea-4976-8f98-e4b0b5b5b0e5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af507e92-776b-4bd1-9b4b-50b7e5793c0a", "sighting_of_ref": "indicator--4b8c4f15-dece-424d-8811-887e34b8fd6a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6383a5d5-748e-439b-b7ec-e71219916866", "sighting_of_ref": "indicator--a8af54b0-8104-419c-8f5f-67283c55b6ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4705f9d4-6b65-4c01-a04c-75e4a2512807", "sighting_of_ref": "indicator--e9f990e2-a39d-453b-9f0f-e18164f34f1f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1739a00d-be96-4163-b06c-97a2f0fe656a", "sighting_of_ref": "indicator--02f0aa08-6128-4fd9-91a1-ea43501a691a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85336cb5-3af8-4bb0-aeb4-bbd184ef7ace", "sighting_of_ref": "indicator--43fd3583-4aca-4143-b121-5c0bb12e380b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b9d734-3d2a-4b53-9607-8a900ea6aa23", "sighting_of_ref": "indicator--5d1e575d-aa3e-4238-954b-4f43f6401c16", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca97e78-82f6-4c7b-b3cb-163a83de84a9", "sighting_of_ref": "indicator--8df0c1cb-6349-4311-a74d-df1a4c8c44c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d210eb9-a504-4bd8-94a5-16949a7a186f", "sighting_of_ref": "indicator--e3c15fb4-3218-4aaa-86f5-19a27e2633dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cadcfe4-2732-4621-aa64-e5a77c737d14", "sighting_of_ref": "indicator--66106b7b-b083-4537-b215-bdbef50ed2e8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6181e06c-57c4-418d-9b60-8f184f258481", "sighting_of_ref": "indicator--244f0375-e239-473e-a56f-92216d1e7cdf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7498d272-be15-494e-9008-96ff8cd1d3bf", "sighting_of_ref": "indicator--e5ca7181-f79b-4940-8edd-57c1de313be1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee53e963-7eec-4e81-9030-ebe25cb4ed47", "sighting_of_ref": "indicator--e5ca7181-f79b-4940-8edd-57c1de313be1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d1ac58-3675-4f61-a890-4b8941ba9323", "sighting_of_ref": "indicator--3c2e9f71-8fca-4037-acc8-a4b488639f95", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb65b0d-e2c2-43c3-9d26-b7a3d75521c0", "sighting_of_ref": "indicator--e2b6feda-d0f7-48a4-aa0c-22d20fa74aff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320ae6bc-6b34-43b4-b08b-3ae3134dc181", "sighting_of_ref": "indicator--2f5f55ab-de5b-4398-8e39-2d4fec22f7be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d9a685-4c8f-44ff-bc95-0a6e94ad00ad", "sighting_of_ref": "indicator--95217dc2-f82e-4874-8db3-3972231c7ce9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522ad8dd-3f2c-492a-8c32-f9663bc7aa14", "sighting_of_ref": "indicator--1a5ee1fe-f3b4-4324-8ebf-cd309ce9189c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f68c4a-54c5-43cc-a209-b1d4fe33334a", "sighting_of_ref": "indicator--14de205e-6076-430a-b061-5b30c4b8b43e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f515762b-a9cc-4c5f-939e-7c813e46f571", "sighting_of_ref": "indicator--a3f0ce20-f341-4f81-a9ba-4cac8a9e5179", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a96568-56eb-43b9-8952-1e8f5c5816a5", "sighting_of_ref": "indicator--15902fd7-7e5b-4acc-af35-8adf40be318c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7295344-a9f0-449b-8e93-2ee339f5a7cf", "sighting_of_ref": "indicator--63f1b404-108b-4402-8e03-e3693a554676", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae621980-95d2-4c75-b38d-c17cd907f822", "sighting_of_ref": "indicator--5c41562c-4d79-42cb-b7a7-70dda6fcdb9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a885d540-e76f-430c-b001-09b279701334", "sighting_of_ref": "indicator--8cdd84f6-8667-4a72-9e32-c1f66b9ebbd7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafc14e1-cfd8-4df9-b531-181179ac6938", "sighting_of_ref": "indicator--aaee838c-93d3-41e2-842b-69e374e2cc56", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44518ca9-797f-4a05-ad3a-ebb2424a76a7", "sighting_of_ref": "indicator--4dcf3baf-0ec7-4043-b001-abdf329426cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5081f0-b49a-4b5c-9422-0324a1eda137", "sighting_of_ref": "indicator--979199bf-b38e-4a9f-994f-ad610b6f50c3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f743b37-f626-4d25-a3ab-2a49682b89b5", "sighting_of_ref": "indicator--4b8844b0-4d06-4ba6-9a20-d29e680df433", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9b8529-3da7-45e2-9e12-d7056f23ad48", "sighting_of_ref": "indicator--0d582132-5a70-4f37-92d5-e42e8113785a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2893655b-b4e8-4ca9-89b8-7fc46e43aa3d", "sighting_of_ref": "indicator--4e68941b-9cb8-4f1d-b227-2716658d748e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2546a1ae-5c61-4f79-a5a8-b53b20a8f820", "sighting_of_ref": "indicator--e432460f-54e5-49ce-9d84-b13ed3645c4a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41f8c30-6911-4bae-8f44-a75ce7a3f0c7", "sighting_of_ref": "indicator--cca98e35-92c2-4590-90bb-f0da700ce331", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94548eb1-ef26-4bfc-a87c-cf0615efe6cf", "sighting_of_ref": "indicator--cca98e35-92c2-4590-90bb-f0da700ce331", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6c9ef2-44e9-4558-b8a9-bfaeab638969", "sighting_of_ref": "indicator--a828e128-65bf-4829-a0ac-6c75e196e485", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553e68e6-0a26-4958-a2fa-569d17acc6ab", "sighting_of_ref": "indicator--7df508a2-0d92-47f5-8e70-fa1f86bc339a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3f1b69-f9a2-4bd4-8934-4b90ee614152", "sighting_of_ref": "indicator--350eee5c-579b-418e-981b-4f2e7a739bd2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbdf209-2ba5-4025-ad63-40415be45f5f", "sighting_of_ref": "indicator--b8322c3c-2b31-4ca6-8ba1-4c9833800379", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08820f05-5814-41b5-871e-2b52992c8ad5", "sighting_of_ref": "indicator--ec5c42f0-10bc-402a-b8a3-262f8f5a7e2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e415f9-6edb-46ee-b1ff-5345e76d30ef", "sighting_of_ref": "indicator--702e609e-06ff-4ba0-9bf6-785727004068", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e043c63d-4162-4ea1-b71b-c1c40935cbf0", "sighting_of_ref": "indicator--8b10842d-bc00-4fc4-a462-3fd0166d8c86", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09e249e-4b9e-48d7-b193-494b564e04df", "sighting_of_ref": "indicator--d86b1252-8933-4ed8-9eb2-878a91807c8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954c57fb-35ba-46ce-bf89-2c710c053532", "sighting_of_ref": "indicator--51d2bbc0-b1bf-4661-b05d-270021e91147", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600c98c9-dad5-4e27-b331-d64e154f45a9", "sighting_of_ref": "indicator--51d2bbc0-b1bf-4661-b05d-270021e91147", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b17ec6d-3137-44fe-97c7-8c178e7074d2", "sighting_of_ref": "indicator--1bbab749-5d76-49e3-b2cf-fe419461f0f9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e1e8a3-16f8-47dd-8a18-9f4c51110481", "sighting_of_ref": "indicator--e63c63da-fbdd-4b1d-9279-00901fce81b3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a2fd06-50dd-4285-809d-588a4d06f4b5", "sighting_of_ref": "indicator--dd89fc0f-90ae-44c5-82bb-f489fe84111c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bc0b3d-6122-4e48-b630-3c56f299bb97", "sighting_of_ref": "indicator--0b565b92-44f3-4d6e-8656-5b8de12a014f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88049135-a79b-416e-b8ae-9bdab1fb1bcd", "sighting_of_ref": "indicator--5123f509-24c9-4955-8008-3c5c64128cff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8156aa2f-2189-45d3-9121-11dc3f8d79fd", "sighting_of_ref": "indicator--8e97ef98-2754-4e0c-b111-231e99a9cd0b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd5d670-82e0-490c-9787-c978567d4236", "sighting_of_ref": "indicator--e7aec355-1fe3-493a-b84c-c14bba948a2d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecbecb1-1d3c-4736-a85d-ad686da23ebf", "sighting_of_ref": "indicator--644119d9-eb46-4b53-a669-ece120b89d00", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e9f6e0-080f-4f92-a740-f3d956447688", "sighting_of_ref": "indicator--003d1f08-f9ff-4365-b9ed-dbf5950183e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6cbabc-a492-4273-8c32-e61f9544dfd6", "sighting_of_ref": "indicator--3974866f-71f8-44d4-addd-4f3ceecfa906", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e607ce-e7a2-48c3-adaf-9053b869f03f", "sighting_of_ref": "indicator--dd68d0fa-aca6-41b5-87b8-5ce40b9dff1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57997c14-9798-4600-8b64-239d93eb5bad", "sighting_of_ref": "indicator--11b2b283-9fd7-4168-9038-3aa8a4d2f325", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a442112-e26d-4fee-ab64-9c022229041e", "sighting_of_ref": "indicator--bea56773-8656-4954-84eb-5235fae814a8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a425261-9458-4ace-aa21-fac463e89eba", "sighting_of_ref": "indicator--bea56773-8656-4954-84eb-5235fae814a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e045421-6920-40c6-bc08-26689d14a595", "sighting_of_ref": "indicator--6c6c9eb9-f287-41bf-9d6d-825f436e0879", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb824c4-e69f-4507-ab02-03c666ea10e5", "sighting_of_ref": "indicator--9ded1315-888b-4639-9d69-920001d2930e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b0c20d-9805-4eb2-a813-a22d3cef04ba", "sighting_of_ref": "indicator--cb4225d8-eef0-458e-82ae-8542c3d849d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302ac424-532e-40fb-8a3e-030b86dc64ec", "sighting_of_ref": "indicator--5782b348-ebc8-4b2e-ae40-dac4c18dc923", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e604b068-60fc-4986-8b00-ffea09ed05cc", "sighting_of_ref": "indicator--bac6ec2b-54ea-432b-828f-5913301d19ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34683c8-0acb-497d-b379-c16c9889238e", "sighting_of_ref": "indicator--bac6ec2b-54ea-432b-828f-5913301d19ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f118573-4083-48c3-ad5f-30ee2f4e177a", "sighting_of_ref": "indicator--1485aa8d-eaac-45ea-aa44-d9a1cf4bb8c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f26685-2680-4f41-99df-531c0b29b1fd", "sighting_of_ref": "indicator--db216ccd-ec58-40ec-85b4-1b91f36dcf8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515a6dcf-a023-44c6-8356-702a5e3f89ee", "sighting_of_ref": "indicator--266520f8-c802-455e-8564-7818ea72a81f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74493b2-0c02-405d-ba48-cca67b96fa0a", "sighting_of_ref": "indicator--7a87e23f-c1b6-42b5-bb35-33c66c744b32", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530e373b-53ef-46b2-8be4-900939f944d6", "sighting_of_ref": "indicator--7a87e23f-c1b6-42b5-bb35-33c66c744b32", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ec8b59-bb82-45da-9d60-0d28facc17c5", "sighting_of_ref": "indicator--459558bd-490c-402e-a10f-c342bda2011e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e4c7a3-eab8-4323-9016-dda6c9b4049b", "sighting_of_ref": "indicator--87913fed-b915-41d3-b519-91842228750f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66a6109-ddd9-4653-8f2c-3f1c22d20944", "sighting_of_ref": "indicator--6613777d-fc51-4082-b07d-67c647030ca5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbe515b-45d5-43fc-96c5-1793d9ded69a", "sighting_of_ref": "indicator--655f10c3-f559-4ec4-a1b5-388dc0eba258", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b95f9e8-b156-4ca6-a864-25b234bf563f", "sighting_of_ref": "indicator--913cc0d8-9524-4eb6-979e-10e5917ced85", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0382d585-2e26-4b41-a37c-b31b2e4bb4dd", "sighting_of_ref": "indicator--1e375df8-c337-4cab-935c-b196f0a2e021", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9609631-a3cc-4390-9164-8a175e46ca7a", "sighting_of_ref": "indicator--6d085c88-6370-45c0-9af8-49285ebb9a53", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e732a953-5039-434f-b50b-fabaf7ec298f", "sighting_of_ref": "indicator--6d085c88-6370-45c0-9af8-49285ebb9a53", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c7c8d2-4090-4840-93b2-11f9630b9920", "sighting_of_ref": "indicator--4d3c09f9-f992-41ae-932a-0ec5b0928f69", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c2d83a-4bfa-4b98-aea0-3fa519a34290", "sighting_of_ref": "indicator--4d3c09f9-f992-41ae-932a-0ec5b0928f69", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bae6002-3566-4f8d-bfd3-d4ebe3a3f554", "sighting_of_ref": "indicator--a1e692e4-cc6f-465f-8931-f1eb6b918ec4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbe6c83-5776-41d9-bdbf-0ba8bb2eab19", "sighting_of_ref": "indicator--a1e692e4-cc6f-465f-8931-f1eb6b918ec4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fb233d-1eef-4f1c-b79a-e313f9d567a7", "sighting_of_ref": "indicator--8f284ace-3cdf-4360-897c-116b2f0deb53", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d975171e-7327-4f2f-bf02-365a39f7eb5d", "sighting_of_ref": "indicator--6ff9e575-a753-4ff5-a258-ea1088ea6dca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65519499-14cc-46da-942e-680e2ccae87c", "sighting_of_ref": "indicator--2051c6ed-2fe1-4fb0-8314-b6c2fc523fe7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed09b2c-4c5b-43e8-a92e-70178f0b585d", "sighting_of_ref": "indicator--2051c6ed-2fe1-4fb0-8314-b6c2fc523fe7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ac4b67-d1fd-4797-a43f-c9616ab12db1", "sighting_of_ref": "indicator--90c1f4f6-0969-4cf8-9a79-7c9061065dd6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa50e6c-c344-4b4a-b1ae-acbd03196901", "sighting_of_ref": "indicator--7d39b538-bb57-4ae2-9823-f3a526506e68", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b501de-5e96-4ac4-90f5-20017f5e2a9b", "sighting_of_ref": "indicator--66bc5dac-fc75-40ff-9240-897ff68e3528", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b5745f-4de3-467a-bf12-1b10384d153c", "sighting_of_ref": "indicator--66bc5dac-fc75-40ff-9240-897ff68e3528", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245d6fdb-2608-4d7e-bfb6-d6ee1d6ddee7", "sighting_of_ref": "indicator--00ddacd7-8ad5-490a-9e36-0c548fab975f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97126d3-f31f-4ce4-a5ef-ab907780622d", "sighting_of_ref": "indicator--00ddacd7-8ad5-490a-9e36-0c548fab975f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511f8cf3-11ee-44a7-a146-595f4e884ed8", "sighting_of_ref": "indicator--3e1a2152-43ae-484b-8054-22ceba8e2f79", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d40d62-33d9-492a-ab25-70abfda13931", "sighting_of_ref": "indicator--dfa071b3-c112-4aef-8863-8898d2d3a4c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f68553b-7333-4db2-a8cf-f81dcc4cd4c0", "sighting_of_ref": "indicator--73bc0a83-1a3b-4bcb-a314-6ff5b0569163", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e563cf6-33d4-4a1a-98f9-83dc07bb54da", "sighting_of_ref": "indicator--d28c80bf-13f4-46fc-830d-bd4050a1295d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40532b08-def1-4291-a709-376b3c170a4e", "sighting_of_ref": "indicator--4cd5531a-c71f-49bc-bec2-17c028792dd6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049da352-b65e-41cd-b37f-cf257ae12b43", "sighting_of_ref": "indicator--4cd5531a-c71f-49bc-bec2-17c028792dd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32616d37-66ba-4ee1-aaf1-a038d1c33cda", "sighting_of_ref": "indicator--6c693919-808a-4e0c-ad09-41e2c324075a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1171d0-aa76-46a4-89e9-e796833e4ca7", "sighting_of_ref": "indicator--b0e09006-95d9-4ae7-9e51-75e27844c5dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e82d94-0b84-46a9-9c98-20d6bc8fbc49", "sighting_of_ref": "indicator--b0e09006-95d9-4ae7-9e51-75e27844c5dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49fff6c-36fe-468c-9e28-395a536ada8b", "sighting_of_ref": "indicator--6cfb9d6e-4e1a-4b5d-ba59-1a81f09fcee8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866a6de3-75a4-47f2-9b4f-b615a5502e45", "sighting_of_ref": "indicator--282e9f9d-d37b-4e12-a02d-d887d18ac150", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb945b5-2ef2-4266-9025-ba080cdde751", "sighting_of_ref": "indicator--ff3d2290-8075-42b8-aa7c-345c112ca1fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38279bcd-d58b-4758-95fa-69771823edab", "sighting_of_ref": "indicator--cf87c589-c1a7-41f2-b0d3-df1046b0b782", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f0ea3c-d507-4940-9697-90e3d828e866", "sighting_of_ref": "indicator--5d7f0da4-be20-447f-b793-135812c81bef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7dd6fc-aa42-4f95-a62e-c03e47bf7771", "sighting_of_ref": "indicator--6090e8b3-4600-47c2-9c39-a4d8cc2460bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3e47b3-b503-4d2e-ad12-c3a636160664", "sighting_of_ref": "indicator--6090e8b3-4600-47c2-9c39-a4d8cc2460bd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69acc4f-bc67-4e5b-90fa-69d4964a2314", "sighting_of_ref": "indicator--7dbc1909-ca90-4595-aa89-8833f3636fd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d722cb-04a9-491e-9621-2b8177871ec7", "sighting_of_ref": "indicator--376ee223-eb3b-4b2a-ac3c-7e44bc39359e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a792236b-24df-4deb-b152-3ab10acbf3b6", "sighting_of_ref": "indicator--136e467b-d1a4-4c5a-bfbe-545ee667c676", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5928254b-17c7-439b-a7af-634c063a3a3f", "sighting_of_ref": "indicator--136e467b-d1a4-4c5a-bfbe-545ee667c676", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cb7086-51b6-40b8-afd6-f3d13b01009c", "sighting_of_ref": "indicator--d74dabbc-5567-4dfb-b8cc-642b143779d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54ff217-9302-4ef8-8558-b47f1478ead4", "sighting_of_ref": "indicator--d74dabbc-5567-4dfb-b8cc-642b143779d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650840d7-103f-4602-9ee5-9072501d216b", "sighting_of_ref": "indicator--b78ef0c0-53c9-4a60-a7ca-130698bad1cb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc12d8c-fe13-4a65-811f-e8304f992d92", "sighting_of_ref": "indicator--bf6a6790-7e0c-45f7-ad59-a525475a493a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8124b4f9-8816-4509-a469-c7576b55e6b5", "sighting_of_ref": "indicator--c84f7e82-6917-4780-94c0-5a3417011ca9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5384a18-71b2-464b-880e-215124aa8412", "sighting_of_ref": "indicator--a757a620-8472-408f-a26c-9f5fda1ea9f0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed023c4-cbca-4ea6-8131-ee80022b5563", "sighting_of_ref": "indicator--013727fa-3244-4b37-8090-c41123b8d24d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296b5184-3e7a-41c2-bf08-7ac64e6fa32d", "sighting_of_ref": "indicator--b8ee7e2b-2311-4f78-a3f0-4efb427761ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85c8ace-26a3-45e2-b22f-29bcd3736ad3", "sighting_of_ref": "indicator--b8ee7e2b-2311-4f78-a3f0-4efb427761ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc36ae23-a0d8-4da7-882b-78683dd9be5d", "sighting_of_ref": "indicator--b730d23e-2050-4d59-aa26-da64c73db968", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c240d582-790b-4e2b-8b6e-3467971390ac", "sighting_of_ref": "indicator--33fb598b-ebf7-4546-ab81-a28d7b3ef182", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ebff6e-9955-4c17-a8a4-c8b3c63a0db3", "sighting_of_ref": "indicator--8a7e06f3-1f40-4827-acf7-f6deb428cb57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15684fa-112d-4a34-be57-d886733cc34e", "sighting_of_ref": "indicator--3b0a0ccb-701c-41c6-aa7c-65d3e7a4c2e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796e1c5a-ffa6-420b-a66e-d224618dd91c", "sighting_of_ref": "indicator--3b0a0ccb-701c-41c6-aa7c-65d3e7a4c2e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaae4a7-a021-4b98-8c87-601c7a2a2e40", "sighting_of_ref": "indicator--ddc01a5c-0af8-4301-b9e2-6601bc6c49ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016ef144-ebd5-4df9-82d5-582ca131f716", "sighting_of_ref": "indicator--abb58b69-ceda-4c77-89aa-88e64108abd4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6805f9-a98b-40fc-9732-f8b8c1a5cf80", "sighting_of_ref": "indicator--789e8975-2e2a-4882-a543-002c2300d8bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950c71e7-26f7-4a14-9fed-09d93121bfeb", "sighting_of_ref": "indicator--fdf7d9b6-2a77-4045-b328-8f98ff01326d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c90ccf6-40ec-450a-b17b-61d4100ee3d1", "sighting_of_ref": "indicator--ef7e5ede-d56b-4c9f-b0e0-0fb2be9ff87f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1fd18f-c0f1-4a53-b28b-c3168fb7c077", "sighting_of_ref": "indicator--b0e6bca4-4895-46b6-ba14-c65bd2031d2c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f20b58a-a421-49f8-b0f5-0a723a2745e8", "sighting_of_ref": "indicator--ad97573f-e0c4-42b7-afe2-19f11f25d154", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4162d1-4480-4544-8349-37ab3e5e7097", "sighting_of_ref": "indicator--e8531ed2-a8c5-4897-bf62-c99efc64e511", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0dbd3a-a2e7-4919-bf1a-1f91ab5a82af", "sighting_of_ref": "indicator--e2894274-01d1-473d-9e7b-fa14d54e8772", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c167c097-c5d5-42aa-bc96-a876efdf624d", "sighting_of_ref": "indicator--3ce8f896-dbae-46cb-a7a4-4a5549f9fbb6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b88f68-4900-42f3-8d56-885c861d7247", "sighting_of_ref": "indicator--d6b363a0-8a4f-41c3-9615-984a24aab61a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed76ed2-79f6-48f8-896a-8bb647e1d7dd", "sighting_of_ref": "indicator--7078ab03-6827-4270-81d0-65204d4eb4f6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3990ab-76b0-45d0-a468-1acf6c537924", "sighting_of_ref": "indicator--cbe17326-1136-4d5e-856f-fa94b9e89d32", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e4c656-2d7c-44be-966e-cf20b4547e4d", "sighting_of_ref": "indicator--cbe17326-1136-4d5e-856f-fa94b9e89d32", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ad5afb-bcec-4ac2-ad23-93148c4ca890", "sighting_of_ref": "indicator--6198c08b-3cf0-4ceb-a7c6-fbc56881a1d9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68f8742-5851-4171-b24b-61f2f55ee40e", "sighting_of_ref": "indicator--1cf0c999-a690-4101-8de1-0a4ee37f8b2e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70da294a-2beb-4a26-98e1-b21107810853", "sighting_of_ref": "indicator--5b92504a-d418-4c3f-b8ef-27eddf7cc477", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ead81a-ce08-4408-aea2-e4825a1d2281", "sighting_of_ref": "indicator--13b0dee1-088c-48ad-bae9-2b31e78b6bfa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ebab36-5335-4853-b3af-fa9ea4ed9679", "sighting_of_ref": "indicator--0cfb7654-2a30-4017-b9f6-86e94e5a87ab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da2d46c-4b18-4626-920c-cbc541ad1330", "sighting_of_ref": "indicator--77943f0d-76bb-4d1e-9630-9177e3f86f34", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1f5330-2485-4d10-b414-0681c904df82", "sighting_of_ref": "indicator--77943f0d-76bb-4d1e-9630-9177e3f86f34", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296cf56f-d894-433c-9068-e990a6cbc397", "sighting_of_ref": "indicator--10bf2fcb-865e-4856-86e6-b8e767eb4081", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe37d76-41a3-47d8-9f8f-a37e5616c605", "sighting_of_ref": "indicator--436a8911-4a5e-41d7-8eb6-973400421010", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd8741c-ab0e-4215-880a-e9e332730476", "sighting_of_ref": "indicator--1248d754-b19f-4d36-b052-7b5846a3ae56", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e560887c-d3a5-4d8e-a555-659d0403d783", "sighting_of_ref": "indicator--d23128dd-c938-4f5c-bc9d-8b02a4fde332", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60776feb-9e04-4abf-af68-6789037256a2", "sighting_of_ref": "indicator--ba69f61f-e536-44d4-93aa-c42c186e6ea1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc78955-274c-437e-a219-62175ad29a48", "sighting_of_ref": "indicator--934da038-991e-417a-860e-87686e194ebf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b08fec6-ede4-4e91-8a48-808ceb2fefa6", "sighting_of_ref": "indicator--9f267257-1f51-43b1-9a9b-b0e14c232bb0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f024df-222d-40df-9b46-9b79a264b5a3", "sighting_of_ref": "indicator--d8a66d1a-b3d8-488f-9da2-96c2ba984d13", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df15342d-dc1b-4ddd-9931-8e435d1545fe", "sighting_of_ref": "indicator--92c082e0-b72a-4c80-ac0a-3219ff0743ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36dcb5d-efea-4440-9f78-6ff19fabc612", "sighting_of_ref": "indicator--dd2ed6bc-d498-45ed-95a8-7614d285578e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b1ea80-f385-472c-b82f-c6a39ade71aa", "sighting_of_ref": "indicator--f1b877fe-3a81-40e1-abf2-8ca7736af872", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d66c5ea-812f-45cc-bc08-c94d80c18196", "sighting_of_ref": "indicator--41cc2450-b7b5-4f3b-ad8d-fda666a17046", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111c0441-baa2-4245-a508-7e8c421fe895", "sighting_of_ref": "indicator--d90227d1-cf54-4421-8828-5764767096ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b921f33d-45ed-4983-9e28-ee526a141530", "sighting_of_ref": "indicator--d90227d1-cf54-4421-8828-5764767096ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336b7a6c-071f-4545-aa3e-9ba915716521", "sighting_of_ref": "indicator--3f66ed41-989f-4ce1-a7b1-6669a9cf374b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8e2727-cbc9-4e6f-8e41-18ac1585a293", "sighting_of_ref": "indicator--59ad97a4-43fa-486e-b54c-6068283ffdff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6f9db1-2439-4ce5-a773-3bc32c25fe9f", "sighting_of_ref": "indicator--daff971f-fe1c-4c34-acda-d75d6889ec25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d784960-9ac4-444d-b1ca-1e6346e83e46", "sighting_of_ref": "indicator--569e52c6-2c65-4289-a8cd-d6eefe2911ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ad1c2a-a841-48cd-9478-fc7d80f211c1", "sighting_of_ref": "indicator--ba5d805e-f51a-4825-a4ba-48cf6048fc4e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdd2a07-bfed-4b4d-b34f-10b56f4f1950", "sighting_of_ref": "indicator--4314a88a-aead-446e-be8b-3e73412554c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24f8d33-0add-440e-9d29-fbeb50fb1026", "sighting_of_ref": "indicator--bd6d5a80-b496-428c-a366-74ebc623341c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93587075-135f-4f0c-823c-8eac37cd01dc", "sighting_of_ref": "indicator--c7df1f29-e904-4877-90ee-03fef915004b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bcc34d-bb10-447a-ad91-4c5c7958bc5b", "sighting_of_ref": "indicator--8bbd740a-058b-46af-8fa9-a578f59828ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb91ad60-41be-4d5e-b5c0-028e53aef054", "sighting_of_ref": "indicator--0821fe57-08f3-4e48-a42d-e082474f649e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6561406b-ea27-46a6-bd59-d8f8c3291f5d", "sighting_of_ref": "indicator--0821fe57-08f3-4e48-a42d-e082474f649e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f6babc-3dae-4341-8a3c-00112e32a424", "sighting_of_ref": "indicator--8844181a-b7fa-4bb9-8af8-251ab91da70c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677ef871-2df7-4a0c-aae4-318afcee3ee2", "sighting_of_ref": "indicator--8844181a-b7fa-4bb9-8af8-251ab91da70c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8c6539-5dc7-4a5a-a7fb-cf74c155c767", "sighting_of_ref": "indicator--c355e052-462e-42c9-932e-261e08816ddf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2207ee-d1e6-4216-8a33-5f9d95581c14", "sighting_of_ref": "indicator--c355e052-462e-42c9-932e-261e08816ddf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62e5b5f-da29-4abf-9304-68e96aa78a71", "sighting_of_ref": "indicator--5d6975e3-f1bd-4a97-b21d-0935f656086b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d7c356-2535-488b-a5af-02e1771af9c2", "sighting_of_ref": "indicator--2ab8223e-a579-4b7f-829c-abbe472c9acc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95a8711-5626-479a-8a3a-d18ea57d7298", "sighting_of_ref": "indicator--073a8009-c3e1-47a4-ba5b-13d12d2911d9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adcede8-7ed7-47df-8e71-d72f22a3e3e1", "sighting_of_ref": "indicator--073a8009-c3e1-47a4-ba5b-13d12d2911d9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff1c07c-42f4-460d-aae4-83c17d18e4bd", "sighting_of_ref": "indicator--df0f1a20-b156-4b2f-b648-3a0d0b837872", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec31220-a4b5-49b3-848c-3225d65beae5", "sighting_of_ref": "indicator--ce2f9b68-2db6-4091-a244-6c2ebad89bf7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8c3d39-b4eb-41fb-b210-abf2e0f8f604", "sighting_of_ref": "indicator--9e73d452-05c9-4e8e-ba3a-b8b348468516", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e365e503-4530-495b-8c0c-b706a1c1068a", "sighting_of_ref": "indicator--060a540c-28b3-422d-b49c-cb21363e752f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1fe8d0-40c4-42d6-bbd4-6a04f0edc8a7", "sighting_of_ref": "indicator--4a70b489-19f3-4de8-a8d6-42dacc2b08d8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56896bd-ca42-449a-b346-b191ed9cb84f", "sighting_of_ref": "indicator--4a70b489-19f3-4de8-a8d6-42dacc2b08d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b70a3e8-830b-434b-9305-052b18368517", "sighting_of_ref": "indicator--edcece8c-6318-449f-9d67-e20efec72c83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110f9be5-71b2-4411-8015-b5c26d5c10ff", "sighting_of_ref": "indicator--bc5de6e1-3203-46a4-a704-8b90fa682795", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15885d67-5fff-4b83-8f05-53d2f848e4f3", "sighting_of_ref": "indicator--95ae7b0f-0be0-4c9c-97c6-da6e10ed9608", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6cd9a8-6fea-4c0d-b2d5-6e2df767a59b", "sighting_of_ref": "indicator--0f76c1cf-ac24-4d4f-860a-4f1ce18f927b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54b6f49-dff0-42f4-bfec-9840818cf774", "sighting_of_ref": "indicator--9ad83c34-ceba-460f-be4d-dc9a62f3eddd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edff94ac-3b1c-4577-8f7e-7b996952ddf6", "sighting_of_ref": "indicator--8b1043e6-fe98-4634-b0e9-074de59053fe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f76cfef-b165-411e-abc2-e402bd29461e", "sighting_of_ref": "indicator--34ed5106-f771-4885-9ec0-14b71a5f4adb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30d08d3-a12c-454d-a023-fdb85beb3dd5", "sighting_of_ref": "indicator--60afc5b7-e162-4110-acbd-357e96a46639", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b4492f-9f34-46b0-8d97-969a76f56f1e", "sighting_of_ref": "indicator--60afc5b7-e162-4110-acbd-357e96a46639", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ee051e-071a-4d60-b8f2-3ddb14dfb782", "sighting_of_ref": "indicator--46d770b4-e0d7-44c2-abac-66824894bc9a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022fe175-7816-4be2-b351-e1b4bf054a1b", "sighting_of_ref": "indicator--21df31a0-dd7e-4662-b9c9-0b7f3107803f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8516d05a-4a30-4d3f-9f00-00ac5283da6f", "sighting_of_ref": "indicator--a8a59b90-2551-4785-9268-8d6bc8ff2298", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d51ac6a-7da9-41e7-81ef-66a350d67a15", "sighting_of_ref": "indicator--96b2d9a6-247e-4a90-b4b6-ab36a6152cb9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f2e0bd-2f03-4884-a4c9-ed8fdc912498", "sighting_of_ref": "indicator--b9e5bb77-6cd4-4297-8bda-dbbe35d99f11", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abe42d6-9f24-4cbe-837b-4213892bf93f", "sighting_of_ref": "indicator--15d95e1f-e338-4f45-badc-e68a2b43b994", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c28b23-89b8-4950-8a30-0b87c98cf296", "sighting_of_ref": "indicator--d08d4f4d-875d-4851-8da9-e40f96fcec9c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b84e78c-c945-4982-acdf-e722ec934b14", "sighting_of_ref": "indicator--d08d4f4d-875d-4851-8da9-e40f96fcec9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81723fd7-eb9f-488d-9ddc-aeddd88157b2", "sighting_of_ref": "indicator--52b78fce-ef1e-4e3c-b5eb-925c10e69fc4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4a9b82-0529-4b69-a9c2-d164ad265b39", "sighting_of_ref": "indicator--baba8d76-2729-42aa-8829-af5993525279", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd3dbad-b5fa-40d2-946c-fb6a758422e7", "sighting_of_ref": "indicator--fbaeeb32-c3ad-4260-80a3-42ec726319a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39464b7d-e5b7-4785-bf9e-046d850dfc25", "sighting_of_ref": "indicator--646fb855-c555-40fc-b8b2-fdfa70aa52f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57876071-999b-4332-b228-ca9484c71727", "sighting_of_ref": "indicator--6fd63ef9-8fcb-4e00-80c2-edfb5fffdd7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda6ed0e-dd93-4f04-bafd-41079d7fb1e2", "sighting_of_ref": "indicator--c0fa366e-30cd-4c76-ba4e-8b8cd5fadd5b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f530f03-5f52-4f45-8fc4-dcbbc4a663d9", "sighting_of_ref": "indicator--4e64dd3b-957b-4f87-989e-e00d9040c10c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50e4d77-7fbf-4036-83ba-6eea7b02ed2f", "sighting_of_ref": "indicator--3c6f4a17-6f02-4b63-8f14-26031ba8a3e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf5a707-b636-4db6-8a74-612016dae957", "sighting_of_ref": "indicator--88c61fa3-ee88-4cca-ba75-27e7c31eca3c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd910952-6f68-4fea-9c0a-104611c58efb", "sighting_of_ref": "indicator--4b7cb886-1d63-4196-8aa6-ccd240e9e6a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad50093-4081-4ba0-945a-e02c3bfe69b7", "sighting_of_ref": "indicator--2882d90a-4b6d-469a-b210-6f97be93ee5a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f5808d-4980-4e16-931b-18515539447d", "sighting_of_ref": "indicator--2882d90a-4b6d-469a-b210-6f97be93ee5a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfc9658-be92-42ea-8149-755d87315d06", "sighting_of_ref": "indicator--4e485422-6f04-4941-8837-a96216b15c20", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc5cd1b-8841-4357-a301-577f682a8b1e", "sighting_of_ref": "indicator--4e485422-6f04-4941-8837-a96216b15c20", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae27d5b-a35d-4552-90b2-f5f853799674", "sighting_of_ref": "indicator--a2e9ffca-d12b-4dc1-8814-d31c800f2049", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55551dcc-d42b-4624-b453-8f3944a4c18b", "sighting_of_ref": "indicator--169651de-5505-46cf-a199-ce6c37730dcb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b6b359-aaaa-42a5-b413-99fe3c014cef", "sighting_of_ref": "indicator--92f3434d-0e3f-4953-8c83-179c8e688288", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8318aaea-0363-43df-8f70-3a21911a4874", "sighting_of_ref": "indicator--92f3434d-0e3f-4953-8c83-179c8e688288", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2cedbb-f268-4fdb-b2f3-8bb2e0ce8f69", "sighting_of_ref": "indicator--c01f363a-c0e5-48cb-9825-c6a4aaf488cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53bc0d9-a938-4e8d-abab-ab56c608aa2c", "sighting_of_ref": "indicator--c01f363a-c0e5-48cb-9825-c6a4aaf488cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08324b4c-9ed2-4745-900e-bf64f7e7405f", "sighting_of_ref": "indicator--55b65ad2-8597-4d60-9133-e8bae83b34be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484789b7-0efb-4330-a7c8-f0994dc0f405", "sighting_of_ref": "indicator--55b65ad2-8597-4d60-9133-e8bae83b34be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9396ccef-688c-403e-ba26-b3432a7fca7b", "sighting_of_ref": "indicator--7425025c-1a29-49eb-b280-431898fd99d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851d1de5-e748-40ee-8c4b-efcaccc806e9", "sighting_of_ref": "indicator--63b9389b-e9ce-4db8-b598-be16a1e88b6a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60737207-7cad-4396-ad53-8b4e3fe6cd47", "sighting_of_ref": "indicator--7828b7cb-a0fb-42ac-be7d-cd28966f8890", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bca7c40-556c-4500-876d-cae2430bdf8a", "sighting_of_ref": "indicator--61e9c5a1-1ee4-46e2-bf6e-f58f596b4bcb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5992b12c-cac3-42e7-9cc5-bfeca7f067bc", "sighting_of_ref": "indicator--61e9c5a1-1ee4-46e2-bf6e-f58f596b4bcb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02eb492-9d1a-4275-a612-51202a01d5f3", "sighting_of_ref": "indicator--46a6ab0c-eead-47bf-971e-4a2668b3b8e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a08917a-7d2d-41f7-9c91-ae36c72651e3", "sighting_of_ref": "indicator--aabd0296-2ca1-4e75-97cc-18208bca0a7d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a36efa-6de6-40c8-83f3-841d4911b85a", "sighting_of_ref": "indicator--88a29f8f-f2b5-4b3c-8083-2ebddc8c3679", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e380e75-6663-4fcc-86f6-b07addf28263", "sighting_of_ref": "indicator--bab6ffe9-a1f8-49e5-bc4c-1bc44ea18dbb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741a426f-ed8d-47e6-9189-9ba7da67eb36", "sighting_of_ref": "indicator--1c8e79eb-8eca-4662-b9aa-13e58f170fb9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104542b5-15a1-4e26-910f-14ffea5aec82", "sighting_of_ref": "indicator--f7443b51-5f2b-4872-981d-0241102e075c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb235832-1382-4a31-bb6d-9ae479268220", "sighting_of_ref": "indicator--f02417b0-f3a8-4285-9f4b-cee4c4677407", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44298e0f-c62f-4b7b-a8e3-e65dc4234d18", "sighting_of_ref": "indicator--1d44f4ba-fe2c-4aff-99a5-8bef41060a07", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa35521-ab69-4c61-848a-bdbc132a4b6f", "sighting_of_ref": "indicator--1c82320f-b739-4880-805b-a1bdc548fb57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b18fca-3efb-4ad8-8fe5-c6cf59715ae1", "sighting_of_ref": "indicator--fa30bdf3-0e36-4b07-9b70-ab8f5d5d18e0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c691230c-e169-4041-84ab-656ab219e45b", "sighting_of_ref": "indicator--fa30bdf3-0e36-4b07-9b70-ab8f5d5d18e0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b11e55c-f541-4d09-ada8-102174ddb2b4", "sighting_of_ref": "indicator--bc545a74-f0ae-4be7-9579-bf376d822df6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d0a609-3730-409f-affa-3225b6657f60", "sighting_of_ref": "indicator--6af7d20b-32a3-4b9b-92b8-8fb6ffbda7e1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ef49f4-d63d-4d54-9b97-2ff80d8d6fee", "sighting_of_ref": "indicator--6af7d20b-32a3-4b9b-92b8-8fb6ffbda7e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0781867f-c5bc-4e33-b04d-6d2575581bed", "sighting_of_ref": "indicator--3781fff5-5b58-47d0-93e4-636353f17d08", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b721b0-9b44-4ef3-84b4-9bcf7b94ad47", "sighting_of_ref": "indicator--0eb9acc8-47d0-435d-8608-f7bdfc06a622", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461409c8-2fa7-4096-b80d-71ce8bdb11fe", "sighting_of_ref": "indicator--0eb9acc8-47d0-435d-8608-f7bdfc06a622", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881f03f6-15de-42d9-b21f-c17239c7ecd9", "sighting_of_ref": "indicator--0033b6bd-4baf-4571-8ade-96f8b182b51c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7274fff-3887-4dce-974d-34b0f555a3ed", "sighting_of_ref": "indicator--c2d7149d-c031-4ac1-ae52-d0b2e3b7e53e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382ee91f-b0b5-4a72-9a07-3d27c338ce51", "sighting_of_ref": "indicator--c2d7149d-c031-4ac1-ae52-d0b2e3b7e53e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93606b51-04ff-4ed4-be31-59b1497616be", "sighting_of_ref": "indicator--d617acad-9056-4047-b40b-924610ee478e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd66a6e7-a7b1-4f7d-986d-4d3097b972d9", "sighting_of_ref": "indicator--d617acad-9056-4047-b40b-924610ee478e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24834b5-e559-4cc8-8419-d36d20f04371", "sighting_of_ref": "indicator--76768cd6-3331-4ef3-8165-4f23ce242ac8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c615ec4-eefb-4be0-8868-12e8216faeae", "sighting_of_ref": "indicator--cc942331-7c91-4ebd-87f5-0c9e9b629e75", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52ca121-075c-4735-b19d-a867f4f688e5", "sighting_of_ref": "indicator--cc942331-7c91-4ebd-87f5-0c9e9b629e75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3830625e-2aa6-4b33-a826-69762f2e8c47", "sighting_of_ref": "indicator--6bf6eacd-ff6b-435d-90d6-6fec437b3fe8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dafb1c7-6ef0-4fd4-99a4-5ae2a4539635", "sighting_of_ref": "indicator--5bebd90b-594d-484b-b4a4-0afe71a270ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f687f1bc-5056-419e-89bd-cbf876850067", "sighting_of_ref": "indicator--b9635094-98a0-40b8-bed7-98f9c9b32dfe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd6be53-98ab-4ab8-aaf6-290beb646a8a", "sighting_of_ref": "indicator--38c69725-e34d-458f-b25b-198587a3fe9c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0533d15e-3517-44fc-8e28-f3c8c3e4a8ab", "sighting_of_ref": "indicator--cae4e66b-14b7-487e-b5e4-f718b1ab21a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869d0c5a-57b4-4733-a95e-b985d2f5c9dd", "sighting_of_ref": "indicator--d44bea74-6e66-4c1b-b54d-33ed599143ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56eb5b5-4791-4dc2-ae5f-3db388c568c2", "sighting_of_ref": "indicator--385c1cad-6148-42c0-b067-643746475aa4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac40678-0052-474f-87a5-c09a1560e1ee", "sighting_of_ref": "indicator--41ca22ce-99d3-441e-b0d5-cf507ca8b3f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52e0047-ce54-4325-9eed-3156eb7d8849", "sighting_of_ref": "indicator--2ba5d0a0-22cb-43b2-b972-fede5a9a1cf3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d372f82-5cfb-43f5-8d92-97098d72af7e", "sighting_of_ref": "indicator--2ba5d0a0-22cb-43b2-b972-fede5a9a1cf3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7c9a58-6d36-4105-b2a4-7dff0dd5b6e3", "sighting_of_ref": "indicator--4e3a605f-dbea-4a5b-8f2b-b753f9709030", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a2841b-ca1d-4759-8cd1-61cf663437f3", "sighting_of_ref": "indicator--4e3a605f-dbea-4a5b-8f2b-b753f9709030", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec7af59-1c50-4eac-a7d1-9a09df7941d1", "sighting_of_ref": "indicator--9e419991-a8a8-4369-af24-7d0dc8739221", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f3c52c-3689-45fd-90bd-141dd7221952", "sighting_of_ref": "indicator--ac0141b3-ccba-441b-ac94-795a2927a7fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4453c589-459c-46ea-897f-4aeefb51dd4f", "sighting_of_ref": "indicator--b487f518-8386-4cd6-b431-54f24548c305", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6c7a4f-ddd7-4604-8e13-4f3ecd44a53c", "sighting_of_ref": "indicator--b487f518-8386-4cd6-b431-54f24548c305", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33010b2a-73c9-4ba5-ac16-e16080f9bcd7", "sighting_of_ref": "indicator--511568b8-49e9-4263-8387-f9d557e1aef5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d4f341-038d-46db-b7d1-2a64f46f7bfa", "sighting_of_ref": "indicator--c0763a5a-370a-4200-a863-9a03a2fbb29f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0281b89e-a832-4254-b892-73719a81e894", "sighting_of_ref": "indicator--c0763a5a-370a-4200-a863-9a03a2fbb29f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2acff71-c148-41b4-975a-cc0f0cb1e95b", "sighting_of_ref": "indicator--0a232f0a-7a14-49bf-80cd-ca4cdf0b1710", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c10fcf-53bc-4dae-a654-8db6079c5fb8", "sighting_of_ref": "indicator--fc7e1d8f-924f-4443-acbb-5bfc23652823", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bd919d-7b07-411e-b770-cffde7b7e51f", "sighting_of_ref": "indicator--5816404e-50d7-4b15-b5f4-7b58264671a7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5ff1d8-1d4d-477f-9392-161c63583155", "sighting_of_ref": "indicator--9b32beb7-866c-457f-809b-08c3da8c6580", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6e2c17-33a9-463c-a068-81325f968ff1", "sighting_of_ref": "indicator--0ff8d473-b665-4a2e-97c9-9f0f6c1a2892", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cfb043-4a96-4f33-9e28-63a60f871dd9", "sighting_of_ref": "indicator--bae63d34-125a-4216-8566-82d7f341e41d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de44ff2-45ff-4d9a-bb87-0213480b6a84", "sighting_of_ref": "indicator--5961ff96-9349-4945-9105-167b05a089a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bb52a3-1333-4229-8dd1-9c5c5cf2bca1", "sighting_of_ref": "indicator--d82bc0c5-1f93-49e2-9ef9-f7dcad4866b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bc4b79-1031-4fce-95df-e87aaa483f60", "sighting_of_ref": "indicator--b7040468-d3a6-4935-a22c-bb885a8f0f77", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb11fc8-0dff-4df3-af74-f85d4b626e8d", "sighting_of_ref": "indicator--3e96b82f-1a7e-40fc-bd51-dd331770c4a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067654ba-3b56-4e14-b049-d2d5ab95fe0b", "sighting_of_ref": "indicator--ec473702-7c40-4745-9df7-a72a84114788", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bba6a67-96eb-4f0d-9b63-2e165ef6734b", "sighting_of_ref": "indicator--ec473702-7c40-4745-9df7-a72a84114788", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b58873c-68a1-4a8b-8ddf-032b9e751013", "sighting_of_ref": "indicator--63bdf209-b771-4e1c-98cb-7ea4897a9e38", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a69712e-83b7-452f-b805-d9c8c0ff7f20", "sighting_of_ref": "indicator--4f17e1d8-a387-42b8-a648-3dbc4003b248", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b70111-945e-4b3a-ba15-b805cbfe594a", "sighting_of_ref": "indicator--ed386c2d-4924-4aab-a2a5-d3c2ef3787ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b15e5d3-9516-4954-92b3-2b51804a2fd3", "sighting_of_ref": "indicator--b767f7b4-885f-4b47-be46-942e747fce4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a281fde-1e92-4592-84e5-1bbabfcd2211", "sighting_of_ref": "indicator--20166dac-7d11-4699-a770-443318edcc8d", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bd097a-e8e3-43b1-b0be-7999123b8303", "sighting_of_ref": "indicator--20166dac-7d11-4699-a770-443318edcc8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b9a19c-f259-4a3f-93fe-dff6d2092889", "sighting_of_ref": "indicator--0d611419-5340-4e59-b8b5-a28b6ab4998e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efde554-2fb9-4379-8411-a48d35da1a28", "sighting_of_ref": "indicator--d0fdeeed-a266-4440-95ef-6ce814bc5846", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2170f9-8016-4f5a-bfd9-90d33a13b281", "sighting_of_ref": "indicator--c77b3a4d-fe41-4480-83ff-42096905019e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdd018c-e431-42b6-adf3-e8c1ea4d3974", "sighting_of_ref": "indicator--abb55160-ad8f-4a70-907a-18feab48436f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0abf99-2e75-45a8-b3f1-64544dbfdab3", "sighting_of_ref": "indicator--b206971b-0797-4748-b177-71029e4b2fc9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce71b18-f855-4e5c-87d1-76d931d98695", "sighting_of_ref": "indicator--35827935-7ee6-4595-9ed6-e6b2b5d2545e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8577604-8566-4557-a53e-3d9b5b93f6af", "sighting_of_ref": "indicator--9b152839-4a47-48f3-ad0f-6220a618284d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049ba7bc-2036-485b-b31e-ea3dd9093bf7", "sighting_of_ref": "indicator--78a093c8-2be5-4e44-b42a-54e309247151", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bbee2b-7a90-456b-bb5f-b9a1568e74e1", "sighting_of_ref": "indicator--51d8cb62-2d9d-4940-b290-3b091d7ddb34", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0be69f0-389b-4ec2-9147-c6bc36010360", "sighting_of_ref": "indicator--ae1d103d-778f-4256-8e24-bdc4813856cb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9287e3ee-96fb-46c6-80bd-5acba16cacfd", "sighting_of_ref": "indicator--b42a87c2-9a2f-4bc9-8d4e-a61a30512978", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b482416-6322-4b0b-a994-a2f3bf4ea4ea", "sighting_of_ref": "indicator--fc070dfc-9dcd-4a56-80fe-02e9f5b40cde", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8771f9ea-53cb-4d77-b4de-873a53b82eb8", "sighting_of_ref": "indicator--77e73897-258f-4873-84b2-6086e0c8f381", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86224632-2fa5-4073-9320-c19fa8edd013", "sighting_of_ref": "indicator--4102ed49-41e2-454f-8165-1b644d056ee0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff8f6d2-1f12-4ba0-ab58-b66ffc3f6571", "sighting_of_ref": "indicator--ee51d1a5-5c44-4ea0-a8c8-ac3f8b0c3afd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269533b1-2be8-4622-93d5-2663caca472e", "sighting_of_ref": "indicator--278e23fb-46ee-4fe8-8dc4-8b96f60d7a8a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec5aede-375d-4498-89e6-b8c6bd78de28", "sighting_of_ref": "indicator--564d33b2-d359-41eb-bf07-36b90c42ece0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75366403-1101-4518-a775-70565b0f1337", "sighting_of_ref": "indicator--3bcd833d-e1f2-4d40-a113-0dd69a8870c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03686e8b-deb1-4aff-9a70-c6c007ddc2e2", "sighting_of_ref": "indicator--4f5af8a9-5d86-4542-91f9-e892cfd7d686", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebb2544-15aa-4af5-9ce5-026cd799267c", "sighting_of_ref": "indicator--87753649-6e16-4c1c-8b17-d885bbff103c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b04d27-5f65-4b18-bdf1-874495a5c4af", "sighting_of_ref": "indicator--18d03d69-e8e6-4936-9176-990ab4e51503", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7770a7-5bac-4203-930b-2f8c104d6135", "sighting_of_ref": "indicator--5f155fb6-5ed6-4ad6-8219-05ec84780a4b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed21ad4f-09e1-486c-b814-efe39f974888", "sighting_of_ref": "indicator--8b9873dd-da88-4816-a890-dc75e88ec9df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf68e7b5-4ea7-495f-be8e-1108fea8d088", "sighting_of_ref": "indicator--2686e491-2565-4a3a-8b35-a7cdb37b3570", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1aa664-f5a8-4753-9015-e7d9dfa04a33", "sighting_of_ref": "indicator--f159ae58-06ed-41c2-b4a7-3760f6ae6089", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f939f30-8141-44a1-bf0e-05e880b0db53", "sighting_of_ref": "indicator--7f63521c-7b87-4be6-a0f3-72114cdcf1c1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b30f9f-8b7a-470d-9006-5d427dc75f8b", "sighting_of_ref": "indicator--e10b0e5d-71c9-400a-9bb0-64d3df566094", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa6a322-256e-4eec-be65-3d4006123fa4", "sighting_of_ref": "indicator--443a20da-d87f-4a37-bc5d-387e0eb40c5c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d90b28-6c3f-4197-8de1-95d3e996928f", "sighting_of_ref": "indicator--edaaa5db-5ca6-4798-81e9-f17c3d2e70ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2264817c-b066-4e4b-ae4f-fb71bd7b7052", "sighting_of_ref": "indicator--50512f4f-0657-49d1-a390-d33b4e117bfe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5775475-29e9-4d62-b92e-69905f4ecd74", "sighting_of_ref": "indicator--86fcfe57-1f6e-415d-8f21-f057491a18d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5bd5a5-a243-44cf-ace6-4dca4c16d807", "sighting_of_ref": "indicator--6a7a77f1-fd76-493c-8973-e26a830c5d8e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50178e4-619e-4020-bba3-8c8009067b21", "sighting_of_ref": "indicator--f6a7895c-ecaf-4ac8-904d-1c6f6be8f590", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a996de-524d-4416-9fcc-fd06dcada98d", "sighting_of_ref": "indicator--3a8e9687-1c7a-4259-88d6-5afff4761a9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e65072-f4c8-4879-a613-c9e87674559e", "sighting_of_ref": "indicator--7ac3d986-e09c-4e00-9307-fed165696f8c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd361a8d-5665-4acc-91b7-4946f28ad7c1", "sighting_of_ref": "indicator--d3b93bd9-d1bb-44dd-8d90-2ca39f4790b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6903db-89bb-4736-822c-b7234683b3a8", "sighting_of_ref": "indicator--c211ce1b-dc32-4d36-bf0f-8af06f9ccb73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc8105a-4bfb-44f2-9192-08ca1454ae4a", "sighting_of_ref": "indicator--8e3db73a-e52f-4634-bb25-627dba731857", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79da699f-8ba2-4a0b-a978-d77a06e3080f", "sighting_of_ref": "indicator--89145dcd-be39-4658-933a-fbbad8f552ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f8244e-c084-460f-990c-f92c93d53638", "sighting_of_ref": "indicator--53387b4d-ee04-4587-a645-ad2a413ca181", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66cde6a-9361-49f7-aaf8-88d780469d60", "sighting_of_ref": "indicator--3dbd6501-2c65-45a3-b584-41234d950c8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5f86cb-921a-4723-835a-ff860549f295", "sighting_of_ref": "indicator--4484579f-cd25-4c02-ac9f-72f7eb556112", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ac6c51-0b7f-4671-9e3f-ae8704e4a1d1", "sighting_of_ref": "indicator--b1ff9c7c-5b51-43ac-81ef-92cf7267d81b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c337777f-f72b-4627-9a52-93af61b9bc86", "sighting_of_ref": "indicator--98488b87-46bc-4879-825b-c426c8704d7b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a6bf4f-1bd7-417b-9910-5fb99d670608", "sighting_of_ref": "indicator--6c25f577-4d3d-4a4b-a3d7-48c11c3962d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1658b5-1cb9-43ea-87ab-d06cdd264fc7", "sighting_of_ref": "indicator--0956d386-fa91-43ce-ac1d-1e00b7ffa0aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3e19d3-0651-4e8d-9f4a-6f957721949b", "sighting_of_ref": "indicator--c36af35d-b11a-45d8-99a7-8752b801649d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a19c604-f17f-41b5-828b-c2764bf70bf1", "sighting_of_ref": "indicator--c89d219c-8ac4-4ca6-9d8a-f6af892cb66b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4c1d57-622d-4cdc-9711-f3970ccc928d", "sighting_of_ref": "indicator--233a745c-4ee8-4eab-8a0b-d299c3557acf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe472db3-61b5-40c4-bdad-94163d9ba151", "sighting_of_ref": "indicator--233a745c-4ee8-4eab-8a0b-d299c3557acf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e462d73-f926-4c1a-ae75-f047ced0ebd9", "sighting_of_ref": "indicator--e2536ba4-e91e-406c-a14e-1f1f2b294a52", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a398d5-a549-47cf-9e2c-36ab7b9c4982", "sighting_of_ref": "indicator--30ed6e72-6ab8-442a-bcb2-ce463c97eeff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b560ad-25b7-4e30-9f8a-cafb0ef2a105", "sighting_of_ref": "indicator--796cbe55-fc24-4717-9bde-929c1749c135", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02035a08-03ef-43b6-9ef0-4d05a488cb08", "sighting_of_ref": "indicator--bf11eb8d-207c-4208-a35e-4b75808e127d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399f12e1-ea96-4e1d-bdba-394b239bf286", "sighting_of_ref": "indicator--0de1d0af-dad0-422f-a9f6-ba9bc0a8436e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7061040b-cf02-40b7-b21a-4c2b7f579626", "sighting_of_ref": "indicator--3398b241-9ff0-4580-a2b3-1fa4a026763f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d78c50-38af-4f8e-9899-499cbcff1486", "sighting_of_ref": "indicator--c5d35d15-d729-4d6f-9935-ef1cf58b2042", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14576fd-941e-4c4b-b5e9-65e41542959e", "sighting_of_ref": "indicator--bedfb922-63f6-4c2f-b5d6-a66f1dd7ae08", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62412056-22e2-47a6-ad1b-3a511dc54a6a", "sighting_of_ref": "indicator--5ab15f07-22c7-4a01-ae27-e78561d65eeb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca596a07-7c53-4f93-8c32-15f8f9bc2d43", "sighting_of_ref": "indicator--334b44b9-b97c-40f6-850a-eb1ca88d7e46", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d33f6e-c4b5-4ec6-8706-e488372c41e2", "sighting_of_ref": "indicator--31fa08f8-ca50-4ad3-8b01-e0a4061a6ab6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d41ec4-5ef6-49a2-a5d4-820042cd8eec", "sighting_of_ref": "indicator--76f48190-1c2f-4c44-8144-1cc420761a92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ceba3e-2346-4ddf-ba43-6d7235d2767f", "sighting_of_ref": "indicator--e3845f16-4f5c-4c40-b13a-6342cf1a91ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857341ff-a435-48e9-bba7-16c89b241537", "sighting_of_ref": "indicator--4691412b-bc38-4ff9-914c-851fae6528ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1d4b9b-f324-493e-bcdc-dab56a961508", "sighting_of_ref": "indicator--58e4b3d4-07a7-4512-b670-6631de5aa9e9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3a620d-0e03-4904-8b01-61e9c5685998", "sighting_of_ref": "indicator--9b692f76-9336-44bc-8af1-0e7e949ad640", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a05c17e-25dc-4290-96e5-2ab90cd58b9f", "sighting_of_ref": "indicator--75845293-e6f4-4cb6-812c-d75cd5fc58c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8c1a66-817d-4e20-8970-aacc480dd199", "sighting_of_ref": "indicator--0c4d4623-e0e4-4385-ac50-88e8fc1e499a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7db0d3-9767-465b-bcbc-f3b4f0c55bf9", "sighting_of_ref": "indicator--f58a7a83-74be-4851-80f7-d31297a0c3f9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceacfb9f-7162-46d8-9681-d6a01096bc46", "sighting_of_ref": "indicator--9640981a-cf4b-49c8-b4b7-ef39aade9814", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b6f9f7-e1d4-4e3e-a57c-2a8a2fabe877", "sighting_of_ref": "indicator--bc261343-0d39-4961-92d9-3b6bdf8f3d5e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d923c4-7908-42b8-9305-b67c122ea113", "sighting_of_ref": "indicator--43aa7221-86ad-43db-aff6-8b5f6368e5e0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5b578e-10de-470d-b77a-3f40ada06469", "sighting_of_ref": "indicator--b6c044ba-6596-4de2-98b2-baf428e2c852", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1701da18-a26b-409b-b4c6-cfdc8a2b3757", "sighting_of_ref": "indicator--49543622-c696-4532-9f48-8b67efa58081", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a8a089-dc10-42a3-b6f9-c3d1533371d1", "sighting_of_ref": "indicator--3d809364-b86d-4a3c-a0cb-4a5d27c0f330", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c43a9e-4fe2-4558-b683-2ede299fd16b", "sighting_of_ref": "indicator--2e5678c5-ef9a-4516-848c-949ef72130e9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328024c9-4029-40a9-b843-84f683c6b8c9", "sighting_of_ref": "indicator--4a4b9f85-cea5-4031-99e7-b26ade3e45c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd222f1-bb2d-4430-be8c-5aeb3e5ef44e", "sighting_of_ref": "indicator--4b58ccdf-0877-4cb0-9745-843f8d7e049f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347370f4-810b-42f5-82f9-d4a8ac22974a", "sighting_of_ref": "indicator--f4848aa1-d12e-4073-ad94-bee58ca8054b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095c4a4d-bebb-4e07-91ac-e91789a36a54", "sighting_of_ref": "indicator--764ee4f9-bff2-406e-9036-4c9cb9efcfc9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6a375b-8dca-4b25-97f1-5f11abf34d46", "sighting_of_ref": "indicator--633c062a-7b56-4b2e-bb77-0a192d172dfb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbe8de8-19a2-4e81-b632-935a45a9b4bb", "sighting_of_ref": "indicator--633c062a-7b56-4b2e-bb77-0a192d172dfb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290a0ad8-71d0-4a69-aba1-83e907d8ea81", "sighting_of_ref": "indicator--1c80f165-55a5-431d-a06d-5b38cdb6aaee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9b48dd-3acd-4678-8eee-25354332057d", "sighting_of_ref": "indicator--ddc7759a-bc55-4f0a-857d-f5aa85076cf0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb01594-1e63-4138-9707-1a8d22cdc1bf", "sighting_of_ref": "indicator--48a91143-bb31-4aa0-9ff6-0527855254ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cc99bf-106c-4e1c-9c78-d727c8bada69", "sighting_of_ref": "indicator--369b9d7f-6a30-40b9-ac10-374d94538a10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1777dcf-bb52-4df9-8a8f-23084e98652e", "sighting_of_ref": "indicator--1b8c8a19-b773-4d85-832f-bd55a5c20994", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a58526-a415-4c61-a314-9170d7c235c7", "sighting_of_ref": "indicator--d8f75dd0-bd74-48f5-a472-480673be16f4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dc9998-d558-4638-a902-e71e7949ca5d", "sighting_of_ref": "indicator--4ac4dfc7-5307-4b06-aab5-b6ee0c17f2c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b629d857-8ec2-4599-bd73-48d04d7cb4a2", "sighting_of_ref": "indicator--a1bc1130-6e34-4c12-8848-757a61c865b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385e1b21-c335-4061-865c-a8fa94bfb6b0", "sighting_of_ref": "indicator--ece8ba47-4415-48b8-8062-a5ddc561ae19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edceffd3-f096-4f05-8516-f8220f1e11dc", "sighting_of_ref": "indicator--bf5e0f8c-f432-4170-9086-ed7f84f98885", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54aacee-4afc-4f32-a29e-550c3b343330", "sighting_of_ref": "indicator--3ddc3e03-8d70-4fd5-85c3-1d69a3856404", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d117e0a-058d-417a-8562-be1adc20a554", "sighting_of_ref": "indicator--f2174ef4-e9bf-4f66-855d-e20c4f54f885", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46da65d9-61eb-4281-957a-d57a30aeff38", "sighting_of_ref": "indicator--e79d2504-cf1b-4bbb-8df3-6c7b86dcd9d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993031bc-9a17-44a4-a213-fab0e2b589e8", "sighting_of_ref": "indicator--04e1f114-665f-4070-9807-7c7fb4955ae8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d71c8d-24a8-4a1e-b964-d27a9c218308", "sighting_of_ref": "indicator--138b858c-01bf-47d6-9567-dcb23d8f8d22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eebca27-8642-431a-b1b3-60154fa46bc8", "sighting_of_ref": "indicator--88d07d24-25d6-4cc5-80ac-bbfb2b93e728", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af513612-338e-4ff7-83ae-20a91f49b32d", "sighting_of_ref": "indicator--7917cc14-66bd-4fb0-bb57-a7c1f8af9b3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7e5e1d-ef5d-4891-8205-faa68a08e5c5", "sighting_of_ref": "indicator--802e2cc9-0130-4776-a2fd-fab1de596182", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e372eb1-a083-4b7f-952f-2a2f25b6e2b1", "sighting_of_ref": "indicator--341cb6ce-c521-498b-9b4e-ea2587d066e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c984633e-c01e-4996-9aa7-0c0cdf86783f", "sighting_of_ref": "indicator--89de6152-ff56-446c-a203-51b6ec4899d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79169d37-1de2-49bd-923d-59275be6ff2b", "sighting_of_ref": "indicator--f067b638-3736-4772-a0ec-371c1930f652", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ac3ba8-0e09-4500-9074-03bca5ed375a", "sighting_of_ref": "indicator--68074da1-b9fb-43eb-8a9e-02c1186a1421", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55385797-e641-4fb5-8ee9-d827cdc4e13c", "sighting_of_ref": "indicator--cbba2343-ccb0-4836-8305-162497a81418", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f63883-3923-4b25-9453-0c58d1cfbcc1", "sighting_of_ref": "indicator--533d8fe3-f3ed-4a26-b683-5df360d29c1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd337ec-142b-4952-815d-93082230aab6", "sighting_of_ref": "indicator--e8592524-1d3a-4e78-a025-87d65223bcbd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b1d912-f904-4ba4-a7d8-1ac0e828d9bd", "sighting_of_ref": "indicator--e21c2431-6b32-479f-8976-eaec18493280", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae0196a-9d1e-4661-b16e-16c726a82a97", "sighting_of_ref": "indicator--b6a17332-74ff-4170-be51-7181a7c62771", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96b623b-d0c1-479c-add5-0919f8275fe8", "sighting_of_ref": "indicator--e08481a3-df0c-4846-a1ed-6979ded8af7e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0f1a00-3b7a-4cf3-8d9f-c30547ed136f", "sighting_of_ref": "indicator--fd39f25c-9543-4efd-89ae-aefbe9de0e5c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50f6adb-eac3-423f-b294-a5e89dbcde39", "sighting_of_ref": "indicator--04194893-842f-4e17-9d1c-8e46f0cedc50", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62f12e7-65f1-4a40-834c-bc635a888e27", "sighting_of_ref": "indicator--bab3f490-0367-4e02-83e1-da4aac0901fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa29423-f156-4ef8-b104-9b18b3c884f7", "sighting_of_ref": "indicator--8f21b375-612f-4dce-a976-c117c9d95a8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6bce94-5709-4f06-88d3-f2b33d8096f7", "sighting_of_ref": "indicator--1fbc0ca7-b695-42e2-898f-c07d0c50fcaf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc6a6e8-22a2-4eab-96c6-5574cf104f45", "sighting_of_ref": "indicator--8bc3f2f1-9cf4-4fdc-af94-cc760e333bcd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abae88c-d773-4c4c-a244-7e94f9ddebd1", "sighting_of_ref": "indicator--7a190052-6667-4315-bd2a-97eb8d12bdd4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a71c8b-b980-4aec-b0b4-fbf359adaab7", "sighting_of_ref": "indicator--349f6491-d204-449d-a18f-d18a8af29137", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaf02b6-3d7b-4974-817d-9aad50ca3985", "sighting_of_ref": "indicator--2709331c-4242-402e-97c2-4edf7ec200e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b4e5ea-b9f3-42ff-b077-bccf64535578", "sighting_of_ref": "indicator--7d47cba2-61d7-4e8e-af77-36702dca9850", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3d3b17-0eeb-4da9-90a2-b9729c869e8b", "sighting_of_ref": "indicator--bddf3a20-14db-49dc-bc95-1821f1d313a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e304d3-800e-417a-940c-07479d0b85af", "sighting_of_ref": "indicator--fbc06098-dfe1-4c3e-807c-7b60a7158fbe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0a1b04-ef81-4dda-a7d9-d228042a33aa", "sighting_of_ref": "indicator--6560f637-8035-4dd4-9869-59eca4b6e89a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b74330-b3dd-45d8-9bcb-c371a6091820", "sighting_of_ref": "indicator--dd374e12-ee48-4145-b037-699fba190cfe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dca34c-bce4-4e78-bebd-e6191adee306", "sighting_of_ref": "indicator--d7b630ea-6180-403a-9c86-f24f305d8867", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeeac075-875f-482e-9f44-379b0815bf24", "sighting_of_ref": "indicator--50fcfb04-8203-4a39-8d25-7efdea7c980a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db4a683-7654-4598-8467-daa83a4d7000", "sighting_of_ref": "indicator--99c00087-6c39-4726-b359-60f9b1d4b363", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e27f61-9559-47ad-9bf8-085808681b8f", "sighting_of_ref": "indicator--a46db685-d53e-43e6-a0d5-b928b2745896", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe0907b-b48f-421b-b2f1-3a7fe37c4850", "sighting_of_ref": "indicator--60e742ee-40d1-44cb-a074-49b7118d06b4", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3df9f36-6c71-4130-b24e-665c73418327", "sighting_of_ref": "indicator--3ad7ebff-d8fb-4a15-a964-53db8e559566", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cece2002-d48f-49d7-b545-e041911eceaf", "sighting_of_ref": "indicator--1e36955a-0410-48fa-8a8a-91fe38205515", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd97d25-3b05-48b7-abe1-c3cfd63bd5dd", "sighting_of_ref": "indicator--2e4a94bc-d594-441c-af23-50dffbe202f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912f92f2-4a7c-4803-8ca7-4457e851741d", "sighting_of_ref": "indicator--ab149a84-7bb5-40fc-ada3-d14d876c3d40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49767141-fcf4-42e3-9e2e-902722bc2a41", "sighting_of_ref": "indicator--447fa3f5-2f22-44d8-94bd-0cc16a4b7b8f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f741b1b5-c212-462b-b839-4d111132e1de", "sighting_of_ref": "indicator--74bc3905-6e81-468d-920c-3f3e930bfe16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c80bcc-0855-48dc-b632-a555add3152b", "sighting_of_ref": "indicator--74bc3905-6e81-468d-920c-3f3e930bfe16", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4e4147-ae58-4d3b-9889-16c466c9ca4f", "sighting_of_ref": "indicator--18499223-9c15-4eac-abe8-d7cac5613883", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fb0625-646a-46ba-aaa1-cdb8be0b1fe8", "sighting_of_ref": "indicator--08dc3569-a449-47f7-9935-004588ec040b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef0aca1-10b1-41fc-a3e3-d8e51873d0d5", "sighting_of_ref": "indicator--bd7d183d-6ffb-466d-bf15-757ff191f9fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9ace30-a356-486d-8d5c-3c25196bc1b4", "sighting_of_ref": "indicator--45fd9eaa-77b1-4e9f-b10b-b3c744c74db2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a8a219-0fae-4ce1-be43-1e7caed5ef6f", "sighting_of_ref": "indicator--af9c42f9-cb6d-4b7c-be32-d0e551625f99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59b4fbe-b3fd-4e6e-bfc6-de76330541a0", "sighting_of_ref": "indicator--40df320f-7452-43c3-8c47-d3a03a484b05", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c9d7ea-cdb8-4b0a-a4c7-163dbb767a3c", "sighting_of_ref": "indicator--ed04581d-2532-47a9-8258-6d77c6b1db15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed1ea0f-0f1e-4e48-b346-fbc74cb1be2f", "sighting_of_ref": "indicator--ed04581d-2532-47a9-8258-6d77c6b1db15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfa3005-adda-4478-b8e8-15266e60a41f", "sighting_of_ref": "indicator--e995bc8d-135b-4fce-bb5e-732abe805626", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce549a27-82fd-4f95-ad8b-9befc771317c", "sighting_of_ref": "indicator--861fa279-f0ba-47cd-a097-19af8d2f2d37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc6c3e4-da52-4961-a629-7cebfa43f612", "sighting_of_ref": "indicator--34989ff1-a7fb-40ef-96fe-bdc49f332087", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5e4426-a1cd-44ca-8fec-e65088d85180", "sighting_of_ref": "indicator--06bfe816-0f13-450b-ba29-598268a4c6cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759e5ac2-e971-4b33-b0ed-3edf3ac8ac2e", "sighting_of_ref": "indicator--3cf45465-3417-46a3-a5a9-00bbe632d11c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d705aa72-1786-4b28-b66e-4d5d378d23c1", "sighting_of_ref": "indicator--0b862cc0-23f3-40ef-9b92-8232bbaa901a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d64f2d-de70-46f2-9173-d544926f7af8", "sighting_of_ref": "indicator--2f70714f-8b24-433a-b4a6-4b8d07a2827c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abfdd1d-f94f-459f-b9dd-8423466aa3b6", "sighting_of_ref": "indicator--2f70714f-8b24-433a-b4a6-4b8d07a2827c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026b3a93-5cc8-4c45-8e12-8f799acc21de", "sighting_of_ref": "indicator--3ff83676-28f5-4243-9cde-842e3970ebb0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9143de4-67bf-4392-bb7b-3efb7cbfe0b7", "sighting_of_ref": "indicator--900bc0a2-7796-43ce-9e48-58e43636f117", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16dc369-f7f5-4cff-bbed-2c16934ce387", "sighting_of_ref": "indicator--5277e765-265e-46a4-9176-7478d7307eb3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70187f1a-f8aa-47e5-ad42-6291ebb2cc7e", "sighting_of_ref": "indicator--27daff32-2b0a-44a3-934d-d3449d5ce295", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0292e0f8-a14f-426d-9e13-4699376fcd9e", "sighting_of_ref": "indicator--19970328-635f-4c2f-87e6-252bdc94c3b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f061e8a8-5402-418b-8889-51bb784cefc9", "sighting_of_ref": "indicator--bc2d7fa3-fb54-4672-b0d7-d36573e4984a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ea9811-5b7d-4ca2-ace2-76a6ce46e1bb", "sighting_of_ref": "indicator--3613e92c-716e-4e68-8cf2-856cd0ee703c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e821fe16-5632-4f7b-aa4a-db475707d9b1", "sighting_of_ref": "indicator--0170fcd3-5def-479e-a9be-cad020faa78c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941cb18f-87d7-4397-8a99-f12a1358d366", "sighting_of_ref": "indicator--78ebf80b-415c-4566-8f59-5cc8a30fa4c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ca31f0-3000-4add-8257-2ec9828f947d", "sighting_of_ref": "indicator--73caf9ea-e30e-4072-8471-1a42550bd0ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f3717c-453c-40d8-b929-34f28f97cf57", "sighting_of_ref": "indicator--d96289de-d731-43d3-9328-adc92347dbc5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece4c3bc-4711-4717-bffd-f166b65eaa97", "sighting_of_ref": "indicator--9c7d4f6d-fb9d-4156-ba21-ab64a18fc26d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a857b8e0-8911-4860-b51f-86dc705198aa", "sighting_of_ref": "indicator--72875598-bf63-4c09-8b3a-b9b96679e084", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78775e8-9764-47ed-81e8-bca9f48c53f8", "sighting_of_ref": "indicator--6fe5d8b2-8b93-427e-909b-cae1d65d49c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330adfe5-20f6-4e50-8e98-a70245be4f8a", "sighting_of_ref": "indicator--0712d119-9c1f-401b-b6d9-f35aa9e9e329", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a3a70b-db8c-474b-86d3-99e75d1bd42d", "sighting_of_ref": "indicator--968f4b47-15cc-4cca-b0c0-4f42afaa6db7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac783d4f-aaa9-4522-ab23-cdbefca33f1b", "sighting_of_ref": "indicator--601da801-6541-4bdb-b866-527fa8507ebd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bbbefe-18c5-45d5-865d-78e9e290f6ce", "sighting_of_ref": "indicator--b51815a8-b9f6-4339-a58f-9975aca7ada8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d00cd5-990f-4cb6-88d8-9b6567c97fc2", "sighting_of_ref": "indicator--50035ffe-9591-4597-8d09-12fd982f5343", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30c3cc5-2892-4892-bf76-7be4f368cc84", "sighting_of_ref": "indicator--520e6b5c-7bc7-4ecb-a77b-f8cc0177835f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e378a06-189a-4e41-82cd-ddc02144daf8", "sighting_of_ref": "indicator--520e6b5c-7bc7-4ecb-a77b-f8cc0177835f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbb5326-0ea4-4555-b2ec-323c32a4cb8b", "sighting_of_ref": "indicator--dfa61cdc-fe0d-472c-9ff3-6d0768020c2d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4279cf-3bd0-4b27-b446-ba07c1e0e54b", "sighting_of_ref": "indicator--b6e84227-9635-46eb-9363-d1ef6fc82edd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902986bb-a56b-4862-bb4d-846bb9d6319c", "sighting_of_ref": "indicator--aaab53b2-8543-42cd-b5d5-87e777131d7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742da6b8-9ad3-4708-8b30-a912924b274b", "sighting_of_ref": "indicator--d6300c59-158a-4ba1-8343-11741f91515f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73623b82-54e4-453f-a8b6-f190744ed62b", "sighting_of_ref": "indicator--9b839ef9-7e5c-4ab3-a4ce-57df7f02351a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b58702-61cc-4b72-a510-a7be5270140a", "sighting_of_ref": "indicator--749f1e98-f89e-4ba8-b42d-f57591eb71c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3d7445-381a-4854-80db-f62fec88d5d7", "sighting_of_ref": "indicator--44705bf8-3805-496f-9afd-087548682df4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cfad30-9da5-44be-a75b-efc642c2a37b", "sighting_of_ref": "indicator--44705bf8-3805-496f-9afd-087548682df4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08597069-b869-4888-a7c8-413b324c0950", "sighting_of_ref": "indicator--21403348-f35b-4043-9064-36de28d8df74", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e46578f-b3a0-47de-a724-aaf2721fc2f8", "sighting_of_ref": "indicator--21403348-f35b-4043-9064-36de28d8df74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb6597c-78f6-46f9-822f-fae35b5582cb", "sighting_of_ref": "indicator--4d9064dc-c7d1-4c3e-8ca4-3716ec22a359", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b023d35-30bf-4710-a6cc-9a65cc08d101", "sighting_of_ref": "indicator--7cad375a-4704-43ed-9e89-518bb6034113", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84172e1-a128-4f00-8499-97a53bc752c5", "sighting_of_ref": "indicator--c200c465-f3f0-4c2b-8df5-2c81173fc4de", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e322d61-fbf5-4a6a-9f13-a40eca783385", "sighting_of_ref": "indicator--b5f3cc26-bee6-499e-961c-86f1791ced30", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b97b2dd-b85d-41b0-b8e5-d765162b10cb", "sighting_of_ref": "indicator--9ee43d4f-c5ac-468b-8d8b-888c0511a64f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07137bca-a95e-468b-a674-fe9117289b13", "sighting_of_ref": "indicator--7ee1acd3-57a3-4378-88b9-769dab10d4ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1f7253-0263-4b9f-b03d-42e10021bfd3", "sighting_of_ref": "indicator--e765c080-9391-48c3-b0d5-65a077cfe841", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04334495-8c99-44a1-aca3-ee042dbacddd", "sighting_of_ref": "indicator--1dcf79e4-599b-43ef-a780-bd2ab5484ad8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44872412-3408-428d-b00e-b45f6f120fd4", "sighting_of_ref": "indicator--873c65ed-abf6-44c6-b41f-bed66fcfd1b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa6b5c9-81ec-4668-b3e4-de375e4b8072", "sighting_of_ref": "indicator--873c65ed-abf6-44c6-b41f-bed66fcfd1b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e011584d-9ecc-4e86-ac0b-b3b22cae9c4f", "sighting_of_ref": "indicator--84b5cc92-248c-434d-b515-c901910fe4c6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d974510a-687a-417a-a9a6-4c9901539fd3", "sighting_of_ref": "indicator--051644f3-2b7e-4065-9a00-2cf7cb8be1b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f71f621-438d-4ac6-aba6-33e329391bf4", "sighting_of_ref": "indicator--051644f3-2b7e-4065-9a00-2cf7cb8be1b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a51e7f-7b35-42c2-811f-f06f89020049", "sighting_of_ref": "indicator--feb2bb26-6772-473e-a71d-e3a4e08eedc1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03136311-8d19-42ed-8b74-b1040d483ece", "sighting_of_ref": "indicator--1b8d82ce-1854-44a9-9ee8-98414f39040b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1b9bef-2a5f-4e48-bfb2-75f379582641", "sighting_of_ref": "indicator--788385c2-f652-4324-8784-19ae790a5825", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3e3551-de93-4639-a138-615389629020", "sighting_of_ref": "indicator--64710ccf-644b-4ccd-9dca-c6fd070b0a1c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9514b2f0-710a-4423-8540-6ad10cb95835", "sighting_of_ref": "indicator--64710ccf-644b-4ccd-9dca-c6fd070b0a1c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c79e381-3278-4399-8f7c-e1f03f79a63a", "sighting_of_ref": "indicator--4673ebd6-8bd8-4375-8545-b39cb8a86a3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e5b8bb-f85b-4411-b0e6-cf2b87c69392", "sighting_of_ref": "indicator--31aa7f2d-6024-444c-aa4c-d9b86e34f974", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04520c73-e94a-470c-855f-957d1042bb9f", "sighting_of_ref": "indicator--b9f9f537-9dab-4e48-a399-f700508711c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaba9498-dda9-490b-9cae-9f5f72e0f31a", "sighting_of_ref": "indicator--b9f9f537-9dab-4e48-a399-f700508711c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45d2a0e-60e4-48f8-8e32-f32b02c2912f", "sighting_of_ref": "indicator--2955934b-9a77-4e3a-ad9f-44b0723186e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37e7ca8-781b-4fb8-81b9-a85fa29cf36b", "sighting_of_ref": "indicator--33528d25-fcfc-429e-9dd2-205997c18a58", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b1c47a-5e85-417c-a1fd-8e141f03f5bd", "sighting_of_ref": "indicator--0446c93c-e445-49f2-bbf2-5d8d408afc5c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad52d75-18d5-453c-a3da-f2d7be9a36b9", "sighting_of_ref": "indicator--4d5a942b-5d72-4182-a944-b179382b9775", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3d667e-fa29-40c7-9b3e-4da85cc27070", "sighting_of_ref": "indicator--4d5a942b-5d72-4182-a944-b179382b9775", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a430639b-d0c1-4859-acc3-76b005f8974f", "sighting_of_ref": "indicator--aa3cf804-cc7f-47ce-b5b9-4942953b489b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2da20e-e11d-4eb9-a259-0c61aa13933f", "sighting_of_ref": "indicator--00172425-9273-4f55-8ff1-791a8ba4ac35", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f376b4-b6a4-4397-ba80-3902a0af871f", "sighting_of_ref": "indicator--ea2c934b-5377-4263-8dc2-e0b90838eef4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dddd8a-3085-4391-8abc-b6b2802cd881", "sighting_of_ref": "indicator--ea2c934b-5377-4263-8dc2-e0b90838eef4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acdf552-9018-4d11-8544-4a11be385bbc", "sighting_of_ref": "indicator--78bba20a-787d-4227-96cf-6a2c5feff0cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcaa7fd-bee3-4d3d-a0f4-04cc115321d8", "sighting_of_ref": "indicator--b046251d-52d1-4caa-9b9a-c12bb12dfc11", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9008cad-a08a-49cc-9628-469b04d870d9", "sighting_of_ref": "indicator--827694af-beff-4bf9-8f5c-2fe4aeda5693", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b2d546-e491-4543-9ce3-52d6f7e29292", "sighting_of_ref": "indicator--827694af-beff-4bf9-8f5c-2fe4aeda5693", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc87872-ba55-4223-9174-2824210a93f9", "sighting_of_ref": "indicator--f25c91e4-844f-4f08-8b18-599474b1e168", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a09f36-909c-45b9-8fac-954cf7d5a20c", "sighting_of_ref": "indicator--f25c91e4-844f-4f08-8b18-599474b1e168", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf8f6cb-6a4b-4ce4-84fd-09d13a420029", "sighting_of_ref": "indicator--ed271f96-f621-4ba8-9125-58393d3e906a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b2e0fa-ff90-4d01-9af7-539a75caab68", "sighting_of_ref": "indicator--c74f6f3b-b2cc-43a4-9535-fdf46e096d87", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79b088c-15e9-4b48-8318-d7643014f569", "sighting_of_ref": "indicator--d7353e2a-d129-4755-bbae-3201b5d914cb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674fff62-30b7-4b1c-b6aa-6a9d14539891", "sighting_of_ref": "indicator--7a90464b-19e4-4fb7-8b76-814ae830d685", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de21253b-4d11-4f35-9c09-0b2cbca5e581", "sighting_of_ref": "indicator--8b5bb486-aa0a-4729-8ab2-218430bae522", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63561058-bcc9-4aa0-b8eb-c52c224e599c", "sighting_of_ref": "indicator--00728114-6084-445a-8696-8c0a2d1d2807", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1bc178-95b4-4f8e-9ba4-cda2c8e90613", "sighting_of_ref": "indicator--262794fb-f546-4230-a3c9-a51c6fd704a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed116f4-e6ad-4851-b3e6-d52350f70082", "sighting_of_ref": "indicator--262794fb-f546-4230-a3c9-a51c6fd704a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1f0916-e31c-46b8-81c2-3b621a273366", "sighting_of_ref": "indicator--366ead00-7791-4d3a-95b5-8ea0400269b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fb5577-207c-4d69-8580-651543a1f667", "sighting_of_ref": "indicator--366ead00-7791-4d3a-95b5-8ea0400269b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ce62ef-75c9-40f5-97a1-c82d7df4f8d4", "sighting_of_ref": "indicator--db87f3cc-947e-4d8d-af6e-f00c164ea71c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4992bfc-ea88-43fd-a8d5-3017ede6b76f", "sighting_of_ref": "indicator--fe0d6de9-8881-4344-9d7f-2a8419feaeeb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803c24e8-88bd-4780-a12a-2964ebaea53f", "sighting_of_ref": "indicator--cdf7a104-8068-4f75-af57-86e558ed12f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9e7c8c-4add-42ba-8c73-bb6ada67d5e0", "sighting_of_ref": "indicator--cdf7a104-8068-4f75-af57-86e558ed12f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad7e6f7-21c7-4c18-ac62-7563122bd2ad", "sighting_of_ref": "indicator--88010487-0609-48c6-9f62-57d83133141e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a549372-12b7-4721-b7d4-0b152023cd5a", "sighting_of_ref": "indicator--d0677f65-aa0b-4e98-beff-1c72f5967254", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48484c10-9431-4448-a281-869a926f4aa0", "sighting_of_ref": "indicator--1f7cf6e3-1333-460b-b305-de0766ce914f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18287de-9316-4a57-a3da-4b15407d8245", "sighting_of_ref": "indicator--df1ea2ca-c17e-4750-868c-5b8025dad023", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbf4502-0523-42cc-8c7f-9a8cc536ed2a", "sighting_of_ref": "indicator--4d393962-f948-4096-8860-f8dea408e020", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70d7b52-ac14-47a5-a3bb-fe4c96a194c5", "sighting_of_ref": "indicator--00425783-5d6b-4bf8-a51d-12d4296801f5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485112b2-34af-46ca-89a4-3ef2b1254df3", "sighting_of_ref": "indicator--5f253b34-30fb-469c-a0a9-513f5b1527db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a4fb53-947a-4f1f-9597-17f4fe4aeb6d", "sighting_of_ref": "indicator--5f253b34-30fb-469c-a0a9-513f5b1527db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc090e2-df51-430c-ac5e-26df9e9cb882", "sighting_of_ref": "indicator--37306dd0-d440-4c79-a0c7-a1220bdc9e76", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e84a12-e03b-4fbd-bc0b-cf6b3aa54d34", "sighting_of_ref": "indicator--6be805a9-55ae-44ec-b187-08e2a5671d8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c3c1b4-ff04-421b-b14d-10f9dfca00ab", "sighting_of_ref": "indicator--2a2bd6b6-5080-42b4-b603-ff79734c2359", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8e11a5-24ee-474c-9891-ecdecd010209", "sighting_of_ref": "indicator--2a2bd6b6-5080-42b4-b603-ff79734c2359", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5822ea5e-b2f9-442f-9e73-b433594fa56b", "sighting_of_ref": "indicator--af929cfd-2a0f-4fb3-ab81-0911db899a76", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b5673b-b783-4cf6-8193-5373e6846c61", "sighting_of_ref": "indicator--c30c5044-4f9c-4841-8578-b098a7cc0464", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07271ab8-4ae2-4f01-b675-debf8be8e7e3", "sighting_of_ref": "indicator--837c3135-4aa0-4801-82d5-f6333ffbaff1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c527e9a0-c4f3-49f1-8c41-da044187adb3", "sighting_of_ref": "indicator--9d8ba021-a5ce-41ee-8eac-75e2a155cda3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e340b39-3aea-4f45-8aa3-ca782873b660", "sighting_of_ref": "indicator--cfd8eb88-5b4c-48c2-b391-e867a1874ccc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c338e81-e2e4-4040-ac8a-7c2f75ef7bd2", "sighting_of_ref": "indicator--79278299-cf37-4c30-b448-df36bf7386a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1846481f-dd64-46bf-a10e-510822f8dffb", "sighting_of_ref": "indicator--95c74fa7-fbe1-4da1-9455-008a5c9b5c77", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368aee20-a5ff-4f5a-a519-42e121e4490e", "sighting_of_ref": "indicator--5546ae1a-081b-4c6a-9915-ac4448c23606", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e3c200-9b21-464d-b18b-f6e33f1e7370", "sighting_of_ref": "indicator--66474823-7597-46b0-b4f9-35904745b758", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe914c04-3193-4485-9b16-aa5fd6ac94df", "sighting_of_ref": "indicator--c3ce60e7-6616-4642-97cc-47213c299e35", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc92d75-97db-46ff-8485-9ba567b4b24c", "sighting_of_ref": "indicator--c3ce60e7-6616-4642-97cc-47213c299e35", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5162bcd7-7870-4dff-bb77-cad6298c4814", "sighting_of_ref": "indicator--c42f8c7f-9e2b-4914-965f-2c409e20655e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ad2219-c51c-4e8c-a581-ae7995e2df85", "sighting_of_ref": "indicator--c9c3058b-bf14-4498-a0c6-aa607441f5fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb07ef7-42d5-45b3-ad07-ba0a4f470861", "sighting_of_ref": "indicator--80f5e4b4-d950-46d7-9df6-e2835dcca6cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32306496-1f42-48cd-9f35-cd1303847cb5", "sighting_of_ref": "indicator--dc1cf4a4-7b72-4056-a5dd-4d5efe48b6b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25796ccf-24c6-4172-9542-d6f25a1b7a89", "sighting_of_ref": "indicator--3593cb2e-1447-444b-9bc9-b456f5818621", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce21cd6-93fa-4bcb-a6d7-21fa1b8329cf", "sighting_of_ref": "indicator--6c194a82-2cc6-4396-bad5-d1f2decf825d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b4f01f-384f-4b91-9f75-b3c8b9654164", "sighting_of_ref": "indicator--ee6b02e4-1176-4fa3-9f5c-98a97502f4b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb62362-2cff-4816-ab07-ffee90582917", "sighting_of_ref": "indicator--68bcf184-4c0c-4a8e-ac12-f052f9913adc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e361d249-4c58-4640-b59a-c7de63ee1d8f", "sighting_of_ref": "indicator--1ff07c66-a379-416d-80b6-beb9a31d1f86", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f04c96a-8f5c-485c-bb3f-0a15c7a68cbd", "sighting_of_ref": "indicator--1ff07c66-a379-416d-80b6-beb9a31d1f86", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97717544-270a-4bf6-9ad0-a7ce3721c342", "sighting_of_ref": "indicator--55f6b359-719d-4c31-a91e-17437211ea25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d58d6e-1f73-4a13-872e-cc2c1714826c", "sighting_of_ref": "indicator--afe4a956-a31c-4c5c-9d40-ecae991f07bb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b767d2d-15c9-4dc2-bc19-2e4abe877088", "sighting_of_ref": "indicator--a81ad13c-2623-43a9-8e68-c732a067623f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3d050f-56d3-422d-bd19-b4003dd1a755", "sighting_of_ref": "indicator--592a5db8-0780-47c0-8025-3859c46b9423", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70d6df6-5651-449c-8bfd-5d88c9845866", "sighting_of_ref": "indicator--592a5db8-0780-47c0-8025-3859c46b9423", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c198f4c8-e849-4c53-b71c-e617f7b79561", "sighting_of_ref": "indicator--83f51169-df2e-4d4d-807e-2641f66b1364", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0eacd24-b6fc-4991-bb34-72935812786d", "sighting_of_ref": "indicator--83f51169-df2e-4d4d-807e-2641f66b1364", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fc7fc9-390e-48f1-a36f-7bc1ad8dc45c", "sighting_of_ref": "indicator--6a00c0b0-b0b1-4aac-b755-5b012bf00d37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f668339-84c5-4659-981f-01cd8ee75005", "sighting_of_ref": "indicator--93f08172-a595-42ea-954f-88351436ba25", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db02645-0bc8-4468-b8df-8254dbaa1aeb", "sighting_of_ref": "indicator--2bed311a-a41f-44f0-95f3-3857d86c73b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c368e34-3853-4c0c-97f9-c6f31ccaf16f", "sighting_of_ref": "indicator--4ee94671-2034-430a-9f19-d6835cb706cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b0027a-cde3-4cc5-a3d6-ac25f6cbef01", "sighting_of_ref": "indicator--94f42dd3-50ea-43de-b5b7-f934d1c78e1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ae834c-12d8-43b1-9cf7-94a139ff1426", "sighting_of_ref": "indicator--94f42dd3-50ea-43de-b5b7-f934d1c78e1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2b62a0-d4c0-49f8-9076-f534a05022ad", "sighting_of_ref": "indicator--4398a9b7-3049-495b-b01c-d81ce18ce708", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edd9483-db79-43f7-9997-b6c89388a562", "sighting_of_ref": "indicator--7b10e6d0-b303-4e5a-b6aa-825c41de8843", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaa63b1-c7b4-4e02-8a0e-5be3b6547967", "sighting_of_ref": "indicator--4a257dcd-ba7a-4537-b256-39bc9b4deb33", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316f802f-f850-4aec-8557-be052660e530", "sighting_of_ref": "indicator--c3727a7e-19ef-40a6-af8f-4a5e3b5875af", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf93d13-aaf8-4c5c-8e81-82cb4cf0fee2", "sighting_of_ref": "indicator--1a2ec3d6-7398-49ea-8ec2-da0e6a9929ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36909460-8d7e-44c8-9eec-f1759d10c231", "sighting_of_ref": "indicator--9d9d859e-150f-4e19-a44d-023435143372", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2cccc0-ef35-42d9-89bd-66c89f645794", "sighting_of_ref": "indicator--da6df83f-3c9b-428a-9e63-de0f29c3f5a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf683c30-6629-4d69-a151-6d56647dd294", "sighting_of_ref": "indicator--60823c37-387d-4799-950e-018861f66dfe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d182af-c328-4435-8da0-9cc5e0acd029", "sighting_of_ref": "indicator--4f6466af-4c0f-4cb3-befa-ec9b5e0b8ad9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e9765d-4af1-4c71-8c08-49828739342e", "sighting_of_ref": "indicator--3e5b70f3-2598-4716-a9da-005deba1b391", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cd7bcb-68a3-405c-b648-315e14f1e147", "sighting_of_ref": "indicator--12976ebd-c344-46ca-9b80-d94fc9cc7423", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bf7e8b-b0a0-4ba3-aee3-942f270c0f39", "sighting_of_ref": "indicator--e51b3288-216a-42da-bbc2-29c88cc09609", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7223da1a-b1ad-49f6-973e-cf41b839682c", "sighting_of_ref": "indicator--11c463d2-43e6-477a-a18b-e2d5b9e3efc5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf9244e-1288-4c6f-ad0e-b1b476aaa2ba", "sighting_of_ref": "indicator--ec9019ea-2c4d-4922-8bec-9dd88900377b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d75d9a-be48-438c-b346-40bfa39bd2ec", "sighting_of_ref": "indicator--ec9019ea-2c4d-4922-8bec-9dd88900377b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd0fb7c-759d-409d-9a03-1dc2f5daafe4", "sighting_of_ref": "indicator--db1a74b8-bc0e-4e4a-b21e-2ce30496fdc4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb37aa1-da21-4608-86db-e692d9462fee", "sighting_of_ref": "indicator--213dc546-e823-4046-8452-4cf8ccd20bd1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68199b5a-4900-4bcb-a74b-27d85d1f8818", "sighting_of_ref": "indicator--e1f3d1a4-5e49-4cc9-b38a-b0d318164b0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ee57b3-a581-4577-be8f-b1bd4e42eb8d", "sighting_of_ref": "indicator--f233be28-31cd-48cc-a521-38a059eaefbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b210f6-8e1d-47bf-9903-95b9a0293f75", "sighting_of_ref": "indicator--dbfb82dc-98ed-4d1f-a7d4-93c5fd6ecc1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bac948-ca10-400a-aca2-d88d0682b7d9", "sighting_of_ref": "indicator--2beff7dc-a581-4071-ac1e-b3b03b1e2412", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91e38d8-99ab-41e3-98df-f2a8ddea10d7", "sighting_of_ref": "indicator--5185e75c-cb35-4a01-b795-39d14e9650e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1363022-23dd-41f3-b5bf-875e24c8b096", "sighting_of_ref": "indicator--d6b3be26-ebac-4420-8172-84e65b729d8c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb9afe7-2d79-4906-a72c-254ee8935430", "sighting_of_ref": "indicator--41752bb1-522e-4095-abc9-a49b5d5a878a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde9b0f0-9048-4d61-9136-53bae02461da", "sighting_of_ref": "indicator--41752bb1-522e-4095-abc9-a49b5d5a878a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c48ee7f-54b6-4e0b-bffe-12e8d0baa324", "sighting_of_ref": "indicator--bcdf354a-d990-4e0c-a6a7-bfee88966315", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c2f96d-4d5f-47ac-a57c-aafe300c13be", "sighting_of_ref": "indicator--bcdf354a-d990-4e0c-a6a7-bfee88966315", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacc2549-5ba7-4d50-9429-9c21996f93e8", "sighting_of_ref": "indicator--2c8267fa-3c38-4c44-af88-45cf3ae28cc7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dee42a2-4222-401d-8882-828b2e2ea276", "sighting_of_ref": "indicator--2c8267fa-3c38-4c44-af88-45cf3ae28cc7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ca31f8-8bb0-4f7e-b06b-bff7fb797d9b", "sighting_of_ref": "indicator--5b13eb61-0830-4b9a-9c00-00ae2cfb0b50", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720d7b9e-ff4b-42df-a666-24ec30580a40", "sighting_of_ref": "indicator--5b13eb61-0830-4b9a-9c00-00ae2cfb0b50", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62c5690-771a-4028-b575-79eceaefbc83", "sighting_of_ref": "indicator--9f4996f0-a9f2-4124-8d1a-0a7d46781dd9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a96a56-bcb7-46df-a01b-b6b397867268", "sighting_of_ref": "indicator--9f4996f0-a9f2-4124-8d1a-0a7d46781dd9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac70b63-8d40-4850-bd17-1dc06754a66d", "sighting_of_ref": "indicator--b6aa15fa-20bb-49d5-9df5-15b495a937ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8640c49d-e26b-4a36-abc9-5adf2f44446d", "sighting_of_ref": "indicator--b6aa15fa-20bb-49d5-9df5-15b495a937ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0acdee-e77c-4a3c-8618-bc3d452f4d3a", "sighting_of_ref": "indicator--568f8ed4-522c-4d8c-9233-3537eee06873", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73fc6aa-4a9f-4477-abb0-bf6e754f9af0", "sighting_of_ref": "indicator--944be0ea-62d5-462e-b42e-fb6499ee9337", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d894b1-330a-4068-84ec-ccc928f56ba0", "sighting_of_ref": "indicator--f92d10e6-c1b7-40c0-bda1-49e6dd1a509e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29264aec-f3ba-4563-add2-85e5204cc440", "sighting_of_ref": "indicator--af218c71-99ff-429f-889a-2f371c8d8257", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10e326c-c3ac-4ac7-a8d8-d4a21ba92eca", "sighting_of_ref": "indicator--753f6000-4b3f-46ed-98a3-401000983121", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18941265-720a-4cc9-ae51-08b755e6b673", "sighting_of_ref": "indicator--753f6000-4b3f-46ed-98a3-401000983121", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9cfc36-6afc-4d41-a0e2-b02a11d5ca05", "sighting_of_ref": "indicator--e60a03ef-a41a-409f-90c1-ad73d693567f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4feadf-c3c3-4867-90d1-848eb39c4507", "sighting_of_ref": "indicator--e60a03ef-a41a-409f-90c1-ad73d693567f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b63cd0-3077-4655-a108-e2d1abf12de3", "sighting_of_ref": "indicator--007cb26d-6bfb-4fb2-b3cd-a315197f4ea2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab75896f-f697-4448-88c7-bfb0008b1ddc", "sighting_of_ref": "indicator--007cb26d-6bfb-4fb2-b3cd-a315197f4ea2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b432c9d-8792-470f-92fa-5aad0f4bf7be", "sighting_of_ref": "indicator--19c16593-9fb1-49dd-82ae-4c77f38d0b8b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba47eb2-9a86-4eec-82e1-4d2e175394f2", "sighting_of_ref": "indicator--19c16593-9fb1-49dd-82ae-4c77f38d0b8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17221a8-286c-47fc-9e03-48491fc27d85", "sighting_of_ref": "indicator--7f517872-462d-41db-b35c-8925128399a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da3cf82-7de7-436b-8a82-bb546e82683f", "sighting_of_ref": "indicator--7f517872-462d-41db-b35c-8925128399a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68da3cf9-f1bc-4b6d-a0da-a865652ad259", "sighting_of_ref": "indicator--fd3c8770-0c71-4442-b4a2-696e97bd2f10", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7171f483-a649-42cd-8f2d-7ba173f87ec8", "sighting_of_ref": "indicator--fd3c8770-0c71-4442-b4a2-696e97bd2f10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cab94b-cd08-4b67-8fa4-6b05a258d95a", "sighting_of_ref": "indicator--bb18a229-3ca7-4575-a89c-abaccffb6550", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d97cf5c-8e05-4748-baf5-e426d1ea7206", "sighting_of_ref": "indicator--bb18a229-3ca7-4575-a89c-abaccffb6550", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5338f5cc-0133-41d4-ba6a-e426e4692ef3", "sighting_of_ref": "indicator--009772ca-3696-4db3-92f9-41d926789abc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51879de-f5b8-4e90-bfac-68ce84a459c6", "sighting_of_ref": "indicator--5f67e8e9-558b-4863-b091-9f53b960fd8f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74b920d-1b4f-4bfe-9276-f1ae3481c3c0", "sighting_of_ref": "indicator--1eb6bb43-f66e-49fa-8aa0-6b711bc4dc89", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cb3e0e-a9be-4ceb-8f5c-c3f140a13723", "sighting_of_ref": "indicator--1eb6bb43-f66e-49fa-8aa0-6b711bc4dc89", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5b87e7-6088-4dde-ad14-68087d437cc0", "sighting_of_ref": "indicator--27544ec8-573c-4d3d-9510-3a1e283f3c44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0a7df5-7c98-43a1-8997-361705c1a9ad", "sighting_of_ref": "indicator--6a5c06a3-86db-419a-b158-874ec9dc1f25", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1f9031-50fb-4144-a101-b6dde0099dcd", "sighting_of_ref": "indicator--77cd59b2-5d33-46cf-809a-7d8fb7802818", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a892cc9b-5a9f-4c39-aba2-885b695b549a", "sighting_of_ref": "indicator--e6a26e5a-a048-4414-9a61-8b5be4fc9c74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb77cd3f-f77f-42be-a405-5bcf09bd0392", "sighting_of_ref": "indicator--1f46ea55-5de3-47b5-bd33-be5269621ff0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc3d45e-61f7-4558-8364-ba7e2665ee35", "sighting_of_ref": "indicator--ba7fa5a6-a704-474d-af1c-f7d5aea8abe4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313cd098-f118-4d36-9898-3e61d252baa9", "sighting_of_ref": "indicator--ba7fa5a6-a704-474d-af1c-f7d5aea8abe4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8381f8e-e732-4e71-a015-9f5400cfe55d", "sighting_of_ref": "indicator--cabcf98b-a46e-4ab7-9380-42adc7204121", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e23620-edb4-43e2-9d4f-87998bfd80f9", "sighting_of_ref": "indicator--cabcf98b-a46e-4ab7-9380-42adc7204121", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b79819-0a90-4848-ac73-961aad20ff99", "sighting_of_ref": "indicator--aa7eeaae-55c5-4cb4-827a-735a9492c9f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b22500-affa-4634-9e06-47e1b3aba680", "sighting_of_ref": "indicator--aa7eeaae-55c5-4cb4-827a-735a9492c9f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc300ab9-5c53-4a6a-b9bc-9725ce4fbcff", "sighting_of_ref": "indicator--5ecdb59e-af87-4239-a10b-af57f408d1ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02e9678-25b3-47d6-a8e3-510f389bc668", "sighting_of_ref": "indicator--5ecdb59e-af87-4239-a10b-af57f408d1ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ab4038-1ab5-46c4-8486-2671150f6d09", "sighting_of_ref": "indicator--a5004e8a-7535-46b4-a7dd-3d5847e06be4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0bb557-2055-41d4-ada4-b737b28f5a38", "sighting_of_ref": "indicator--a5004e8a-7535-46b4-a7dd-3d5847e06be4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c966ecda-b1dc-4676-89f7-a90cfda0265b", "sighting_of_ref": "indicator--ca85677e-d12e-44ce-ae22-c42de78f850e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa81e9b-33e5-42e1-b2cd-a1c58fc1ebea", "sighting_of_ref": "indicator--b9af6ede-6011-444a-830c-507b87ec6edf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a326c10a-9c45-459a-99c3-d33253297477", "sighting_of_ref": "indicator--3142473c-0db3-4cea-ace2-e3b838e0e8cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51779dcd-687e-43c4-8323-9034f43647af", "sighting_of_ref": "indicator--4f6e29b4-d64b-4112-84b4-a8f076a1182b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af10dbe3-3566-4a8c-8a50-d9f3e87467c8", "sighting_of_ref": "indicator--4f6e29b4-d64b-4112-84b4-a8f076a1182b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9832c7a8-8c79-4427-b346-3ba07eb5a3d3", "sighting_of_ref": "indicator--faad6a4c-73ef-475c-a2b4-b069283b4a80", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c77951-d7cf-4145-a39c-fb0f84888f95", "sighting_of_ref": "indicator--faad6a4c-73ef-475c-a2b4-b069283b4a80", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c85d1b-1420-4d23-8aa2-9fada17320ee", "sighting_of_ref": "indicator--5200992e-32c3-4830-9847-2045d97b697e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc478a0f-448a-4133-992d-ae9c28dbbdcd", "sighting_of_ref": "indicator--5200992e-32c3-4830-9847-2045d97b697e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7607b974-76d7-4c2b-84a5-35a2d16c6a79", "sighting_of_ref": "indicator--e270a4b1-f4e7-486f-98c1-b7c67399c171", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f351d8-d8f4-485f-8475-98b1206220c4", "sighting_of_ref": "indicator--b021619e-de07-40b0-8826-01ed54036568", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f07ef1-ea0a-4e8f-946c-5a8bb9b4263a", "sighting_of_ref": "indicator--b021619e-de07-40b0-8826-01ed54036568", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6675a8e9-9d27-49a5-95fa-3e9376921238", "sighting_of_ref": "indicator--62492db9-b971-4716-84e6-332d483a2ebd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebd97c4-3b33-4007-b37c-03ade61215ce", "sighting_of_ref": "indicator--62492db9-b971-4716-84e6-332d483a2ebd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c000b08-bc0e-4e55-8fdb-ae3e6c344eb0", "sighting_of_ref": "indicator--ff5aeb7f-1a50-4cc1-80e1-7beb298e8f6f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84efa56b-596b-4ded-8ec7-5ad58d7dc223", "sighting_of_ref": "indicator--f9e6891c-9ff9-43ac-80ec-06e48e658eba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb2f821-f938-49f0-95f3-03fd419c29f1", "sighting_of_ref": "indicator--2c0141c1-324e-44f9-b4bf-02b496daa479", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e946fb3-220d-4f75-bbc4-aa56ea3107d4", "sighting_of_ref": "indicator--2c0141c1-324e-44f9-b4bf-02b496daa479", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955c0587-6d72-4fb6-84d8-94378250481a", "sighting_of_ref": "indicator--1c1795ff-ba31-4fdd-97d3-fd8a1a5415da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f3b69e-e890-46c4-ba54-bde09fda3711", "sighting_of_ref": "indicator--44af3140-b237-4863-8d9e-5782830e79a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696f1866-1599-4459-bd19-d0ee85af346d", "sighting_of_ref": "indicator--f4100484-e33d-4255-8906-4791a0b189a3", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2136661-3ffc-47bb-a9fb-eceda1321577", "sighting_of_ref": "indicator--f4100484-e33d-4255-8906-4791a0b189a3", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7b4f44-cd4b-4ce3-b5a1-625416059249", "sighting_of_ref": "indicator--f4100484-e33d-4255-8906-4791a0b189a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38634d7-13e9-49e2-9e90-a88cb07610b5", "sighting_of_ref": "indicator--f4100484-e33d-4255-8906-4791a0b189a3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae03e31a-ba48-43a8-befd-e9196ba3cbca", "sighting_of_ref": "indicator--f4100484-e33d-4255-8906-4791a0b189a3", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f74dd9-7289-4a36-ab93-d6333fc6cc01", "sighting_of_ref": "indicator--38af8ef5-a580-4aa1-8d3b-601cce60cae7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e90426-0980-4e3f-8912-1c840ccad291", "sighting_of_ref": "indicator--50c26ec9-5426-4663-8d13-9b5fbf7289d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a6a0d7-10db-424c-86dd-fc711fbc3a35", "sighting_of_ref": "indicator--50c26ec9-5426-4663-8d13-9b5fbf7289d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547c6dd8-f345-4f29-9d68-dfa70b7154c2", "sighting_of_ref": "indicator--50c26ec9-5426-4663-8d13-9b5fbf7289d4", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf7d4f1-ab5d-4282-890a-9ef8f71851cf", "sighting_of_ref": "indicator--09bb267a-4b12-4536-966d-f6d55fc32845", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a144e1bc-d823-4a71-8c5c-f77c5176d75d", "sighting_of_ref": "indicator--09bb267a-4b12-4536-966d-f6d55fc32845", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c01d618-f7df-4b18-86b1-1d7e3d5434ab", "sighting_of_ref": "indicator--09bb267a-4b12-4536-966d-f6d55fc32845", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e95e2b3-2e3d-4089-b405-a5e4102f6f62", "sighting_of_ref": "indicator--6f5f60fc-966f-47f7-b7c9-454cd554468a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3224c1-b89a-43ea-a229-a9d47502dbc1", "sighting_of_ref": "indicator--6f5f60fc-966f-47f7-b7c9-454cd554468a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1303f992-be27-4bbf-bfb7-d4b5a946581e", "sighting_of_ref": "indicator--6f5f60fc-966f-47f7-b7c9-454cd554468a", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06c1689-10d5-472b-8aae-a3fc5aa6363f", "sighting_of_ref": "indicator--7874992d-1705-4e32-af05-34d608c5f0a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9b3eb4-5fb9-404f-8aa3-2af2dbbdcc1d", "sighting_of_ref": "indicator--7874992d-1705-4e32-af05-34d608c5f0a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff6eeac-79d2-46ad-a2bd-22d630d39100", "sighting_of_ref": "indicator--7874992d-1705-4e32-af05-34d608c5f0a6", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f248993f-e9eb-4c77-9e28-63f3c98ca175", "sighting_of_ref": "indicator--d4c78e93-40a1-40f4-8e1c-fafdcbc186d8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a26d2c-1a8c-4fec-8fc6-1794b36cff10", "sighting_of_ref": "indicator--d4c78e93-40a1-40f4-8e1c-fafdcbc186d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ddc420-8b03-461f-9532-a345e8ef8640", "sighting_of_ref": "indicator--d4c78e93-40a1-40f4-8e1c-fafdcbc186d8", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544324e4-6e39-44e8-9e2e-7646305e09e3", "sighting_of_ref": "indicator--eb28dc7e-4595-4625-96b0-813a9cf84abb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93068d26-bc06-4f66-8826-1a911171644a", "sighting_of_ref": "indicator--4fb21f0f-a3ee-4f0c-86eb-b386a20225bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6248d8f-e06d-4539-90e6-ed4a2162bca9", "sighting_of_ref": "indicator--4fb21f0f-a3ee-4f0c-86eb-b386a20225bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440dc71a-b3d6-45f9-84f2-fdb7db7abb5a", "sighting_of_ref": "indicator--0ab6af4b-4991-4b23-86f8-215fc9da97d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf6a88e-f922-4b6f-8dac-2f98cecd1b25", "sighting_of_ref": "indicator--0ab6af4b-4991-4b23-86f8-215fc9da97d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c34334-6aa7-47fa-9697-767a530a496d", "sighting_of_ref": "indicator--efdb043b-109e-4b60-a10a-10d572853e71", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce4ef03-1920-4779-a3e5-567e38af2d90", "sighting_of_ref": "indicator--67d3a224-b890-4338-8809-cf8a8ff7b65c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c6c8e4-5468-47f7-9e10-461f568d6d54", "sighting_of_ref": "indicator--03284073-8c49-4a25-a76b-67215eff64f0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81588361-773f-4975-8ede-920181c24e85", "sighting_of_ref": "indicator--03284073-8c49-4a25-a76b-67215eff64f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b093a3e5-d5f0-4471-a537-81ff7565510d", "sighting_of_ref": "indicator--2066385d-ead4-4dc8-8acf-e21b6aee2338", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cc0798-323e-4319-a41c-4cf6cd50cec3", "sighting_of_ref": "indicator--2744c7a7-90d8-4e48-b0a2-69fdd51dadfd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13bd5ba-eb45-45af-b660-dd60b9f65c01", "sighting_of_ref": "indicator--5c51ecd5-c6d6-4e1a-aebb-dde122315476", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e077ea4-1272-4153-801d-5ea135a6cc29", "sighting_of_ref": "indicator--fbf3c051-1c08-4d24-81cb-a4a39d82220b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56089fd7-3056-464c-99b1-0c25a51a0331", "sighting_of_ref": "indicator--429e61e4-6fe4-468b-b535-bbc57c3733c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198b2a5c-0aaa-4a2c-9b3e-21ad81b6cec0", "sighting_of_ref": "indicator--429e61e4-6fe4-468b-b535-bbc57c3733c3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f91c01-2ac5-4e67-be77-0f6dc367b168", "sighting_of_ref": "indicator--0634fc23-4190-41f5-bd63-614f8aa38354", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a6787b-0e4a-4862-b90b-082f21ba9944", "sighting_of_ref": "indicator--b06908f3-e466-4e90-8faf-a44efcd7a101", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d6ae4d-b50f-4041-9f27-a29aca002d5f", "sighting_of_ref": "indicator--710ebea0-822c-4b08-b03d-ee6de5de35cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6011540c-fb06-433d-9f81-00efeb5696c0", "sighting_of_ref": "indicator--3800cf40-7bd7-45fd-b1bc-c670cfa3e846", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d85c09-354b-484b-b21f-37d5d8822163", "sighting_of_ref": "indicator--3800cf40-7bd7-45fd-b1bc-c670cfa3e846", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1430a2fc-9c7e-47b7-881a-fd460e8a9918", "sighting_of_ref": "indicator--2a5cfd86-5f79-435e-a5f7-1611c2940ffb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632f3ec6-e184-4be8-b0c2-8dfc09f49d29", "sighting_of_ref": "indicator--21ec22b4-c54f-407e-bcea-a9ae3ceeeef8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c27f7c5-9af2-42f1-ad42-998a9f95f561", "sighting_of_ref": "indicator--37c8a834-dd8d-4749-881c-b312177582fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4798968a-701c-42a8-9588-dcd9535bc7f8", "sighting_of_ref": "indicator--44527f5c-066a-4d70-a556-d9562403fe81", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b47ebcd-8feb-4e0b-a526-eb7528ceb1f4", "sighting_of_ref": "indicator--37c03273-64cc-4d3d-bf97-53711ff4b2bd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f13ef1-0d23-4893-8308-ed73a31cec23", "sighting_of_ref": "indicator--2497ddf6-54e9-4609-977d-941d7541d42d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d70f32a-9c09-466f-91a8-ca055ec1d968", "sighting_of_ref": "indicator--084bc153-07c5-44ae-bc89-246eb8ece6c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20754a14-7c71-4956-a1bf-708f1b939163", "sighting_of_ref": "indicator--4691502e-636f-4206-9757-d4cf93106535", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7085f08-ab02-4b27-8822-e8eb01bde772", "sighting_of_ref": "indicator--f4b06f23-53c2-4f80-989b-172d6e873787", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639aa8a-e02a-4860-a1e3-9b9653e26848", "sighting_of_ref": "indicator--18319ff9-c7d4-414f-8c13-eac8e7c89cf4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1a5eed-d4ff-42bc-8c8e-74927ec7196b", "sighting_of_ref": "indicator--4a7033a3-f5f4-423c-ab52-4987051c6ce5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1842d4-aefb-4b70-9343-6c750aedf813", "sighting_of_ref": "indicator--4a7033a3-f5f4-423c-ab52-4987051c6ce5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bdc955-8642-42e6-9e8c-9c1cccc0fbc5", "sighting_of_ref": "indicator--790ee18c-4afd-43f3-85ed-06d51a89cf32", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f1df20-7cda-4d90-a15e-61ae38b40bbb", "sighting_of_ref": "indicator--38eb4695-3bf2-43bb-8eb1-28b9ec7f3bbc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8d40b9-0155-4c93-a837-bde9f4de816c", "sighting_of_ref": "indicator--38eb4695-3bf2-43bb-8eb1-28b9ec7f3bbc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ca063f-215b-4aa4-a19f-3ba8d3516402", "sighting_of_ref": "indicator--c5964fd2-c4ff-4176-ae30-653c65c861dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71659efe-1845-4dae-8fbd-25ff7f84fb6d", "sighting_of_ref": "indicator--ce8f6a7d-cd31-4198-8516-3423180a0aa0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9571ae-ab6c-47cb-96bf-b5a2e1074f2b", "sighting_of_ref": "indicator--ee37e7ea-6df8-4f9e-84f0-4f937ed2fb4b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932e7f3e-dc0a-420d-84ba-e44eb4eebdec", "sighting_of_ref": "indicator--b365a912-d7f1-4a3e-89cf-d44ee1ed3d69", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44df9f22-d80f-4004-ab07-0c1556b39d79", "sighting_of_ref": "indicator--c67bdb47-bbf5-4a6f-9cb6-ab51f91a7acf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e8b5e8-ed0b-4029-b6f9-a8db84dee1b3", "sighting_of_ref": "indicator--a445249f-586a-4dbf-9a61-bbf91b410c78", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77867f8-174b-4b61-a326-88d53088c2ba", "sighting_of_ref": "indicator--7d985ecd-db92-4dd8-bc5e-823be2374d16", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f66365d-601f-49e9-af10-bb45d7a4357a", "sighting_of_ref": "indicator--6cf102eb-67d4-400a-8435-06448ac2afb6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d429c5-60f3-43d6-b4a0-b82702c9e634", "sighting_of_ref": "indicator--e8609906-dce6-4fb0-8f15-4925ada1e321", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46d8c59-14d6-489d-a581-77538aa0b1c0", "sighting_of_ref": "indicator--bf393fef-25b9-4004-8d54-11ed6dafaa74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937c65f6-20b2-483c-a804-6fe1462c9e98", "sighting_of_ref": "indicator--77bca2d5-ea65-42cd-a9e4-3c5231139118", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a52780-4dae-49e5-a21c-2d3f36c1d401", "sighting_of_ref": "indicator--9aa66a55-a52f-40bd-9c1c-9145cbf782e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6955fb-69a3-41be-b06d-f0d2a4b06119", "sighting_of_ref": "indicator--721d2ec3-ab6d-4ea9-846e-4d2a4794df29", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f6e1d1-bf33-47a9-b609-8e82753f0fc3", "sighting_of_ref": "indicator--5487fe48-6e17-4adc-ad72-80088d3c33ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85db0d1-de80-43e0-9ae5-bc228adf1954", "sighting_of_ref": "indicator--e3c695a4-7895-4d36-90b2-72a36635f15c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ef72d6-2c44-4b78-af84-a1f5e56722c7", "sighting_of_ref": "indicator--ec2d3d3c-1b19-41df-ae8f-a60073b1896f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e277f7be-e830-44cb-a37d-861f2cfd377f", "sighting_of_ref": "indicator--70a19aae-535a-458c-82ed-e84255c3860d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695b799c-a639-41c1-9f47-aa406da3286e", "sighting_of_ref": "indicator--099cca12-103e-40d8-8d58-8f86cf7a4ff8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3671624-fce9-42ff-b877-5820aa3e7748", "sighting_of_ref": "indicator--e1b88959-49c0-4d97-ac96-dcf72d33ad91", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b0069f-2bf7-4c4c-8c2d-da47ae01e7d1", "sighting_of_ref": "indicator--4aea36b3-9df5-46d6-873e-b7deb5e29ce0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c5dab2-a1bf-4fd5-8d25-b555de6cc330", "sighting_of_ref": "indicator--b5fdd604-ceaf-495a-a7e6-59c4fe2307e0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69734eb8-fff8-4358-873c-8236d1c34af8", "sighting_of_ref": "indicator--46bb946e-e04b-4df6-b74c-b17fc5f408fe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b550a6-d0e3-4384-818b-a546a5857135", "sighting_of_ref": "indicator--013e2b97-e166-4e20-b11b-c2f1533c2403", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d22783-9d55-4578-a068-281f0ca4e266", "sighting_of_ref": "indicator--8e1e8b88-06f5-466e-ba1f-ceb1f8d34b33", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28469362-a0be-4ed0-aa20-51e46ee5e52b", "sighting_of_ref": "indicator--8e1e8b88-06f5-466e-ba1f-ceb1f8d34b33", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ec1178-eb9f-4d68-a651-45f90241a43c", "sighting_of_ref": "indicator--6bef7589-d530-4606-b4d9-b640f3acf64f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4ddf35-6e0c-4771-b1b1-f92f07ff86e1", "sighting_of_ref": "indicator--aaa18323-fa7b-4b82-91cd-2fa26e6da486", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334c0bb0-0e91-4eef-9bbb-51c026920964", "sighting_of_ref": "indicator--67928fb0-9d06-4eca-980b-23a3f7e4d586", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de613d2-b5b4-4d1b-9d00-75b771409f42", "sighting_of_ref": "indicator--f9870559-779d-41fd-877b-cd311ec54b2b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1acb05-6946-493d-93d2-875c557d2968", "sighting_of_ref": "indicator--7340cba3-ece1-4565-adad-e140d0f4bbd9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6add30c-2a52-4c01-aa5e-16726900ed54", "sighting_of_ref": "indicator--7340cba3-ece1-4565-adad-e140d0f4bbd9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed37c32f-8f8b-4abf-8e5c-5c5860451f3b", "sighting_of_ref": "indicator--4224323c-68b9-41b2-8102-cbbeb38dd179", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128f3f63-ebd5-4387-8b73-84a26616baca", "sighting_of_ref": "indicator--143a606a-af11-48c3-895a-70533cc9dbf2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ed3420-4bb6-4636-be5a-b987b5636c1a", "sighting_of_ref": "indicator--1022873f-4260-4618-b882-7e63ef08ca60", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c49f24-6624-47de-a4e4-ec22da383bad", "sighting_of_ref": "indicator--34d8239e-6db5-4c9b-86a1-876c3fc3b3cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753d9667-dac4-439e-a096-88fb8e0ad39b", "sighting_of_ref": "indicator--34d8239e-6db5-4c9b-86a1-876c3fc3b3cd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82882b6-c905-4129-8908-be0ab6537f8b", "sighting_of_ref": "indicator--6f9cf4ba-1843-4b54-b7e3-9ab51cde4dcc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee17aa7c-fcaa-44f1-ac47-c09503cc219c", "sighting_of_ref": "indicator--6f9cf4ba-1843-4b54-b7e3-9ab51cde4dcc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f39ce01-6d0e-44ee-8ea0-6d80b9749655", "sighting_of_ref": "indicator--6e78fa75-3453-475f-9fd9-c007c3e72875", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd11699d-2c86-42ea-ba7d-0c90117ef63a", "sighting_of_ref": "indicator--5abc58bd-26ef-47e8-aaa9-cfde3e0ea917", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb677430-09e1-47c4-a2e1-166684b617e6", "sighting_of_ref": "indicator--fcb71a28-dc6d-4820-9fbc-3e7de0b579a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fa0512-bef9-402f-8088-11712e6c3794", "sighting_of_ref": "indicator--fcb71a28-dc6d-4820-9fbc-3e7de0b579a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0acb42c-3274-4c91-8f19-c6067783dbf8", "sighting_of_ref": "indicator--7872d894-4efb-48d2-a5d1-59a180435b09", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e3db9b-0f57-401d-bd35-f9afa26b5a17", "sighting_of_ref": "indicator--f598cd16-b621-4cdf-bc5e-80e12aba0d84", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2aafca5-78ef-42fe-b7c7-f63a3f08d57e", "sighting_of_ref": "indicator--70f81444-bf51-4733-9771-ad2889f300e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bc82ad-7c27-4d14-a396-4a4409574449", "sighting_of_ref": "indicator--17e4b107-7998-4e27-ad1d-6d51ebc00508", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cf852e-bbca-4613-913d-f6f20d62f7f1", "sighting_of_ref": "indicator--c9f92f6e-c82c-4ac9-8d26-e96def37de9f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f00415-a27e-4ba0-9cda-79201e0f957e", "sighting_of_ref": "indicator--8385345e-0c6a-46ee-9e1e-59df9267451c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb4d9c4-e5a3-4a20-bb59-2ff5cffd5d95", "sighting_of_ref": "indicator--4b59f46d-0630-4402-b31e-2d3794221f53", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd36d771-fdc2-45d3-80ee-d564b82f4743", "sighting_of_ref": "indicator--d90d3b87-b8f0-4b19-9249-0d2986196d33", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071babd3-65cd-493a-9f10-b3d1c07aa2e7", "sighting_of_ref": "indicator--58f00468-b435-4e77-b473-dc1da25a3a6e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae4a1f5-1d7b-4627-b7f8-0ddb520384c8", "sighting_of_ref": "indicator--9909972c-77d7-44a7-8639-53d49e3ca06e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72530379-c179-40fb-9f78-78c36d051c23", "sighting_of_ref": "indicator--50d82700-49d2-4c5c-9018-2cb0c29cc998", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60e9e20-ea5f-48dd-8558-cbd91a7f0c92", "sighting_of_ref": "indicator--f06dbe01-7eff-4b77-ae6d-e8d4862d17d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1558657-cfad-4892-89b4-bd94364f5d62", "sighting_of_ref": "indicator--218de6d1-3fad-4307-b7db-7c0d93a21ccc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c317b7-8e61-4261-be0b-b5aa8fc4a832", "sighting_of_ref": "indicator--2a812021-1ead-4873-8b01-31e7a9e4190f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf62bdc-7dfd-404b-8ce6-42055be7acbf", "sighting_of_ref": "indicator--a1f068fa-631e-43c2-afd4-c6b925dbede6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6769de31-edee-4e37-be67-711f070b7e3c", "sighting_of_ref": "indicator--76757ea5-d9a2-471a-b76a-ae04b22f38a8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0e8296-7ded-48af-b4ca-14b2f2455b9b", "sighting_of_ref": "indicator--b01dbd01-e6e8-484c-8709-72eafa67cfc9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c984911d-4c74-4124-ad95-05414d104b3a", "sighting_of_ref": "indicator--5ac0dbd3-f8bc-47cb-abdb-782518d1dfae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfcb69c-8f74-4200-931e-0796a5cd0e5b", "sighting_of_ref": "indicator--80475175-3404-4d77-8d3d-5e962b5b9141", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b941ae-5135-4da1-80db-03af45a25637", "sighting_of_ref": "indicator--5fbd7ff8-4536-4541-badc-a96709279ea3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5074fd-1c34-4b31-8efa-161e1260ce6b", "sighting_of_ref": "indicator--c728e164-6711-4802-9999-1de7bc8f9891", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eac0315-6af9-42df-ad84-d5e53176b5ec", "sighting_of_ref": "indicator--788f3a39-c3b2-4c6e-8acf-1a48118c33ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3719405-db18-4daa-b424-e34758726ee2", "sighting_of_ref": "indicator--d935b965-e4f7-4a3c-b71b-7345bf2d5883", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bd762b-85e7-4c97-a327-71fd19499534", "sighting_of_ref": "indicator--a302e8bd-0648-4469-b1ff-5a19202d642e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88535bc-cf4d-4102-a354-f9112b419180", "sighting_of_ref": "indicator--1779a610-b9e2-4a35-a36b-484910564296", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8887db10-e8b2-4ee7-8108-03fecca971c9", "sighting_of_ref": "indicator--1779a610-b9e2-4a35-a36b-484910564296", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a541772-1328-4412-a8cd-d57f4811b870", "sighting_of_ref": "indicator--6af0e3eb-acf8-4f0e-ae2e-8df55252ab7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bce0a2-8211-4197-a813-892579671ed2", "sighting_of_ref": "indicator--696800f2-8a81-4ea2-8338-0afd25c74512", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbce4895-0ec2-413f-9513-1b5ba2c9021f", "sighting_of_ref": "indicator--696800f2-8a81-4ea2-8338-0afd25c74512", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4d83e8-9b17-4b8f-b08a-d75eff31407c", "sighting_of_ref": "indicator--1848d92e-5452-4227-8bfb-68b6c3fea0ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a191631-ca35-4c6a-8c93-8fe4f1c66367", "sighting_of_ref": "indicator--2697b574-0ff8-42ef-8062-553f83f64e22", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29f1bc9-3f36-42d6-b9da-e1dc0478c21b", "sighting_of_ref": "indicator--d3f23c71-25ad-4e08-bd39-df890a217775", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526729f2-06c6-40bf-9400-687f70e7061f", "sighting_of_ref": "indicator--3a12239b-8536-486c-92d0-188ff523d279", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e25ac2-f6b0-4308-9d19-0aaca8aa5f0a", "sighting_of_ref": "indicator--7e6b837e-d4ea-44fc-8785-0abe17652937", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d613473-ccb6-4b98-96e5-ff14cb127574", "sighting_of_ref": "indicator--7e6b837e-d4ea-44fc-8785-0abe17652937", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4dbff3-8959-4d32-836a-0245cc47d4f8", "sighting_of_ref": "indicator--ed2c2c71-a963-4138-aa63-d9472f362af5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61e4f75-2386-4ee7-8e4e-daf716578ce7", "sighting_of_ref": "indicator--ed2c2c71-a963-4138-aa63-d9472f362af5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73829920-4d11-4eef-b0b4-2e8ff3403474", "sighting_of_ref": "indicator--8c164fcc-7bc6-4399-920d-51025a668447", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61384b5-4aa6-4d44-b497-4f8808d1f14c", "sighting_of_ref": "indicator--8c164fcc-7bc6-4399-920d-51025a668447", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc63c1c-934c-4172-bf5c-9384bd8e43be", "sighting_of_ref": "indicator--11feb8bc-50d9-44d6-9f0d-951022b9f775", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814f986e-9736-4230-9b4d-126f08b7ad71", "sighting_of_ref": "indicator--11feb8bc-50d9-44d6-9f0d-951022b9f775", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88f1ea7-cb85-4c20-b84b-7d4c7a3277a2", "sighting_of_ref": "indicator--ba1db8ea-821f-4559-bdb0-488e91d6aa9a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd29538-76be-453f-8c3a-7b7a184c5ecf", "sighting_of_ref": "indicator--ba1db8ea-821f-4559-bdb0-488e91d6aa9a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684cf5fb-6b0c-4030-a080-d15c5eb46376", "sighting_of_ref": "indicator--48d9f02c-e6e6-4aa1-8d4b-f687e30511d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23808fa1-b783-4509-9eb5-180771c370c7", "sighting_of_ref": "indicator--48d9f02c-e6e6-4aa1-8d4b-f687e30511d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef10a39a-1ddc-4d33-a074-dd977bd72bae", "sighting_of_ref": "indicator--c2c36a95-70bc-4eb1-96b8-3f00eb1682dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f81a948-6c4e-48b0-80c7-37893dc24147", "sighting_of_ref": "indicator--c2c36a95-70bc-4eb1-96b8-3f00eb1682dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5fa913-3b67-4606-a163-2798eb1ee425", "sighting_of_ref": "indicator--0711f351-214f-4619-8c21-604698616fcf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4bb6c5-2977-44e1-bc07-927d250e5c5f", "sighting_of_ref": "indicator--0711f351-214f-4619-8c21-604698616fcf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219c09cf-f601-48c4-a1e8-bb8a7cb5d56f", "sighting_of_ref": "indicator--d02cfd6b-04db-4b0c-8384-2c7d52cdbce3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb45a6aa-c035-45ae-913d-a6a1217f0fbd", "sighting_of_ref": "indicator--d02cfd6b-04db-4b0c-8384-2c7d52cdbce3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f191b271-a9d2-49e3-8f66-7b6d979bd9d2", "sighting_of_ref": "indicator--35a3e845-59fa-4fa8-bffb-f024da07f135", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68ffc5e-ab7e-487e-b5c2-d64183508660", "sighting_of_ref": "indicator--ca4f67de-2f46-4930-8443-be8805cfaacc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce94f8a2-17cd-4a77-a434-1467eb6384d3", "sighting_of_ref": "indicator--9e3040f1-8142-468f-b399-ee10b6aa4675", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9bfb0c-b7b5-4804-9d6b-44aeca22e0d4", "sighting_of_ref": "indicator--9e3040f1-8142-468f-b399-ee10b6aa4675", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda6e251-c8dd-40a9-aca2-32ff454ed07c", "sighting_of_ref": "indicator--9e3040f1-8142-468f-b399-ee10b6aa4675", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa40a79c-a64a-4007-a3d7-5c848ec513ee", "sighting_of_ref": "indicator--e7150e84-7e0c-4cdc-bab3-6ee85e375a6b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98b0a8d-f262-48d4-a82b-7818e4732c25", "sighting_of_ref": "indicator--b3f3f695-ca90-47ca-a23d-e2680818ea97", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4ae812-8b85-45c4-8da5-20900088de0a", "sighting_of_ref": "indicator--b351e50f-77bd-4d79-a173-72718393e323", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f1b4f8-73f8-4b81-8b87-0454260e9fd1", "sighting_of_ref": "indicator--14d0d2ad-d15b-43d6-bcae-7a5fca1febbe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57af594-d47a-4e60-af75-e0838dcd17bf", "sighting_of_ref": "indicator--bc066f7a-d249-4342-bf67-7f181ac8a5be", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fda22a-4c6d-48dd-9b48-73313072e79f", "sighting_of_ref": "indicator--f2682262-07ec-46d2-97f7-8ce1a6b80b2e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce2f8c2-7b01-4c0d-8dd0-efe80df0e209", "sighting_of_ref": "indicator--cdefb872-a68b-4409-8e1e-a430e3e1bd92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0d03a4-ee94-43b0-8956-f555c6aa2478", "sighting_of_ref": "indicator--cdefb872-a68b-4409-8e1e-a430e3e1bd92", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d5197b-20ea-4152-b835-7a6cba10dadc", "sighting_of_ref": "indicator--bf835676-5b87-4095-b74d-c47d8c8383c1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11a9baf-c0c4-454b-b9c0-1f64f4e6530b", "sighting_of_ref": "indicator--bf835676-5b87-4095-b74d-c47d8c8383c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7e24ed-6c95-499b-9698-97899654de09", "sighting_of_ref": "indicator--bb871128-6ecc-45a8-96bd-e59e37d73667", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2250e3fa-6d1c-448f-85a6-3f271cb94ee9", "sighting_of_ref": "indicator--9d3e6745-f377-4cd0-8a42-1fb5e58e3d26", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b295ec1a-c587-4533-b1a0-2c37eefdddab", "sighting_of_ref": "indicator--9d3e6745-f377-4cd0-8a42-1fb5e58e3d26", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc3c413-8b60-49d2-9f4d-e9db2c88038b", "sighting_of_ref": "indicator--95c0ba05-c6fc-45e0-b6d5-4269304995ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db20592c-5954-4c4b-b567-4e37cfe9cf90", "sighting_of_ref": "indicator--3f5bb419-e8f9-41cf-919d-9655eb90a947", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84541f8a-6e09-44d0-aa6d-97203e3d0d92", "sighting_of_ref": "indicator--3f5bb419-e8f9-41cf-919d-9655eb90a947", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b556daae-696d-4c3c-a13d-8516cf751e3b", "sighting_of_ref": "indicator--29dde7dd-1244-4dac-8386-4a650148b944", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f29044-495e-4229-9004-64e1dd6264a2", "sighting_of_ref": "indicator--d09267f2-3227-47d2-9af1-21e3ff52efd2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03392bce-60dd-4b62-b989-2a4211b1c054", "sighting_of_ref": "indicator--d09267f2-3227-47d2-9af1-21e3ff52efd2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18dfe9af-8fea-451e-84d7-efa2da524a0b", "sighting_of_ref": "indicator--a3aa26c4-64d3-4ca3-ae0d-dd9367a07934", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae420fe-a042-4d5d-81c2-a1a6c80835ec", "sighting_of_ref": "indicator--a3aa26c4-64d3-4ca3-ae0d-dd9367a07934", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc009c8-fc55-4abd-971b-a0a5ee85ac44", "sighting_of_ref": "indicator--f491d0af-8b83-4752-bd54-221357d9bb4f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784492d3-76a1-46a1-845c-40754d31d872", "sighting_of_ref": "indicator--a6c57c2e-14d2-460d-9c73-850622b307fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e51dd04-708f-40ed-8904-d2a49af7b5be", "sighting_of_ref": "indicator--0e1cc5a1-ba9a-4b43-a1f4-eaaafa7b70ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bf64a7-1c40-4ee0-8f24-9b1c17cb9fbd", "sighting_of_ref": "indicator--b22d0740-0eb7-4369-b9dc-2427a680d062", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8442d1-a6c1-4ff3-9202-ae0f8cd2950b", "sighting_of_ref": "indicator--b22d0740-0eb7-4369-b9dc-2427a680d062", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da9669e-ecbe-4437-a8b2-9f578a3eabeb", "sighting_of_ref": "indicator--5523f345-846e-4333-b85b-532a9b7a64d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60168931-076a-4cc9-a028-874742e7a924", "sighting_of_ref": "indicator--5523f345-846e-4333-b85b-532a9b7a64d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d0727a-e511-4822-b9f7-6ac741a423ec", "sighting_of_ref": "indicator--8ff88eff-a313-4fae-aa95-8d8435e5a95e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920e8add-2ba0-4c96-9672-306dccda327a", "sighting_of_ref": "indicator--8ff88eff-a313-4fae-aa95-8d8435e5a95e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737d4093-b719-469d-8dde-a0ea255150bc", "sighting_of_ref": "indicator--166433c5-8c1d-413c-aa05-fae906a6c7f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad85641e-7998-43c0-aa44-b253eca59705", "sighting_of_ref": "indicator--166433c5-8c1d-413c-aa05-fae906a6c7f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7613a583-21e1-45dc-bac5-94bf0ea53c47", "sighting_of_ref": "indicator--edac9999-b52a-4a8e-b27e-93f922bd905a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697048eb-629f-429c-9fea-df3da7569d6c", "sighting_of_ref": "indicator--0ddbccd8-fd93-4bfc-9ed9-7ebb8efe052d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58340a2a-fd56-4c0e-b868-90673a23366b", "sighting_of_ref": "indicator--0ddbccd8-fd93-4bfc-9ed9-7ebb8efe052d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe0fce0-fce8-4d37-a319-c3d26c4d17ca", "sighting_of_ref": "indicator--8aa2bf09-1954-4649-85ef-2f9f4bcad15a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5523679-cfd8-4a93-8be1-d79e1a661f44", "sighting_of_ref": "indicator--ea48d438-22eb-41e9-925d-7e9ada0f7286", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c610e69-8414-40d8-b14d-c7dce8c6f64f", "sighting_of_ref": "indicator--ea48d438-22eb-41e9-925d-7e9ada0f7286", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e62df98-ac73-4cd7-9a33-14fa0c67fae3", "sighting_of_ref": "indicator--f2f98bbf-e49d-4928-81da-0b0db3e71a15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862132da-17dc-41dd-a873-a8ed6b4d471f", "sighting_of_ref": "indicator--48327789-7907-4eba-8a9c-9577c71e8e94", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1a4910-09d1-4c8b-afe2-d094de22d111", "sighting_of_ref": "indicator--9ba74d06-b774-4a0a-a6b8-e24ea853b94d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c1497b-a0a2-476e-befc-8828d682671e", "sighting_of_ref": "indicator--6a1fa106-802c-4182-872d-43375d0755d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecd6503-758f-49d0-88d7-4e70e3373063", "sighting_of_ref": "indicator--6a1fa106-802c-4182-872d-43375d0755d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cf7f0f-9d61-4512-b73f-ae864e020f42", "sighting_of_ref": "indicator--6f1d6029-ca16-4951-88ef-f0c12acbf3bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d97546-062d-4ffd-a371-ab9913b63e89", "sighting_of_ref": "indicator--6f1d6029-ca16-4951-88ef-f0c12acbf3bb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fc0cb7-69c4-43d2-a47f-d7b2226b98c9", "sighting_of_ref": "indicator--9ba7db54-d0a7-40df-bfc9-0337e5b65347", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1eef198-0e87-40b8-9ca0-60adec90a1de", "sighting_of_ref": "indicator--9ba7db54-d0a7-40df-bfc9-0337e5b65347", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9184d1a9-6909-4b5b-acd9-c223d6b43ea3", "sighting_of_ref": "indicator--0dc9ec14-38a8-4b5b-bc13-a2e63afe9b57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cb1e6f-3709-46bc-b673-33c337212274", "sighting_of_ref": "indicator--04b6fb20-7646-4d69-8c68-75a862afadb9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873c559a-6da6-4b05-9416-6299847b6b5f", "sighting_of_ref": "indicator--04b6fb20-7646-4d69-8c68-75a862afadb9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a0da58-8080-43b2-9089-fa50f59b78b9", "sighting_of_ref": "indicator--b6d486cd-6b5b-44b8-98fb-e9921ae6fe6b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c12694-ea86-4b6b-96b9-b995555a131b", "sighting_of_ref": "indicator--aabb87cf-b3b1-44e2-969b-33cd06e20a27", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb2bbf2-33e9-4f9e-aaf6-e1db1947517a", "sighting_of_ref": "indicator--13f1c91c-79b9-48cd-b46b-da98a2cc9824", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3377fa92-a425-4acb-af77-afab883aacda", "sighting_of_ref": "indicator--13f1c91c-79b9-48cd-b46b-da98a2cc9824", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5a0779-71ad-40da-8bc1-9907394dca1b", "sighting_of_ref": "indicator--9aa0351e-a5b6-4e8b-9da1-7b1d302edcf3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1143841e-1a00-4f39-8619-88e7e9b30f0d", "sighting_of_ref": "indicator--050b7fcf-0e9b-41f4-80ee-3eaae80f06d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767b5e3d-531a-4b49-8035-a08d3a2a75a7", "sighting_of_ref": "indicator--7972a91f-c62b-4c72-b3ad-04da04701ffb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86797eb-0a17-4a35-9391-7a112fa257f9", "sighting_of_ref": "indicator--4690f0d9-4462-4897-9d63-d1de29dbd66c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3f475b-b69e-40ab-9605-c296c44045bf", "sighting_of_ref": "indicator--0ad0c2ae-667f-424c-8409-c628f41243c1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3512dd57-73f0-402a-8f8f-2f0affcda4e1", "sighting_of_ref": "indicator--0ad0c2ae-667f-424c-8409-c628f41243c1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6784fa8-a903-4f07-be71-905f26fd3e15", "sighting_of_ref": "indicator--d08f4ce6-e569-41c6-86eb-bee029769bc7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae114057-acba-4903-b81b-3d51530e541f", "sighting_of_ref": "indicator--9a69146a-0ba4-47ff-b2f0-a183e952e066", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16f2118-0f9b-43b6-810a-19019bd167ef", "sighting_of_ref": "indicator--abab0ec5-7b7c-470e-80a0-2ba6dc66a4da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca791e0-3fea-4f99-85c5-1a4a3e5c88d2", "sighting_of_ref": "indicator--358f503a-2bc2-406c-bea0-72438106fcdc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d53071-12bc-4de7-9835-492131e5745f", "sighting_of_ref": "indicator--7eb3eccf-870f-4def-a594-6b2cac27f60f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4a48db-b53c-4797-9ac6-13954b5356cf", "sighting_of_ref": "indicator--2b5d1d71-aefe-4302-b656-b779f144a8da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3523373a-c6bf-4922-864c-b8bb0f0dfa68", "sighting_of_ref": "indicator--2b5d1d71-aefe-4302-b656-b779f144a8da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0ec921-e056-4be6-ace2-2aed5fe39c69", "sighting_of_ref": "indicator--3d582e24-ed57-464c-8a8a-f52aa3b4312a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce6d32f-25a8-4f08-871e-09c6da3844c2", "sighting_of_ref": "indicator--2a145306-4e1f-4d77-9713-56310bcd428e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc5f15b-4a8c-4560-b183-1b302613debf", "sighting_of_ref": "indicator--2a145306-4e1f-4d77-9713-56310bcd428e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b7beb0-10e5-461a-8e34-d3e467e65332", "sighting_of_ref": "indicator--b637f6f4-ea58-4165-85fe-b23f50abec5b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1730319-66e9-45d5-a687-e5fafde6d4aa", "sighting_of_ref": "indicator--b637f6f4-ea58-4165-85fe-b23f50abec5b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809eca4e-55fa-488e-b165-d79b3f641dd0", "sighting_of_ref": "indicator--d1c6bb01-660e-42bc-9c79-fbcae45ca8d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e34adf-36e6-4a7a-b378-ea0689ce89a7", "sighting_of_ref": "indicator--d1c6bb01-660e-42bc-9c79-fbcae45ca8d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20478260-a3c8-4428-ac8e-e4f13b8d3677", "sighting_of_ref": "indicator--d418c0d9-98b5-46ac-b3ef-0d06880fcaa6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9468bbfb-4f25-4343-8d66-6a8ffd52159c", "sighting_of_ref": "indicator--d418c0d9-98b5-46ac-b3ef-0d06880fcaa6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd227bf-1364-4ba2-85a9-3e89568b2726", "sighting_of_ref": "indicator--eb74ab9e-febd-4ab4-a6e2-aae56b5f7aaf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c7f99d-34bf-41d6-bb96-307ac257c401", "sighting_of_ref": "indicator--eb74ab9e-febd-4ab4-a6e2-aae56b5f7aaf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200a5015-cdbc-46fd-abed-c20bb72d7617", "sighting_of_ref": "indicator--82ae76e5-cadd-42a7-9b53-c38d69bb4145", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6d4c66-a6e2-4a6f-b837-9b80a86d9435", "sighting_of_ref": "indicator--0af30bc6-41db-4613-a312-49fea0f4e3c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f217ac89-d069-4f60-9933-77f10542a53d", "sighting_of_ref": "indicator--ff3f5dda-9d04-4e6a-ba32-0111047ab64e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cb0456-309a-435d-8312-81205aaf5683", "sighting_of_ref": "indicator--ff3f5dda-9d04-4e6a-ba32-0111047ab64e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10669647-c9b6-41e0-b038-b262f31b904b", "sighting_of_ref": "indicator--2e499221-330d-4700-8bdd-a6ab16ab4353", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cead1e57-8b30-4e91-b7b0-27ba37c5c9cd", "sighting_of_ref": "indicator--2e499221-330d-4700-8bdd-a6ab16ab4353", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3360436d-27b5-4b52-abf1-c8925b295001", "sighting_of_ref": "indicator--7ea92d23-eb78-45f1-a542-9a447e330fa1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73634d7c-3d91-409e-b917-aa46c956435a", "sighting_of_ref": "indicator--02fa46af-5ad6-42fc-b1c9-e1cf41ba1fc5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0c62e3-24f3-4af4-ac9f-a35a11c72e3c", "sighting_of_ref": "indicator--02fa46af-5ad6-42fc-b1c9-e1cf41ba1fc5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab3ef2e-1b17-4475-a166-7142d4f30536", "sighting_of_ref": "indicator--07359642-f0e3-4771-aafc-702498a5643d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4469b216-ce77-42dd-a44e-9927fdb6650f", "sighting_of_ref": "indicator--07359642-f0e3-4771-aafc-702498a5643d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28db1ec-9e73-4717-8be8-9d7f2ff75409", "sighting_of_ref": "indicator--906a10c4-d8b9-48a4-a3cc-3b13c868c99c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed77624-d739-4366-b05b-e192035956f2", "sighting_of_ref": "indicator--906a10c4-d8b9-48a4-a3cc-3b13c868c99c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e7eb0c-6bf1-4432-9132-01d805db5a0b", "sighting_of_ref": "indicator--c4eb7d0d-5caa-424b-84a9-41e5b9eae946", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e50a10-d4f3-452a-b2b4-d159433355cb", "sighting_of_ref": "indicator--c4eb7d0d-5caa-424b-84a9-41e5b9eae946", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be60f27-bd0b-484f-9aeb-98f5368ac2c8", "sighting_of_ref": "indicator--c4b2d592-b668-4975-8461-90385107897e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95406670-7c8a-4348-be4e-d2b9d85c194d", "sighting_of_ref": "indicator--c4b2d592-b668-4975-8461-90385107897e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db96accd-7d36-4ac2-8d40-f47f66a48fb2", "sighting_of_ref": "indicator--9ce9ae9c-7ddf-4566-ace2-9cbb46dbfc45", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394ceff0-a3bb-4f6b-b633-d58fd3ab0953", "sighting_of_ref": "indicator--56e2fdef-9d36-43be-8341-2911176a07b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdfc627-f50c-4fb7-a08b-88258c4ba76f", "sighting_of_ref": "indicator--56e2fdef-9d36-43be-8341-2911176a07b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a442cc79-9bdd-4ccf-b1be-31dedb7a25d9", "sighting_of_ref": "indicator--e9fefc46-6187-4a78-91a4-8d784273911b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd68afa9-ba7f-4740-838f-b1f2948650f4", "sighting_of_ref": "indicator--310cb432-3904-4a2d-9a09-3218a3e29122", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476bf516-95b4-4e95-8c80-0936f87b7061", "sighting_of_ref": "indicator--b000411d-680c-4c4e-8907-ab4a7f3e876d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f3b632-9dc3-427d-b15c-642914a70aa0", "sighting_of_ref": "indicator--0d37d8f9-2926-4450-b1d6-3cd057d923c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930791ea-a65b-41b2-88e9-237977984c43", "sighting_of_ref": "indicator--0d37d8f9-2926-4450-b1d6-3cd057d923c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c1c319-0a2a-4b20-8562-02e21c96ec96", "sighting_of_ref": "indicator--c477c9fd-526b-42c6-93dc-2bf13063903e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1082e717-47e9-40d3-9586-a48fb28e83a3", "sighting_of_ref": "indicator--c477c9fd-526b-42c6-93dc-2bf13063903e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0d1d33-f7b7-4140-af32-8f613f37a0dc", "sighting_of_ref": "indicator--4a14a877-ac91-48cb-acc6-b11e09c2d460", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608433fd-402e-4eba-827b-38d280126231", "sighting_of_ref": "indicator--4a14a877-ac91-48cb-acc6-b11e09c2d460", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f796e0e-ca50-4fe1-964c-d310ffe83fae", "sighting_of_ref": "indicator--eb296a4b-4510-49a7-8767-144912e1074f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f733b7-6e2a-47c2-8594-f430f480dd34", "sighting_of_ref": "indicator--f23929b1-f463-423b-8b2a-b3e023f546fe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca336b7-63a6-494e-b08a-8c2b93a0fa74", "sighting_of_ref": "indicator--f23929b1-f463-423b-8b2a-b3e023f546fe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d482e3-5458-4d00-a907-bf02faf9d488", "sighting_of_ref": "indicator--316be0e0-1b3b-4dc6-abd4-28ea36138294", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1569b48-d905-4c83-bbd4-85373582085d", "sighting_of_ref": "indicator--39d04ea0-98c6-4527-b669-8fe7b38abf44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8135f6-44aa-4d69-9729-91a304703c12", "sighting_of_ref": "indicator--39d04ea0-98c6-4527-b669-8fe7b38abf44", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30a8343-6097-4aec-92fe-34b11fdcb878", "sighting_of_ref": "indicator--48e1a2d9-cfd6-4b7a-83a0-851d1bc9ebd9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae44cc72-6c06-4080-a0d0-ff1d3425fe60", "sighting_of_ref": "indicator--548be442-e456-49a1-be1c-2f99f8826814", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2531d7-18ba-4494-83bb-f8400c566b35", "sighting_of_ref": "indicator--548be442-e456-49a1-be1c-2f99f8826814", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37efbcd4-f4ef-4538-9227-128e480c606c", "sighting_of_ref": "indicator--8cacb901-67a7-485b-9088-38cd38039e8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01a1771-a713-430d-b682-80e9073751e8", "sighting_of_ref": "indicator--92ae20e4-2547-4164-8872-f4b8024c1a66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c65adfe-993e-4c88-8995-23f6ab8cc031", "sighting_of_ref": "indicator--fdaa176d-f3e9-4e22-a466-b60b9e7c3f6d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1ad1d3-e7f3-426b-a056-6fb57760fe15", "sighting_of_ref": "indicator--fcbd4fb2-fe29-4bcf-9dad-e649003e8a98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca55f243-4280-4d89-801c-be0f2f1c4ea6", "sighting_of_ref": "indicator--5fbf8fce-ff7b-4081-a3ee-23529f2e37f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec492713-6adf-43bb-95a8-d827875e06e6", "sighting_of_ref": "indicator--5fbf8fce-ff7b-4081-a3ee-23529f2e37f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023c845b-fc32-453d-a6b2-8d6fc35233ec", "sighting_of_ref": "indicator--3ec0d06d-40ef-41d2-b0a8-ca522f9a232a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca302ec-95d6-4ded-8121-3a9455461e6c", "sighting_of_ref": "indicator--3ec0d06d-40ef-41d2-b0a8-ca522f9a232a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375b4b53-ec6c-41bb-a59c-2a09e897b273", "sighting_of_ref": "indicator--2f92433c-3950-4d7b-87fc-90b654d12f70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c154402-9ef8-4361-b61a-1016148307e3", "sighting_of_ref": "indicator--2f92433c-3950-4d7b-87fc-90b654d12f70", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96cc0c5-f858-4a83-b500-a55e972a4a29", "sighting_of_ref": "indicator--aaf97bb8-382a-4b72-b84e-fae97ec87e6a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bbcbc9-2bad-4dd5-980c-bba9f9055513", "sighting_of_ref": "indicator--aaf97bb8-382a-4b72-b84e-fae97ec87e6a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9178edce-8bab-409c-a30a-736e6c3e9198", "sighting_of_ref": "indicator--6dcf6395-eb92-45c3-883f-c794fe2c3906", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0401c8d9-2695-4129-830d-9e69f696c253", "sighting_of_ref": "indicator--52cdd4d8-bf30-4296-8db4-8428eb72f2cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9650758f-9342-4f2f-97b9-447a82b6b1d8", "sighting_of_ref": "indicator--52cdd4d8-bf30-4296-8db4-8428eb72f2cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648f200c-4734-49fc-ba38-f6a5fe4c3fe6", "sighting_of_ref": "indicator--a3f83650-bf34-4a27-b974-b1ef6c8da192", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e439c6-1479-49e5-8bd3-e174e227cd70", "sighting_of_ref": "indicator--a3f83650-bf34-4a27-b974-b1ef6c8da192", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71577286-4f21-40ef-8050-00aebc8456f7", "sighting_of_ref": "indicator--923e16dc-9d72-4f3f-93fb-ed620cf7207b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943a3876-d390-49e0-a8dd-49bdb8e677f6", "sighting_of_ref": "indicator--923e16dc-9d72-4f3f-93fb-ed620cf7207b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5659634c-1ae7-4776-a1bc-8e7831db33cb", "sighting_of_ref": "indicator--399a9093-38dd-4ef2-bfb7-e6f8c1f41963", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a19f1fc-e765-44c2-aa8e-cddaa904e43e", "sighting_of_ref": "indicator--2f855550-5550-4b0c-9edb-1b1c455358b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb05bf92-ae8f-46b8-a441-59f7aa495410", "sighting_of_ref": "indicator--2f855550-5550-4b0c-9edb-1b1c455358b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e02e64-71d5-4ce0-8124-45c7ba6b5e00", "sighting_of_ref": "indicator--f74f2344-7d02-4592-ad52-1ce9d87f8bd8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12045d25-3371-45b0-ad64-374ffb7c6d33", "sighting_of_ref": "indicator--f74f2344-7d02-4592-ad52-1ce9d87f8bd8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a4d57e-cc6e-47b4-a323-706fed4682d8", "sighting_of_ref": "indicator--0237a115-3e20-4561-a35d-5a88e46a4286", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d237e83-cba7-40ef-a859-dd0243b786fc", "sighting_of_ref": "indicator--0237a115-3e20-4561-a35d-5a88e46a4286", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f96919d-448b-473b-af82-03e47a1ac3cc", "sighting_of_ref": "indicator--bddfd7a7-8809-4d9b-9701-aa018e6c665e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c2157d-ff3a-426e-bc09-98d3bc5cd723", "sighting_of_ref": "indicator--bddfd7a7-8809-4d9b-9701-aa018e6c665e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e288f948-e974-48e1-9dc6-2bd09b49aacc", "sighting_of_ref": "indicator--d9228b8a-e567-49bd-8a7e-38b84d8da95d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59f8d99-d30b-4fb8-9717-a5dd16fa30b7", "sighting_of_ref": "indicator--7db7c9d9-8265-420a-9b19-aed422f57701", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3354fc99-035f-4630-a8a1-79fb6e0a4118", "sighting_of_ref": "indicator--7db7c9d9-8265-420a-9b19-aed422f57701", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b06a16-6167-4a3c-91ff-d51eadf6921f", "sighting_of_ref": "indicator--662374de-33dd-48fc-9dfa-eb5206103e1d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f77153-9a66-4da2-9769-001f89d5bb24", "sighting_of_ref": "indicator--662374de-33dd-48fc-9dfa-eb5206103e1d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f29bfec-d91d-4fb9-a616-a1ff72cf45a7", "sighting_of_ref": "indicator--9d09b51d-bae3-4fc7-9766-7ead38bf3cf1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb2ba37-b835-47de-b39c-56440ee9c3d6", "sighting_of_ref": "indicator--9d09b51d-bae3-4fc7-9766-7ead38bf3cf1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710b1d18-adca-4fa3-8f25-5c1df0dd3de7", "sighting_of_ref": "indicator--89c04fe9-860a-4641-9973-d4a5c66a8ade", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8166330c-2dbf-4bb4-b159-f50b9bfe5084", "sighting_of_ref": "indicator--9ab03af4-f711-4f71-b52e-22a878c875d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f3f32e-e20e-43dc-8ed3-da21621e6ceb", "sighting_of_ref": "indicator--9ab03af4-f711-4f71-b52e-22a878c875d0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0157224a-de28-4ce9-85b3-f8ea34c27f67", "sighting_of_ref": "indicator--d8755e21-3f10-4842-ae14-4af2a879989f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f57adf6-7b8f-436f-bdbe-4642d3427b5b", "sighting_of_ref": "indicator--ea131c66-761c-442f-9077-4a1c622c5765", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24945f9-d2ff-4459-bdb7-58a739e265bb", "sighting_of_ref": "indicator--ea131c66-761c-442f-9077-4a1c622c5765", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2c9b1d-e0bd-40db-86ef-54f2db5a597f", "sighting_of_ref": "indicator--29b6aee0-63de-4f7f-8798-08fcdec9dad7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2e81fd-2832-4b37-8106-d051d791ad39", "sighting_of_ref": "indicator--f8c8f361-4de6-472c-abda-bca42d837b54", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cdfde1-d2de-4c4f-8728-1c3476c88e90", "sighting_of_ref": "indicator--ec363c51-6af1-4b91-8ba0-41d33b4c1433", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0cd4c2-1d21-4d0b-b848-d14d69f6d24d", "sighting_of_ref": "indicator--ec363c51-6af1-4b91-8ba0-41d33b4c1433", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4f2a1b-d1d4-46e3-80da-e27c3a516c8c", "sighting_of_ref": "indicator--80dfa6c8-b0e1-4e3e-9b63-60b03b1699c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb86d66-e2db-4af2-9e55-0a4e5072787d", "sighting_of_ref": "indicator--80dfa6c8-b0e1-4e3e-9b63-60b03b1699c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02e7ab6-8870-4406-bd2b-987d0c2d1f9b", "sighting_of_ref": "indicator--ff13fdd3-adb5-472c-8096-e320aff5aaa2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43ad7db-c2fd-4105-8ed2-e2e2bfaf82be", "sighting_of_ref": "indicator--ff13fdd3-adb5-472c-8096-e320aff5aaa2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7e5fb5-a8ac-4ca3-bf5c-6e3998070eba", "sighting_of_ref": "indicator--b7dbfaf0-fdcd-463a-a14f-2914f50a2443", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d041b678-0df1-48eb-bcad-218190abab9d", "sighting_of_ref": "indicator--54ce4c8d-801f-458d-a099-46cb1ec02769", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2f9322-d6bd-4b88-a4ae-b399b3b981ac", "sighting_of_ref": "indicator--54ce4c8d-801f-458d-a099-46cb1ec02769", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3258457e-4fe4-405c-9d0f-85943ad9f9c9", "sighting_of_ref": "indicator--364610eb-6d9c-4eb3-b8a0-11bc6d5950f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841ea2a4-08c2-4fcb-92d1-8636ecc024ee", "sighting_of_ref": "indicator--364610eb-6d9c-4eb3-b8a0-11bc6d5950f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fe8fbb-e74f-43e0-bb36-37e886b2e28f", "sighting_of_ref": "indicator--b407e4c3-a2ee-44c3-b508-f8729fc2173d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde0c5c1-a98a-4607-a137-05960eb17a79", "sighting_of_ref": "indicator--b407e4c3-a2ee-44c3-b508-f8729fc2173d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69581aae-d62f-4154-ac74-7937eba515c1", "sighting_of_ref": "indicator--3d351c99-b1e4-48f1-9d61-227f0218816d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b689f116-9180-4367-be25-3eb42982b054", "sighting_of_ref": "indicator--3d351c99-b1e4-48f1-9d61-227f0218816d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa90f7b-d266-4c82-9dda-b1858d8cbcce", "sighting_of_ref": "indicator--0d8a07ce-2ce3-4868-8551-bbea924a6612", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db1d40f-77b3-4436-ac1e-a8247632bdb4", "sighting_of_ref": "indicator--0d8a07ce-2ce3-4868-8551-bbea924a6612", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66d8138-599d-4973-a93c-9fc06e1ffef5", "sighting_of_ref": "indicator--e8b28c67-91df-4072-ab55-54f5ad4d4aa9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4128c83-0d5a-4219-912c-7c7741f5d5ec", "sighting_of_ref": "indicator--e8b28c67-91df-4072-ab55-54f5ad4d4aa9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d347ae-6f38-49a2-9701-2d96c1ffa26a", "sighting_of_ref": "indicator--923593f0-abbd-44bc-9327-8e1ff0fc343d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521b9f5b-4fd3-458b-ab71-e0ae06f9f2eb", "sighting_of_ref": "indicator--61d16a8f-3709-4e34-a277-5fa3206ffaf4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32733fd1-4a1d-423d-bed0-ebfd816863b6", "sighting_of_ref": "indicator--e0d0ffa8-adf8-42bc-86f9-093553304f68", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56b4381-427a-4236-aaa1-b2b60e4c4130", "sighting_of_ref": "indicator--e0d0ffa8-adf8-42bc-86f9-093553304f68", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba51d639-c4dc-4adc-a25f-9d6ae3aa9c0e", "sighting_of_ref": "indicator--8aa74e94-9c0c-4d36-b1c1-f43c7a6c5579", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39330ba2-d00f-4859-9c48-d965d8682dc0", "sighting_of_ref": "indicator--8aa74e94-9c0c-4d36-b1c1-f43c7a6c5579", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ca07da-5225-4669-8b84-3e0cdd8f1da3", "sighting_of_ref": "indicator--af10f953-d2a3-40da-8d1e-9f2551dabc75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f31daee-132b-4a59-963b-9e6cdf78575d", "sighting_of_ref": "indicator--1cc5345d-df79-4a8f-b151-6b527b60c78f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f99ea85-8627-4bf4-bf9c-e35913c80055", "sighting_of_ref": "indicator--04f556cf-78e9-4626-b42f-e25c4cdf2895", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e062bc6-af6f-405e-a9ea-0c2f5b0b194e", "sighting_of_ref": "indicator--bb0b0385-4cfc-4053-9ee4-1cbbd9c760d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da43837-61ab-4790-a7e5-2a6e560c6625", "sighting_of_ref": "indicator--bb0b0385-4cfc-4053-9ee4-1cbbd9c760d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c0484c-bc09-468d-9a75-c32e6126f501", "sighting_of_ref": "indicator--7b7892f9-bd1d-4a58-91c2-eea829da5986", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7463a0-d3dd-4822-9e56-c34248032724", "sighting_of_ref": "indicator--274f230e-9bd0-4986-8215-1852c35e2373", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2729c7ca-dd5b-4999-9cf8-2c5c37e36e26", "sighting_of_ref": "indicator--1fc3bfe6-2006-47b5-bb3a-a2358fc31b8a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0952d8-53c3-48f2-a8a6-4783a06ab8e0", "sighting_of_ref": "indicator--1fc3bfe6-2006-47b5-bb3a-a2358fc31b8a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecab65c1-9ad0-4d4c-be2a-e01ae9314bdf", "sighting_of_ref": "indicator--425d34a6-f0bf-4372-bbae-3911652550e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6dcbc41-d5da-4048-94d7-d353de1ecad8", "sighting_of_ref": "indicator--425d34a6-f0bf-4372-bbae-3911652550e8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae4520b-1172-4552-a42b-8ce822ab34bd", "sighting_of_ref": "indicator--95178f4c-2f35-4df8-bd5f-bafbe17dfd0e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8dbcf3-2cb0-49be-9736-204bedc22af1", "sighting_of_ref": "indicator--078fa6b5-3cd0-4524-982a-5cfe1ed1a34a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fabe0cf-7e4a-4748-b4ef-ad788ab41977", "sighting_of_ref": "indicator--3efda06e-58eb-417a-b180-373f400bc084", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28f5105-e463-4f09-9957-c7f30770d524", "sighting_of_ref": "indicator--3e909ca4-47f0-47e2-a0a3-525b680bd4f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1992ba31-9c23-4cb7-a72a-558fa80c37fb", "sighting_of_ref": "indicator--3857965e-b01d-438f-8750-68ecabf603c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1a0ea9-3489-4110-aff3-25cc65799dea", "sighting_of_ref": "indicator--1bcbc99c-e6ee-40fe-833d-2c3930475cd4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a1f1bd-9884-4c21-9adf-8cbbec1b5012", "sighting_of_ref": "indicator--1bcbc99c-e6ee-40fe-833d-2c3930475cd4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bdd4c4-6602-4f46-8928-d2bbd370405a", "sighting_of_ref": "indicator--302dd496-cc5e-47f0-8563-fab62b64eecb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a98b5b-6d17-4140-9934-6d6e00677459", "sighting_of_ref": "indicator--302dd496-cc5e-47f0-8563-fab62b64eecb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cb413a-3913-451c-8861-2bb874076f9e", "sighting_of_ref": "indicator--80bacd5c-e44e-48c3-a5f8-68df667dc9ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7071fb-f26f-4f05-bf9f-b47e8be3f445", "sighting_of_ref": "indicator--512ac408-027d-429a-96eb-4826e4fdf72a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fe7e72-58e4-49b4-9348-140263ec2c2d", "sighting_of_ref": "indicator--512ac408-027d-429a-96eb-4826e4fdf72a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59fbf34-3340-45a2-ab91-fc87f3d86e9f", "sighting_of_ref": "indicator--3efc7ae7-5c53-48fa-a708-43121c39ca4b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a879753-d581-4efa-bd37-d53a09c77a05", "sighting_of_ref": "indicator--f2c701bd-14cf-4cd9-b20a-6d0cfb5804bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a886e6e-e4b9-48cc-ab11-1689b9239300", "sighting_of_ref": "indicator--7d292764-c3fc-4922-a334-6d400ea01044", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58a94ac-8af3-403c-9e64-d1c9595000dd", "sighting_of_ref": "indicator--4d56f4cf-069e-4572-bd36-32cdfc2bd46c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92aa828f-76da-4e76-b513-4520428b0189", "sighting_of_ref": "indicator--353ab8d4-0bff-4a4f-8145-89b8c9032948", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973c8214-92f9-4a3a-bdc1-218eb7b15a78", "sighting_of_ref": "indicator--a7b2ec7e-81e4-4c44-a966-26685aa6d40d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b57dd78-5ebc-4629-8062-bbf30e89a98e", "sighting_of_ref": "indicator--52bb13fc-a33a-43af-b3f5-3c8a56fbe95a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a937a61-c8c9-47e3-bfb8-92fc17e3e5b6", "sighting_of_ref": "indicator--46c6d161-aa7d-461f-abdf-2ae16f1c892a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22103d0a-c856-480b-9271-bc653eb21ece", "sighting_of_ref": "indicator--4f07dbc6-e7f9-431c-85d9-4ca4c0478540", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545de44b-066a-4542-aa22-24630b3adae5", "sighting_of_ref": "indicator--0729dfee-e830-4a5a-9f6b-db90220401e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01ef033-9437-4b1e-a56f-7d91fc9f80d4", "sighting_of_ref": "indicator--ca35d1ac-409b-4ef2-965b-aeb09e3952c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d17eaf3-ef67-46c0-a570-b17f914967bb", "sighting_of_ref": "indicator--1a94b75b-78aa-4937-b91d-5091ce398299", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d544655b-c94e-41a2-b233-fbedf6fc3764", "sighting_of_ref": "indicator--c20269f6-fd2c-4bfa-90d3-84547e54094c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422ab5d9-cdc8-432d-a6b8-0262f48edcb0", "sighting_of_ref": "indicator--c20269f6-fd2c-4bfa-90d3-84547e54094c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43570294-7236-446e-9d37-ab2cab44e1d6", "sighting_of_ref": "indicator--bbdbd0f3-ffa6-4018-aa9e-caa7cab02ba0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e375e8-44ad-4132-891b-0b7ff5541dd9", "sighting_of_ref": "indicator--bbdbd0f3-ffa6-4018-aa9e-caa7cab02ba0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1a7191-1561-4932-9000-eb4753b2885f", "sighting_of_ref": "indicator--356998e4-3959-4a69-85f5-542cdeac9a6e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76adc520-8d42-4de6-a4c3-dd64e5dff1c0", "sighting_of_ref": "indicator--b421f7c1-09bc-4274-829d-48d73704bffa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83257596-4519-4b2b-8bca-250d9cca9793", "sighting_of_ref": "indicator--731170f3-4dbd-463a-b120-f3271c12e227", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b835c7a-9d6f-49da-8d49-bedec66d446f", "sighting_of_ref": "indicator--4bda5d9f-ca4c-4b76-af65-771c969f13c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc2223e-2b20-4560-8376-10ddf1dfa2db", "sighting_of_ref": "indicator--4bda5d9f-ca4c-4b76-af65-771c969f13c3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19aa66f1-f2a6-463c-a07d-07b23fdcff0c", "sighting_of_ref": "indicator--82178c43-bcc6-4aab-b89f-8f2b6c56dd24", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43967e10-76ee-4776-8170-1a2781dc42c9", "sighting_of_ref": "indicator--8214d3d2-916e-4e17-a798-d4ad7dc79deb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7093b0-ca66-4885-ad86-09210272c635", "sighting_of_ref": "indicator--42e93c18-a491-4555-9d43-6110882cbff0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44ebc1f-0f09-43a9-8dd9-520ff2660777", "sighting_of_ref": "indicator--b73ba6b0-f3ed-4651-8c40-7f6ab8759913", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6802eb7-56e9-4f37-957a-56491a33e9fb", "sighting_of_ref": "indicator--735ef9b5-0fb9-4d31-829c-47169f41a953", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae1a356-9c6a-4352-8cb0-694ff070fe56", "sighting_of_ref": "indicator--c38bb633-38c7-40f8-b981-9380afde9bd0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09116ac2-61a4-408a-8969-977366517e7d", "sighting_of_ref": "indicator--48e126b5-f6bc-4cbe-975c-4f2ee65e0483", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f686ed-0695-4668-a78b-f9ff4452a792", "sighting_of_ref": "indicator--6ecaeed9-9f62-48b5-bc86-5554a63fa465", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ba00c6-9947-45e2-8649-0e323cd1c438", "sighting_of_ref": "indicator--952f7491-672d-4fad-ab14-de2b52362219", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0acbc9a-92fb-4f8f-8e02-03d7d0e68a5f", "sighting_of_ref": "indicator--d24c1bce-a2d5-4481-b871-04e7a2bd0f36", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0cde4c-d1c1-4caa-abbf-b9d4696c8efb", "sighting_of_ref": "indicator--3a62e33f-2d8a-4cc6-9fc5-2daa5b11de98", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bc2f76-9607-429f-9a4a-bc8e0e42bb4e", "sighting_of_ref": "indicator--907912df-7d6e-482d-99fa-9b9bfa13a1f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce01c582-8db5-4b06-995f-bc8408e591df", "sighting_of_ref": "indicator--1cd7f451-17d8-42a5-b224-4e6e4d90f617", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19cb308-df71-4489-86a1-894d81054df3", "sighting_of_ref": "indicator--6016eeb9-8d58-44e8-9ef1-d8123e64d65c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220c6d64-c0e5-47f3-ba26-1a87753e24ed", "sighting_of_ref": "indicator--185a40ba-3d1a-49d9-9804-f1521b51e4b3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9114e638-c34f-481d-9797-a73331951639", "sighting_of_ref": "indicator--662b330b-18d9-474a-b413-c4974ebccef2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cf8b25-4417-4df2-8075-cc29f7af4526", "sighting_of_ref": "indicator--a552777c-83fb-4aae-90f0-6c9fe81744e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19237e39-fbe3-4eae-8f42-8b3708b4ce9d", "sighting_of_ref": "indicator--4ff066e7-c761-43a6-9cb8-d317cb39ed5b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2737f63e-3ca9-457d-94ea-e60485d72c99", "sighting_of_ref": "indicator--6b56cabb-c650-404a-86a8-c3ef3cbe4b3c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29de75ce-da0d-49b3-8451-78da20dce9b9", "sighting_of_ref": "indicator--f3dc0550-eb1c-432e-8269-9a78310ef1f7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec89d81-8614-4e30-83aa-0cdf3b6bd923", "sighting_of_ref": "indicator--f3dc0550-eb1c-432e-8269-9a78310ef1f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0370ee7-2ef3-45af-8268-8e4a03145f58", "sighting_of_ref": "indicator--fd3f9117-84f5-4e6b-83f7-ccb0395a5594", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2850c4a-9097-4f7c-8739-422b09fc4dd2", "sighting_of_ref": "indicator--c9184842-992d-46bf-9fa7-ae978953d23a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314ac097-03df-46fb-b2fa-43d310679ca0", "sighting_of_ref": "indicator--4c2ebc2b-affa-457d-a62b-97c28e055f89", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ee8f9c-2cc7-4763-a49a-f2d648a7b949", "sighting_of_ref": "indicator--0a11c7d1-d589-48ce-b287-e8cdc9383410", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a587d3dc-3de9-4025-87ba-736c0572c475", "sighting_of_ref": "indicator--998a27b9-1f3d-4518-be4b-b4d551f6ed70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d49ef8-b2a8-4c95-8902-a1ba49b0957b", "sighting_of_ref": "indicator--a6e7e235-ae70-430e-9675-36674777d6e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5293b5e6-2fec-4295-937e-a668b1ca5867", "sighting_of_ref": "indicator--ebc5d244-4709-4ca7-bef9-683d9eb78b28", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff737ca-868d-4ad6-b0aa-3ccff179e158", "sighting_of_ref": "indicator--a86fe81c-8290-41f8-975a-d514f5fc0c8f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a7e66a-c1bd-42c0-97ec-217b7af11888", "sighting_of_ref": "indicator--1e2132b9-9447-43d2-a630-b82bec6d888d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4948fca1-edae-4cf8-a31e-ca9af8077f91", "sighting_of_ref": "indicator--78bf3788-bb6b-49d7-8d00-6e802c643193", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfe5e6d-296e-4ba9-86e7-5a82b7c192d3", "sighting_of_ref": "indicator--4069a469-9cdc-41c9-9e92-ea135595c26c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e536e64d-e6fd-4849-82ab-a5b345a86d00", "sighting_of_ref": "indicator--74e4a5e8-a0b9-4f29-b787-e31383b769f7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4336633e-780e-4b73-be55-b317a31d15a0", "sighting_of_ref": "indicator--030c91e3-9e66-4417-bf4d-146880a7555b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74028da-9011-4575-9d1e-cdad3e26da4f", "sighting_of_ref": "indicator--030c91e3-9e66-4417-bf4d-146880a7555b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7ca64e-fd34-412b-9bbb-9bcbc9ebd981", "sighting_of_ref": "indicator--99878823-e26b-4686-8f5a-a70adb3e3097", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f59bd9-4523-4fd2-962c-4f757eadadcc", "sighting_of_ref": "indicator--61620faf-4f39-4f75-8540-b8b569a351de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ec89da-73a5-4263-9c8e-7ae5857a4e2d", "sighting_of_ref": "indicator--61620faf-4f39-4f75-8540-b8b569a351de", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04da2223-e1b8-4bf2-9e47-db1f922500ec", "sighting_of_ref": "indicator--208b4f45-4454-4790-919f-4cd5875d2fd9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926465eb-bbe8-4bac-8c20-3231482c66ec", "sighting_of_ref": "indicator--a4eaa1a6-31da-45dc-898a-f3dda629135a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef36c96-661c-4d99-85ff-425e46b9ccd5", "sighting_of_ref": "indicator--c9552259-b37a-41c9-8e75-4427f80ce1aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54e5f4a-eb32-4678-be48-2e5e133601bc", "sighting_of_ref": "indicator--0776b6c2-d80e-40bd-8602-68931d3e9002", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2aac4f-510a-4173-9dca-ef10d7afb414", "sighting_of_ref": "indicator--10171224-5a99-4420-aa2f-eecd355bfe06", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7717c7-4181-4b16-bda9-093b12c5df90", "sighting_of_ref": "indicator--c8320b96-97f6-4d92-95a4-d93af9dbdbf5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcd4f14-429c-4662-a846-dc1c3015d319", "sighting_of_ref": "indicator--27e76602-a4be-4c10-89f6-8700387fcc7e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95948a2-4100-40fc-818f-305a758cf590", "sighting_of_ref": "indicator--5da68372-3e21-4cd9-8bb5-7dfc9f63c0de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f712f74d-c6d6-4850-bda4-7a3b5ab5008e", "sighting_of_ref": "indicator--11d95fd0-2fd8-4ed7-b6f4-a0ba094a2c09", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30374a33-9dae-4320-b4d9-14af090d11a6", "sighting_of_ref": "indicator--85b9a514-8e43-4c47-806a-c097dc4d3b19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075b1a4f-d240-45a4-95fa-abc53edf730f", "sighting_of_ref": "indicator--4be96c25-7df8-4f48-a45b-9ebc942d5d80", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92944ee0-d930-4464-88da-e230c3eab4a0", "sighting_of_ref": "indicator--f4086e76-9ebd-4620-9eea-b3ab24f628e5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb81fa2-834e-4dd6-a56b-fa2941f9f785", "sighting_of_ref": "indicator--d0ed9b19-0d90-4fc1-a67d-dd6806a5d429", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078a850f-040d-44e3-bb2b-22281eda0cd6", "sighting_of_ref": "indicator--4d01331b-4d46-4f39-8ea0-43c79e7ac3c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0fd425-2512-48f5-bc93-fc6d037403f2", "sighting_of_ref": "indicator--0972dc81-b5d9-4c6a-94a3-f9a9b19fabf3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bd6675-1c14-4d28-920c-7526d5b06e6e", "sighting_of_ref": "indicator--70a1639c-6006-4ec7-a516-1e8c8dd053f8", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9caf2f61-a2af-4047-acd8-16bb8fcede6e", "sighting_of_ref": "indicator--d08c2a5f-a086-4760-a3d2-c447d20bc93f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda43184-93ce-492d-8891-728158e864a7", "sighting_of_ref": "indicator--3cad4710-1f53-4b2f-81f9-d52e2df1e77f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa98dca-9862-44db-8488-1c7e32a053fc", "sighting_of_ref": "indicator--86cf3322-845b-453e-96f7-17d674f5e52f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de47c0e-ed53-44de-917b-3eaa31429dc1", "sighting_of_ref": "indicator--acd8a6cb-e574-4d89-85c9-166563c1a219", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f289e68d-5e8a-4fef-a6bd-e0f863fb5e6c", "sighting_of_ref": "indicator--f75ff3ca-a8a8-4f73-a230-33326db95798", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bc02fc-d12e-4088-b9f9-77dfea3a756d", "sighting_of_ref": "indicator--22a4e143-535d-489f-8d4c-2eaa7c03df25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5d1de8-647c-4a09-af73-8304fc142985", "sighting_of_ref": "indicator--20b6f80a-ca57-4cb8-9711-06cd5c0bc9e9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90af232-ba31-41fd-8f15-44a034871fd7", "sighting_of_ref": "indicator--ea02183e-2657-4571-adb6-79425dc0cd82", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80984ef5-e4e7-4254-88d4-872aea6d2860", "sighting_of_ref": "indicator--2e4612a9-7e78-47ce-99e1-f376b368c1ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932c2711-1279-4d62-8481-0b14d9f5af92", "sighting_of_ref": "indicator--b05e1656-ae62-42d2-9cf7-512d52b0e007", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49703373-a4f0-4f0c-964b-76e059b8d116", "sighting_of_ref": "indicator--80ea191d-671d-499a-8174-d0dfc93909e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6792ab49-36a9-4eb2-8081-8b393d6d8bbe", "sighting_of_ref": "indicator--5303e781-9a77-4aa2-aa1f-dcb8a30fc72b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0850db-17bc-4500-a581-4b78a9b425be", "sighting_of_ref": "indicator--9debbcce-3162-4d49-8816-be08ed6875fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984f1712-e36f-4bae-986e-e3a54a26d0bf", "sighting_of_ref": "indicator--ded1c9ee-4336-4672-a3cb-d4697ba7b84d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452b8eed-d0f4-4481-abc1-ec8ee1f1ebe9", "sighting_of_ref": "indicator--99ece780-a06c-4396-b5ff-372995c4062a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1940e70-2774-405e-808f-f7c4e4148e4f", "sighting_of_ref": "indicator--52c15061-8d42-4a3b-9d23-a4c81bd83901", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98512f06-225b-48ae-be5f-6fe74a58c759", "sighting_of_ref": "indicator--0902dec9-7de3-4455-b92f-7074cdd672c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d9b036-5c99-4396-929f-683628bebb00", "sighting_of_ref": "indicator--d9e36be9-7460-4b04-a539-08127c268032", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5a6beb-5489-47df-94bc-f3b8090f8e45", "sighting_of_ref": "indicator--50817e95-609c-48c4-99f6-640461f5040b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49b801d-895c-45bc-9d11-cd0337459b99", "sighting_of_ref": "indicator--a865a28f-1655-4169-9035-0c8ea73ade55", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d54ba4-5d4d-4968-8b0c-94077faccba1", "sighting_of_ref": "indicator--631c7909-1ce1-4cd8-9576-22f466ca8837", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b8692b-aeb6-479a-ad5f-63a0210ad1d0", "sighting_of_ref": "indicator--ca96c0a3-f230-42cb-bbb0-9ae85da916b0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc6d55c-a48f-4763-aef2-4ebf080a4da1", "sighting_of_ref": "indicator--20930f5f-0d1b-43fd-ba91-7d07d30d3f43", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae54c794-48e0-4885-b999-04195bba3791", "sighting_of_ref": "indicator--20930f5f-0d1b-43fd-ba91-7d07d30d3f43", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89168eea-8b5e-4a7b-bc34-869085c42ecf", "sighting_of_ref": "indicator--d2b01eb6-983f-436d-8d17-12e825ce6cee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0763b3fa-4f7a-48bf-9ec4-bf718ee72d44", "sighting_of_ref": "indicator--15c3d4fe-3ade-4573-992f-485cafe38650", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9b3333-55e9-4daa-9ced-0b6b0d18f614", "sighting_of_ref": "indicator--430975a8-d5bb-414d-8af0-4fc94246a793", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20dcdd20-64b0-438d-8365-69e819c30ce7", "sighting_of_ref": "indicator--4f0c3197-e076-46af-a3a1-70e78bc7fc0d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01922dbf-cd3b-40a2-94d9-b029290150ac", "sighting_of_ref": "indicator--b7ecd049-d4c6-4693-a1a2-adab6c833547", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5c50ce-e2fb-42bb-87e1-57a669abfc61", "sighting_of_ref": "indicator--1fc861e3-1257-4327-95f8-11230365e917", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f114ce2-5274-4439-8c70-a37a05de70f3", "sighting_of_ref": "indicator--06c4e29f-4d5e-4713-b04c-d75c5a1bc2c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b2db03-515c-43d6-ba00-c2b5c9b5321f", "sighting_of_ref": "indicator--b1337f52-e1df-4a86-922a-f8530e6559b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ca39a5-035f-4fcb-832b-3f896367f826", "sighting_of_ref": "indicator--ca2f46b8-d313-432b-a528-672477ff250f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4368e919-12b9-4d9a-bab6-ec8f84b67cfb", "sighting_of_ref": "indicator--4e4aef6d-f292-43ed-a4b6-76f5a589c0e9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c18243-a50f-497e-8f2c-3e1676339d8b", "sighting_of_ref": "indicator--f9d0f827-cf94-4eca-987c-b49977685086", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5adee7a-6e3b-4862-a485-9a3f1e5eeb86", "sighting_of_ref": "indicator--e6c68767-73d3-48e0-9e3e-9b3e979f38cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702121cf-e0d8-4054-a2bc-c3ee66cadbfb", "sighting_of_ref": "indicator--00a3fb3a-0714-41a0-aa64-2873f1fdaed9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7c9300-fe97-49ec-94e3-bb48ec3b0691", "sighting_of_ref": "indicator--b7a447a2-23a5-483b-8cc6-44416cf95499", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61e21f6-2b69-40ae-819a-445d20c3043f", "sighting_of_ref": "indicator--7ac47021-9947-47e7-a685-08346fe5cac8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ee89e2-d60d-4c91-8ab1-519583ae8e1a", "sighting_of_ref": "indicator--9b95fe27-e7df-4887-a252-53dcfec8dcb5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012b56e1-a40a-414f-be98-ef885b917336", "sighting_of_ref": "indicator--92bb147a-0d96-4dae-b349-c8a252215a15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca61d81-a2d0-4640-a19b-03999bcc4ec2", "sighting_of_ref": "indicator--b3eb771d-b3dc-4b54-92d8-c444058ef76d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc85b11d-6cf8-41b2-b2d9-c5e8dabcb79d", "sighting_of_ref": "indicator--ae6aef8d-721f-46b0-b1f5-1aea906a9c9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e14db16-8ea2-4254-a88e-8b151eae74c0", "sighting_of_ref": "indicator--80493bd3-28e8-4910-9439-de8363bb3c83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b869df85-a506-4d01-b175-88fbfa3a4ca3", "sighting_of_ref": "indicator--55a6f27d-4ccc-48dd-bf88-211ba9b6ee22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb12cd5-2176-4a80-8650-396e563502cc", "sighting_of_ref": "indicator--d574f81f-7c8c-407e-a854-a2cf9720464a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fd4314-f3a5-4a7f-8110-9f1c3d1804bb", "sighting_of_ref": "indicator--ae855b00-45fe-43f5-b01d-cd0ef6633f80", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023e635d-0a53-4809-8c7f-0392bd6be79d", "sighting_of_ref": "indicator--9f597771-561c-4d5e-96e0-72db019f51f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba449e51-a535-410f-8b4b-6867ccf16580", "sighting_of_ref": "indicator--7f984e5e-6fc1-41c2-9c1a-d58ae3f7696b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94e8103-9d14-43ab-8703-b995ce54cd67", "sighting_of_ref": "indicator--9bf9ac8a-a534-4679-9862-4d0062048160", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bfaef4-3582-4325-b414-01c302a61e57", "sighting_of_ref": "indicator--c091c765-dcb4-4c50-a783-32f9af2d4751", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb1993d-8030-4a3d-86f6-47e55ffbc3f4", "sighting_of_ref": "indicator--bac9d143-1466-453d-8e22-1e6c3270ccde", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc392e3-57e2-4049-b2b9-ed766c84af8d", "sighting_of_ref": "indicator--220e158d-dd46-4d0d-b0aa-51f0c81f11fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6c4706-90b8-41c3-823e-1105ebb77360", "sighting_of_ref": "indicator--c2a25b0a-fd4c-448d-8294-4faf1e3cf9ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f60c55d-4a4d-40ba-9a61-4fd0799379b9", "sighting_of_ref": "indicator--50f83dd5-d7a5-4742-80a2-418f3de87aff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa619a6-699d-447d-814b-16414a696781", "sighting_of_ref": "indicator--9be714bd-21b6-453a-aeba-79eb4fc79260", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7aabd0b-5621-48d6-80fc-f4d7e9830cad", "sighting_of_ref": "indicator--6b341c48-8730-4f18-8013-834e247a6345", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553d6241-9cf8-47a1-bdc8-c26f5f94c688", "sighting_of_ref": "indicator--46a43c4b-bd3d-4057-8636-36c0c9a76eca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340de71b-afc8-4668-b6e3-1c621fb4065d", "sighting_of_ref": "indicator--0e5f075e-4273-455f-8852-08a2fc1a10b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d995b12-f32a-434f-b5b5-0b450cbdccc3", "sighting_of_ref": "indicator--833b5fe5-9286-4d62-8e87-0c6ae058b0ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b43c4e-fc14-4cc8-99d5-ebac1afecf6c", "sighting_of_ref": "indicator--35bd0fd8-106a-4498-b5cc-54bd8d1aef98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4ee177-0836-40b3-b55f-14e547c3973f", "sighting_of_ref": "indicator--f81d2303-f51a-4ad5-bd7c-45b5c98406bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5cfb57-d919-40fe-8a27-2f6ba925076c", "sighting_of_ref": "indicator--10704984-0e4e-4180-9d3b-7923b91e96d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9337d919-f180-4a51-9597-27fb224dd0ca", "sighting_of_ref": "indicator--c2f3edc2-6fac-400a-879b-dad6cf059c00", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb87857-20ed-4d6f-b2c4-b15df4eff114", "sighting_of_ref": "indicator--ddfa90d1-bb4f-4f5a-9cc5-c23df687b54d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded266ae-adac-4c94-bf79-0a966c59d599", "sighting_of_ref": "indicator--49faaf80-56a9-4884-92a9-de7f0c5609b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b134e6-fcb7-4c50-8123-997198826b6f", "sighting_of_ref": "indicator--396b19e2-c840-4212-be67-7495c98f98bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e56c59-5342-4bad-9b76-9199325b4e9f", "sighting_of_ref": "indicator--6ddfa917-bdc0-40d9-bbaf-4ffa02c6ea6d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf03def0-482d-466e-bfe6-2f0fb6225d16", "sighting_of_ref": "indicator--f76a78bf-b5b6-4705-b3db-297669a40975", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97884eb5-3734-466f-990f-0307d2cbe40a", "sighting_of_ref": "indicator--cf9f16b4-a41c-4781-b5b0-12e39f883c42", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ea2aff-db95-4617-a03a-d0d73383c33d", "sighting_of_ref": "indicator--3c198a6c-540c-4e44-852c-053a8aea7783", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d2b1e7-efd6-43e0-acdd-3502df698dc3", "sighting_of_ref": "indicator--f70a3510-af30-4990-9bec-44b1eddf1b90", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b308aab-159e-4d4d-9a1d-0829bdd2b7e8", "sighting_of_ref": "indicator--c65620e3-9cce-46a0-a053-a83154c15b2b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c6b14b-4fbc-4b0f-b85a-109166b16ede", "sighting_of_ref": "indicator--ca1e39a6-8a75-4b7c-bee2-29bab3bc8da2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45db6d6e-81ea-4b8b-b0a8-918596ea9e56", "sighting_of_ref": "indicator--8ca88103-a75c-42ab-b5c8-6c63cd4a0e04", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25605f8e-32e8-4f4a-aca6-273a72cfe965", "sighting_of_ref": "indicator--f6cca1b3-6007-4d18-a162-fec37d196bc5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a538fe8-06a2-4a8a-bb7b-9519f811e22e", "sighting_of_ref": "indicator--89f2bd29-b7ab-48f4-b14c-329bbbee3177", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f68cb3-8223-4244-b0c6-60bcddce7194", "sighting_of_ref": "indicator--1f026e3b-6b35-4b46-afac-7e807f17e1c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9e2905-cb33-439b-9425-2188c5f1532c", "sighting_of_ref": "indicator--999020f5-f460-4ef1-8fc3-0aa8c9284f42", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9929667-5c12-4e87-bc2f-24dfcd89ed7a", "sighting_of_ref": "indicator--0dd108a6-a63b-4555-b619-25e927535379", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060a4564-21f5-4317-a6cd-b8f4f55a2386", "sighting_of_ref": "indicator--687d5275-8d99-4bdc-9da8-8a609a12caad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703060b9-98f3-4296-9c3e-60c7aabe08c2", "sighting_of_ref": "indicator--f8b22560-283a-4cf3-bfb3-b9bbe17991af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84292a8-5add-40f1-9125-6221784df072", "sighting_of_ref": "indicator--911cceef-8593-438d-86c1-fa171b816dbe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b41a79d-3479-478f-9bbb-264e750e875c", "sighting_of_ref": "indicator--e123179d-9cdd-4e57-b0e5-5b6633814fba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d864357b-9145-4fda-b4ca-3b9231709624", "sighting_of_ref": "indicator--5eff89d7-d5c2-4c27-b5d6-bae55fcdb1af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cde6aa-feb5-4c15-ad86-84b7edf6efdb", "sighting_of_ref": "indicator--13e6bd83-92e5-409f-bc70-6820644b47b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684b89e8-0ffd-4977-8883-7e7ada96d92a", "sighting_of_ref": "indicator--dbef71df-b2b2-4b68-b7f9-695f1a63698c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16194f6a-e2bd-4ca0-a640-17be8f9b3cd3", "sighting_of_ref": "indicator--a54a2255-f120-4a41-8470-3094a2d20276", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cd6e19-d553-47a3-9ebc-036600d08151", "sighting_of_ref": "indicator--6ed5b03a-0934-4358-bd52-58daad1baedf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d81e41-cda0-4c90-a3ac-32b7fa027c1e", "sighting_of_ref": "indicator--e20aa50c-2836-418f-99db-b3afa67ab837", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f274774-9a47-4d54-ab1f-3e45e38e17af", "sighting_of_ref": "indicator--1e4c09b6-45d1-448a-9223-87668afc3577", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5412fcf1-4d03-4ac0-87a2-ea7469590ede", "sighting_of_ref": "indicator--3b63b8df-e971-4bd4-8bf1-40f0b9b7fd5d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2244b99d-e51d-4f4f-97d8-dc5b3d89231e", "sighting_of_ref": "indicator--08674a5b-49fc-4806-8f3b-0e35cacbcd1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14edd80-8a6a-4aa5-9126-2fb08909b80c", "sighting_of_ref": "indicator--92928fe8-3bf0-4885-8c8d-c4462f538297", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016578a0-83fa-479c-9a43-d38be9c6d28d", "sighting_of_ref": "indicator--0267baab-a18e-4dec-89fc-4b0e2ded66f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7670226-253d-405d-9665-621b3abd4a55", "sighting_of_ref": "indicator--1ca532bf-4d0f-4a7a-8eaf-4e52a8423af1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4034971c-acb1-45f8-8426-9970c675247f", "sighting_of_ref": "indicator--74354cfc-a76e-49dd-90bc-89b7f8796072", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d19d598-cfda-417b-bb0b-be1634229f50", "sighting_of_ref": "indicator--debd4fd0-686e-45d1-adda-dfbd301edb47", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a428e5-e68b-4ed8-b27e-fd95a929e4d7", "sighting_of_ref": "indicator--cfbaf0d8-f452-4180-b0de-6771efbfd565", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428bb71d-c8c4-4c67-8ff7-93782ac4f36b", "sighting_of_ref": "indicator--00f89f6f-b9a7-4d09-85d5-1ae3330f957b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a726af-db71-4927-b99c-62645e0644fd", "sighting_of_ref": "indicator--74bc7c20-3e30-4c7c-98db-a2440353db1c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b247dde-d9d7-4b1a-ab4b-99491dd14e03", "sighting_of_ref": "indicator--581b8caf-0bf2-4842-af48-c1818fafcc8f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d9c838-4052-4d0d-bddf-4eae2864e549", "sighting_of_ref": "indicator--2517d03d-e3a4-45be-82e7-3f54ddbb2643", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1190f9ee-0de5-4fef-b302-7f7b0d932385", "sighting_of_ref": "indicator--7d5f6857-6100-477e-adc8-c4a7d238ed10", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae17e167-f50f-4d05-ac94-2218c2bd3c7e", "sighting_of_ref": "indicator--ea553a02-5a81-4b17-807d-e20c459c9cc2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c87155-254d-4dbe-a566-9302d85c1a90", "sighting_of_ref": "indicator--2a3495ea-2c2b-4e43-8dc6-8cc9780b3459", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f688bf31-28e8-4252-8864-ad8b6167e01d", "sighting_of_ref": "indicator--8bc4b29a-aad2-40c0-90ea-58f557191ebc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b7007d-6ea5-4fde-b69c-921e24f1a863", "sighting_of_ref": "indicator--e46657f1-ab7d-4868-a674-29e106a1ffe1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90ca984-3c43-4dec-bb4f-c2ae5458f66c", "sighting_of_ref": "indicator--e46657f1-ab7d-4868-a674-29e106a1ffe1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0496ec-ad01-4ed4-b987-aba99d5ac7ff", "sighting_of_ref": "indicator--27ee63c1-a67d-4ee5-9465-e5ecee7ddf69", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a9d1b1-d236-488b-a64c-63a60a4fc2c8", "sighting_of_ref": "indicator--1fb76526-7eab-4499-b380-0af7be5db824", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfb0a07-eae7-4d0e-b949-a3160439a559", "sighting_of_ref": "indicator--1fb76526-7eab-4499-b380-0af7be5db824", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3c86cc-c306-48c3-af06-bd9aab909cfb", "sighting_of_ref": "indicator--6f7c1af4-ec04-4281-aa98-2f4266cdcdf4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53c8801-0f7b-4c21-8658-f5bb5312298d", "sighting_of_ref": "indicator--936aa24d-5eea-42c5-97d4-426abd70fbd9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41ef1ac-1f46-40fb-b8b5-c44d6ef81b9b", "sighting_of_ref": "indicator--936b23d3-a198-4679-8315-9eb1e7776b37", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72153ea6-cc09-4c41-bd41-c07c4b453111", "sighting_of_ref": "indicator--fc2d4a50-e415-41f6-b8e8-c2217869ed5d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e4e193-b360-421c-a7c4-6a37788171f7", "sighting_of_ref": "indicator--4cd93506-7eac-44b7-8972-fdcd897e9a1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810fb2fc-ab3e-40dd-a733-52dd803b09e5", "sighting_of_ref": "indicator--c733ff50-a65b-4ba8-a2a4-19a892546067", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b72937-537f-497c-a0a9-1721adb7ec81", "sighting_of_ref": "indicator--3c325175-0c81-4e5d-a471-d08b5847407b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9592f6-3fd0-444a-96aa-7bc5f23e0239", "sighting_of_ref": "indicator--2c3e8314-38e0-4601-96fc-44d953d673ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18bb669-ff97-4bfe-8685-5c27dde1b4d7", "sighting_of_ref": "indicator--7269c375-4c0a-4243-95e1-fb1471e18ad1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047757a2-002e-43fc-8eb3-ff67fae66c4a", "sighting_of_ref": "indicator--87207eaa-2762-4e02-841d-1698a50b9ae6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573d6100-e988-41d3-abd6-f384013295da", "sighting_of_ref": "indicator--87207eaa-2762-4e02-841d-1698a50b9ae6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744b6e64-e094-4c98-b329-30ec48092fb7", "sighting_of_ref": "indicator--4bd9d4d0-dd5e-4dc5-9bb2-3eb175578622", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5206ce94-b143-48cc-b1bd-670d063dfcc3", "sighting_of_ref": "indicator--1b07e55c-c742-4640-8ace-e5f17956025a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12f1684-8c36-47c5-ba10-3fc9f0934b6a", "sighting_of_ref": "indicator--a88cab27-17cc-4b3c-96a0-7680978e2a9d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7a6746-529e-4550-8aa3-ea517f9a127a", "sighting_of_ref": "indicator--8dd53ff3-75a3-4070-bc3f-4037fd6fc3de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b528b22-a02a-4a8c-a3ab-b78297098d07", "sighting_of_ref": "indicator--b8393a1b-a8cb-4e47-b704-7ffdc129284b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31644e5b-b299-4231-9611-28e2ca682664", "sighting_of_ref": "indicator--bb16a498-bf97-49e4-8e6f-87c99470da03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4105d869-2227-45a1-b07f-f2f94a0e9c8f", "sighting_of_ref": "indicator--56666e1c-a755-4d45-bfd1-9f8e2283250b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81afb192-af68-4ec9-b3e5-fe55ccddcecb", "sighting_of_ref": "indicator--e9c82173-6533-4387-84a2-19f74a65d2a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb5d397-d047-4832-851a-5730ad3f7abe", "sighting_of_ref": "indicator--9cb9e29e-1671-4562-8760-2f8825da7f96", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc32833c-8d9f-436e-a36b-0491034853f1", "sighting_of_ref": "indicator--6513911e-958d-4deb-98e9-5c26512f4484", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6349ba1-b12b-4044-992b-433edb16df54", "sighting_of_ref": "indicator--72592a2b-9e3e-4521-844b-9cbdb2e987aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32cbcaf-e908-483e-bd73-90d105d42396", "sighting_of_ref": "indicator--4789c8b8-f49b-4db6-84e2-26a513bbb474", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7e280e-0db6-436e-a465-8b10ebcb2617", "sighting_of_ref": "indicator--f9e2ff64-173f-4226-b196-69bdad1d8351", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1d73af-81ce-4c22-8b15-f67f9413ff4a", "sighting_of_ref": "indicator--315e85a0-a2a0-49a9-86ad-b5c9c3a6fbd9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a96b4ae-b9e0-4253-a3f2-542a85374f08", "sighting_of_ref": "indicator--bcfb04d4-19ed-4881-a82e-8dd2a20050bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18284ca-519b-4844-9c30-aa9e6ebd4f54", "sighting_of_ref": "indicator--bcfb04d4-19ed-4881-a82e-8dd2a20050bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b7a389-f97c-4cd8-8dfd-f7b6d5aeec19", "sighting_of_ref": "indicator--2f4f8a40-cf0c-4fc1-9251-549eb789f844", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4764062-8fd5-4066-8d1e-89b723b3953f", "sighting_of_ref": "indicator--548cbcf4-7757-48f9-a275-a925cc12ff6e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0658aa0-e142-48af-9256-dac58e9ccf65", "sighting_of_ref": "indicator--8771d335-db51-4bdb-9ef6-dcf9717fe9e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274d793e-4ff9-402c-9b6b-aa57c0c35ab5", "sighting_of_ref": "indicator--70def91e-ed41-44e1-acfe-b7ae1209ad7d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b83ec1f-f1ac-4f4f-b6df-ed562e2e4f4f", "sighting_of_ref": "indicator--379e5b1c-4bb1-4c26-a40c-8bc80c4712c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5c46f3-1908-4209-b570-7d5425d89b1d", "sighting_of_ref": "indicator--445c055e-4cf1-4489-b082-0843607bc85b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82701dd2-defd-41e4-a57f-f810cf167a51", "sighting_of_ref": "indicator--24687867-954d-403a-8792-d5f1958fe234", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc4dd31-dc8f-4624-be42-9f778f2c7453", "sighting_of_ref": "indicator--0f55dbc6-edc7-4173-9e4c-850f5e98d00a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8078e994-71e9-4ce4-b8d8-5029c6816d30", "sighting_of_ref": "indicator--d428c009-3557-4b11-9c03-a2a522d158fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5e58ee-9ecb-4a45-ad94-d92ef34db2f4", "sighting_of_ref": "indicator--2b615149-b037-47bb-bd16-8bc4d6003d5d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70e581d-bdcc-476d-a108-70ec56705802", "sighting_of_ref": "indicator--c7ec91b4-c53b-4684-b6d8-ffe7f68c75b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901511f6-2a13-453c-8a1d-6ddf992e9e9b", "sighting_of_ref": "indicator--17ac2639-f9c0-4264-b564-f9a10ed9b247", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2b87c8-ecb6-43b8-a332-b68daad9cef1", "sighting_of_ref": "indicator--1189a92d-f96c-4af0-9d21-64bbb0ae220b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c86e33-6527-46c7-99ba-03a41e40b73e", "sighting_of_ref": "indicator--1f90c3b4-8a0b-4d34-b044-a2861a44e54f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac603db-4625-43db-9645-ac49000ea4dc", "sighting_of_ref": "indicator--d737fb15-651a-423a-b10a-b9acbaf19fcd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0541b90-1d2e-4ea9-8e03-ee8261760b30", "sighting_of_ref": "indicator--526e9898-04bf-4fa5-a954-b2fe632a1b24", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b168d1-fa2e-40f2-807e-660d7a1bd2ea", "sighting_of_ref": "indicator--09f60576-aebc-4c84-802f-6592308e7ff3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4354efd6-af3a-4ff4-8763-136a36b15e6b", "sighting_of_ref": "indicator--7a2d9d92-8d35-461c-85f8-5b9c5a1610dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b64cf5-7a1a-48ea-8980-d0f0968e1bd7", "sighting_of_ref": "indicator--39519b5c-d2ed-4a22-9e4c-63456cf3bef4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce13ca2f-3898-47b2-a59b-e3abf2fc5d58", "sighting_of_ref": "indicator--bcd32a77-8bcf-4d5b-8e06-254b5f20b8df", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb0bb0e-6b5f-41d0-acaf-1c1780e876e3", "sighting_of_ref": "indicator--637d7b9e-64b0-4d47-97da-924e672d4f61", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b189a7-0274-4b8b-87cd-79606e0f352f", "sighting_of_ref": "indicator--c6639a3e-7749-41a2-a2a2-d2529447e81e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0db6fd2-942d-413c-bf0c-6b46af81047c", "sighting_of_ref": "indicator--add3d6bc-9540-49db-a089-b8a8ea103949", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88289138-b60f-40f2-bfb5-89b5b91bdd6d", "sighting_of_ref": "indicator--5a651a2e-3765-4ffe-bd89-754e482e0c67", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ab948b-8442-4d48-b9b9-2461e14b0d1c", "sighting_of_ref": "indicator--139ca0ed-b324-4c62-b911-06b2f2c1a6a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc2d9a7-2920-42bb-99be-72d86b0d87d4", "sighting_of_ref": "indicator--139ca0ed-b324-4c62-b911-06b2f2c1a6a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1af92d3-86b1-41a8-bf67-fa3ba35f4053", "sighting_of_ref": "indicator--d12e8567-0bcf-408b-95d4-c3c4ed80e13e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fc96ec-82de-4319-9db3-78f811edb705", "sighting_of_ref": "indicator--6b29c995-8982-4eac-bb06-ebcc135a3adc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e59bc58-d235-449c-afb9-edaf683dc905", "sighting_of_ref": "indicator--289e0048-e7b4-4e93-8bcb-c441e275d23e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2290302c-b00a-44c6-b06b-e77b88589943", "sighting_of_ref": "indicator--c5d02023-09d3-4535-9e8d-6706d04d96d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b690ceb1-eecf-4ae4-a209-34108c3549e7", "sighting_of_ref": "indicator--25e90c74-35ca-4675-8374-997df5217220", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99a59b9-d595-492b-a680-30589982768f", "sighting_of_ref": "indicator--721911d1-6d3f-471c-ac60-21b3fdbe3966", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6449f8b-b990-46c0-b7ba-fbda7fb87597", "sighting_of_ref": "indicator--096adaf4-339c-47b7-8ea4-cadc85925072", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e427404-8ed0-49bc-b0b9-ec92fb78a19f", "sighting_of_ref": "indicator--fdbef6c3-6ccf-4947-b9c1-47a17a96e769", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07727b1-3561-4f3f-8347-e8e7cb441175", "sighting_of_ref": "indicator--591499cf-26cd-4b0c-901c-0fb463fa14a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e53d5ee-968c-4bfc-a728-570c1d8c52a9", "sighting_of_ref": "indicator--9966ed1f-a20d-4407-a474-3e64087ed0fe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b3614e-5fe0-440f-bb3e-f7e333a2e5af", "sighting_of_ref": "indicator--c999fbbf-379e-4eb2-960b-262f0921bbd1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3278f4-134e-4689-a6e9-5dff9174623c", "sighting_of_ref": "indicator--423f25e1-8710-4c7a-a4d9-5d316e0396ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769256b9-a8ed-44ca-b902-a699775928b9", "sighting_of_ref": "indicator--cf43a2ae-a693-4643-8060-02b8b5a626fd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107728f6-51f8-40f7-84cd-f071ac0a497b", "sighting_of_ref": "indicator--7013234d-63f2-4a8c-9ade-7856e4acbd2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb18677-080f-4b6b-8cb6-3bdcef2aade1", "sighting_of_ref": "indicator--6622cad7-6b75-4b45-868a-92f1b052e090", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ff12b1-f54f-4837-bf42-f4de260e44c1", "sighting_of_ref": "indicator--9fcecb26-dec4-45cd-9d38-5e11ae06f163", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd407ac-7066-4396-840d-60d0dea3fc98", "sighting_of_ref": "indicator--e1fa6f50-97f4-4959-abc6-5a360d28d98b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079ec003-f39e-4848-a1be-bf1009778271", "sighting_of_ref": "indicator--2644ddb7-38a2-446f-b984-9596a9114850", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d70999c-7d91-4ed3-b027-9092c6c92c09", "sighting_of_ref": "indicator--96b7c713-9c8f-40fc-9982-eb7b71395c3a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8b4d9e-c867-4544-af65-e74c293edd61", "sighting_of_ref": "indicator--01838f4a-cd35-4ecc-8403-a410881ce3da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb711f4-277b-4cf1-8c0e-4c2fee2f2ef8", "sighting_of_ref": "indicator--6da60f0d-0edc-44b7-8cb5-858420b77bab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bcbed9-412a-491c-bba5-dd88a43cb550", "sighting_of_ref": "indicator--58480db8-f079-4561-be45-1e9345c7c336", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80567107-2631-4dab-9587-1092d1dfef36", "sighting_of_ref": "indicator--eac00772-020d-4932-858f-64a9ef6f527e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4913d6b8-18c4-4698-adf4-082e1d2e4dcd", "sighting_of_ref": "indicator--ea7326db-f565-4958-90fb-1671abe85e83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45992a1c-7fce-4659-a083-88ac0969ae76", "sighting_of_ref": "indicator--b453d367-7fb8-471d-bce8-209d7cc5fc9c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b87029a-6cb9-4aa1-9407-67b0c11b2f4a", "sighting_of_ref": "indicator--31130405-4d9f-4faa-b1be-8b1b3c219a22", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f635d8-76ec-4fdb-9c1c-170990c675ad", "sighting_of_ref": "indicator--6749a6c1-e425-4b19-8c1c-de3688b32c14", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927fbf1f-1e35-4f4c-b16d-f723ef5133fa", "sighting_of_ref": "indicator--d9d66a6c-f33d-4b93-8976-f633e0f61a1c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a728216-59b9-462f-9c97-e27b23852816", "sighting_of_ref": "indicator--734d62ce-524d-41dd-a88c-a888e5fd1a08", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726cb630-d556-4bf9-925b-3759c1cff0ec", "sighting_of_ref": "indicator--483eadf3-b736-4631-84e6-af9f7c62d558", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1211574b-0c01-422c-96a7-4f8a6503f5ca", "sighting_of_ref": "indicator--9441f6fc-b2c0-47e8-9f71-c473f8fab13d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1d1237-be7f-4d9a-b538-caebc87bb593", "sighting_of_ref": "indicator--5ec000e4-85ee-4fc0-8090-fa1782d8ce25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247015b4-714c-4d76-99b1-13c7d804d109", "sighting_of_ref": "indicator--dd067334-fff6-41c4-ab9f-03f2bc74d986", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7865bb9-eecb-4ae8-8521-a9cb83839bcb", "sighting_of_ref": "indicator--390d7bf9-4d14-4b30-a822-b76e8e09e719", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb0f845-f838-4894-acb3-c28b6d51df86", "sighting_of_ref": "indicator--7f0962b9-69e7-4664-98c3-1dc51330cd8c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774ff1dd-fdf7-4570-ac61-7a666d73136d", "sighting_of_ref": "indicator--c816ecca-e311-4a59-9bb0-e38a7271cb5d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999f0fc2-f55c-44ae-915b-6f9b36a7dcaa", "sighting_of_ref": "indicator--25f118be-2e67-4f17-b9f3-1dd32c38137b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b090a8af-a010-4782-b9ff-412a6b4ca4af", "sighting_of_ref": "indicator--54511b22-3155-424a-918a-0530dcacf9e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b12f3c5-cde5-4818-a857-aad3825e2231", "sighting_of_ref": "indicator--9feb67e0-92ab-4a28-97e1-b20971fe4828", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027f2891-b667-4aa7-b14c-c9c35ebe7f24", "sighting_of_ref": "indicator--9f9fb976-6cfe-49b3-abcb-8db48c4777ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994cf8c6-25cb-443e-8c17-f659c5e10290", "sighting_of_ref": "indicator--2df19553-140e-4dd8-baba-86e17ab7d1d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82367e68-6f4d-4e28-9bc2-874bba5884eb", "sighting_of_ref": "indicator--89f71abf-cf47-4369-9af0-94b00c94900d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a4df77-7d14-43fa-8dd7-4aeb43f46592", "sighting_of_ref": "indicator--caf3becb-a475-4ce4-add1-03248af50e7a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eac48ab-66f7-465f-bb05-1d4e534baf7d", "sighting_of_ref": "indicator--50277521-9d95-4dfc-ad36-c0f4f96a6896", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17d6675-ce7d-4a01-a615-50d0e5a6fb0b", "sighting_of_ref": "indicator--02393351-c281-420f-ab2c-f92e1e656e51", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d48652-612a-4b54-8dfd-8057031a173a", "sighting_of_ref": "indicator--432d59f2-69fe-4289-a388-24ef99d4b994", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02a2ade-2941-44cc-8544-9fcb3c80e97e", "sighting_of_ref": "indicator--1509f819-71f5-4f1b-b4e9-ba691d29cf3d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267c82ee-e503-405f-9f50-56970600f4c6", "sighting_of_ref": "indicator--4e9aa5b9-bc21-4ba4-8c5a-0d84c3327c74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782da198-6e0a-47fb-b32c-4f79ed5761bb", "sighting_of_ref": "indicator--49cd158f-9010-4a07-a519-1591547a672e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e01f6e8-8ed0-405b-a928-d123bc653ca4", "sighting_of_ref": "indicator--23bf30f9-4c71-465e-93ee-4d002d0fc01b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09679c1-f442-420a-90bd-1e5abce64cca", "sighting_of_ref": "indicator--de4bf84d-8d48-453f-b0ba-a224195bba60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22e1bd7-5039-4477-91e6-7ebab3147963", "sighting_of_ref": "indicator--c59e3fd1-523d-49d1-ab07-3aef034ae0be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298327fb-4dd8-4ee6-bafd-576b8ffa934e", "sighting_of_ref": "indicator--44734dd3-7466-49e9-af13-2a2d30496313", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82f8f22-e98f-46ad-87e8-cdb06fb54dd2", "sighting_of_ref": "indicator--5ba658bf-8ae7-401a-b2bd-93b15888a342", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d249bb9-7d01-440a-b154-b7692392b380", "sighting_of_ref": "indicator--75acfbdf-0f50-4f0d-bced-d621077acb8f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19d233e-4519-4f5e-b247-d0e315a1dc4b", "sighting_of_ref": "indicator--020a7f58-549b-4d42-a7ca-c4292f6fc23f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67a12e7-e599-4563-bdaf-c0c7a31560bb", "sighting_of_ref": "indicator--c1bede57-ec9b-4cb4-babf-57e6866be8cb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70b5f17-95b1-466b-82cc-bdecc4f6e881", "sighting_of_ref": "indicator--48a0cb73-1203-47ea-823e-3bcd7233a2c8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592a4e36-7c8c-4222-b036-ac56f774095e", "sighting_of_ref": "indicator--516d0ee3-c866-4e2c-b8df-3bbc24344862", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3547215-af19-49d4-bb17-8062d5a45815", "sighting_of_ref": "indicator--67e5262c-4c07-421e-b7b3-5714d6bbac75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb71b08f-5082-4f7f-8990-ac632fe9768b", "sighting_of_ref": "indicator--12e1886c-ebac-4a4f-89c9-8a332d9e1f1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd23018c-e771-48af-b3fe-ab6a58094353", "sighting_of_ref": "indicator--3ada51a5-564a-4d28-bb93-cd1d7c509a39", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e57fbc8-2d95-4194-9bf1-769ab575a8c6", "sighting_of_ref": "indicator--f398f30e-4f53-46bb-8b69-12bf892ac954", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440d09f5-ce9d-4f5e-84e5-5d17142a12ca", "sighting_of_ref": "indicator--20c12c6c-9d48-47d8-b65a-e255a7f42e53", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe944419-d0c4-4e25-839b-a30cd7c6b93c", "sighting_of_ref": "indicator--fc5ba395-bae5-4a31-a7fd-2087c643af44", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46161aa1-6048-4d1b-ac77-9de083811c24", "sighting_of_ref": "indicator--4a6e784c-1a50-4f1d-9c7c-bcdf40aed0a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd31aae-56a7-4a65-8188-39e5d23f6675", "sighting_of_ref": "indicator--7e5ccc6b-9839-4c3f-9044-a5f8f970d464", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afc08b1-e3ec-47b0-a649-03042161d2c1", "sighting_of_ref": "indicator--ea845bc7-1d95-4961-9ad0-6ee7b594b13e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2631cdc7-427d-4f4c-acad-c1a293b8bd3e", "sighting_of_ref": "indicator--2add4767-ad8a-4637-850d-1aac50e411ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cadfe35-0eeb-49fd-b353-078137f9b0a9", "sighting_of_ref": "indicator--74aedabb-5176-4a5f-acd1-adb5d651c739", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a37c38-f630-4155-9ac3-9e3ee4550f48", "sighting_of_ref": "indicator--5d384921-97cb-4088-8aa5-7d4cfd021ead", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9315fae4-6025-4a32-9d1c-0f7816086aac", "sighting_of_ref": "indicator--e061ef79-7a41-4a4a-b386-112533711ed0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aeb67af-7199-4fed-b10b-fc9e38f5c6b1", "sighting_of_ref": "indicator--640b3842-905d-4db9-be31-2641f52ef2fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95c5e07-6651-4dfe-afa0-6ae60f22d24a", "sighting_of_ref": "indicator--640b3842-905d-4db9-be31-2641f52ef2fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc829777-84b6-46a9-b9f9-df8ae3bf67e5", "sighting_of_ref": "indicator--c5ac7d44-51d7-4fd0-a628-bee6bb9cc0f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9819f586-da15-4325-8916-f46b41d4391c", "sighting_of_ref": "indicator--fc7c9c73-b76c-467a-83ed-df4320ce702b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021cab40-210d-431a-b32c-9478f723206e", "sighting_of_ref": "indicator--925b2e56-6bc4-44af-9a1c-c085ebee7c9f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693d52a5-7860-4922-964e-03e0c083c1aa", "sighting_of_ref": "indicator--e57a1541-436e-42d1-9591-5b99b848e45a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae80a66-01e7-445f-b010-ebef813de185", "sighting_of_ref": "indicator--da6e3022-61a7-4490-b1a4-cd61b07acbd8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db29f6dd-eea4-4d2c-a88e-8f64c0619e49", "sighting_of_ref": "indicator--cfe263db-a7ce-4ba4-85d8-a94186b30bc8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bd1e9d-acd7-4d2f-ad21-0f3135f78d53", "sighting_of_ref": "indicator--371cc435-f8e5-4ceb-8efa-937f81989d05", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3441425-0fb2-4ea7-a1e2-db33ff0168d7", "sighting_of_ref": "indicator--4165247b-8a94-44f0-a652-aa2fb573d484", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f97a57e-8ac9-4a46-894f-61bde57ed542", "sighting_of_ref": "indicator--53056762-d40f-4f11-901a-f14c00e60ccc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96936424-e3d7-4596-9037-14defd8d1ae2", "sighting_of_ref": "indicator--9e5375bb-001a-421f-b8f1-02d37467270a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e5084e-2069-4af7-9126-a7572a11561e", "sighting_of_ref": "indicator--a813c68c-cef7-4e9b-aa17-70240ceab13a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529856fa-aa6b-458d-b5f8-2253073e01f0", "sighting_of_ref": "indicator--f5fd7545-089f-4ae4-9184-0fd082af5571", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19940577-b459-41ae-b84d-793ee08a4cb9", "sighting_of_ref": "indicator--a9fdf941-f4f2-40dc-b336-be78bd2cbafd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616a4b8c-767a-4e41-8529-d0052e270970", "sighting_of_ref": "indicator--21c9e4bd-658f-48f0-a040-94f43d7cc1d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de5dc32-73fb-4ca7-afbe-ec9d230950cc", "sighting_of_ref": "indicator--54b9ffca-a3ba-49fc-b926-bbee1c3b1a58", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708936f2-9005-44e3-baf8-7d8600ca786f", "sighting_of_ref": "indicator--355825ce-e216-4c8f-9238-3eb6e7cdbe9d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fc80b1-fdbe-470a-90dc-427a01f78ddc", "sighting_of_ref": "indicator--a82211a9-366a-4928-a397-33267105ec4b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b8cbbf-22f6-4ca1-be5f-143b24c0d21e", "sighting_of_ref": "indicator--4807bbdb-1b98-4ba2-99fa-d1003b2df045", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13abbe4a-ca87-4e97-a719-d01a5cee8e13", "sighting_of_ref": "indicator--44cf5480-fc23-4969-9264-0a846747add8", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5cc648-6cd9-454e-9bb1-e9817adb06fa", "sighting_of_ref": "indicator--fc3155df-fe5b-40e0-9842-11de8e7c691c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c4f926-9386-4404-bd09-428c91a26f79", "sighting_of_ref": "indicator--0f07125c-bf75-4d95-aca1-12433f97fa8b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5112c5-2e18-484a-9cc9-7339b0a25fae", "sighting_of_ref": "indicator--25e9b8e3-7dcf-4cbc-a428-3ed2fe5cb8f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6265c7-645d-42bc-8ffc-640106695aeb", "sighting_of_ref": "indicator--74919384-2e2f-481c-82b6-158f41f13964", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f7925a-144c-4ede-a9d8-09ceb8c67e2f", "sighting_of_ref": "indicator--1cceb017-c4da-4c10-8d19-a9243c36a1e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510c15e9-af48-47fc-b6ac-a236a1601ef3", "sighting_of_ref": "indicator--76b30545-7389-4f28-b325-626d5a3736c8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9255d0-af7a-42b3-b6c0-7d7e52f841af", "sighting_of_ref": "indicator--ea96652b-6811-43ed-82a7-33fc66fe7ee1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d89ad5-99e7-4984-a275-df4efe4c78ee", "sighting_of_ref": "indicator--50a9690a-0348-4b01-9fb8-7759653dc0bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c97c088-a538-4dc3-981a-6db0ed93766a", "sighting_of_ref": "indicator--7ce24f26-22e6-4adf-9df9-79edb2e864ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03e0d0e-b89a-4714-bb49-857be07a1934", "sighting_of_ref": "indicator--c8e63018-4617-40bc-b0a6-54d7c645ec2e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fef009-0685-40b3-9eea-9b8a5d168e54", "sighting_of_ref": "indicator--61269360-88a1-4f0c-b6e3-3d13cb4ae316", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65827299-b133-48e3-8a13-144320199138", "sighting_of_ref": "indicator--76e4fb43-874d-4a6d-b26a-ad264221507a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06fdc22-faf9-45d7-9ee6-4e208e3f8354", "sighting_of_ref": "indicator--5ca25adb-f5c4-4439-b94d-3532f3d6c466", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dc2d28-65df-4b57-99ce-0d455d976a37", "sighting_of_ref": "indicator--a1eb7eeb-b646-4508-b972-c86a19990813", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df86344-40d0-460a-8368-f447fe541ceb", "sighting_of_ref": "indicator--578fba36-2090-4281-b762-0e381ab6cb74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a40f33-6ed5-4e36-b2e4-6d5d6a49a39b", "sighting_of_ref": "indicator--797c090d-a821-4f4b-847b-7a3e93ab2b7c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788dbc3a-31b2-43c0-8716-79479b9d09e2", "sighting_of_ref": "indicator--8988c024-a03a-4e3b-a311-924ed7f95251", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c37a76-c6af-45b1-ba8d-310428cbe8c0", "sighting_of_ref": "indicator--0d4df54e-087e-443c-b08c-378d5ea1e03d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13941f6b-89f9-41de-9c4a-4a0f6c5c7f1b", "sighting_of_ref": "indicator--021361c0-052b-402a-97ad-0e4883a169ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab86ec6-764b-4258-ac44-847fb238429f", "sighting_of_ref": "indicator--788ac662-1ec0-4e0b-b204-73fded1df2db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cdeeb6-1e6c-463c-bff3-58ce195d7176", "sighting_of_ref": "indicator--97a651ee-6e63-4913-91ab-fe64500fe1d6", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfb2f5e-cc08-482d-94f8-7fa3545a0c2e", "sighting_of_ref": "indicator--a0387bd2-5507-4726-83e6-14bd679fe533", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85a5695-0781-4e07-960a-437d074f3d91", "sighting_of_ref": "indicator--5f576123-fe96-4cd5-ad6b-bb908d7e36df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42634de-835c-43b4-85f8-d509bf8b7063", "sighting_of_ref": "indicator--663ab76b-bde6-4203-9a9b-614ae9b968f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6143a0ce-2e83-4c4a-9087-eabd5b186359", "sighting_of_ref": "indicator--6433ea5c-de71-4184-94f0-ea6190d2ef56", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca9ddae-e59e-45ae-a398-ec067503460f", "sighting_of_ref": "indicator--76991ae9-caf6-42bb-a1e0-19799cb1a855", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7263f1-432e-4b23-887b-e40d1e3dc3cc", "sighting_of_ref": "indicator--1c37f7f7-de14-4ed8-8430-22f98af9953c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b73370-0c1e-4be7-9b15-fa1738fc65ea", "sighting_of_ref": "indicator--9ec09d80-3a0e-4de9-9412-7cd816e9412e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2104e4d-e793-4802-bc6d-e5418d0c3a27", "sighting_of_ref": "indicator--f8c449a3-d953-4e2d-96bc-754100b9869c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547bf1c1-c242-4643-a5a9-f14f2d5a41fd", "sighting_of_ref": "indicator--229e0fdc-a922-418a-8977-e100041b9334", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f953ea95-27f7-44fa-bc53-43012be1897f", "sighting_of_ref": "indicator--89db78ec-460b-4cf9-a5cb-f2d5101e6f97", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4357108-2406-4160-9fc7-cc81d8f71b3c", "sighting_of_ref": "indicator--daf2b546-1fa3-4f70-b2c9-b1b58d23c058", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f1c217-efb4-4b8a-a8b9-0d7acd964303", "sighting_of_ref": "indicator--4f3757f5-a5cc-446f-9d06-cd2b1eb63621", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bd5821-a6c9-46da-813f-2a3cef6abd45", "sighting_of_ref": "indicator--25210b73-6fe6-4aa2-ae51-d9a5824f5bb1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56f5bd0-68c9-4de5-92f8-9a7ad7f9a7de", "sighting_of_ref": "indicator--25210b73-6fe6-4aa2-ae51-d9a5824f5bb1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6cb683-b36d-4578-a356-b1a7ca8b73fa", "sighting_of_ref": "indicator--42b646ac-e805-428d-9013-3d6443d3f391", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8bbd15-6d8c-4f4b-bb66-f2ee47adf4c7", "sighting_of_ref": "indicator--b1bc8919-ef26-428c-b12a-479688b426e4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e4c1c2-875a-46eb-a96f-7bd6eccb509d", "sighting_of_ref": "indicator--b1bc8919-ef26-428c-b12a-479688b426e4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82108be-2380-4106-b7ac-855847b58d33", "sighting_of_ref": "indicator--243e35ce-915b-4d54-84de-e350ee8926b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13171b7a-9e10-464d-aa27-19d8a4dc47f4", "sighting_of_ref": "indicator--243e35ce-915b-4d54-84de-e350ee8926b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2244b2-72ce-415a-bc8e-2e3ce0d0a1cd", "sighting_of_ref": "indicator--0b648ea7-1437-4420-8075-6f5c78f4a2ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4a6b63-c70b-4418-8d44-82cdf76993b2", "sighting_of_ref": "indicator--0b648ea7-1437-4420-8075-6f5c78f4a2ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c57b963-f438-49ad-8f74-0b01c4831978", "sighting_of_ref": "indicator--473734b7-d9e0-4c6c-90d3-6fa9a1bdf57b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab9e764-2354-42e3-9944-dd778598defc", "sighting_of_ref": "indicator--473734b7-d9e0-4c6c-90d3-6fa9a1bdf57b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8ce3f5-6e19-4558-a838-89b2b09f21fc", "sighting_of_ref": "indicator--e678c3de-fb38-47c5-8d1c-b0eb83393217", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34f135d-bf55-4f50-9915-d7d104f37e2d", "sighting_of_ref": "indicator--e678c3de-fb38-47c5-8d1c-b0eb83393217", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfea5ef-eb43-48e0-bf3e-99931a85a956", "sighting_of_ref": "indicator--5a8b487a-8a55-4232-9f2c-41f1b167ba11", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04250116-2d6a-4439-8268-e0340aae3361", "sighting_of_ref": "indicator--5a8b487a-8a55-4232-9f2c-41f1b167ba11", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b78fbf-cc39-4e79-a648-2d63a4d4660a", "sighting_of_ref": "indicator--d09f5837-4491-420f-9148-ed6a76fbbceb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bd180b-0fd4-4c0a-a6a5-2b273bb7dd2c", "sighting_of_ref": "indicator--d09f5837-4491-420f-9148-ed6a76fbbceb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7192fb60-e530-4fd3-82d3-7ea6c6681c16", "sighting_of_ref": "indicator--c5df4fcb-ca1b-4c4f-aba0-9acb1f504752", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d49196-c72e-4b65-a1f3-17ccef247eb4", "sighting_of_ref": "indicator--c5df4fcb-ca1b-4c4f-aba0-9acb1f504752", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51023578-c70f-46dc-8f74-873f8710e0cc", "sighting_of_ref": "indicator--28960408-1d1b-4948-a860-7c2b1fc6958d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27bd772-256c-4b31-ba9d-a162922e59ee", "sighting_of_ref": "indicator--28960408-1d1b-4948-a860-7c2b1fc6958d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbfcc25-d52b-4f01-b21c-dd29f537f90c", "sighting_of_ref": "indicator--48967888-bc5e-4059-a927-405fa1d94da1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a256b2e-3514-41dc-a673-11a9c6439fda", "sighting_of_ref": "indicator--48967888-bc5e-4059-a927-405fa1d94da1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02b1935-99bd-4f3f-8390-96027894c97c", "sighting_of_ref": "indicator--eacaa09b-8635-4910-8618-19e43221c5b9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8c52be-c142-49ee-a075-657480aaa9a1", "sighting_of_ref": "indicator--0ca15164-1b0b-4d4a-90ba-0b3ff0569150", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972ded0e-8b78-411e-8e34-f9647bcd3283", "sighting_of_ref": "indicator--0ca15164-1b0b-4d4a-90ba-0b3ff0569150", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862001ad-0bd6-44c0-9db4-51bc0118e626", "sighting_of_ref": "indicator--4c2c0769-1747-4abf-874e-abb6a0a89310", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22e8a2e-f0da-4fb3-b926-d36bd96933af", "sighting_of_ref": "indicator--03ba28de-a839-4c30-9c69-60324c32fc33", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64162dd-047a-4267-b1c1-3fb915dbdc02", "sighting_of_ref": "indicator--c270b7a7-783a-4501-9f95-2f227b7a1a6f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3465cfbc-fa13-434f-8895-536fe3b49099", "sighting_of_ref": "indicator--3d7f3e92-ab47-40f9-9456-e7f56aec8d33", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc41ee4-c59c-4e4d-adfd-fb824a3986f0", "sighting_of_ref": "indicator--c05cd0cf-45f4-40b4-8433-34f790d6dfe0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1321149-563e-4225-916b-a621cf98b854", "sighting_of_ref": "indicator--a08c7b4d-bfcd-46fa-9525-563a98cbb563", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d087f68-b360-4414-8ac2-bccff23da756", "sighting_of_ref": "indicator--16f09b0f-0d74-49c7-8070-f3f11f4acfdb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad60841-85f8-43b6-8ceb-387807ca4e21", "sighting_of_ref": "indicator--c104d1fd-1645-4832-90af-b727592896b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b667e74b-edc4-4484-8069-16b78250c23f", "sighting_of_ref": "indicator--c104d1fd-1645-4832-90af-b727592896b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dce29a-c97b-453f-a3bc-96c241b3349a", "sighting_of_ref": "indicator--d087b090-7902-4f76-a581-7310826f7bd6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b723b14-593f-44ad-97c9-87282484547a", "sighting_of_ref": "indicator--d087b090-7902-4f76-a581-7310826f7bd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c0f34d-9f79-46d0-a369-926fbad19049", "sighting_of_ref": "indicator--bc534205-db83-47c6-8198-1e68ccf7d474", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f4b3d6-168c-4d08-a4d6-1af29b8cc76b", "sighting_of_ref": "indicator--bc534205-db83-47c6-8198-1e68ccf7d474", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87c50bf-a9a6-4e4d-b3d5-774c6086f886", "sighting_of_ref": "indicator--b140e4c9-9e34-47e2-bbbf-f013edf10b22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccacef6a-3a74-409c-b88c-5582c492c86a", "sighting_of_ref": "indicator--b3adcf20-971c-4406-a7ce-3074d2f248bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42db596-9a06-4975-9568-e4fc518cdd04", "sighting_of_ref": "indicator--22b2482b-eb11-46a1-b289-da76f67ba7f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077a4743-7eb8-48c5-a8a7-507cd1cfc47a", "sighting_of_ref": "indicator--08c84028-e436-4adb-a19e-0088f4511cd0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdcdcdf-7203-488f-882a-f2ea33ee3218", "sighting_of_ref": "indicator--08c84028-e436-4adb-a19e-0088f4511cd0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00df0f5b-5292-464b-9c57-50c279c6db79", "sighting_of_ref": "indicator--5998fcb7-a15a-4fd4-b8c8-744f07dde97e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0ea092-3ab1-4c33-91ef-9c6ec1cfc704", "sighting_of_ref": "indicator--4d630e09-d163-4195-a59f-317ac0c08961", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771621b7-c5f4-419d-96a8-1c754da2f0f6", "sighting_of_ref": "indicator--97734b74-f1ad-4cbd-95d0-3eb815d0bda4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677e8331-9a90-4977-b409-e7800a3b5786", "sighting_of_ref": "indicator--97734b74-f1ad-4cbd-95d0-3eb815d0bda4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75bb077-028b-4714-993e-31d319d7b278", "sighting_of_ref": "indicator--bde82ab3-8f80-4a45-8e4a-c5652a90b890", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0e52bb-3e3a-4937-b742-de4cf21036a3", "sighting_of_ref": "indicator--bde82ab3-8f80-4a45-8e4a-c5652a90b890", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d456ac-a114-4c55-a5b5-7aad4c4fea0c", "sighting_of_ref": "indicator--df3457ad-042b-4669-8a21-dbe34cc580de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc224ea-5996-4aec-a00f-6a2806230f10", "sighting_of_ref": "indicator--abfe2b99-95f8-4c2b-bde2-cd3fc15b5f60", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5bc816-aeb6-4abc-be60-e5798af526d2", "sighting_of_ref": "indicator--f569105b-2ffd-4eaa-a39c-a4aff30218b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f783d3ba-4da9-4b6b-bc9a-362295d8e06f", "sighting_of_ref": "indicator--f569105b-2ffd-4eaa-a39c-a4aff30218b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad15d2c2-5c16-4d4a-af2d-4c1c179d6fd5", "sighting_of_ref": "indicator--ad0c8c87-5c14-4f52-96de-a3761833353b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b721b2-85bf-4e72-8646-5b0f2c35893e", "sighting_of_ref": "indicator--f876fa6c-0a6b-4e4c-965a-bbeee2d37693", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e252d9ed-5065-4cd3-9c9a-6e5977eac65a", "sighting_of_ref": "indicator--f876fa6c-0a6b-4e4c-965a-bbeee2d37693", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e65f3a-b0c5-4c62-b44f-27932ec2c6dd", "sighting_of_ref": "indicator--1715666f-27ba-4598-b93d-a5f1fb5f1d99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e64365-daa5-462b-a3af-2d64b2982f79", "sighting_of_ref": "indicator--1715666f-27ba-4598-b93d-a5f1fb5f1d99", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c1870f-8353-4f2c-83ee-3fb81e4f25af", "sighting_of_ref": "indicator--d1d667a9-a33e-4b9d-be88-c3ccb72d6629", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6010761c-492f-40ee-8bb2-91244b105393", "sighting_of_ref": "indicator--d1d667a9-a33e-4b9d-be88-c3ccb72d6629", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c80490a-4918-491f-a428-14aa2de635a1", "sighting_of_ref": "indicator--83de4e43-3bf9-4cb0-beee-1fa4ad3a6f24", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27a48c4-343b-4699-aab3-62dc9f082088", "sighting_of_ref": "indicator--83de4e43-3bf9-4cb0-beee-1fa4ad3a6f24", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b4e402-9258-479e-8d17-42141db7c250", "sighting_of_ref": "indicator--893399de-e25b-4132-8444-44393ae8a133", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba2edcd-0699-4ffa-81a4-3877dd662768", "sighting_of_ref": "indicator--aa986822-f078-4e37-9271-e8136c6b1867", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c792713-f5b2-4044-9197-df0a4d305b15", "sighting_of_ref": "indicator--f8b3e030-db15-473e-ae7f-62d3bf1103a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04aeb79-0014-461c-b917-32fc2b87a042", "sighting_of_ref": "indicator--838e5b86-9dfb-40ea-bdeb-d80fe8643053", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8ce527-586f-4f82-b864-5c0d155eadc5", "sighting_of_ref": "indicator--8c0eda21-8734-4172-8562-e46db459f7a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eaa483-64e9-4b9c-a63b-18df36c9042b", "sighting_of_ref": "indicator--a4d3ff34-ff46-4222-aff6-f8067405187f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e0cbb9-54e1-4b93-8c03-168b4189fd73", "sighting_of_ref": "indicator--f4c28191-22b4-49ea-9b41-2e595704f209", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4925dbb0-9bde-47fa-81e1-2cd433456913", "sighting_of_ref": "indicator--6e8ff57a-2070-4759-890e-497fb0ce7e2c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1a0a46-9acc-4bf7-9cf3-e027c65f9797", "sighting_of_ref": "indicator--61ee059b-06a6-4cdf-bed1-67bcba130344", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68839c3-66f6-41c5-9795-d5a32304761b", "sighting_of_ref": "indicator--e0b1b966-e737-42e9-a79e-f7eedf3a6155", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656bf0c9-d298-4b48-bbf9-8607614f409d", "sighting_of_ref": "indicator--6729d661-5029-4aa2-97d3-9d00575445f5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6f01ff-9a08-4e91-a528-b89a9cc17c96", "sighting_of_ref": "indicator--4e4a7c45-2f48-46f4-87ef-2e911fd981cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c42d5bd-9294-44ec-b15b-09572a62fda4", "sighting_of_ref": "indicator--6be5daf7-7b10-4545-92f5-76f1bb4ab676", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6271a8a4-b106-4b5b-b1bb-48dff04c0073", "sighting_of_ref": "indicator--b1b36389-2f9d-4cc3-9634-786b25be9b59", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361468cc-8d42-489a-9f02-340465a706a0", "sighting_of_ref": "indicator--21ddbac2-8488-45b1-acd8-22435a576d3e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2005987e-2cf5-419e-8f67-de107d76f054", "sighting_of_ref": "indicator--21ddbac2-8488-45b1-acd8-22435a576d3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a1e99c-f7f4-4a7c-ae4e-d2dccb2bd6c3", "sighting_of_ref": "indicator--c48b0e1f-a73e-4310-a9d2-32e19edb8047", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06bc49f-fdd6-46c2-a0fc-b234049da333", "sighting_of_ref": "indicator--b803cce1-e5dd-4043-8636-5207df8ffc64", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e93cd5-ef58-472e-8d90-45e937e361fa", "sighting_of_ref": "indicator--b803cce1-e5dd-4043-8636-5207df8ffc64", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cbc706-0b5f-4405-94e3-8e9354c4c47b", "sighting_of_ref": "indicator--1cf70c9c-afe4-4b87-8ada-4577fc2a7913", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4673730e-12ae-4730-b774-112d43f895e6", "sighting_of_ref": "indicator--5d3b2412-b3bd-4eec-87e6-c6f0590d8c43", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed38ddf-b1a7-4030-ac18-ca0d994c3c25", "sighting_of_ref": "indicator--033d8485-f097-47af-bd2c-60e103de5154", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2212d93d-70d0-4703-a661-14a3df74b600", "sighting_of_ref": "indicator--e95adc5d-1a13-46d7-9893-432fd6cd7010", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1741bd-106c-43ea-925f-81ebde629803", "sighting_of_ref": "indicator--d0190b20-4550-49b4-9fa1-6f7c27886279", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d455ea2-0c7c-490e-8db5-78456f120f04", "sighting_of_ref": "indicator--88dd5ba4-1510-4928-b03e-d303a83e1ae5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebc7f0b-57c6-4122-937a-ba21ca16f523", "sighting_of_ref": "indicator--a9711c35-d5b0-408e-aebf-7a17f5473cf7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659579e2-821d-4a12-9c02-bfd6654b78c9", "sighting_of_ref": "indicator--a9711c35-d5b0-408e-aebf-7a17f5473cf7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92dab15-938b-493d-9a98-fcc7b578c747", "sighting_of_ref": "indicator--238c380c-b7eb-4783-8a51-13e24f077209", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f904155f-dc10-432f-bf01-a6a228594e3f", "sighting_of_ref": "indicator--21d12ddd-ff00-48f8-b239-09b8ae7eb25f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9dcc56-7a97-44de-ba8a-34e3851ec13f", "sighting_of_ref": "indicator--064a13fb-a431-46b7-858b-6732931fe5aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c81eaa-85ff-4e98-9b42-8e07d38023d8", "sighting_of_ref": "indicator--e000deec-af4f-4e75-9f01-b91665982230", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0515b87c-e2fe-4d63-9a15-08b294b64cc9", "sighting_of_ref": "indicator--070a664b-7b36-448b-bd27-23611ee356c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df132b50-cacf-4896-8eaa-e2253a93fb6d", "sighting_of_ref": "indicator--21296485-a891-4fe3-aedd-836a00516985", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be74788-9718-41ae-a95d-12b44e43162c", "sighting_of_ref": "indicator--d8ae50a5-d6aa-42b2-ac0c-22f92ddcafeb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe79195-70ff-4c76-a30b-7c97a9c475a4", "sighting_of_ref": "indicator--a6f90f82-af55-449c-87cc-651b0c48aebe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28a85a7-06af-484c-9f7c-4b95a0824211", "sighting_of_ref": "indicator--e2fba1fe-791c-41cf-8625-aaf5c57ad33f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbc55d1-0c13-4aa5-8ba2-41b64ad318e2", "sighting_of_ref": "indicator--fff0428f-dac1-4dd2-b155-58a7fc86849c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adf492e-2bcb-4ef9-af08-2f68c7cb220f", "sighting_of_ref": "indicator--31108527-3f4d-4396-8795-0f1eafabc58a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1301236-b5e7-4f59-b7e6-5e5140298d63", "sighting_of_ref": "indicator--42e13b2f-af19-4bf8-bf1a-8f305e2d4a34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67074d4a-1f7b-45ee-8bbe-b67a5d361b62", "sighting_of_ref": "indicator--b75cc3a4-a616-423f-8815-16fb969b20cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db06b0c-5ffd-4292-9abb-4a3a98efc6f6", "sighting_of_ref": "indicator--060d4639-6ecc-460e-9134-4b40428baf2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdf258e-f250-4086-bf89-659f62b998e0", "sighting_of_ref": "indicator--923632a8-bf2c-4c0d-a922-2a7a8ac2c0b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f75853-2380-4ad7-94fd-06757c935859", "sighting_of_ref": "indicator--a88c43fd-33cd-4cc1-82d2-0003d16eae22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e08e984-88e0-4234-ab3a-16830350cad4", "sighting_of_ref": "indicator--2103b33c-1446-44e6-8090-6e29ce2aeeb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df76cfe6-40a6-4877-bb72-753033eb2974", "sighting_of_ref": "indicator--3ca4a0b9-12b7-454e-ae35-10f5f5e6ae47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1134f618-51c7-4432-8de9-85abeaf482df", "sighting_of_ref": "indicator--496f48fd-b040-4796-aeec-cd6ccf8e1835", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f68623e-6bde-4b2d-b4bf-fabe24f0e772", "sighting_of_ref": "indicator--496f48fd-b040-4796-aeec-cd6ccf8e1835", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d8a4c6-070c-47a4-bcad-5dd20424a5f1", "sighting_of_ref": "indicator--52a6f5d1-9b51-4611-8ce7-f076eb4d528b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a256aaa0-6e95-4295-bfd9-80b9c2544e15", "sighting_of_ref": "indicator--795aa123-0398-48a7-98e2-eafda5495190", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac78dae-64fa-42a4-b8d4-f3f735b7320f", "sighting_of_ref": "indicator--795aa123-0398-48a7-98e2-eafda5495190", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec39f0c-9a58-4d02-aa64-5cf859ef97e8", "sighting_of_ref": "indicator--380ab61e-201b-4fd1-b533-22a0e98a18d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06908180-b0d0-495f-8300-83adf7766bc4", "sighting_of_ref": "indicator--7d57b59e-a6d0-44c2-b3be-bd1a9aaabff7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf295e66-4e02-4d8c-95e5-90e3f8c595b9", "sighting_of_ref": "indicator--dcedbcce-e9c3-4dc3-9bb4-1f9af0558e5d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479ab60a-15ca-4d2f-a176-569183a397b8", "sighting_of_ref": "indicator--cd9d86ac-a93f-4733-b963-499d3b47dd6a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e13e4a-bf8c-48d0-a901-a386ef96bd12", "sighting_of_ref": "indicator--9b912354-c54b-44a2-9631-a77d1e19dff2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d67712-96c3-463a-b552-4c407bffcaf2", "sighting_of_ref": "indicator--fc0622c6-b5c4-4542-8b8b-345b0067ac5e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44570341-0592-4988-a550-464c37e3e032", "sighting_of_ref": "indicator--fc0622c6-b5c4-4542-8b8b-345b0067ac5e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74969f23-ee49-47c5-b674-94671496942a", "sighting_of_ref": "indicator--d8b80c72-5e8f-4a6a-8226-20fb9c3a2588", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bc9fd4-b6af-4d8c-90af-e6eeb52d4040", "sighting_of_ref": "indicator--482e6ebd-4a1b-4975-8f29-01a2eed4b687", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46576250-b655-48f8-b7b5-a9e054f73bdf", "sighting_of_ref": "indicator--10030aa8-71d9-42fc-9a41-0f105aa95c66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b462656-baa6-4b5a-a482-9b428dc1eddb", "sighting_of_ref": "indicator--e5446b80-5a29-4061-961c-da5c3b9f7a03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2313b9-e5d7-48bb-a20d-127876bd3310", "sighting_of_ref": "indicator--eadcfde0-3938-424c-83ab-b80a8262e741", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14754ab1-d40e-4c02-b297-bf9a98c17f0b", "sighting_of_ref": "indicator--3b6f306f-5ef8-4563-8060-c6d5b3abb4e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca303c5-152e-4ead-960b-0bad9980c62b", "sighting_of_ref": "indicator--57f3253e-330f-4a17-afc1-8af43e0dd97b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3f6086-ee82-44f7-9f00-c8fa78f89062", "sighting_of_ref": "indicator--3a4da6c8-1a5b-4fa0-9b6d-7fb6aa7d9aad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8452178e-a509-4595-b948-f1acfa290b2e", "sighting_of_ref": "indicator--a255e4e0-82b7-45cd-846a-edcf2ea66451", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7279f5fe-46af-41fd-978c-5779d20ce042", "sighting_of_ref": "indicator--25338606-7cd7-4d69-99d1-f98d367bde6a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28bfe00-e04b-4839-95ab-5a74943a0b8e", "sighting_of_ref": "indicator--5529f090-31b5-4cac-ab85-4d9f3167370a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad3a896-3eeb-4147-bb38-e4f8aec1fc88", "sighting_of_ref": "indicator--56a55ebe-eec3-4783-b5cc-883e0025b019", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b556510b-e026-42e9-987a-41ababa74e70", "sighting_of_ref": "indicator--f6f6f79d-6c49-4d1a-9ae4-0f267d81f4e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2684a1c8-a6e0-428c-a869-384e829ebbe2", "sighting_of_ref": "indicator--f6f6f79d-6c49-4d1a-9ae4-0f267d81f4e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8263477a-598a-45ef-a1f2-9769c97216cb", "sighting_of_ref": "indicator--b3e08dd3-8b11-41c4-b02d-1821fe147e7c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5b85cd-7f6b-439f-a27c-51473bbecc2e", "sighting_of_ref": "indicator--b569e088-c6de-40a8-8d28-f8e091e7d574", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fbc982-f844-4a5f-bc68-83542ec60127", "sighting_of_ref": "indicator--de0309fc-a46f-4d42-93e1-dea7583540a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c93fa8-ca0b-40ce-9728-f43a67e14c4f", "sighting_of_ref": "indicator--20411340-cb13-4cc8-8378-ffe5d533b111", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca0fc53-b4be-4633-bea8-ed0e8884f686", "sighting_of_ref": "indicator--1093e2f9-7319-499d-b42c-2c99bd39ba7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74439ea-d83f-4ef7-81b7-7d8c0f3ecd18", "sighting_of_ref": "indicator--fc7c6038-71c0-42b7-b987-3a2e91fb7c1b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a059d587-6a6d-40e7-8531-7a5fd454b0df", "sighting_of_ref": "indicator--ce545fec-e061-4a8d-82cd-d9af273536d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc353df-a02d-4cb0-8b00-fa696e2c2cbc", "sighting_of_ref": "indicator--55cfe052-11b1-493f-a11a-4e6bf0d3cdfc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bc1014-2946-4b48-850c-9e8746602ab6", "sighting_of_ref": "indicator--2026d2ac-d03e-44f8-bb54-aa485a6eec25", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aadfe7b-0590-4f45-b5cf-6c07023286d4", "sighting_of_ref": "indicator--f39ff852-b8d9-4b73-b9c1-d1b9793e7596", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449a3164-52da-4c1a-8028-d74d40fafb36", "sighting_of_ref": "indicator--360914e4-021a-459a-b3ae-081bab0f1088", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d053092b-3e31-4752-830b-622485e42d21", "sighting_of_ref": "indicator--a61b0b33-324a-4869-96bb-ef3e33d422af", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3727172b-b6d7-444b-ac32-3903ce0e7b39", "sighting_of_ref": "indicator--aace6d83-8317-4404-83db-dc04f84d4096", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ce04e1-c541-477f-aa0a-95bf33ca3bad", "sighting_of_ref": "indicator--24f19e59-2473-46a0-a5b1-bcadd58da2aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049e3f60-4247-496a-a1ab-6cc1ced7c53e", "sighting_of_ref": "indicator--ebdab4b4-94f4-4699-96ed-f18a24de67d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9c7c6c-96e0-4085-8e31-ff0e21847ccd", "sighting_of_ref": "indicator--e971143e-7cfe-41fa-972c-3c9f71db47d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be28c58-232e-479e-ae0f-dc49087fdb13", "sighting_of_ref": "indicator--c1e6a5f0-962b-42c8-93a7-798ac43ac5ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a8a380-ac6c-45f2-9478-3dfa150413a0", "sighting_of_ref": "indicator--dbe0865c-cb44-4936-98db-6dcaf3eee9bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f639ee-d736-4b46-9ba8-d1f92967150c", "sighting_of_ref": "indicator--9c33856d-ba6a-4f83-a343-5540329563ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475be164-5460-47e4-b459-46825886214a", "sighting_of_ref": "indicator--af000d9a-23ed-42f1-955e-2f496edab01e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b85a31-1fbc-42bb-8102-54f7d93cbd49", "sighting_of_ref": "indicator--6ec4dbfd-67fe-4cb0-8052-16251f41413f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b13a17-b4c3-4335-80f4-8cc246f609eb", "sighting_of_ref": "indicator--982b7032-909e-4af4-a35e-393d2fd3b36f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0052d1-d15a-4213-abee-05e4d970f207", "sighting_of_ref": "indicator--a76edee1-3326-4d07-aa74-e80c28d200f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d4d7fc-74c6-45ed-8368-a0bb7960721c", "sighting_of_ref": "indicator--420b8fd7-6843-4623-a581-773cc21e01d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1e9ff0-1fa6-4c0a-bc66-b0cdcd9494a3", "sighting_of_ref": "indicator--a7cc1851-e685-4b55-bdff-4d235e780454", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1876d6-28dc-4012-93f1-0aac9f2d7739", "sighting_of_ref": "indicator--c1e9ba7a-fd46-4da0-af7e-908ecb489f05", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b4a517-0dbd-428d-9693-9d45cb4f6a59", "sighting_of_ref": "indicator--d01d61c5-1cc3-4a2c-bd6a-1783773290e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c0309f-ad9b-439f-b3f4-d267d1100ae6", "sighting_of_ref": "indicator--edc77f01-ade5-44e3-a1c8-6ed5ba323a80", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98efe2b-0767-4148-b71c-db60780ece11", "sighting_of_ref": "indicator--5938c81d-f5d8-4b8c-aa90-a640d38f0701", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00aaee3e-5d0b-46b2-bdb5-8f88d3860425", "sighting_of_ref": "indicator--cf68cccf-ee9e-4431-bdde-9102459a2431", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f608f6-294a-4041-b18c-c3b51b88837a", "sighting_of_ref": "indicator--5a805363-0468-47e3-b052-3ec22037686c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77312375-70d1-40ba-bf21-a76da6848b34", "sighting_of_ref": "indicator--e5d9e3d4-7998-4fb9-bf95-c700378a03d9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedb58ef-622e-4e48-9b17-8837f15eb2dc", "sighting_of_ref": "indicator--7d26ebf6-6d0d-474c-a103-0fc088ed9fb4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fcd073-60cc-4422-a2df-81fbf6abc295", "sighting_of_ref": "indicator--c93711ac-89e6-4d69-868c-8143a7197a89", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ff64fc-d6d4-445d-a407-ec9f3f628fb4", "sighting_of_ref": "indicator--5f0d2ff2-d52c-4097-949b-2ef810beae8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb821172-bec0-4b31-96a7-cb3d9e5c248e", "sighting_of_ref": "indicator--d90ac00a-a871-4261-899b-8118703c2514", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d02ed22-7b51-4e32-bd2f-798c6493c039", "sighting_of_ref": "indicator--f5ffc5c5-dbc1-46f4-bb2e-98d8306bf958", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e0d0ff-dfdf-4d9e-befb-0f0e5ea563b0", "sighting_of_ref": "indicator--e5feeec0-2607-42a2-ac4b-b0f74b248607", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2ab443-efa1-47d4-82dd-0ae372379444", "sighting_of_ref": "indicator--afba1323-c315-4afd-b12a-c8c20ecb3292", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8454725b-3ff9-4298-82c3-d5b9c529a700", "sighting_of_ref": "indicator--a85ea7ca-6836-4ccc-8eef-e37aba74dc44", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c598f8-64e6-4290-b809-509893a70d56", "sighting_of_ref": "indicator--66ce67d9-c5d4-4922-a177-c3ac2baf4da9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258db2dd-0253-40d8-b8c5-ef39ca1c85fc", "sighting_of_ref": "indicator--4e6cd84b-6ea0-40af-a449-13cc6a8389ae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4d1abf-33c2-4430-85fe-6291ee1b4c1a", "sighting_of_ref": "indicator--4e6cd84b-6ea0-40af-a449-13cc6a8389ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a16872-0656-40f9-9402-c16185da0a2a", "sighting_of_ref": "indicator--d83dc949-3f8f-4a99-b95e-79718b6bef2b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191c32b0-12aa-493a-9db0-cde8e49d61df", "sighting_of_ref": "indicator--d83dc949-3f8f-4a99-b95e-79718b6bef2b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7a4efe-afb0-4c62-9ad9-fe36343019cd", "sighting_of_ref": "indicator--2f578fc1-7438-430a-9a01-c5992daf7976", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8375a6de-ca78-4078-92bd-7997d1b2dcb1", "sighting_of_ref": "indicator--b436b8d6-e3ce-4ff8-9284-19b405177833", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43462f85-c913-40d9-b634-004527deaec1", "sighting_of_ref": "indicator--8c02532c-8743-4739-b552-3003950ad56f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc502843-b2b4-4967-a957-1931b48c9c5e", "sighting_of_ref": "indicator--e63bb1d3-fe8f-4e97-b283-049b533de3cd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e821ace4-cb04-47a0-a8ac-1af3d5ce9f5b", "sighting_of_ref": "indicator--3693bf1c-b766-4c47-96bc-5cff00b283fe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66582b59-ed9f-4196-a044-21f5efc965ba", "sighting_of_ref": "indicator--807f15b5-4237-427f-9663-d2f93f83d01a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fa6127-f11c-4020-85f5-9b5bec15d4bb", "sighting_of_ref": "indicator--650da863-2dd7-4226-b42e-00c5b7596374", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681d90c2-f2bf-4e2a-aaf0-117e9c216eb1", "sighting_of_ref": "indicator--8f27c962-86ec-41da-bb4b-db6dc94ab5e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c145ff-e751-4a6a-8850-1524616ea1ab", "sighting_of_ref": "indicator--f6e3b05d-f380-4d53-93a7-b8aa8b46643d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8c4dbe-94b7-44a2-951c-27fed764ccf0", "sighting_of_ref": "indicator--f6e3b05d-f380-4d53-93a7-b8aa8b46643d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9d4b23-8876-424e-be90-1d87e04ad2bc", "sighting_of_ref": "indicator--bab585b4-9645-45c9-8a82-fdb8677a54f5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10138069-7638-44df-8e92-3bff140376b5", "sighting_of_ref": "indicator--bab585b4-9645-45c9-8a82-fdb8677a54f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d2483e-621d-4c0b-a0b4-ff81a65898b7", "sighting_of_ref": "indicator--cad062c0-b345-4e73-8afc-acf5c488bc2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d0f70c-03bd-431a-bf68-2cd0aba7ac56", "sighting_of_ref": "indicator--cad062c0-b345-4e73-8afc-acf5c488bc2f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f62e07-cf88-420a-9f54-4385200a764e", "sighting_of_ref": "indicator--eae168e7-1af7-4237-955b-f5c0446ad6f7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d0b12a-b12a-4428-8b83-66c0b909c830", "sighting_of_ref": "indicator--eae168e7-1af7-4237-955b-f5c0446ad6f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73012039-17c1-4f53-a62a-1becae213e38", "sighting_of_ref": "indicator--e341607b-eab5-4044-b9ac-807a67e61fb2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80dda75-eace-42a6-830d-25412081deb6", "sighting_of_ref": "indicator--d707b76d-0949-4bb7-aaca-d1609b348e0b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508ebccf-f833-4b50-9c1c-bd28ec62bfd2", "sighting_of_ref": "indicator--26edb818-4b2a-4a95-b1e3-d8675019a550", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4276bd8-c692-409e-97bb-65eaa9ca4f78", "sighting_of_ref": "indicator--0834fe89-50a9-4aaa-bc9a-fbaed5aa992e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611ccdd5-4fb9-402d-86c1-eb881a27bcce", "sighting_of_ref": "indicator--a9e25131-caba-4fe7-b4f8-9e9baebd1364", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91f76cc-57b6-4348-bbeb-c78ca1d07415", "sighting_of_ref": "indicator--c0d8a6d6-94aa-4802-afb9-cd7d21ae8c0e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2d5601-a665-44e0-97a3-50c7afa3abc0", "sighting_of_ref": "indicator--c0d8a6d6-94aa-4802-afb9-cd7d21ae8c0e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2660dac5-89a9-4aec-afdf-fe3c5ec35932", "sighting_of_ref": "indicator--cce581c7-647e-4cf3-9ddd-9a1ba3d1d14c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71ab3a2-1045-40ab-ba26-684bec94df54", "sighting_of_ref": "indicator--cce581c7-647e-4cf3-9ddd-9a1ba3d1d14c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd23a687-e2cf-45b7-96cb-18e7dc72e3b7", "sighting_of_ref": "indicator--e610cf33-8ae1-4af0-81f4-6c1b1bc5145d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa1dbc5-815c-470d-8a5d-1732e376d05f", "sighting_of_ref": "indicator--0cfcc7e1-4e08-46e4-8cc6-c7e76d7b0d93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd581eb-ffad-45c4-9f45-d9dccc4c10d5", "sighting_of_ref": "indicator--b0557e75-4d97-40aa-937e-3c100d884211", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384463b4-fb97-46b2-8dc6-95c40108e6ad", "sighting_of_ref": "indicator--cf0fcdbd-1ee3-4d1b-b19b-49bdf5ad3614", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454ee23b-3278-40bd-91c5-8e8fd2e9036d", "sighting_of_ref": "indicator--7c8db46c-862e-4469-97ae-474ea1762c85", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d913dd82-96f4-474c-b500-009caac2accb", "sighting_of_ref": "indicator--2ecad960-6aa8-4ba9-a67c-6ac88295aa98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89aac5a5-3434-4e3b-bf59-c4f3ddc8b104", "sighting_of_ref": "indicator--e1e96291-2a61-4405-8a70-ca7d75d3111d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2b4636-1548-4646-a836-32232554e03c", "sighting_of_ref": "indicator--e5675bfb-b807-4377-9a61-052e00cb0669", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5a27dc-7375-470e-842a-c521eb0f1ce0", "sighting_of_ref": "indicator--6f5bbf88-4463-48a0-bcbd-25b4353d7522", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b98a6d6-757a-4696-9e63-63278c8bdbe0", "sighting_of_ref": "indicator--0e558df3-1e86-4f87-bcd9-65aa1634e79d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beef0594-6b38-4adf-ba0a-22dfaadffb15", "sighting_of_ref": "indicator--5c5cae34-c4d4-4d68-bdd9-a9ed809f7668", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb65082f-a999-422e-9c7d-a67db8a6b279", "sighting_of_ref": "indicator--b39ec2cb-e0ee-41cb-b84e-fdb8c41ad810", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8292c70-59e5-4561-8fe8-d29e5b34dc65", "sighting_of_ref": "indicator--a4be92b5-fa3f-4f05-83fa-85e5e6a4312b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d963680-b957-4de5-8ce5-be1cd764afc6", "sighting_of_ref": "indicator--02f2d9d9-4e01-4d8a-b284-5b8278d08365", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc45057-4547-4d5b-8c39-2f32ed5b64c3", "sighting_of_ref": "indicator--437f999c-f35b-417b-9348-ea941ecd4470", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9f333a-ad75-4dfc-9ae5-a5c9bb60ce00", "sighting_of_ref": "indicator--10822bf2-b8c0-4c2d-9386-5126d78b6f36", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bfa930-5f80-47db-92f3-b9e0fece276d", "sighting_of_ref": "indicator--67b47c15-a730-4e9d-981c-9de342d9cb05", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53831753-2d1f-409d-aa80-1d66d930f49b", "sighting_of_ref": "indicator--586eacf2-4b67-4bef-aa4c-5218f3d55bda", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526427f0-b311-432e-9b6a-33b4cccfade6", "sighting_of_ref": "indicator--668790dc-993b-4bd6-a1ef-99e0bbf41d60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1d1234-d419-40ea-ae61-d843f749b791", "sighting_of_ref": "indicator--668790dc-993b-4bd6-a1ef-99e0bbf41d60", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c984af4-eec1-4d0d-b2c8-95a9897499ec", "sighting_of_ref": "indicator--e99b98bc-492e-447f-9cf9-7e88b59e0cd6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c44c10-9f06-42c1-aba9-5adf67ade6d3", "sighting_of_ref": "indicator--a4d5b690-eece-4159-868a-cc7b7cc57c4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb43ecde-5d66-4789-a3d3-6eda8567e027", "sighting_of_ref": "indicator--e0837f89-47b7-413a-954c-14b31b682cb0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2855cab7-2b62-4e38-b641-e826e5ca6e2d", "sighting_of_ref": "indicator--83d4a132-ccad-4391-9eab-5103b7455148", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60dfc54-81f8-4ac9-a086-acb317347421", "sighting_of_ref": "indicator--dcb5ea43-7873-4495-a62d-44249e266913", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714fd7ab-d5c6-4935-bd3d-9ecbe863640c", "sighting_of_ref": "indicator--dcb5ea43-7873-4495-a62d-44249e266913", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e88b0f-ca3e-4b73-903a-61062cf4346c", "sighting_of_ref": "indicator--679a7de8-4f00-4433-9f0f-0624caad967b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36079bcc-d3c7-4c97-9dd9-ac50ebcce7f8", "sighting_of_ref": "indicator--c5fb3371-c85b-45e2-8a17-a527a80af23b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2b9ac0-1fe0-4dd6-aacc-a3497a12db23", "sighting_of_ref": "indicator--69e22b66-53ca-468f-813b-b32446558f0c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99d92e6-7dfc-472f-b758-29519d751ad4", "sighting_of_ref": "indicator--2df9337a-736b-44d3-921f-fb2e3d803c1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f73817-f6b7-400b-91af-a31d112abc07", "sighting_of_ref": "indicator--04af948c-840c-4f73-a404-7181b72c9b07", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f3f816-b289-4666-a998-ef3dd7be5b30", "sighting_of_ref": "indicator--7a23a29e-23c1-4445-ada9-cd4868f3253e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ce2a43-356c-47c0-a524-60b6a2dbd911", "sighting_of_ref": "indicator--293b76ba-709e-4f91-bf94-d8f137dc8a9d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b48aa4-171b-4173-9549-647384f84964", "sighting_of_ref": "indicator--5a1ebda3-81a5-4637-8173-c18a738dcaf2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c060cc-cdb8-4413-9a7a-934257dd45fe", "sighting_of_ref": "indicator--1291b0f3-1e6e-4c7d-8583-90ea044ab851", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7870fa7c-2d08-4fd9-ad4a-c14f5f167504", "sighting_of_ref": "indicator--1291b0f3-1e6e-4c7d-8583-90ea044ab851", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bbaf11-5703-4981-9226-51fd99849fd0", "sighting_of_ref": "indicator--1803813e-6724-42bd-999d-4c101359c3ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec301552-8056-43c7-9f5a-7470282417e5", "sighting_of_ref": "indicator--23c0c0bd-2ffc-482b-ab25-caa545305dd4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c5c1f2-2a96-412a-b7d3-ec42cd0765b1", "sighting_of_ref": "indicator--4b792d27-5f29-429e-8ecd-67f3881ac426", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e245e4-fe80-41db-b47e-8b4f71183a62", "sighting_of_ref": "indicator--4b792d27-5f29-429e-8ecd-67f3881ac426", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285f835e-2a02-4667-ac2a-8133cb9e89bd", "sighting_of_ref": "indicator--056ec279-cd0d-4883-94e5-9ccad9f0639d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cb8897-1dd5-4a84-9180-486af9abef7d", "sighting_of_ref": "indicator--056ec279-cd0d-4883-94e5-9ccad9f0639d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae94f473-f9b1-401e-af2a-d4f2398f5000", "sighting_of_ref": "indicator--5d5ed97b-971a-4876-912e-05c5bdfdb8b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bdda20-70e7-47d8-97aa-3b1dffce4e3a", "sighting_of_ref": "indicator--f38bea08-88f7-4701-b450-d7ac37e33e3d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d6a68a-9c26-48d2-aeea-4a0b4e630f88", "sighting_of_ref": "indicator--f38bea08-88f7-4701-b450-d7ac37e33e3d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581abca9-31f0-4dfa-8713-63a2ec408e74", "sighting_of_ref": "indicator--0ea10a82-06a7-487b-809a-64c8547f9f02", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b75509-4195-4462-b53c-b6fc8d5dabce", "sighting_of_ref": "indicator--cb31307f-a75c-4ded-b250-c447b5da608f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedc9eee-d488-4cfa-80ca-06997afcb280", "sighting_of_ref": "indicator--199b1b17-6509-477b-9288-4ceaafd28909", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c686fec5-068f-4d14-be88-013ccbe93b89", "sighting_of_ref": "indicator--046d861f-badf-4fea-83d8-5506a5796b74", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2958ae6d-b75a-4c39-8ffb-ce3e2c2878c3", "sighting_of_ref": "indicator--046d861f-badf-4fea-83d8-5506a5796b74", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a21145-8933-4bd5-a14c-65b60d49fdea", "sighting_of_ref": "indicator--d80d3819-a636-48ae-b701-bb043698242e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48937a8f-b2e9-4add-80e3-a1b4110b0089", "sighting_of_ref": "indicator--bc33e0d9-209e-41a3-8f9a-ef7d46c080c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebaadca-46f8-4613-9510-4cf3d62ef723", "sighting_of_ref": "indicator--d49180fc-4385-4adc-8790-9ebaec850193", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951a8827-1f22-4584-bf9d-4db48cbd264a", "sighting_of_ref": "indicator--2854ecb1-fb25-40c4-bad9-869cab0c65f7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283f19c3-a389-49ce-ab49-5071d37d0380", "sighting_of_ref": "indicator--2854ecb1-fb25-40c4-bad9-869cab0c65f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ea9a70-c6f8-4ba3-ac3c-e8afcacd9e10", "sighting_of_ref": "indicator--ea662542-6557-4529-8cda-5a83c6bada8c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e30e69-301b-4db8-989e-538c9ec39da6", "sighting_of_ref": "indicator--98a0e465-792b-414f-9eba-830c30ec0fac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d3dfd0-7bfd-4523-9768-de30659ec7df", "sighting_of_ref": "indicator--98a0e465-792b-414f-9eba-830c30ec0fac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25ffb99-8379-4854-b6ac-d52528f0d43c", "sighting_of_ref": "indicator--b9cde2eb-4ed1-42ac-b5b1-20d555b3f34c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131197e7-e4d1-4540-90c6-8618d393ef07", "sighting_of_ref": "indicator--ba5c904d-655a-4380-b4bd-42ac814226a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8e366c-5972-474d-9e17-dc31faa5e0a7", "sighting_of_ref": "indicator--ba5c904d-655a-4380-b4bd-42ac814226a2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a12b35-c541-4b55-bb06-60b8c79b9d5d", "sighting_of_ref": "indicator--43fde476-7727-45ef-9749-dda769a9b8df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306aa68b-41fe-4e81-ae0e-27f2dad8fb24", "sighting_of_ref": "indicator--262625b8-0c87-4e8e-8fe0-6385cb5eabd4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25351990-8508-45f7-acd8-141fe844e621", "sighting_of_ref": "indicator--b449b9eb-0fe8-40df-94c3-014e212c5f44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adeb808-0ca0-406a-b608-f277c05928b2", "sighting_of_ref": "indicator--1944df6d-1852-40a0-861e-a9130a4f44fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de72bd3-11f6-4b70-b4de-4150c22609af", "sighting_of_ref": "indicator--e5c86d9a-8c55-43a9-bc06-a3202dc5aef1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624e4ce1-245d-4659-8aaf-5759af1b6daa", "sighting_of_ref": "indicator--95a19fab-d717-478a-aab6-b0e7878d5894", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0700ae2b-7804-4dd2-a6e9-ffc7037eca46", "sighting_of_ref": "indicator--3f3e1e78-fe57-4a77-865d-e7492904c091", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da7af91-4eec-403b-9f6f-42f60e91b4bb", "sighting_of_ref": "indicator--e022548a-c596-4373-aca8-0cfe49b266e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adad76a-5372-4136-84a5-f8056b505e3e", "sighting_of_ref": "indicator--de1ff759-7a40-4c1b-9623-0e6dbf667059", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625b5bd0-faf7-418e-a61b-a31f3e11e338", "sighting_of_ref": "indicator--4018ba60-1796-4b1c-a61f-1788bbe7c8bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee3c1f8-c6c2-4edf-a395-719e38ffdb27", "sighting_of_ref": "indicator--4018ba60-1796-4b1c-a61f-1788bbe7c8bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90073c7-6284-48bd-bde0-44bcaa5f6cdd", "sighting_of_ref": "indicator--b847ee79-f5b4-4ee3-8fab-38c184e30f77", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a29f8c-9cd2-453f-95e5-2e325c5bf521", "sighting_of_ref": "indicator--b847ee79-f5b4-4ee3-8fab-38c184e30f77", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e7a7a1-b3fc-479e-a3b4-0fca62441010", "sighting_of_ref": "indicator--df2be93d-af9b-4808-b08b-a85427b2c607", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d115e7-5afe-414a-b089-69dba6672554", "sighting_of_ref": "indicator--9c0fb838-4a3a-4125-8ccb-145644ad27c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da17a298-0b31-47c1-b417-8e85608c2adb", "sighting_of_ref": "indicator--2f6ea99f-835c-4dc2-8594-c7b35d718666", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bf3ca0-fed0-4a9c-bbb7-2a9d3da0c076", "sighting_of_ref": "indicator--2f6ea99f-835c-4dc2-8594-c7b35d718666", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d306195-a153-41bf-954d-8265b8507021", "sighting_of_ref": "indicator--66d38040-448d-4325-a2eb-e13ded238ed1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106a97a6-3998-4865-930d-143c3e90f17e", "sighting_of_ref": "indicator--66d38040-448d-4325-a2eb-e13ded238ed1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f284dc-5c01-47b1-827b-939f37355706", "sighting_of_ref": "indicator--48cfca25-ca28-44f3-8de3-6bc42f37789b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1b898c-f25b-4e71-a30d-ac8941970324", "sighting_of_ref": "indicator--79cf84f3-9e19-485a-aa03-48916c474ba7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc54d50-ff50-4612-8f65-f5d384102fee", "sighting_of_ref": "indicator--5bd718d1-a322-4591-b009-0852088819ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd59af8d-3454-49e6-b6f0-20caf8c7c50c", "sighting_of_ref": "indicator--0f7430ab-a81e-4341-be2f-a09d7a7c034e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea3d1f6-b7cd-4244-88aa-681232e2ed06", "sighting_of_ref": "indicator--69cd9837-dab2-4fcb-b3fb-751e685aafc9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d964281-fdc9-4515-8ca8-0fb7d2e18534", "sighting_of_ref": "indicator--7184cb16-f5de-4419-a3b0-25fac42b93c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a3f033-da4d-4c43-b566-770e63162afb", "sighting_of_ref": "indicator--7184cb16-f5de-4419-a3b0-25fac42b93c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2ac8df-6ac4-4616-941d-0f4243a10cb0", "sighting_of_ref": "indicator--709d412d-66d4-47fc-bd07-829478d9885f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a5029a-0b5d-4149-abb9-86b758c1db95", "sighting_of_ref": "indicator--709d412d-66d4-47fc-bd07-829478d9885f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a037dd6b-c3d4-4cb7-b757-a861114ce2e9", "sighting_of_ref": "indicator--94e43057-dbec-4efe-96b6-62fba08751ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0592b8e4-b215-43cb-9431-1669aedbe1c7", "sighting_of_ref": "indicator--a7e6d948-762c-4d64-a926-7b1e1c2cee9b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c353649-a16e-4a21-b052-0d575a8f0ef1", "sighting_of_ref": "indicator--532b3851-48bd-4e9f-ac11-dc8dda0956a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d33ac5-0a5c-4084-8adf-692f3230d21d", "sighting_of_ref": "indicator--c06bf734-1e7f-4886-8cce-c15c2ff13067", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d791d1c6-c438-444b-89a1-84099bbc1022", "sighting_of_ref": "indicator--77a1daad-a6ec-4162-8f2b-ec3d41a9451a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908a1fb9-1c73-4cac-bb38-075b5aa9b9c8", "sighting_of_ref": "indicator--f55bc80b-89d8-4225-ba6f-ae956de76699", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fa877f-bfb8-4f61-bc17-f463cbabbea1", "sighting_of_ref": "indicator--50119d15-b1ba-4111-9008-e658f98a9d7e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c65d2b-d428-4f77-9fba-5766c4b31ac1", "sighting_of_ref": "indicator--9347d88c-8496-48bd-8223-800b6bd718e3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2219bb2d-7436-4bae-b3ec-bb02d64e6390", "sighting_of_ref": "indicator--9347d88c-8496-48bd-8223-800b6bd718e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f21cebe-2b02-4b3f-bed0-7b2672c0c2d7", "sighting_of_ref": "indicator--58e38855-0439-4e9b-9d09-15fe863e6a88", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10241c2f-385c-4e30-8c9a-a51343f83209", "sighting_of_ref": "indicator--ca651be4-a4f3-46cb-9702-08bbe4842949", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d70323-3997-423d-beed-998a87e0160a", "sighting_of_ref": "indicator--ca651be4-a4f3-46cb-9702-08bbe4842949", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd0e018-b4b8-4e17-ac03-b418cc9c46f6", "sighting_of_ref": "indicator--a803f411-b76f-47f6-9515-2c75bc081e6f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a812720f-e8e0-4ea8-85e5-0b84d2b94832", "sighting_of_ref": "indicator--a803f411-b76f-47f6-9515-2c75bc081e6f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026c3c84-00ef-4173-8540-49e1cd02665d", "sighting_of_ref": "indicator--6c002be1-2c83-43cc-8d68-8f370ab11dc2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82036f08-140d-4c4f-bbb4-7281e5d7f5ef", "sighting_of_ref": "indicator--b6e7ddee-7068-40f4-94e7-d8e1e348616a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352a1d3e-666d-41c4-818b-e98590c704d6", "sighting_of_ref": "indicator--6c73b4f9-a20f-4bfc-b0bd-c197c488c08b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0753955-f2f5-4d90-b0e1-c01522888159", "sighting_of_ref": "indicator--9679bc19-e91d-4a43-91c1-ca83432a3734", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dee24d-765e-4bb8-b082-4859e9040763", "sighting_of_ref": "indicator--68ecc5a0-7c3c-4941-9774-382fbe59a8a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2411374b-78cf-4c2b-96d0-03d915d758b5", "sighting_of_ref": "indicator--b595d4fb-0e3c-479f-a270-2e41f17113de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6319b055-ad22-49ac-98b1-e2f965fde286", "sighting_of_ref": "indicator--e6ade861-f536-4030-be8e-bd56d6d33b37", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae14cd6-e0c2-4534-a1fa-ed4ebef74870", "sighting_of_ref": "indicator--e6ade861-f536-4030-be8e-bd56d6d33b37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03154564-6924-4995-9b16-91e4ca0c6eba", "sighting_of_ref": "indicator--bc2f6b09-117b-4309-8ff9-c23a85872aea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e515d02e-d4d8-467a-b178-d55ea75cd0fc", "sighting_of_ref": "indicator--bc2f6b09-117b-4309-8ff9-c23a85872aea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da1b5f4-3036-447b-be74-04d4f87b9547", "sighting_of_ref": "indicator--2a3297d3-c445-4ef4-b707-c11cc403027e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9881ef22-5dfd-467e-a842-5e5b25ab3fd7", "sighting_of_ref": "indicator--2a3297d3-c445-4ef4-b707-c11cc403027e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca371e5b-7944-43be-a0bf-333ffa6a48ee", "sighting_of_ref": "indicator--e510c05f-2c59-4685-8cbe-e3b9a3195672", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e10d9e1-b5c5-4654-aece-eb179e3de152", "sighting_of_ref": "indicator--e510c05f-2c59-4685-8cbe-e3b9a3195672", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5416eeda-d612-4199-825a-8714f9fbf738", "sighting_of_ref": "indicator--c2051705-00cf-4682-9996-79b45e0bf42d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdeed7a4-cc16-4142-9f28-04fff6400a49", "sighting_of_ref": "indicator--84861616-bf45-41d8-a0f5-e436f61bf4f5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966b2c45-fb99-45aa-940f-7aaa76ce7997", "sighting_of_ref": "indicator--dab495ea-fd91-45ca-abed-274aa72da04c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2d42f8-2424-457c-9958-eb821a39f3ce", "sighting_of_ref": "indicator--75698cb2-4fb0-4af0-a82b-a84f8d19bd58", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27505dca-c2f9-4e64-a759-62ddf51bd792", "sighting_of_ref": "indicator--3c40a181-287f-449f-8923-ead8efbe6e56", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66998163-67e8-4827-b769-a40899b10839", "sighting_of_ref": "indicator--406d79f0-f51b-4f46-a0d6-61ead3ed2c53", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a455b787-8033-4c47-b9ef-13c82136c16c", "sighting_of_ref": "indicator--5771c167-47cf-417b-a24b-b553ce29c685", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714307e1-c3f3-4daa-ab56-39f77645695c", "sighting_of_ref": "indicator--5771c167-47cf-417b-a24b-b553ce29c685", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a47687-b171-4449-9a00-5ed9da3e22f5", "sighting_of_ref": "indicator--aae17558-e250-485c-bf25-b68360398b8e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56630616-5f8d-4cbd-8540-c686a0173555", "sighting_of_ref": "indicator--758f1c4b-d600-4e44-a7f6-f70b91d653b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2351805-e385-4ded-9bf2-1616ca4189aa", "sighting_of_ref": "indicator--27d77410-d365-4b83-b2d3-44ada15c78fe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906f54a0-7856-441d-89c0-4749be76f159", "sighting_of_ref": "indicator--9b06b819-d252-40c4-8642-4091f81329a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4ddad4-4140-4b3d-a8ea-a477c268fce8", "sighting_of_ref": "indicator--9b06b819-d252-40c4-8642-4091f81329a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b48e94-62da-4205-a30d-da6d9fde4133", "sighting_of_ref": "indicator--3084f76e-dfa1-45ae-a9e2-dd94377da6b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc89b28-c328-4c93-bb28-66ee3ca0161b", "sighting_of_ref": "indicator--3084f76e-dfa1-45ae-a9e2-dd94377da6b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839ac16d-1d9e-4461-9e02-a76b468af79e", "sighting_of_ref": "indicator--62d93114-8d47-4a11-884c-9b0c88478e14", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d2b1b4-cb8c-4204-885f-38f6b81f809d", "sighting_of_ref": "indicator--62d93114-8d47-4a11-884c-9b0c88478e14", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1606c8-2c63-4b52-94e1-17b19aaa841d", "sighting_of_ref": "indicator--4dc1d44d-c7b1-4821-a01d-4b0336e13970", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85047de-142e-4ba0-886f-db72edcd9c2b", "sighting_of_ref": "indicator--de7a92c3-4a3f-4603-a980-579c7e2c0b95", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67881fd0-8c7c-45fe-93e4-2e758f755b91", "sighting_of_ref": "indicator--bc83980d-eafc-4186-8d68-86090ef370c3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a061aba8-5452-467b-99ea-09f971b157c2", "sighting_of_ref": "indicator--78c2b400-ac51-41da-91b0-825b325fff40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008a0249-28c5-4a50-9931-877d5d89ac6e", "sighting_of_ref": "indicator--37bbd772-f408-4de6-a801-54b77ff1d067", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30bc6775-8ab9-423e-bb53-b2e34234ba7e", "sighting_of_ref": "indicator--73dc0ed1-ec4c-44ad-9743-228979fdd43b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06000901-31c1-41dd-a68d-ec18ed099bc4", "sighting_of_ref": "indicator--f476f591-dfe9-4fd6-99e2-3ae94c5e390b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96383c88-e8ae-4ed0-8875-2ba221538808", "sighting_of_ref": "indicator--f476f591-dfe9-4fd6-99e2-3ae94c5e390b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f1b11e-4e6a-4524-b2b4-dc1adb373217", "sighting_of_ref": "indicator--d70d71fb-1143-41bf-a27b-a67fe18be73f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd079f6-a9ee-4d2c-a7cc-14e5d18d0745", "sighting_of_ref": "indicator--d70d71fb-1143-41bf-a27b-a67fe18be73f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcd5e86-5b84-4972-8463-000635316305", "sighting_of_ref": "indicator--84facfd4-6f4c-4bb8-862d-abfd0a1299ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47eadd19-c7dc-42b6-adbb-2df75e9d4f99", "sighting_of_ref": "indicator--84facfd4-6f4c-4bb8-862d-abfd0a1299ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c28276-8216-4ceb-bf4b-8fc152fb09c6", "sighting_of_ref": "indicator--ace96a6f-15f1-4e6b-b25b-02de5904bbfe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1456784-0bfb-4cbd-88ab-9c28795854a0", "sighting_of_ref": "indicator--e3f50ac6-1505-4a73-b621-831b757d4e8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a69069-5459-401e-bacd-7e1669f2a84d", "sighting_of_ref": "indicator--c3da6c41-89eb-4460-bf87-2e41230d7341", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279906e7-eca2-4006-aced-73b3edbcaea0", "sighting_of_ref": "indicator--9e0ee8b4-a096-4932-95af-9b357968a152", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31029201-0f72-4197-9b39-cfa327ab0cfc", "sighting_of_ref": "indicator--52f68b84-bce2-455e-8b84-4ac3439532b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d203ba-0e73-4cf6-b014-61979f8fe4f9", "sighting_of_ref": "indicator--39fb7f1a-7972-4af9-82ea-5a98044e9b6f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6186c0fc-38ab-40e8-add2-8a8373c7f936", "sighting_of_ref": "indicator--6bc6bbe1-795d-4c77-ae90-c57e9d08735d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8378fc6-707a-4d7f-bf80-ec57611cdee8", "sighting_of_ref": "indicator--439dee9d-a0d1-4007-b083-2c4f3ba94322", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0d16a2-7509-46bd-805b-5b67cbd9b511", "sighting_of_ref": "indicator--9745fd25-a593-4fd8-bf52-e7951dd15bd8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2929aebb-9825-4c43-9c53-2e43572e7d6b", "sighting_of_ref": "indicator--36474b74-bd79-4d1b-a5ee-2c5b50e136f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1977fb2f-fd1b-457c-9966-5e1a52e30a69", "sighting_of_ref": "indicator--a45ed5cc-fe66-4943-9565-fb18f8552259", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb0b265-de57-493d-ad4c-21ccbb396674", "sighting_of_ref": "indicator--a45ed5cc-fe66-4943-9565-fb18f8552259", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e60a8b-3c0d-454f-9e5b-4d347fb4a0fd", "sighting_of_ref": "indicator--ad37742e-2fce-41e4-b7e8-6f476ebda7ac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c587eca9-c5d5-4b96-8394-04a6bb52f9dc", "sighting_of_ref": "indicator--e229d513-206a-4841-af34-6c63f9dcad64", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de86e02c-c5d7-4276-8af4-77510a4bed3c", "sighting_of_ref": "indicator--9f10a290-b5d3-4ca5-bfee-0065846faa05", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e8a69f-8a6c-4b73-9d0b-f8fe61b874b3", "sighting_of_ref": "indicator--9c4a3ccd-9794-4998-b11a-b9b85083aa1b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb1d8d5-45e6-448c-aec8-bf63de2f0cdf", "sighting_of_ref": "indicator--7e944709-377c-47b0-bd9d-e83a0aff5813", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c41e2b-87ef-4889-ac79-052aed4d595f", "sighting_of_ref": "indicator--eaeef63f-2178-4d22-be98-2b41a2288f05", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d86bf6-2bd3-4495-a543-918064c10039", "sighting_of_ref": "indicator--f0f4525f-49a1-49a1-a403-f026df5ff478", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff81ea87-8868-42f3-b2a9-aec00a16e2ae", "sighting_of_ref": "indicator--f0f4525f-49a1-49a1-a403-f026df5ff478", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de718b1-03fc-4eca-bbc1-e8928a1d1e35", "sighting_of_ref": "indicator--f435d56e-efe6-4a2e-822d-fce8e840bcb4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97b1f94-8ec8-4a7d-b9f5-c73506d0e50b", "sighting_of_ref": "indicator--5d4533b3-d5e3-4767-a4b6-08cb3f843f66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d7a8d0-ef14-4b1b-a44c-c3018b67918b", "sighting_of_ref": "indicator--196c9857-0923-48e4-ae89-fa2d61e5db73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a434c493-5285-4c2c-88c7-27018b2b4c6e", "sighting_of_ref": "indicator--260e8dd0-b1ea-4254-a424-7fc2ad3de117", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b15de8-bc7c-4b1e-86d5-928b83b57f5a", "sighting_of_ref": "indicator--b7e23861-cbd4-47f7-a323-f1111f3d4a6e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074887c5-e06b-4d75-90e4-506d5ab1b0b4", "sighting_of_ref": "indicator--b7e23861-cbd4-47f7-a323-f1111f3d4a6e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3850171b-dc1e-4bda-9d09-41e823a53268", "sighting_of_ref": "indicator--3f06712d-9cb7-4b5a-a91a-326f8725ee65", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d7406d-9771-440f-89a3-2868b979a565", "sighting_of_ref": "indicator--3f06712d-9cb7-4b5a-a91a-326f8725ee65", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4624b4a-b9fd-45fe-ba4f-4bd91a0c943c", "sighting_of_ref": "indicator--12ab8c7a-bdc0-43ac-90e1-304319aa53f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1f15cc-2c63-465b-8139-3b221534b15c", "sighting_of_ref": "indicator--2bb111d1-f54f-4742-b8e0-d2c7926ac1ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b77090-b94e-4792-874a-e43fa1c2378c", "sighting_of_ref": "indicator--574c8122-5fc2-440a-b112-89c2758a8c03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33058fe0-caf4-499e-af07-ba0e60f9d87d", "sighting_of_ref": "indicator--754c22b4-d9c4-42df-8584-e7d008e554b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3db7fbc-1a58-4972-957c-3496441e3e88", "sighting_of_ref": "indicator--25691884-25b8-49ea-9f1c-8d7209e56344", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44390e33-1b83-42cf-8639-b15093eabd27", "sighting_of_ref": "indicator--25691884-25b8-49ea-9f1c-8d7209e56344", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc15570-cd0d-40d0-98fa-58e3e0eb6dc3", "sighting_of_ref": "indicator--d37d3861-fe6a-4af1-b39d-41280145d333", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67bb72f-5df7-4002-9fcd-ae08d2077e21", "sighting_of_ref": "indicator--0ccdaf3f-4a00-4b02-85c3-af336611a2d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a0f890-019a-4acf-8836-ac4a1f516276", "sighting_of_ref": "indicator--077ae754-1cd7-42a2-9d51-eb261a550147", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d960f51-a16c-4e04-9581-50050c1b66ee", "sighting_of_ref": "indicator--b3954e96-fbf7-4e7d-8e8a-0289a0234fa8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d67996-0af5-4f5c-bd88-34a7f1ad7dc2", "sighting_of_ref": "indicator--b06fc5fe-68bb-4ca6-af67-651cd5717897", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f926200e-3db9-499d-a726-54bf98c6de60", "sighting_of_ref": "indicator--b06fc5fe-68bb-4ca6-af67-651cd5717897", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9378e72e-b841-4fa0-95ca-6758b643226d", "sighting_of_ref": "indicator--9ce92c0f-b3bf-4549-8c92-4d6634f3a478", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1e11d3-4c51-41b3-b700-3a545ed6ba4e", "sighting_of_ref": "indicator--48e182f9-6bbe-4919-a6b7-f1f3a29dc60e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7620a71-8391-4278-b380-273a13cbfea1", "sighting_of_ref": "indicator--a96604ef-0690-4a59-a53b-0368fb44aabb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8b0f19-e72d-414f-a237-9abed8ffe29e", "sighting_of_ref": "indicator--a96604ef-0690-4a59-a53b-0368fb44aabb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0830568-653d-40bf-a689-7f929519fa33", "sighting_of_ref": "indicator--7ec9312f-6d50-447d-8f96-ba7b6d413553", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34894251-e4b1-4ca1-ac12-7eaa62dfa3c8", "sighting_of_ref": "indicator--7ec9312f-6d50-447d-8f96-ba7b6d413553", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0726ad6-90bf-477e-9c26-ee8aafa34737", "sighting_of_ref": "indicator--ffd8bdfe-49cb-4c73-993c-98804f8997f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb14bf1-0529-4842-848c-78898786d515", "sighting_of_ref": "indicator--8ace69aa-0f16-4123-8ea9-d668e28744aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2108ed38-a2c9-4962-be4d-605b3da7d22d", "sighting_of_ref": "indicator--e5bc50fe-ba3f-4b7d-b140-71664f898264", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204b6bf9-174c-4e67-bfcb-33b44bc8e7ca", "sighting_of_ref": "indicator--e5bc50fe-ba3f-4b7d-b140-71664f898264", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e17cd4-301d-4dad-a797-b556b7dad5b4", "sighting_of_ref": "indicator--dda86333-107f-41dd-b06f-4aad0aff5717", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be142f9f-e4c1-4d93-ad73-5be6d2ccbfff", "sighting_of_ref": "indicator--dda86333-107f-41dd-b06f-4aad0aff5717", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1acc93b-984b-48f5-a2c9-981450ac546d", "sighting_of_ref": "indicator--9da14683-4101-4631-b667-605fd19f82fe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b066495b-6b36-4074-8373-b55cdbe98ae9", "sighting_of_ref": "indicator--9da14683-4101-4631-b667-605fd19f82fe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fac8f6-1305-4ca1-9f92-c121274fdddf", "sighting_of_ref": "indicator--8d81278a-c9d8-48f8-8e5b-5f8b40105add", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ef1cbd-ef3b-4f95-8c70-0f7ba01e2331", "sighting_of_ref": "indicator--7379fb97-5137-4189-884e-b01c1f8cf20f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c19137-5149-4052-b58b-77f08730967b", "sighting_of_ref": "indicator--4f733077-c01e-4129-962d-dd3cdaec8016", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1f4a15-2e27-411b-a7bb-6fd76f81ebb4", "sighting_of_ref": "indicator--486efbd4-7449-4b47-b40e-b4699fd41aa2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e2a02b-d0cd-4e04-bf6b-bfb40835535c", "sighting_of_ref": "indicator--0c357d98-5487-48b0-80a0-4da92176a30b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b789c0-4731-4f29-9ed0-4dad7eb36e47", "sighting_of_ref": "indicator--cc9f75d7-c860-4703-b89a-bc31e686b58e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181be0ab-f379-43cf-bdeb-3a0c074b2d1c", "sighting_of_ref": "indicator--1e50aa6f-833a-42d6-802b-5335a2a24671", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ffb09f-bd88-4ff9-961f-1a69362c7096", "sighting_of_ref": "indicator--1ae78ee8-a1cb-47fe-955c-9701e9465b31", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7250c659-fc85-497b-9216-847754c17c11", "sighting_of_ref": "indicator--d5c46b84-f2e4-4c7a-abd3-3518d2182de9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd52af6c-df44-44fe-8aa3-6d843f7bdda2", "sighting_of_ref": "indicator--9998aa74-c1c4-452a-a9b6-dd4ca4556471", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0373b35d-227b-4b18-a233-298417c52725", "sighting_of_ref": "indicator--86828033-4083-46ff-989e-14711d0c6dac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d102d5c-f3a8-4567-a74f-11d103e0324d", "sighting_of_ref": "indicator--ee78b798-e363-4e76-beae-8e35fcef6d9e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26524a4-c0cf-448a-98cd-cea7d70cd0fa", "sighting_of_ref": "indicator--eb409ed9-4535-4c72-9a1b-a387337541d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0900ed7b-8003-48ee-9868-dbc79e5e743c", "sighting_of_ref": "indicator--791e06d3-3ccc-4157-a2c3-dbd898fbed8f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e816118d-9a8d-4a7b-b850-a9f62e58d126", "sighting_of_ref": "indicator--4abb8263-c715-4c78-a3ad-61e7b75013ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488c77fe-c955-43c7-8bb1-aca0b59502c2", "sighting_of_ref": "indicator--7419e28a-31af-4080-86a5-ccf85ec11438", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eabf71c-00aa-47fd-858f-dcc3f8cf6496", "sighting_of_ref": "indicator--9d412f40-435b-4597-84a2-00f1c1084ded", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a83384-47f9-461e-b135-cbafbebb70c9", "sighting_of_ref": "indicator--9d412f40-435b-4597-84a2-00f1c1084ded", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9e504f-2c45-4c87-90f7-e689ca77e1ec", "sighting_of_ref": "indicator--64d99778-fa48-45ec-911c-c7227e2e22c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0738eaab-8681-4792-bef9-380b708c5610", "sighting_of_ref": "indicator--58242b5b-2a13-4d8a-9d83-10f0a6d2f1da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c81018a-09f5-4724-aeff-b045d82f6fed", "sighting_of_ref": "indicator--2c923965-a68d-4427-94c5-0722cdbbd7e9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e2a9b8-45f2-4882-b5fa-e1763d9bebfb", "sighting_of_ref": "indicator--4a42dab1-d5da-4abb-bff8-036f87ca47f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d67733d-0f68-468f-9689-8a58567f9e8f", "sighting_of_ref": "indicator--47a65923-f2f7-4869-8c98-980dff0cd891", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084a988f-f688-41b5-a805-7b768ca569cf", "sighting_of_ref": "indicator--bc298b32-4ad2-4de2-ba5a-d0b9933fbd2b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69db628b-a6a1-42e7-9641-e42328ca7b2b", "sighting_of_ref": "indicator--461f9c2f-d754-4f64-b3d1-165edb70d56b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8280ba-91ba-40ca-870f-d79f1aeda3e9", "sighting_of_ref": "indicator--461f9c2f-d754-4f64-b3d1-165edb70d56b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8db084-d662-463a-99ad-235e383e40be", "sighting_of_ref": "indicator--569d3782-8c1f-448c-8e37-00406f941a34", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4e9c87-4839-484f-95b3-0a8ea5a09da9", "sighting_of_ref": "indicator--29d0c0be-4b62-48ae-b2b0-dbd6f10515cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52d1cb3-6461-49d9-acac-c749876bbcea", "sighting_of_ref": "indicator--29d0c0be-4b62-48ae-b2b0-dbd6f10515cd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cc6836-b0cc-4990-beb5-eacd665b2797", "sighting_of_ref": "indicator--1acccd38-3400-4304-874c-0aa7ffa76c5c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d8f4f3-2c68-4981-bdca-1993ff17f812", "sighting_of_ref": "indicator--d4b482af-c153-4290-946d-7cf1934642fd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e8092c-2735-406c-b835-9cb7d32f66f2", "sighting_of_ref": "indicator--56140ee4-6131-4b5b-bcb1-722acd90d563", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c06268-b22a-4bf4-9763-72ff25df8fda", "sighting_of_ref": "indicator--eb146de2-b853-4fee-a469-6e8a684f972e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080cc73b-b6ee-4ac6-94f2-db2a7e508fba", "sighting_of_ref": "indicator--3f6b8a59-53f4-49da-b1ef-af9ebd308272", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c1360d-1ed6-4d5a-a014-33ee5bbfd785", "sighting_of_ref": "indicator--3f6b8a59-53f4-49da-b1ef-af9ebd308272", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e16c0b0-6139-435d-bf65-7ebc3af84729", "sighting_of_ref": "indicator--9d3a61eb-30c8-485a-991f-94f8eebd0897", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa20649f-ed43-419e-9ef1-2d6956815057", "sighting_of_ref": "indicator--4bd2ccb4-e354-4263-ad70-51989b5a87cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae4a97b-99a5-46d4-9d41-00e000da25ff", "sighting_of_ref": "indicator--5b17685b-12b7-4773-90b6-4f919e227ff8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d651a33-4256-4eae-83e2-74068aa3c83b", "sighting_of_ref": "indicator--5b17685b-12b7-4773-90b6-4f919e227ff8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a2037e-5257-4cfc-8b67-9fbb1d9ac591", "sighting_of_ref": "indicator--2fc6e0c9-92e8-4409-93c5-a52ced01b0bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36fe16a-5a1a-4411-ad97-1d62c9b3389f", "sighting_of_ref": "indicator--82420f6b-4f6e-4f69-9fd0-7dcd6bb07035", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1cb5fb-c0aa-49a5-a079-921f42d2a48e", "sighting_of_ref": "indicator--1a4e5b50-7078-4290-9871-b21129f9f9cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde3ab70-2425-43ce-99c9-385164b3d320", "sighting_of_ref": "indicator--216480d2-b3b4-4414-b8a8-0714bf67151e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a74cbe5-957b-4fb3-8c9f-8388323d1cb7", "sighting_of_ref": "indicator--1d77623b-432c-4a87-b45e-5823ed9bcfd4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba61e50-8a72-4cb7-bc28-a08eac5e2b01", "sighting_of_ref": "indicator--1d77623b-432c-4a87-b45e-5823ed9bcfd4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c620a703-1a14-4d6f-8abe-6587c29d54c1", "sighting_of_ref": "indicator--f7b8dce0-a9e1-4dd8-8979-647ea1bc78dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f7240d-d053-487f-97b5-b5a2c92eb5c3", "sighting_of_ref": "indicator--f7b8dce0-a9e1-4dd8-8979-647ea1bc78dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6f8b7a-ce5c-4a2a-b6d6-8280e0da9107", "sighting_of_ref": "indicator--cd5b57eb-c59f-431b-8a18-7c27c6c377a0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148a67e5-52dd-4ec4-a7a0-fa3a46e96532", "sighting_of_ref": "indicator--acc06994-c873-4e0c-9809-3b8fe2ea2c64", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1b851a-f1bf-4648-b082-18ee19ec458b", "sighting_of_ref": "indicator--04389da1-6d1b-4767-9ba8-b9ea0aa302a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20ff00b-fdcd-484c-9f12-7d275c328710", "sighting_of_ref": "indicator--5d448706-7c6c-454b-bf47-6d34ff844276", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3785053-385d-467b-bfaa-93732151294f", "sighting_of_ref": "indicator--a7b2655d-6d4d-4c73-a634-76d4bb30913b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfe25e2-cfc5-4231-8721-6c60d23c7a20", "sighting_of_ref": "indicator--a7b2655d-6d4d-4c73-a634-76d4bb30913b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bb122b-9370-4eb6-93a2-89695a14ac76", "sighting_of_ref": "indicator--42bad009-bfa1-481d-ab32-7e6164303d46", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d30ce5-d24e-4d57-87c2-91e516d6aa63", "sighting_of_ref": "indicator--42bad009-bfa1-481d-ab32-7e6164303d46", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1777a90-e5a3-4589-8938-989fcef816d7", "sighting_of_ref": "indicator--96910b64-45c7-4a87-863a-693cdfc42c19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be42379c-5a50-46a7-8e80-409ee622b3d5", "sighting_of_ref": "indicator--d07d9b69-3eeb-4cd2-acd5-8e04a4d7a8d0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afd426d-6330-4d45-9fdd-ff0273290e88", "sighting_of_ref": "indicator--0dabba36-667a-43a7-b397-4b1bb9993008", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486b2354-55d7-465a-ae34-05be97fdd3a2", "sighting_of_ref": "indicator--662a9d94-1565-4cf6-b79a-04ae1b6e7f09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263727e0-316c-4659-aab1-f21684db7bc0", "sighting_of_ref": "indicator--662a9d94-1565-4cf6-b79a-04ae1b6e7f09", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c94525-5691-416c-859d-ee5cb9b1f005", "sighting_of_ref": "indicator--4cfb3f86-10ea-4d7e-90c2-8fd9dc74d128", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e88b19-b6e8-47d4-86f9-7439624e13d4", "sighting_of_ref": "indicator--ae1688e4-0f1a-47b5-9306-5b7795f1780d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee479fc-4f0c-4293-931f-01363942fd6c", "sighting_of_ref": "indicator--ae1688e4-0f1a-47b5-9306-5b7795f1780d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d533564f-2658-4af6-8e50-d7d88db9f2a8", "sighting_of_ref": "indicator--877b847e-7650-4936-8fe0-d9342a37c2ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1694e1-774d-4068-9ec1-c95edaf53835", "sighting_of_ref": "indicator--3ad7e1da-023f-4cdd-91e8-57879488c18d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47bd7ef-7c0f-471c-9b49-cf5d751675f4", "sighting_of_ref": "indicator--683d850e-67ea-4ac5-b2a9-b8772062c9f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4e7638-5d73-47b8-8065-1f1b738bf874", "sighting_of_ref": "indicator--683d850e-67ea-4ac5-b2a9-b8772062c9f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ddaa10-b5b6-465c-94cc-c11e996eae88", "sighting_of_ref": "indicator--35e19683-0bc5-49a4-a41c-f90c5c966f78", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdd05be-45bd-4bbd-85d3-4c3999e81cd7", "sighting_of_ref": "indicator--a7e42eeb-9896-414e-8381-9c18ad5311f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec3cf3b-7d32-4da6-a3a5-de32feac18d1", "sighting_of_ref": "indicator--a7e42eeb-9896-414e-8381-9c18ad5311f4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b73d86-6c05-475c-9b9c-e037ba0bd9c5", "sighting_of_ref": "indicator--26a5f327-0b2e-4627-a84f-8bd5f5cb1c69", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e27d96-5039-4fbd-8786-9aef43571d47", "sighting_of_ref": "indicator--4594c72c-d48c-4e47-8c82-48ef4d21a024", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64af3b79-1556-424f-9295-0014360f6770", "sighting_of_ref": "indicator--df408516-28fd-417f-9c3e-80467615718b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcff6969-e158-48fc-a76b-5138233cbbe7", "sighting_of_ref": "indicator--c8e2adc5-64f9-4870-91b7-268cec7be3ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee227f8f-5561-486a-a5b5-5029a90eef20", "sighting_of_ref": "indicator--13f542cd-ddc4-466b-95cf-eb7117383cb0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce5532c-0563-4b26-8908-748f26ed6724", "sighting_of_ref": "indicator--13f542cd-ddc4-466b-95cf-eb7117383cb0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffce0a6-311b-4afd-845c-4971110b73d8", "sighting_of_ref": "indicator--36b6b05e-e7e6-4959-b40c-92c20823e24c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68409438-4cc6-4198-a727-710b165b1a11", "sighting_of_ref": "indicator--36b6b05e-e7e6-4959-b40c-92c20823e24c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2298287-a849-49cb-8ec1-d0c43c99c73a", "sighting_of_ref": "indicator--6fa199ec-7b7a-413f-ad2d-e5118ea23abf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829d1a86-e206-48e4-b966-e22fa6d330b9", "sighting_of_ref": "indicator--f6adc02f-0db4-481e-9af0-5d990cf463ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5948ef-107f-4ec0-bd74-0bf14813f78e", "sighting_of_ref": "indicator--f6adc02f-0db4-481e-9af0-5d990cf463ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d12471c-1441-48d8-8de3-4bc03cb2d565", "sighting_of_ref": "indicator--45c2bf52-c532-4096-a6d2-2ac33b31f45a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48145dde-d0fd-47fe-a57a-f009a81e45bc", "sighting_of_ref": "indicator--8c19c52c-029c-4cdf-bf5a-3651c7ecc9f5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c9395e-665d-4ea5-9d2b-dc70cdf14e69", "sighting_of_ref": "indicator--ab58eeb3-ce2d-4d88-92f4-59f1783b3b3f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b21ec46-ae68-4879-842d-8fa3ccff817c", "sighting_of_ref": "indicator--93c2e075-2cf8-4664-84f7-e178c366def7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e03792c-909b-473e-b92c-fe34d44be041", "sighting_of_ref": "indicator--28bc0d22-a937-4237-aac8-9fdd5aa1a5f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29dc8d2-1098-410f-a846-d6b3adc8e05f", "sighting_of_ref": "indicator--ec5b40e3-fe6e-4f56-af46-cc3d5ee00757", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020394dc-3dd0-48d4-abec-e331ce2249f3", "sighting_of_ref": "indicator--b2162445-d4f4-4b4f-a975-35d5060d39f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79ea7ba-0b58-44d6-adf2-dc37ede246b5", "sighting_of_ref": "indicator--5ce478a4-102e-4818-b544-2578fb5ad55e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d838e69-0fc7-4dca-a2bf-dff83d0cd4d7", "sighting_of_ref": "indicator--5f8a8d43-bfbd-41dc-b48f-83a4b6412955", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3a0675-b8dc-4c75-8fe4-ef36ef2edbe3", "sighting_of_ref": "indicator--58df593f-cbf6-4ee8-b139-6374152405c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465aa838-f1ae-400b-a898-55e9a00041c7", "sighting_of_ref": "indicator--58df593f-cbf6-4ee8-b139-6374152405c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7eb58b-b053-414b-a9ba-17e907782980", "sighting_of_ref": "indicator--2f352628-20c4-40cb-bf3d-dea67cf7fbef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17863d4c-72e5-4998-82b8-f1c318f66df8", "sighting_of_ref": "indicator--2f352628-20c4-40cb-bf3d-dea67cf7fbef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a1f9d2-ca39-44d4-9749-467f25075cfb", "sighting_of_ref": "indicator--c3b76682-d0bc-4c55-90b1-cdbbf7e60f8a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f01c40-2b7a-4f1c-9368-bbfc1cf45ed3", "sighting_of_ref": "indicator--5d4d8d68-b18c-41b5-a29e-ee5124a10c0e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca42cfc5-850b-4d1f-9881-5440ea932faf", "sighting_of_ref": "indicator--6a85c18b-1632-44b7-8357-a936e90a564e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5f9c14-26e0-4399-b3f0-9c60e8089519", "sighting_of_ref": "indicator--d814f8a4-af9d-4033-901f-f9ac8bf83d99", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fee793-ca85-4d38-8b67-120953b419eb", "sighting_of_ref": "indicator--d6c43ab3-006a-4027-b16d-1dd9aaacc36d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a91d65-08e1-4cb6-ac77-48106c4b93a0", "sighting_of_ref": "indicator--fd1e5624-beee-4c38-a3fe-3c6b1612da87", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7923ce-4046-4049-822e-c7958f1cbf23", "sighting_of_ref": "indicator--9ea55af9-9bde-47d5-8dcf-78a9e84d5283", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f583aad-3a1a-4af4-9b49-ae153fb2d9bd", "sighting_of_ref": "indicator--3a7ad274-112c-4bf6-b21e-9b65d5406174", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb6b596-fe1d-4ad2-b987-a8c756404262", "sighting_of_ref": "indicator--da6c5f06-2d97-40df-9668-03c562e81b7e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f394f3cf-da66-4066-b15d-b57739a6f5cb", "sighting_of_ref": "indicator--da6c5f06-2d97-40df-9668-03c562e81b7e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5659829a-da03-46a5-8975-f9fb017a103c", "sighting_of_ref": "indicator--f81fab40-aeb6-4f04-98d0-8728e58505cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfbcbf5-e154-4c93-a87f-442388e08959", "sighting_of_ref": "indicator--3a231492-75d4-432f-9ee9-94c6b8ff4085", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92bc29e-8935-42bd-981e-9aa581a587d2", "sighting_of_ref": "indicator--7b46163b-84ac-4568-9ee1-07d199cf918d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd7eb38-c6ff-4005-a0c5-2143569b9884", "sighting_of_ref": "indicator--324b22e0-ede1-479d-a0dd-e470dcdfc683", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648998d3-6155-4ac2-bc72-1675e2996fb5", "sighting_of_ref": "indicator--1692cd81-68fc-40ee-8d51-25fb502fde35", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bee9ac8-6c20-4e2c-8749-d383b1f656d6", "sighting_of_ref": "indicator--3345de13-cf6b-4188-a24a-a6726c564f7d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28eb752-4e91-422c-8e5e-d22281f81724", "sighting_of_ref": "indicator--3345de13-cf6b-4188-a24a-a6726c564f7d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3995bd95-4fa4-4c8f-8bdb-8404ceef3309", "sighting_of_ref": "indicator--33060efc-7d43-4549-9464-88799ea5500b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecab1e4-0a45-4563-8845-a340348361f9", "sighting_of_ref": "indicator--fd4e3309-cc20-4d11-89ae-0cdd00e9bd57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ec45bc-847c-4e14-bdb9-3f5b3ea9baa2", "sighting_of_ref": "indicator--019fbfcb-74c0-475a-8a6e-be009c331cdf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780792e7-4680-460a-87e6-bfda6e1dc6ab", "sighting_of_ref": "indicator--019fbfcb-74c0-475a-8a6e-be009c331cdf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bfa093-ddab-4715-b460-aec9af2d4a5a", "sighting_of_ref": "indicator--2f5d361e-5600-43fd-b89d-94d54230ae2e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed249cc-aadf-4a35-8fd5-17dd3836cb11", "sighting_of_ref": "indicator--a00a7f24-feb4-4e5f-8965-198e4a1bf1ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82cac4f-5d63-40ca-b443-c2cb6033cd59", "sighting_of_ref": "indicator--d9634f35-dbb5-46e1-8cf6-60eb52cc410a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52c7497-d368-4665-8d03-750b77b03813", "sighting_of_ref": "indicator--96e54d4f-9ded-44ab-8309-68ad3bc67741", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9a4966-d6ef-4741-9e1e-9b731115cabf", "sighting_of_ref": "indicator--c2c55035-aa8d-40b7-ac88-7b07aa5b7736", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303920e8-7b4d-495e-973f-b85dd9ee4315", "sighting_of_ref": "indicator--7e48649e-7094-4b1e-a4e3-be629eba9768", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5883fa-9c45-4e1f-a2b9-69fc8f40b331", "sighting_of_ref": "indicator--7e48649e-7094-4b1e-a4e3-be629eba9768", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dd8908-9e6d-4cee-aecc-465dbea1187b", "sighting_of_ref": "indicator--2eee962e-605e-4a7d-ac49-d7af02d8996d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd875697-87a4-4afc-9626-8642cfa1ea4e", "sighting_of_ref": "indicator--2eee962e-605e-4a7d-ac49-d7af02d8996d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dda556-13da-4bd4-abec-95f2f56eca97", "sighting_of_ref": "indicator--c529ad42-f0ae-4fb3-9387-2fdba2486fc2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cda376c-d25b-4108-b78f-ca7316682219", "sighting_of_ref": "indicator--6e4cef2e-c7dc-4ba9-a2fc-f516cf735f72", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d642f6ad-8edb-49c4-9ca0-f77dfe1c52f1", "sighting_of_ref": "indicator--1628dd8f-0f76-4881-bb71-40f256c55368", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f15d5b-361b-4c49-9b5e-257ec36a270c", "sighting_of_ref": "indicator--69786c24-5c4c-44e9-be79-6583843f6f03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f045361-c111-4a31-b3d7-f552a8c50300", "sighting_of_ref": "indicator--920dd974-4f67-420c-bff8-72fd935729b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b29637-c34d-4f33-9636-cb8d0ca97a02", "sighting_of_ref": "indicator--fc2474de-535e-495f-ab37-dfab2b864d13", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc7d190-bc41-4298-a982-7334c0236c14", "sighting_of_ref": "indicator--5070397a-1afd-43d4-b6f4-fe97f6498237", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb440c1-e771-4979-b86d-3a9b8aa6da19", "sighting_of_ref": "indicator--5070397a-1afd-43d4-b6f4-fe97f6498237", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ad06d9-1e8e-4f33-b5bb-f9b62d386bc3", "sighting_of_ref": "indicator--dcec90f9-2862-4fe3-ad42-e9c47c222ca9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94521f79-6019-46f8-bc46-95324d47a87e", "sighting_of_ref": "indicator--eca5dde4-7ae5-4658-b664-4241ccde15d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33bb153-b9f0-4960-93b6-25cf644ee53f", "sighting_of_ref": "indicator--ede833d3-ae44-47e0-a016-d99fa96de01a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf0a2d0-08eb-4edc-bef1-722e5eab57de", "sighting_of_ref": "indicator--05c6e50e-f276-4302-93c7-8ba1c7af076e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffe966d-1399-4fb3-a62d-acd103559406", "sighting_of_ref": "indicator--2701e3d2-d4c2-4b05-be0a-76a3a2aef61f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192781a5-1aab-48a7-ba84-2079f2fca3b3", "sighting_of_ref": "indicator--2701e3d2-d4c2-4b05-be0a-76a3a2aef61f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9968e4e8-0275-4470-8608-fcd6758e160c", "sighting_of_ref": "indicator--e3498116-d3a1-4c10-bb42-e722da418844", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afc1333-fe60-49cc-8657-c3d4320eed7f", "sighting_of_ref": "indicator--1955fe49-d612-4178-938a-895a63daf2a3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc6cdf4-368d-4f52-a773-b84a5f496a39", "sighting_of_ref": "indicator--9ca2e0b6-05b1-42f1-a23d-260473b20350", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fbba1d-710f-4584-8868-b8cc5130632c", "sighting_of_ref": "indicator--9ca2e0b6-05b1-42f1-a23d-260473b20350", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e05323-883b-40ee-9884-4281524e8bad", "sighting_of_ref": "indicator--f54890ab-d99f-4231-85a5-c85c2174727f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3505b0-e75e-4d36-a7af-bcfe40b7fa9b", "sighting_of_ref": "indicator--7a744651-df16-4462-bede-c43ce6b9588c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f720e0-3238-48e4-b8cf-6370b766c991", "sighting_of_ref": "indicator--b7445963-bd5b-4acd-8828-023d63917d04", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763d865c-a27e-4cc2-91ed-6814b4f7bea3", "sighting_of_ref": "indicator--b7445963-bd5b-4acd-8828-023d63917d04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5975f2-2aa0-4824-af63-59a9457f5d32", "sighting_of_ref": "indicator--f3d5288d-ed3e-4d6e-a8ad-1f2b66a08cae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0d58bc-ec13-418a-b8c8-a61bec0a6786", "sighting_of_ref": "indicator--e6ea85b6-29c3-4168-a5d1-cc27bf925d3d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01977627-b8b0-45df-9e6a-d9a3e6a6a6c8", "sighting_of_ref": "indicator--da675818-5063-446c-aa43-3bd56c975896", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e722602-982c-4754-b3c4-c9f273c4df30", "sighting_of_ref": "indicator--da675818-5063-446c-aa43-3bd56c975896", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1530aa8-85ad-4039-922c-52b75285c0fc", "sighting_of_ref": "indicator--45fab5e7-cdad-4343-80b3-271cde8b753b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9b40c1-35ae-40df-b292-8c5d0a13e378", "sighting_of_ref": "indicator--58ee8ff2-5f66-47e3-a9c8-efd43446890d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae55d4cf-c77d-44fb-8e32-aaea8fe94912", "sighting_of_ref": "indicator--58ee8ff2-5f66-47e3-a9c8-efd43446890d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba76d26b-0c57-4a86-a154-7f9760587590", "sighting_of_ref": "indicator--d6dbacfc-612b-4868-8cd5-7cf0b39296ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa83f157-cd03-496b-be01-d9bc7f987816", "sighting_of_ref": "indicator--52b3e921-fbc0-43eb-8820-91177d5e6469", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe808a45-3bbf-4c20-aae2-983e8dece22f", "sighting_of_ref": "indicator--52b3e921-fbc0-43eb-8820-91177d5e6469", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db297a77-b9e2-40fc-aac0-ebdba5078c74", "sighting_of_ref": "indicator--69b3c1b2-ebe3-4208-9b74-eabf54b47c15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924590b4-5e20-407d-977f-f80d33c5ccc5", "sighting_of_ref": "indicator--69b3c1b2-ebe3-4208-9b74-eabf54b47c15", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a26825d-2aac-4a43-9448-e28d49e5ab7f", "sighting_of_ref": "indicator--6b7e5b11-311e-45b7-abe6-6d54f3ac56d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a44372-3527-48b6-b80d-11241ae67c99", "sighting_of_ref": "indicator--6b7e5b11-311e-45b7-abe6-6d54f3ac56d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141128a3-e22f-4cfe-80cb-1d1d1852a6b7", "sighting_of_ref": "indicator--dca67981-9011-49ce-b000-3f906a1966fd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2752c2d-7ee3-4757-b74f-e98508b19d3b", "sighting_of_ref": "indicator--0047addc-0547-4412-b67a-9444ee0f5926", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2623cf-6855-4436-8c42-8887f8e45854", "sighting_of_ref": "indicator--4fdb7826-2987-4578-a402-926043c3db8a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681db726-e664-4ba1-9d91-05ca0274e235", "sighting_of_ref": "indicator--d510fddd-3117-40b4-962e-718e785230bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4b5d09-4194-4d16-a3b4-186bdf040353", "sighting_of_ref": "indicator--0187f67b-0a1d-4039-9608-2ef2c14da7c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d70786b-4bfa-4308-b879-4f63f3414b38", "sighting_of_ref": "indicator--4d51fb45-3d23-44d5-85c9-ffeb191c84ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24ba1fa-1ae2-45cf-99b1-16747cc677ce", "sighting_of_ref": "indicator--d3c887be-0cdf-4fdc-9c71-4ee19291ad60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80326561-a427-4dae-b905-a3e2483ed246", "sighting_of_ref": "indicator--2d3a13ed-f3e6-4956-aeeb-c8a2b1c46c98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705717a8-242d-4e7c-a69a-592860487155", "sighting_of_ref": "indicator--b3f8015b-e79d-49e0-a766-a8f479963c1c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367b6bf6-a951-43e6-932a-ffcfcee8c816", "sighting_of_ref": "indicator--d28e6489-72f1-4086-baa5-c4d3dbbcc78f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d9b049-69d4-4677-acc1-e1ef306263e5", "sighting_of_ref": "indicator--d28e6489-72f1-4086-baa5-c4d3dbbcc78f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fb64c2-3409-47e3-94fa-91b60e632fb7", "sighting_of_ref": "indicator--de8cc6c5-364b-45cd-bd06-5e4b392931f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fc20e2-327a-42c0-b5ab-9f7e88890921", "sighting_of_ref": "indicator--de8cc6c5-364b-45cd-bd06-5e4b392931f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6de37c-e70a-4976-9e82-7e8a11d9fdf5", "sighting_of_ref": "indicator--e105a54a-cb09-4a41-a2c8-b51a442a125b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d971b872-7bce-4b89-929e-f1d379726168", "sighting_of_ref": "indicator--e105a54a-cb09-4a41-a2c8-b51a442a125b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8542f4a-0779-4fd9-b578-b41c546b9840", "sighting_of_ref": "indicator--b94289cb-79cd-4d29-973c-1ff984d4791d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d68638c-1750-4f02-b6a5-fb6a3ec6f465", "sighting_of_ref": "indicator--b94289cb-79cd-4d29-973c-1ff984d4791d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03166b0-df2f-4be1-9315-824a743e9f71", "sighting_of_ref": "indicator--6e0c3482-f691-49eb-a7e2-1a02f717717d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca62fe12-48ca-462b-bb58-90c7844bc409", "sighting_of_ref": "indicator--aeeb602b-4959-4938-82f5-38ca3c13b3b0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b442c5-610d-4962-83c2-1708657a705b", "sighting_of_ref": "indicator--3aaa7021-bdd1-4dd5-8724-c0dba04a9614", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8070f00-b58f-4b2e-a52a-3ac827d41c7d", "sighting_of_ref": "indicator--4e989003-5abb-4eb2-b35b-8af6bac3659a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2599cb4d-524e-4750-84cf-a8da24ef6216", "sighting_of_ref": "indicator--4e989003-5abb-4eb2-b35b-8af6bac3659a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bc51cd-39c3-4c52-a98c-f8857b01764c", "sighting_of_ref": "indicator--a2908f14-d20c-4660-83c9-059616e0912f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae668f2-2128-4aec-9475-5a81832316e4", "sighting_of_ref": "indicator--a2908f14-d20c-4660-83c9-059616e0912f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229bad22-40f1-425f-a2e3-f9d47e33c006", "sighting_of_ref": "indicator--faa07fdf-211a-4d0e-8883-ffaa558cc11b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6427f00d-84ef-4d2a-84ca-b0542e80b744", "sighting_of_ref": "indicator--c1b48e03-3d27-4416-af18-50ab511f0920", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddfcb57-b453-43c8-b1b0-c09082bb4164", "sighting_of_ref": "indicator--f5b3736d-9dd7-492c-9aee-1b52af10c91d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5c3b93-3d7e-401c-bcf6-7a15bdb9b353", "sighting_of_ref": "indicator--306f6b52-6818-4617-9548-57fcd4dc5caa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb29bc33-3da0-4d56-8530-53050fc106e0", "sighting_of_ref": "indicator--e5e7c86a-201d-4743-843a-4d06e1f5a9e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52250d0f-0b14-48df-bcce-c2b86647711a", "sighting_of_ref": "indicator--bbf5506e-a68c-4f82-b4cf-27cff3eea409", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b273f0ca-c533-4082-a17a-a30768c3740f", "sighting_of_ref": "indicator--87a05d3c-3270-4b1c-9cac-2de1791841aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a3f58c-4cb0-4cef-8b2c-6556c6484614", "sighting_of_ref": "indicator--7bf9b32a-d5d3-4835-866e-e8d19faf5437", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186ae5e5-d120-4d54-ba06-9a481334502a", "sighting_of_ref": "indicator--43d54050-2592-4f13-ab9c-10fbaef33483", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70590d2-b72d-4021-92b9-f977bafa4884", "sighting_of_ref": "indicator--ed3524c0-e903-45d6-967c-47277a5d6c73", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb47a13-e332-4283-bb47-9d01a4aea252", "sighting_of_ref": "indicator--ed3524c0-e903-45d6-967c-47277a5d6c73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed4ae45-1ab4-485a-ad60-e50b9aa7677a", "sighting_of_ref": "indicator--7c0be0c4-2563-4323-9228-58fdc3875a5d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d484f4b-7c0a-4dd1-a7ab-a7ac77a7989a", "sighting_of_ref": "indicator--db04b3b4-d07c-4c61-ae11-eec634df65f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55721284-b4e2-4f4c-8443-015f0e6dbf86", "sighting_of_ref": "indicator--068f9053-0bc0-4866-a6fc-b805fdd22ad8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19388db-be44-4853-958f-baad147b4079", "sighting_of_ref": "indicator--0a7073c6-1fbf-4e7b-8953-c9a6fdee2c30", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c108a7-3a66-44f7-99ce-85fecc30ff0d", "sighting_of_ref": "indicator--441c6654-8253-4dc5-a08f-57325e0651f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18b7797-22a2-4910-a3e6-3d95162a4037", "sighting_of_ref": "indicator--179888a1-7dc6-4e46-b276-cbc90a9b1be2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9187c4-f0ac-4868-86d4-ddce6ecc5c5b", "sighting_of_ref": "indicator--11d8bb1e-197e-4593-b511-1488f6815a8a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7632147-68ac-4a6a-b809-1e19db0f3dac", "sighting_of_ref": "indicator--dc870097-36f0-46f6-8db3-b3f88461e08c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28a7d8d-206b-487e-ba2f-b56edc5dcec6", "sighting_of_ref": "indicator--cc97e2f6-a4fc-4757-abf3-bc254c4c05e0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e28132-2080-4b24-9630-092d63a79638", "sighting_of_ref": "indicator--b0504ec8-3ec9-4a71-bfd4-ea4890aabd04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840f0ac5-ccc5-47de-967a-4b5abb7446cd", "sighting_of_ref": "indicator--511849e5-df0e-4754-8512-0cc875690ea2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c162080-a421-4728-8127-3911bf8f9b8f", "sighting_of_ref": "indicator--2818e17d-faae-4a96-b24c-3394ed54d8d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8239132-0b88-4164-8653-f97e625399b2", "sighting_of_ref": "indicator--bf76848e-50c1-4f38-a6c0-e0e82915622b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1116defc-759d-473a-9dde-7b429cfa53bd", "sighting_of_ref": "indicator--d3156879-fbe7-495e-aaa2-1568260c95bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cb7c79-249f-442c-9441-6a7ed27b07af", "sighting_of_ref": "indicator--cdcebcb4-d8c0-4ea9-9b63-36536e6843c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51455f3a-0a29-4883-bf5f-8f568774ec2b", "sighting_of_ref": "indicator--cdcebcb4-d8c0-4ea9-9b63-36536e6843c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733531a5-e54f-494e-846b-15d7545fa545", "sighting_of_ref": "indicator--cde47506-cb99-4790-b738-8513281dbd22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228d6f93-34e5-45e8-a554-6f959f99dd35", "sighting_of_ref": "indicator--87135d85-f795-4b4f-ba21-531f18c204d4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdbdd4b-dd25-48ff-a911-ab15af7aa8f9", "sighting_of_ref": "indicator--87135d85-f795-4b4f-ba21-531f18c204d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7905ac96-74c9-4c30-b28f-f98f384d0c8b", "sighting_of_ref": "indicator--e6bf9a84-4143-431d-a5db-3f8e1df59b18", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a89a62e-f6bf-4b1b-8fb6-3a6022f7d42b", "sighting_of_ref": "indicator--a0e81e45-b87e-4679-9fc7-8aab2a762161", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962a0886-e9c2-4706-858f-1dadb14eb29d", "sighting_of_ref": "indicator--ab31d5ce-4942-4fc4-8231-909e8273fa84", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae1a555-cbea-4bac-9e21-e38d9129de54", "sighting_of_ref": "indicator--3a3906c0-f4fb-48d5-88cb-7fc4b4bfb21e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3050b22-9cfd-4675-80a5-547a2eeb1e6b", "sighting_of_ref": "indicator--98e941f4-6f34-4910-8460-fd7d8a6d2e25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0bbc45-6a12-42ac-9f28-bdadbe08b17a", "sighting_of_ref": "indicator--efdfc38a-260d-4416-a443-57e5ca5dc5be", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152758f3-2998-469d-a84f-53b66b662216", "sighting_of_ref": "indicator--efa4bdc3-064e-4d62-bc3a-17c08b9de186", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6730883c-4ca5-44db-9782-fb0b952162c9", "sighting_of_ref": "indicator--1becf4a0-ffaf-42dd-8453-4f030d309049", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8646e36-a3ad-440d-bcc1-8ac8a63e53e2", "sighting_of_ref": "indicator--b628fd00-4f72-4c5b-8d8c-8a6ae120f606", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132ac25b-b2eb-45dd-98bc-ef1493cccc7b", "sighting_of_ref": "indicator--8ca765b7-b3fa-44bf-9390-3531e03a769f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df2b7f3-83a0-4650-9549-e40decec0878", "sighting_of_ref": "indicator--9d969ca9-9e04-4acc-97f6-634f2ef96366", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cccc9b-f067-42c3-8e63-6c9e8a3ba826", "sighting_of_ref": "indicator--e4c6dc18-5642-4aa5-903c-27d508023abd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f496614b-0146-4020-b387-e9371694f854", "sighting_of_ref": "indicator--8b26ab3d-c6bc-4c12-b8a5-e34e3527012e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c07810d-a7d1-46db-8596-868bb6b71b48", "sighting_of_ref": "indicator--534a0633-f5b1-4172-9ddc-7fdb653ac3d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef55ea8-7bad-4783-9b89-166f48aadc45", "sighting_of_ref": "indicator--3cb28e64-96bf-4a0b-b537-abfbd549afb3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0b6494-d681-4778-9c3e-c564bc726c06", "sighting_of_ref": "indicator--dd492d07-b0a6-4251-aa22-fecae5fa5fca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0659eac-b224-43ff-8451-e299c7659888", "sighting_of_ref": "indicator--dd492d07-b0a6-4251-aa22-fecae5fa5fca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b098dc-5c5c-4345-bbae-4b109e18d760", "sighting_of_ref": "indicator--697d6afc-f263-4d04-9955-20aecc4454c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d72eda4-26fb-49d8-88f1-47fdc812a1d3", "sighting_of_ref": "indicator--86b5afa9-2d8d-43bb-81b2-e5c7a000b3bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec83d28-bcdc-453e-b7c8-e01450292356", "sighting_of_ref": "indicator--192d2e3d-b779-48db-a0b1-3752788bbe70", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b999e8fe-7439-48e6-95de-b59ea7a0659a", "sighting_of_ref": "indicator--921a7a96-1590-465a-95c6-68ca3a9ad9e8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c978d62-52f8-4dfe-afe4-db95e0de3576", "sighting_of_ref": "indicator--6b70552c-65ad-4958-b9ce-bf8f45c438a4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31f51d7-7f79-49df-8f19-0d5752dc2068", "sighting_of_ref": "indicator--19ad78e4-d70e-4c18-901f-f2fbf36c5757", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54e7098-69fa-47b0-9822-99f44aee82f1", "sighting_of_ref": "indicator--675b05c7-1fb9-4edf-83fb-d24193cbe933", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebd157c-a0b5-4536-bb1c-4a4e133b44fd", "sighting_of_ref": "indicator--675b05c7-1fb9-4edf-83fb-d24193cbe933", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c0eb42-a265-442e-8c2d-be0ddbc2eeb5", "sighting_of_ref": "indicator--ca08b831-bae7-4f23-8a97-a2953e9b5ef9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce54416f-70ee-4d02-bba1-c753716270d6", "sighting_of_ref": "indicator--ca08b831-bae7-4f23-8a97-a2953e9b5ef9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cf3111-52f1-48b5-82ba-2eef29e8bb2d", "sighting_of_ref": "indicator--6f7ca4f8-04bf-4265-815c-f17a02abdf0b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b949f57-8835-4b4d-9a24-a37d1c13235e", "sighting_of_ref": "indicator--36f75ee9-0a2c-49b8-85ca-11b7fca423b3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8407d8dd-cf2c-4970-94b9-455acd6f3d2b", "sighting_of_ref": "indicator--546f309a-3e6e-4230-999a-4fbfb922daa8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccddb9e0-c5b2-4f38-8363-d3f2d15180d0", "sighting_of_ref": "indicator--09b2b2dc-8238-4e06-96b3-cfb837192749", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebacf17d-4c95-4c74-bc0d-019da86ba5ec", "sighting_of_ref": "indicator--49e64603-2a8c-458c-ae97-ac6669fb9112", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdb7f12-7ade-4f57-880d-f25bd9830cf0", "sighting_of_ref": "indicator--49e64603-2a8c-458c-ae97-ac6669fb9112", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b14828-a933-4492-88f2-3ed65bc2d397", "sighting_of_ref": "indicator--2e27c422-2ee3-49c0-b712-4dec90eb43d5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e2cbae-f0ac-44f8-9dc3-78d877408836", "sighting_of_ref": "indicator--b0dcbe6d-ba39-459b-9eca-73f7691862d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34955f70-d0d2-4ed0-ae00-4db7ff5901de", "sighting_of_ref": "indicator--9d4719fb-5b91-417a-8e39-6758c29bd532", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c462a5c-9b17-491d-b82f-65a08a02438b", "sighting_of_ref": "indicator--9d4719fb-5b91-417a-8e39-6758c29bd532", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d86cb5-fcfc-44c8-a8c0-56b19c416921", "sighting_of_ref": "indicator--dea03ab3-ef76-41ab-b4d5-fa700547a775", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16e8e6d-e708-4b90-913d-72448dc3548a", "sighting_of_ref": "indicator--3f24a9d4-85ad-464e-a152-d300717dc14b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b70244-9534-4b6b-888e-abe55d3bc4ae", "sighting_of_ref": "indicator--83f7d353-4e0f-45f4-a130-dc9245c866ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0413157f-04ac-4298-b066-d5c380471063", "sighting_of_ref": "indicator--958a8143-a183-4be1-b19f-a784962a3e44", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7603facf-84f7-4969-b2e0-155cd0f45e5a", "sighting_of_ref": "indicator--bf4720a0-7357-458b-aed5-cec14a2f0202", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b23dc99-004f-4ea1-91a5-4c202f83f1d4", "sighting_of_ref": "indicator--29e4a8f0-8841-479c-867e-8ec0a85b4315", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f28938-1302-4732-a6fd-c6489175cb8d", "sighting_of_ref": "indicator--eab2c5a9-056a-4df8-b972-9e95d35b7da0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73700897-5a75-44ec-8c9d-e276f631ad88", "sighting_of_ref": "indicator--71e54db6-e69f-4890-ad04-b7779879af9f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b3e66b-8763-4df6-ac1a-4f1219046800", "sighting_of_ref": "indicator--8554c248-5419-4b54-b1a9-f56d1039f2dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31630c5-2bdd-4fc9-a9ce-b69f27becf90", "sighting_of_ref": "indicator--50653886-34e4-4ecf-a0d2-5e79bff731b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47fdaf7-4ff2-443e-b028-138107bc17ac", "sighting_of_ref": "indicator--1810aafe-df4e-4bfe-be5b-6bef1d11f39d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3f5c03-6bcc-42fe-9890-b4a8e7f3b7f5", "sighting_of_ref": "indicator--6ca7006e-7902-4ff7-892b-27921ec0871c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857c246a-72a6-435b-bb9f-52ffae150711", "sighting_of_ref": "indicator--b32830c2-ca94-4c94-854d-114bc066df09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beec2d71-6c75-4bc8-bbdd-c765526373b0", "sighting_of_ref": "indicator--5a1c8ebc-bba0-4857-acef-b81eb2fba312", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10e756a-d40c-473d-a1ff-087b1f10f065", "sighting_of_ref": "indicator--6a9b64f1-ddcf-49f1-a4f1-cf5551d48ea1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241ee536-ea57-4f3f-acb2-1b1ddad80d3d", "sighting_of_ref": "indicator--6a9b64f1-ddcf-49f1-a4f1-cf5551d48ea1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028b7911-3d1d-424b-885b-46f814d85865", "sighting_of_ref": "indicator--9e66b797-c3e0-47bf-8493-7dedc2b1426a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979dd89e-53f5-4ac3-bd61-74d99a351325", "sighting_of_ref": "indicator--9e66b797-c3e0-47bf-8493-7dedc2b1426a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd6fc4f-2177-4f38-9a6c-097133fb46b4", "sighting_of_ref": "indicator--85b26481-02f9-4bf1-ac37-e8ffdd3505c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f33692d-c425-440f-8023-141c7b697496", "sighting_of_ref": "indicator--85b26481-02f9-4bf1-ac37-e8ffdd3505c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be0401c-1117-49ee-a22a-c3a896add6ad", "sighting_of_ref": "indicator--40780051-3cca-4ecf-99c3-657437e30fbb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea5996e-1beb-4481-acdb-7a51a3614779", "sighting_of_ref": "indicator--40780051-3cca-4ecf-99c3-657437e30fbb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233ce2cf-c989-4684-ae0a-c5364e65e247", "sighting_of_ref": "indicator--160ccf43-2871-4f16-9ae1-d43e5998eccf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b538f7-d37c-4c1c-b554-e37a7d0cb64d", "sighting_of_ref": "indicator--7f36de1f-6eaa-4503-9fbe-20ef033e189a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2fab81-f73e-477f-8ca7-cff3208b11a6", "sighting_of_ref": "indicator--7f36de1f-6eaa-4503-9fbe-20ef033e189a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6375181-b4c7-4dcc-b9de-6b102c45e6e2", "sighting_of_ref": "indicator--b3fdf95a-e929-49bb-850c-163e13f9ddb6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc47fb3-17ca-449d-a7be-275bb7380b02", "sighting_of_ref": "indicator--1a8fad23-6ce2-47c9-8951-b35fa7132a6e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b33957-3c96-4e47-a394-799bd3f31608", "sighting_of_ref": "indicator--1a8fad23-6ce2-47c9-8951-b35fa7132a6e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41422e03-a56a-4ac5-8f08-ef42bf36b538", "sighting_of_ref": "indicator--498a80d5-40fa-4385-859d-0e508d3337ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99117548-ca36-42c7-98b9-06644ad1dae4", "sighting_of_ref": "indicator--498a80d5-40fa-4385-859d-0e508d3337ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90e817f-6316-4719-9708-76fe7d2a6a54", "sighting_of_ref": "indicator--4700bf2f-cb0e-4481-9e6e-83e76a6ab5aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07c3a7a-2d86-4147-8fd9-83a1f4f4a540", "sighting_of_ref": "indicator--4700bf2f-cb0e-4481-9e6e-83e76a6ab5aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe47465-017f-46e8-9745-39a58a5a6ef5", "sighting_of_ref": "indicator--f30d7e06-3b7b-4b9f-9086-900d219fd676", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4a874a-0ef9-4be5-9271-38c77249639b", "sighting_of_ref": "indicator--f30d7e06-3b7b-4b9f-9086-900d219fd676", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fc002e-e8bf-4670-afa9-d49674220e73", "sighting_of_ref": "indicator--cc1ca3a2-ca07-4285-9bc5-00e69c4478f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9793fc-31ca-47ff-91ee-286676b87411", "sighting_of_ref": "indicator--cc1ca3a2-ca07-4285-9bc5-00e69c4478f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d09c22-da3b-45f4-a550-cc24ccac5423", "sighting_of_ref": "indicator--a0653ed1-0b77-48ba-9f58-f02587a610fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861fb839-10c5-49ec-b7ab-d442b6b05d11", "sighting_of_ref": "indicator--a0653ed1-0b77-48ba-9f58-f02587a610fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e1e57c-a324-4576-8c76-c6aa5dd2f49d", "sighting_of_ref": "indicator--be935850-bcec-4e83-b291-d781bd98758a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a16251-19b7-4a31-ae53-47b6dc75ce2c", "sighting_of_ref": "indicator--be935850-bcec-4e83-b291-d781bd98758a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa1216f-eddd-49b2-875c-2a196bf1e619", "sighting_of_ref": "indicator--09718174-d54e-4f3f-9684-93d2152e03c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2f2047-30ac-4c50-b318-bcfb8a7c6c50", "sighting_of_ref": "indicator--09718174-d54e-4f3f-9684-93d2152e03c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed72e59-4f9b-47a4-95df-942bcd452567", "sighting_of_ref": "indicator--c859ce7e-c3f6-49cd-b9aa-2667ebed149f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f578932-dd19-42fe-9af5-4f14461dd4ea", "sighting_of_ref": "indicator--c859ce7e-c3f6-49cd-b9aa-2667ebed149f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04178844-d818-4e7b-b726-b60f3ddb18c4", "sighting_of_ref": "indicator--a809f0c2-d37b-4d77-bb24-7d58aeb5fb6f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18d79b2-64d7-49b1-8dcc-9ed57c0b51e1", "sighting_of_ref": "indicator--2968c793-ef68-4449-beff-3981bd85c8eb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f521c3-f07f-4583-8d4f-362558f62e51", "sighting_of_ref": "indicator--7376b12a-945c-4a75-87b1-e0d926cecb7b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff475864-efc2-47d1-b54c-859ae2bd24ae", "sighting_of_ref": "indicator--dc503a07-1529-416f-ac9c-2388492aee8b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19b2280-97ad-4531-b7ea-b8afbec81d8b", "sighting_of_ref": "indicator--86f9d5d4-3164-4c4e-a0c9-44685275cf64", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d490c37e-3e03-4673-aba1-7656e98ce778", "sighting_of_ref": "indicator--1b4c3090-3827-488e-93b7-d418f29823f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5660352a-79b4-4de6-94c3-be544048813d", "sighting_of_ref": "indicator--1b4c3090-3827-488e-93b7-d418f29823f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbf1ea8-c150-4e71-9e35-7e0332f0b8a3", "sighting_of_ref": "indicator--68b05b6c-9d1c-4399-afbb-a2176a4999cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcf72bd-24d1-412d-8e47-ab4ecc44f127", "sighting_of_ref": "indicator--68b05b6c-9d1c-4399-afbb-a2176a4999cd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c676e1-744e-4177-b336-763f95eef758", "sighting_of_ref": "indicator--d67771ed-56b8-48a4-b047-a173751ef83d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbb2474-aab0-4217-b372-7a6a5dd20893", "sighting_of_ref": "indicator--d67771ed-56b8-48a4-b047-a173751ef83d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a716c1f3-c4a1-456d-ade9-f70c3f3f7a23", "sighting_of_ref": "indicator--d675efa2-3509-4667-968a-5776a0cab582", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e54ef58-4d38-4001-98b4-58a46ed67f54", "sighting_of_ref": "indicator--d675efa2-3509-4667-968a-5776a0cab582", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1c69e4-cf93-4ee6-bc94-571db83304e1", "sighting_of_ref": "indicator--eedda0d8-befe-4e5a-80ad-9aa2bb056a3d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630cff62-b3b0-42b5-966e-872bbf26cd95", "sighting_of_ref": "indicator--eedda0d8-befe-4e5a-80ad-9aa2bb056a3d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93010d84-1f66-46fd-b270-31c209e0999e", "sighting_of_ref": "indicator--7fc80cf6-03eb-4768-8bd2-422383d8d55f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90003b1-ed64-4c87-bf87-f326bef4684b", "sighting_of_ref": "indicator--7fc80cf6-03eb-4768-8bd2-422383d8d55f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0706e87-8b85-46c9-9903-829a316c1a0b", "sighting_of_ref": "indicator--0d0a2b6e-9393-4a0b-9cca-5346f100be61", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942412b7-2cf6-45e0-ac49-8028aac7a39b", "sighting_of_ref": "indicator--0d0a2b6e-9393-4a0b-9cca-5346f100be61", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c9172f-cdae-43c1-bddb-9215209b38ed", "sighting_of_ref": "indicator--c284c289-986f-4522-a398-498319bd0cad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6315faf7-2664-414d-ad01-6cc4fe9fc089", "sighting_of_ref": "indicator--c284c289-986f-4522-a398-498319bd0cad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d278cb26-7fa4-4b24-ba30-c166d0b345e7", "sighting_of_ref": "indicator--2ce19428-d8d0-450d-9822-3b08e36124c9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7918268e-2792-4356-9afa-52ec39703977", "sighting_of_ref": "indicator--7ee318c8-dae5-459d-8a60-044a65f13f4c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6383ba8f-3dc9-4450-8f36-80edbbb47366", "sighting_of_ref": "indicator--7ee318c8-dae5-459d-8a60-044a65f13f4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227e0b04-4dcc-45ca-89b1-2a0c66736044", "sighting_of_ref": "indicator--6b6577b5-8153-49e8-8cdd-c6ac03fa9768", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf308f2e-b719-4f62-b257-cb630edbb19a", "sighting_of_ref": "indicator--c6bd343e-e0bd-4e76-83be-3f9749a5932b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd353c2-b5b2-4f74-b4ca-f2cf4f56aaba", "sighting_of_ref": "indicator--c6bd343e-e0bd-4e76-83be-3f9749a5932b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385f954e-fcdc-4a27-8efd-c485808cc2e6", "sighting_of_ref": "indicator--2488db59-0f3a-4345-9e7e-a0d58156a174", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e6a848-986a-42ac-a6ca-ee62f54cf2a7", "sighting_of_ref": "indicator--2488db59-0f3a-4345-9e7e-a0d58156a174", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d11eb9-9706-420a-a28e-6617c539c5bd", "sighting_of_ref": "indicator--dc1cc61f-dcbf-41ea-951d-46e21121bdc4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5969c991-c99c-4088-a446-88cb2d551ebf", "sighting_of_ref": "indicator--dc1cc61f-dcbf-41ea-951d-46e21121bdc4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fd198d-18e8-481d-86f2-e8e2615219f4", "sighting_of_ref": "indicator--661681e8-7076-431f-8624-8025db147c13", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470562d9-8048-4bd6-aac0-be952c26c448", "sighting_of_ref": "indicator--661681e8-7076-431f-8624-8025db147c13", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a650dfb-67e6-4996-8511-9417d1b7c3e2", "sighting_of_ref": "indicator--ee2bed0d-9177-44c6-865d-476f6678bbfc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1711b4-af4e-46f4-a2ef-e85067b5e907", "sighting_of_ref": "indicator--ee2bed0d-9177-44c6-865d-476f6678bbfc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6989bc77-7374-4ea8-b58b-0367f3119674", "sighting_of_ref": "indicator--0f4d4049-71da-461f-98b3-766f49e8415a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf97e712-8b03-44b9-8f2b-975d94359e63", "sighting_of_ref": "indicator--0189be12-0df7-4386-94d0-e209ca68b43b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8aef65-1c16-49bf-9698-3cd826106ec1", "sighting_of_ref": "indicator--e769e048-90ae-4f55-a941-5167efdd7b65", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dfc0fc-9592-4091-bdfa-d3eb8834a700", "sighting_of_ref": "indicator--1745976d-ebf3-4c74-ab9e-e78b3f4d9992", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26905ffe-89ce-4e21-8aa5-8e21c99c9061", "sighting_of_ref": "indicator--859f6cac-efd0-4d37-9ca7-55cbd5bdb164", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4017822a-8e6d-41f9-ac37-9e90cd80c96c", "sighting_of_ref": "indicator--ecf07a3e-f186-406d-aecc-b03ec34c7c4a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c56609-c1d9-48cb-98b2-8a03373db290", "sighting_of_ref": "indicator--ecf07a3e-f186-406d-aecc-b03ec34c7c4a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2078cba1-92ce-42b8-9441-067465925d75", "sighting_of_ref": "indicator--6d944e06-dd28-4426-b359-411acb40ed0f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862d4068-20e1-42af-9cf6-a05cf1e32418", "sighting_of_ref": "indicator--6d944e06-dd28-4426-b359-411acb40ed0f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdeaa33-b41d-4632-a39b-bd1cf8d0382d", "sighting_of_ref": "indicator--a6cb31b3-0024-4405-8f34-3049426bfadb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326be617-404f-4937-bd22-a58910d5b56d", "sighting_of_ref": "indicator--a6cb31b3-0024-4405-8f34-3049426bfadb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69ad046-9d47-45d6-84c9-cde88566a235", "sighting_of_ref": "indicator--718ad2ea-7947-4f97-a05a-51874a59af22", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb59c2f-047c-48c5-9db8-9165a138b5ec", "sighting_of_ref": "indicator--718ad2ea-7947-4f97-a05a-51874a59af22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0effec58-2a10-4589-8a80-d70c2c3a4eb4", "sighting_of_ref": "indicator--49ee1faa-b52f-45ae-9477-a758da41fcf5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1548c644-3684-4436-a41c-d58153470325", "sighting_of_ref": "indicator--49ee1faa-b52f-45ae-9477-a758da41fcf5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034219da-ab76-4639-acdf-5081b8fa954c", "sighting_of_ref": "indicator--d2ef71cb-66c8-45b1-80a8-3e17f97210a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ba8d61-8edd-42de-9b73-53874d60ca62", "sighting_of_ref": "indicator--d2ef71cb-66c8-45b1-80a8-3e17f97210a0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4863e7c-67fd-44eb-b104-1fbf0ae40915", "sighting_of_ref": "indicator--f0323432-2eff-4184-894d-f9909ffc3cf6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4ac128-9693-46f2-ad1b-cc591934d5ff", "sighting_of_ref": "indicator--f0323432-2eff-4184-894d-f9909ffc3cf6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b1728b-6caf-419a-98ca-56bde4941a57", "sighting_of_ref": "indicator--4ffeda6d-dec0-4e52-8f5e-28e453e5a86d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6560888-9293-429e-b33d-1f4dfee844c7", "sighting_of_ref": "indicator--4ffeda6d-dec0-4e52-8f5e-28e453e5a86d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a723bdaa-65dc-45de-9e9c-5283b959e6b9", "sighting_of_ref": "indicator--02ba8ff4-3e44-4134-9292-cfa3470d363a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75eabbbe-45c4-4b26-a0a9-f235b29fc3f6", "sighting_of_ref": "indicator--53a73735-ca39-4b21-8cba-8ee7dde8c34c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d3d685-726e-4b97-b952-7b81e9a51a6d", "sighting_of_ref": "indicator--53a73735-ca39-4b21-8cba-8ee7dde8c34c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f56d77e-999d-44eb-9933-9dfe62fd59be", "sighting_of_ref": "indicator--69b36752-c91b-4667-a273-036b6eddf8a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1da0da4-e0fd-4832-be06-1094c1bcd9de", "sighting_of_ref": "indicator--69b36752-c91b-4667-a273-036b6eddf8a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148fc154-06df-4dda-bd87-71531d6eba35", "sighting_of_ref": "indicator--499a5fea-5a3d-46a3-8576-4c646ef0084c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd835e0-d2b8-4cf0-b3c3-a4392c410ea8", "sighting_of_ref": "indicator--499a5fea-5a3d-46a3-8576-4c646ef0084c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cf4923-c73a-4782-97dc-b6e131c75193", "sighting_of_ref": "indicator--ff7dc008-0c4c-4898-8239-69e6b9fff1dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e21f1db-02d6-498b-a2d5-68e4e39d5c3f", "sighting_of_ref": "indicator--ff7dc008-0c4c-4898-8239-69e6b9fff1dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11e9b77-f9dc-42a4-ba5d-5538dc8022cf", "sighting_of_ref": "indicator--57ec6807-82b8-41a3-a555-43a7a20d48cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345803ef-e0b3-4341-9317-963f79c030a0", "sighting_of_ref": "indicator--9028ebdf-ff78-4b1f-8dd7-571405a482d4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78fe3b7-653d-4da9-821d-961438aa7a26", "sighting_of_ref": "indicator--c31de2fb-92f2-409d-82b3-abd4c93feba5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1f5cb6-57d2-45cf-87e3-14455d349fe6", "sighting_of_ref": "indicator--ed828471-93e4-48d4-ad57-bc23b7c9471d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e40a42-27c0-406e-ad39-e1ae5a435369", "sighting_of_ref": "indicator--388f99b0-8303-40d4-aed2-7d6238644735", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01843db-5d26-4ea7-a2fc-70e844c55e5d", "sighting_of_ref": "indicator--17718fb0-3d89-457d-bb19-c131162ebc81", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9723936c-ee03-4c80-8b69-b3d745c768d6", "sighting_of_ref": "indicator--aa1a1f99-bf76-4256-8310-d043d74ce33b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14739b40-b159-4e42-8fdf-34a5dfe04162", "sighting_of_ref": "indicator--aa1a1f99-bf76-4256-8310-d043d74ce33b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb319eca-d599-4b03-97f3-fc1abea7af53", "sighting_of_ref": "indicator--d012a6b0-ce7c-4988-ad7b-8278f7f90ab4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6554584b-fba6-4b46-880e-756ce2acee98", "sighting_of_ref": "indicator--d012a6b0-ce7c-4988-ad7b-8278f7f90ab4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f85d86d-f921-4dd2-8dec-02a13e1cc356", "sighting_of_ref": "indicator--d27d3846-27e8-4671-9887-2dd2ef31f741", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b6dc73-5239-4b38-8c72-f82b607e9895", "sighting_of_ref": "indicator--d27d3846-27e8-4671-9887-2dd2ef31f741", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd77a6f4-6c55-45b2-a362-3d3744ee4327", "sighting_of_ref": "indicator--effc3fff-fb45-4d4f-8197-21c14283d11c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c829484-af00-4f9d-b6a1-b53875b091ca", "sighting_of_ref": "indicator--effc3fff-fb45-4d4f-8197-21c14283d11c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9028f72-2e11-49c3-83e2-993fe749b1f6", "sighting_of_ref": "indicator--90fd5da4-0382-49f0-9964-7c59f561a98c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1c80ad-0edd-4e33-9db1-4e0a6f796547", "sighting_of_ref": "indicator--90fd5da4-0382-49f0-9964-7c59f561a98c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db23603e-9565-4678-858d-dced1afcce09", "sighting_of_ref": "indicator--e0f8c022-58ec-4f8c-9174-972cd35807d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e91c27-48f3-44e7-b744-a80de043080f", "sighting_of_ref": "indicator--e0f8c022-58ec-4f8c-9174-972cd35807d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c7c7c1-eeca-467e-9197-f56db5265341", "sighting_of_ref": "indicator--b7497986-349c-414f-bdef-85c31be2a140", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1a8675-a702-4cef-9ad2-fa2260bcee2b", "sighting_of_ref": "indicator--93dcaecb-d9ea-48c7-8b1b-4722846037d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffd736b-1fdf-4b26-82d5-c804eacb3de2", "sighting_of_ref": "indicator--93dcaecb-d9ea-48c7-8b1b-4722846037d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab66050-3f56-4498-a325-6353c2ee9daa", "sighting_of_ref": "indicator--8193d4e3-bfc7-4d33-b9b7-22f2c2a43951", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc01f108-2947-4dee-80d6-87847f08a230", "sighting_of_ref": "indicator--8193d4e3-bfc7-4d33-b9b7-22f2c2a43951", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611915cc-3d0d-4e44-a87b-06d8fe0e96b3", "sighting_of_ref": "indicator--35b79ff6-8305-4081-acc3-07c83c806b8e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4b7fe-2dff-4305-81d8-8e6eae138c01", "sighting_of_ref": "indicator--f3080f5a-31f3-48ff-ab7b-8d6ce37ad9f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2c3b12-1567-4b13-82bc-8a8f6c5b9025", "sighting_of_ref": "indicator--f3080f5a-31f3-48ff-ab7b-8d6ce37ad9f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f091aa8-ceb5-4aeb-a166-7859698c4052", "sighting_of_ref": "indicator--0d2137b3-bb49-4ce6-af26-7c23d8671d1c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6a73bd-ba66-4bb3-9ad7-880d40ec3edc", "sighting_of_ref": "indicator--1016c3c2-c77a-4009-89b5-4a8354db0b16", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaea4623-ce4f-4e11-9121-adcb4847d265", "sighting_of_ref": "indicator--1016c3c2-c77a-4009-89b5-4a8354db0b16", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce937d6-5229-4f58-8e58-0cefea6511d1", "sighting_of_ref": "indicator--3db854c0-c462-479a-b9d2-6e8dcfff55ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e5527f-7520-4649-a891-48487cfcaa86", "sighting_of_ref": "indicator--3db854c0-c462-479a-b9d2-6e8dcfff55ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86666df2-9be6-4183-9d61-e442878d9b6c", "sighting_of_ref": "indicator--a433bae0-e48b-4fe2-bdad-299a17956edb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d56c22-b7ba-4b92-be9b-e1a2c935c17e", "sighting_of_ref": "indicator--f7a47503-9519-4b55-a5c9-8ad6066f87b0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b339ce2e-ccba-43f2-a669-94341b831439", "sighting_of_ref": "indicator--be81b103-7018-4d69-b98c-f28c346f1a78", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbb3e7f-a983-4cfb-93dc-5d59dc079544", "sighting_of_ref": "indicator--b0313a0f-39a9-4ae6-80a3-2e3837a9ad57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfdfc96-3ae6-40f4-94c6-26b833c838d3", "sighting_of_ref": "indicator--a3a4dd85-cc1a-4079-9d93-6e6c81dce08b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17df297f-aab9-4e19-a654-1deaa05d3df0", "sighting_of_ref": "indicator--0eeea238-0308-44b8-a12b-a9c618d1a4c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e917f2-a494-40fb-8ed2-d984e47a3beb", "sighting_of_ref": "indicator--5d152714-5318-4406-ab04-1579a8d0b15a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab07ba7-e53d-4497-845a-3f63e2d8aa17", "sighting_of_ref": "indicator--026b829a-ed2b-4068-9a2c-5a36c333a3ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebda6aac-04af-41f1-aa1f-02e8fd18a97a", "sighting_of_ref": "indicator--82844461-b0fe-4915-a7fa-ee19a6d875ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1be77d1-9e17-402c-ae7f-fc2c7d0eb40e", "sighting_of_ref": "indicator--3125e3fb-6c04-470d-8930-82ac79d52877", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b8d98d-5941-408f-9ef7-5ea399ec9680", "sighting_of_ref": "indicator--10876e90-fb18-40a3-b962-c314308d76b3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea20fded-f782-4a6b-8683-b3eccd7a3145", "sighting_of_ref": "indicator--7865a7be-d63f-46bf-bf46-0bdac69a0d72", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa30ff4-7b30-4123-8540-45594be45a73", "sighting_of_ref": "indicator--b6405401-551a-4141-bde1-225bba3ed0ba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c45f442-b365-49a5-9a1b-a01cd54f9578", "sighting_of_ref": "indicator--fb314d28-3ac0-423c-8a65-6cb9ca934116", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadef5b8-5003-4427-b732-020485f3e53e", "sighting_of_ref": "indicator--d7d65bb3-98f0-4d84-8910-57a64a828de2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48eb8551-ad3f-4df9-a0bd-59db86b127c6", "sighting_of_ref": "indicator--6030cef9-06f8-4921-860f-fb2949cac952", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cc533e-5268-47d8-94e3-688d02c3d295", "sighting_of_ref": "indicator--d1ac9137-a903-49a8-b95c-7690c3895626", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0028d060-3e39-4686-950e-18263576d958", "sighting_of_ref": "indicator--1613b704-889d-4e4b-851a-5c18f5a1d33c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4940dc9d-d2c7-459a-97fe-11a84fa717b7", "sighting_of_ref": "indicator--1613b704-889d-4e4b-851a-5c18f5a1d33c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbdf759-7120-4c54-b4a1-2a0e39f4fb59", "sighting_of_ref": "indicator--cf922f36-684a-48b1-b016-b11d0872a725", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f50227-44dc-4790-82e1-58ba9663411f", "sighting_of_ref": "indicator--cf922f36-684a-48b1-b016-b11d0872a725", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33806eeb-2f41-466f-ab44-7aabec690dd7", "sighting_of_ref": "indicator--aa236828-c9ec-44f3-a7fe-10cdf9ef6ca5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb85d18-7db6-4a74-a280-232e4a6666e9", "sighting_of_ref": "indicator--3a899736-fd98-4233-b1fb-d3add087c915", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4f8007-cf63-4898-bbaa-4a23a0bb1048", "sighting_of_ref": "indicator--3a899736-fd98-4233-b1fb-d3add087c915", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b81b6b5-714e-4dd0-8866-cb774ef93a57", "sighting_of_ref": "indicator--e05b128b-7adb-4d85-a1d2-cd0af459ab23", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20972a38-2102-484d-8c3a-8cdee8a0dc10", "sighting_of_ref": "indicator--db1e77f5-a031-42b4-92fc-b4a031d22523", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e2d9f7-ba23-4a23-8b97-d7785edb0898", "sighting_of_ref": "indicator--c1db16c1-2e60-49aa-af44-c0e3a73a0f1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9f9e63-b62d-4062-8e79-0f81273f593f", "sighting_of_ref": "indicator--c1db16c1-2e60-49aa-af44-c0e3a73a0f1a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99214851-3ca7-4ca8-a7b1-a4b9826a2955", "sighting_of_ref": "indicator--21b96f1a-1f0c-46f6-8a5a-3c81b67703b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98da04e1-b761-4f1d-96b2-8adf7685b486", "sighting_of_ref": "indicator--21b96f1a-1f0c-46f6-8a5a-3c81b67703b2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34215a4-bd52-4a54-b6d5-2c55bfd54247", "sighting_of_ref": "indicator--56a8959f-ed6f-4ea5-b7e1-02edd3e986fd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8670ae58-c6c1-4162-8694-0d81d9762d81", "sighting_of_ref": "indicator--56a8959f-ed6f-4ea5-b7e1-02edd3e986fd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d337315f-ebd8-412d-8238-7e4fefa29a86", "sighting_of_ref": "indicator--5507ca81-fd1f-4615-8d68-40ce6013d411", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44cc265-3523-4fec-ba50-017f39fd000f", "sighting_of_ref": "indicator--5507ca81-fd1f-4615-8d68-40ce6013d411", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d5f203-ed75-4349-b104-01316a2be249", "sighting_of_ref": "indicator--8874efcb-b300-485e-b636-3c3b314b72fe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39107f03-9a1a-47dd-96d0-8e4e34916ba3", "sighting_of_ref": "indicator--d2200417-9200-4798-847e-ee016375149e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d44e093-c5c5-4ff9-9a9f-2a370fe67166", "sighting_of_ref": "indicator--bef5bbb7-e1e9-47d0-b765-e7b83acf7072", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed00c0e-741d-4361-a1f7-902c980761e6", "sighting_of_ref": "indicator--bef5bbb7-e1e9-47d0-b765-e7b83acf7072", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97161a4d-15d7-41b8-86bc-8c906ef18394", "sighting_of_ref": "indicator--48cf30e2-8f68-402c-ad21-c469ff5013d8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313bd72a-ecfe-4905-927b-3fe9b3081d15", "sighting_of_ref": "indicator--48cf30e2-8f68-402c-ad21-c469ff5013d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de618ec-c0ed-4149-8f64-cf7becf15431", "sighting_of_ref": "indicator--273b507b-b865-45d1-a0c5-591af6e77e2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f0bc77-4dd9-44f1-9e14-210b8fb2b158", "sighting_of_ref": "indicator--273b507b-b865-45d1-a0c5-591af6e77e2c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e23a349-b5b4-48e3-b1ad-9cd25ba651c2", "sighting_of_ref": "indicator--e8b0174c-c173-4ca8-8f0d-9ca7e29e665f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cc7c5d-d424-4c41-8811-c0a0de44340a", "sighting_of_ref": "indicator--e8b0174c-c173-4ca8-8f0d-9ca7e29e665f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc37403c-63cc-4aca-9c9d-3f72dab0e411", "sighting_of_ref": "indicator--a916fd7a-087c-477e-a73a-8cf53734463c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fb3845-60c0-4e75-b09c-9c862fbb93ee", "sighting_of_ref": "indicator--449521ed-0fae-4de8-bcbd-467ebf442be0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6f3e59-09cc-4a72-9fae-7d7eb4a1def7", "sighting_of_ref": "indicator--f5ac1a43-7552-4c39-8353-58fc74a6c0f7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb351f74-b0da-4758-a123-a68c0f9e79b5", "sighting_of_ref": "indicator--f5ac1a43-7552-4c39-8353-58fc74a6c0f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b44e1f-30d5-420d-9ba3-f2d2d8e62824", "sighting_of_ref": "indicator--e05a9f17-cc85-4ac3-a7ba-ab580c0bbf25", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b835c602-b367-4a7e-a6aa-5230adf6a61c", "sighting_of_ref": "indicator--e05a9f17-cc85-4ac3-a7ba-ab580c0bbf25", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f110fc04-26f9-43f3-a7f5-07cb4ccaf0b8", "sighting_of_ref": "indicator--82d9b9af-59c6-45ac-bea2-27e9a0bfeeae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137bba7d-0da6-42d6-8217-dc2ae84ee014", "sighting_of_ref": "indicator--e2552245-baea-45c8-a261-e3169094dc06", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c677ff-0307-4d24-ad0c-957d65b95458", "sighting_of_ref": "indicator--a78ee78a-8793-4616-84ae-8ef78c86bbce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f48e28b-02ed-40e6-a0fa-309bf7ca6eac", "sighting_of_ref": "indicator--59a30bf1-41e5-447e-b02a-0fb73468a437", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69d27af-1d40-4748-b790-7e62c1fe080d", "sighting_of_ref": "indicator--59a30bf1-41e5-447e-b02a-0fb73468a437", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfcd122-24b8-4316-930d-e8974214a7d1", "sighting_of_ref": "indicator--9499b39d-8f40-44bb-906c-4f9462b53dbb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9381754b-071c-4432-bab1-93efa83a251e", "sighting_of_ref": "indicator--9499b39d-8f40-44bb-906c-4f9462b53dbb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c008a9-5bf7-49f4-a34d-4e19281a8a1c", "sighting_of_ref": "indicator--447ddc09-3c03-4d3c-b581-c349389fc355", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d66e1c-7c5b-4c0e-8067-f4c4ef7b09b7", "sighting_of_ref": "indicator--447ddc09-3c03-4d3c-b581-c349389fc355", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99937dd3-21c9-40cb-8e0c-001c1c2ddc36", "sighting_of_ref": "indicator--66369b7a-3a03-4ee3-b8e7-b85e6e825ae7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854cd86e-ae9d-43db-8518-c6933fbf0eb9", "sighting_of_ref": "indicator--66369b7a-3a03-4ee3-b8e7-b85e6e825ae7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d914dfd-35f2-4990-b0ca-c245453269b0", "sighting_of_ref": "indicator--7d22308f-d711-4509-a167-15cc503bd066", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dd599f-eb1f-46d1-8dcb-2d984002b401", "sighting_of_ref": "indicator--d4187e7c-2695-46e5-8bfa-577f98061c79", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20be52c-061b-475c-a174-a8190f4c109b", "sighting_of_ref": "indicator--d4187e7c-2695-46e5-8bfa-577f98061c79", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34ea809-9199-4e83-9181-646e833e0ba6", "sighting_of_ref": "indicator--9094a0d9-8f14-4daa-bf55-2c7367e6f8b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac70de8-6614-4458-81ef-69a2a9418d2f", "sighting_of_ref": "indicator--de3e80df-1d71-41cd-960d-bd35d49ba14c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f758040-d873-4239-8941-820102e344cd", "sighting_of_ref": "indicator--de3e80df-1d71-41cd-960d-bd35d49ba14c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41e7f61-feb7-4f03-baa7-ff8b68d75cd5", "sighting_of_ref": "indicator--45ceeb4d-2e42-44cb-8c3e-8d258705c2c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02318cc7-3834-482b-8418-f139d2b70f85", "sighting_of_ref": "indicator--45ceeb4d-2e42-44cb-8c3e-8d258705c2c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d2737f-fb2a-4abc-b97d-1af0040aad2e", "sighting_of_ref": "indicator--62a584c9-f6dc-4c31-ab91-6fce402635cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912febb1-2c38-46ce-8007-3f6d9f1836ba", "sighting_of_ref": "indicator--62a584c9-f6dc-4c31-ab91-6fce402635cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1595281f-c5ef-48d7-b4bb-c62f667b7f8d", "sighting_of_ref": "indicator--9ea006e6-62e4-427d-8560-cfab20500042", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b272196f-bbd1-4724-a9b7-37103327cbd4", "sighting_of_ref": "indicator--9ea006e6-62e4-427d-8560-cfab20500042", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e414c4-b1db-4d78-8900-c6ce17691a09", "sighting_of_ref": "indicator--0f8354c8-133a-47b4-bade-b646a789af93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414b285b-68d5-43e5-a0bf-573df2c5f43e", "sighting_of_ref": "indicator--0f8354c8-133a-47b4-bade-b646a789af93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acda2a58-aa1b-47b6-9fe3-cd2b021db199", "sighting_of_ref": "indicator--f1b00d03-d5a4-404f-9ff7-c645f6a74333", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247f4a94-cd46-4ba3-b96e-a9b148ca0e66", "sighting_of_ref": "indicator--f1b00d03-d5a4-404f-9ff7-c645f6a74333", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38456c75-f91a-40dc-8c94-c2f3660a54ef", "sighting_of_ref": "indicator--6e25dec6-4c71-43a1-9bfb-769a89f32fda", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bed4e53-62f0-448a-b3f4-b3fad6df361c", "sighting_of_ref": "indicator--6e25dec6-4c71-43a1-9bfb-769a89f32fda", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390b5c18-0500-4f02-8b4f-eb7de34517c2", "sighting_of_ref": "indicator--1c0e410f-7b42-499e-80ec-97da0dc31ef3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd262878-03a6-43a3-9eb4-d8e5c103f669", "sighting_of_ref": "indicator--1c0e410f-7b42-499e-80ec-97da0dc31ef3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ce5ef7-b4e2-4e5a-b9c3-7d2251e9f718", "sighting_of_ref": "indicator--f9e2836f-f272-4641-aeb9-fc9d60975f4c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04ea4eb-bc6a-4d7d-981f-393cb50f1c4c", "sighting_of_ref": "indicator--f9e2836f-f272-4641-aeb9-fc9d60975f4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3277518-7235-4805-bfab-90abaa916351", "sighting_of_ref": "indicator--ec9a5acb-357a-4973-a7a0-70118068e077", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbcd5a7-895e-4925-aae0-8019bec8aa47", "sighting_of_ref": "indicator--ec9a5acb-357a-4973-a7a0-70118068e077", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1ae367-437c-44b5-8ffc-a787bdb55628", "sighting_of_ref": "indicator--0756f042-cea4-4662-b6a8-cddbc95efc90", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577f89bc-2bcb-417c-862d-51284d27b123", "sighting_of_ref": "indicator--0756f042-cea4-4662-b6a8-cddbc95efc90", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee3a288-1dbf-443b-b683-97458880f7b4", "sighting_of_ref": "indicator--9e305baa-ce34-4de0-8c34-1008983672e9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc07492c-1ccd-4477-87d4-e89475813593", "sighting_of_ref": "indicator--377875fe-bda3-43f3-927a-161e946667a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bc7590-b21d-49ab-bb41-70a62deea4cd", "sighting_of_ref": "indicator--5d00ed19-be38-426b-84e5-95a8eb4460ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75b0feb-661f-4261-9910-f8ffcde99810", "sighting_of_ref": "indicator--3a163367-9bed-4bb4-b645-0eaf8fb3eeb4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24ca58c-eadd-4ab2-82c9-70134853f68d", "sighting_of_ref": "indicator--3a163367-9bed-4bb4-b645-0eaf8fb3eeb4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa434bb-48a2-45c2-9e57-f1b8079add74", "sighting_of_ref": "indicator--4e3a63c9-26fc-4119-97b5-749208ac6277", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337ac7b0-e70b-499e-a0b0-4bebbb4e9712", "sighting_of_ref": "indicator--3b38e36e-95cb-4715-9f05-4e886f5f7d21", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd534a3-c07c-4f82-a8bf-ddc6575a8c6e", "sighting_of_ref": "indicator--83aadc5e-093f-495f-830b-9d2d2ecec00c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1df38d-4f5c-4fca-ba94-24913bd403f4", "sighting_of_ref": "indicator--c0e0a60e-2da3-4dd8-acc5-9865024976dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31d1e47-8206-441a-a65a-8f1877c7c475", "sighting_of_ref": "indicator--c1b40cf4-966d-411f-a7f1-de61390734ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce76192-6eac-4d2a-9dce-b89f6b3cfa51", "sighting_of_ref": "indicator--15eb8b53-d08c-4e41-86fc-e84b0fa3c5c9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b99872-011d-4e4f-b62e-4d5d286fc558", "sighting_of_ref": "indicator--c8350531-d25e-44b7-b137-88d978ad7028", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7225b9af-e700-4149-a110-4f2f1bd700ac", "sighting_of_ref": "indicator--c24f83f9-fe4f-4a67-9dc8-d001c05ecf3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b574a4c9-7bee-4d75-a5a6-bedbed5023c7", "sighting_of_ref": "indicator--97284004-fa87-4025-bb30-8d5cb81c15f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090cbc73-c155-4370-9554-24baf267a6b1", "sighting_of_ref": "indicator--97284004-fa87-4025-bb30-8d5cb81c15f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2715e6-7d43-4384-bec5-3819b8fa716c", "sighting_of_ref": "indicator--757c28e2-afd5-4e6d-a138-d0eaca5be151", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486c6a92-bb82-4677-8ff0-a57b8fcd189b", "sighting_of_ref": "indicator--a26f24a1-dece-4cd0-ac19-dedf747cf3f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff51271a-38d2-45a4-afa7-4aa924a1107b", "sighting_of_ref": "indicator--961d7ed2-71aa-41d8-aa46-3cabf1aa1dbb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f4d714-e282-407a-b78d-e9370fbc555c", "sighting_of_ref": "indicator--961d7ed2-71aa-41d8-aa46-3cabf1aa1dbb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bf5e17-fb2c-4ea7-b143-785dfacab337", "sighting_of_ref": "indicator--b4535c39-0aa2-4c81-a92b-3e49d49d7c15", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66eeaeb8-349f-4646-8a03-a1bad42d166d", "sighting_of_ref": "indicator--d767b59f-3065-42a4-b779-d565f41c0f1a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb83943-ff6d-40a8-829f-b1c53575c6a0", "sighting_of_ref": "indicator--e2a8083a-4b06-44f4-816e-0680c5ee1704", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69771b91-f6b2-4e16-8f05-f4f91999eb9d", "sighting_of_ref": "indicator--e2a8083a-4b06-44f4-816e-0680c5ee1704", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98f6be3-b30a-491a-8487-4e5dbabf15dc", "sighting_of_ref": "indicator--d4063e63-4927-4b51-864c-17a760d345d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51efb309-cc31-4d2d-8799-90f84c123335", "sighting_of_ref": "indicator--d4063e63-4927-4b51-864c-17a760d345d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57819e49-1412-4e17-85c5-04b1629dccb9", "sighting_of_ref": "indicator--56814650-0b79-4810-a492-7b24d31f9b68", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7b4eae-f483-4c51-9c3f-b1f3b59654cc", "sighting_of_ref": "indicator--56814650-0b79-4810-a492-7b24d31f9b68", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a1b0bf-a5c8-4c08-a852-76161ac1c3c9", "sighting_of_ref": "indicator--77fb6dc3-da36-44d0-9d67-74a0990b01b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8d0051-d5f9-4239-ae05-1f67c8890592", "sighting_of_ref": "indicator--77fb6dc3-da36-44d0-9d67-74a0990b01b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0476e30-7b20-4f92-aedd-0bfda906a91f", "sighting_of_ref": "indicator--0c9cc4df-c049-444e-b02a-7bd30bf50bb9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a05391-7790-4381-9ed9-a8992122fcdf", "sighting_of_ref": "indicator--28f01d82-474e-4493-805c-912637bb60da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125bf849-38bb-4318-b0e2-edc02f76170c", "sighting_of_ref": "indicator--28f01d82-474e-4493-805c-912637bb60da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97c1d6f-1b08-4969-a5ca-047fa84cfd8e", "sighting_of_ref": "indicator--59e6bb9d-67a1-4afb-814a-1bb8918e76f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316b8fa2-0e72-4b31-b7d8-cf7925d7dded", "sighting_of_ref": "indicator--59e6bb9d-67a1-4afb-814a-1bb8918e76f6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730b8a51-3a37-41e8-95b0-14ed31a3fe71", "sighting_of_ref": "indicator--c5814bfd-5c5c-4697-9219-e3744ade2e10", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491656fa-c68e-44b2-b2b9-8c0e7da895b6", "sighting_of_ref": "indicator--c5814bfd-5c5c-4697-9219-e3744ade2e10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82b18e2-8617-442a-bbbc-01e5e697d918", "sighting_of_ref": "indicator--e6d718da-776b-4602-b9a7-2b147f4f62a9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3f9c9e-f906-4c47-8b09-eb138472d9fd", "sighting_of_ref": "indicator--e6d718da-776b-4602-b9a7-2b147f4f62a9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7880e6-68a8-4500-982c-93a5e52d4bc8", "sighting_of_ref": "indicator--f78e7536-658a-448e-94a7-d8caef4f575c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ae3e5a-f456-4887-86c0-158a1994551a", "sighting_of_ref": "indicator--f78e7536-658a-448e-94a7-d8caef4f575c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95e4bee-1223-4a6b-8e80-e31d4c0b09fb", "sighting_of_ref": "indicator--5bf806bb-df1c-40cc-bf9f-cc8f232ba98b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49c5586-0564-4813-8886-b0d9885bef12", "sighting_of_ref": "indicator--5bf806bb-df1c-40cc-bf9f-cc8f232ba98b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffae4a52-fa4d-4ef8-92cf-7d8d241daa43", "sighting_of_ref": "indicator--14a87cc6-b747-42c0-a9ee-5ea6ef1de268", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e2b35b-f039-440b-8cc1-838f2c546ba5", "sighting_of_ref": "indicator--14a87cc6-b747-42c0-a9ee-5ea6ef1de268", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838df9b6-4d21-4d30-99a3-9f1d4cb7e748", "sighting_of_ref": "indicator--5f770137-6704-48c8-bea6-17503939d282", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f2c28f-aea2-492c-a9e3-ca1d17c96c97", "sighting_of_ref": "indicator--d1ef3c14-43d5-4e62-b080-3bd7f21f268e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4227d646-7bc8-40cf-b954-67ffa951736d", "sighting_of_ref": "indicator--8ac97f35-3cce-4bf2-b1f5-647ffa707c78", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f511a6f7-27b3-4314-9288-6919e8cb427f", "sighting_of_ref": "indicator--c2655e72-6d89-4983-8698-29a6a890a94f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fa283f-abdb-41ee-b052-18fee3e7ace3", "sighting_of_ref": "indicator--c2655e72-6d89-4983-8698-29a6a890a94f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dce1003-63f4-4a9b-a3ea-0a42f088625a", "sighting_of_ref": "indicator--25ce0066-5d6a-47b2-b874-125ebc14cea6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e47e512-d488-4ae9-8e53-e4e8bd440443", "sighting_of_ref": "indicator--0fbb46f7-a2db-434e-9307-0694c59dff64", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96035ba1-4b75-4aae-a51b-c780f89936d3", "sighting_of_ref": "indicator--8481a7d6-cdf5-4fde-9cbe-f06ba988cb6c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4f98c1-2ef8-4644-8961-fd74878fe2ef", "sighting_of_ref": "indicator--a06bbb24-4a10-4592-a9eb-6c382dc48353", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a644ff9-d5fe-4ac7-99f5-6591cc0cd150", "sighting_of_ref": "indicator--e102de95-0dbd-42d5-a895-80ec9b355cf7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79981c14-da38-42c2-8b66-1693fad299f3", "sighting_of_ref": "indicator--af7a4fe9-98c0-4171-9dbd-031fc5b5ca05", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec474868-9c03-4072-bbf5-10e9baef7e21", "sighting_of_ref": "indicator--9ef430d4-89bf-4ab1-a8b6-b90cb39bcb3a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c8a11d-6712-4f63-8041-4427fbd8985b", "sighting_of_ref": "indicator--9ef430d4-89bf-4ab1-a8b6-b90cb39bcb3a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8eb67f-ea3b-43bf-bc1b-84fa3e5249ff", "sighting_of_ref": "indicator--e57961cf-ce0e-4c81-b0dc-dced13c1d539", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbb4a99-f532-4d26-bf5f-c43685aa9c16", "sighting_of_ref": "indicator--871e0b3f-5b6f-404f-9d19-df911a69a197", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfc7098-c3d5-4934-a233-d96b8b5ed050", "sighting_of_ref": "indicator--57a18a55-70de-4c66-9556-87149016dca4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecffea0-91f6-4a4d-a42c-4409956309e6", "sighting_of_ref": "indicator--9db4eb46-2a73-4f58-b38a-b2c469039638", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c91073f-6a10-4728-84bc-e9e29782eee7", "sighting_of_ref": "indicator--95b1cff2-de43-4fc5-8857-6a70be4176b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8f2a20-4ede-4bfa-9ed9-daeb6632a8a8", "sighting_of_ref": "indicator--95b1cff2-de43-4fc5-8857-6a70be4176b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab981bd-b160-4c5f-913a-ffdb2db6a45c", "sighting_of_ref": "indicator--1cb1c6f2-6993-4973-9684-489915e99747", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013482f6-0e1f-4f62-8c78-dd8f5129003e", "sighting_of_ref": "indicator--fa030371-8eb3-4290-82a9-734c5f161b23", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4e9dcb-3e87-466d-b874-b57b30381852", "sighting_of_ref": "indicator--fa030371-8eb3-4290-82a9-734c5f161b23", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a128636-8d19-4799-ae59-3bc6bbca839a", "sighting_of_ref": "indicator--c12f7ac3-9666-4f40-a69a-bc8827e91693", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f928b56-3bf1-4875-8662-1707c32bfdb5", "sighting_of_ref": "indicator--a1fc590f-cdc4-4b71-b917-0b0998d4f702", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46e3e03-661a-4f96-88b1-299c82512538", "sighting_of_ref": "indicator--7b89a207-74cd-449b-8b04-eb2f1e04d859", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdcb8bd-4e16-427e-b977-573ea3b603ef", "sighting_of_ref": "indicator--7b89a207-74cd-449b-8b04-eb2f1e04d859", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429a474d-0036-4c49-a657-135063d041ec", "sighting_of_ref": "indicator--4195b60f-816c-483d-a5a2-4c104d990c2c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c930bcda-affd-4db3-a342-d53648949745", "sighting_of_ref": "indicator--2c368f6a-86b8-4aa1-9e37-c4279e552fc3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44797577-08fd-4ce4-acbc-00640676e6c4", "sighting_of_ref": "indicator--7c8a9418-ad2d-43db-923d-95bccbbeaaeb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66d51fe-040d-4096-a58e-a8eb048b74df", "sighting_of_ref": "indicator--7c8a9418-ad2d-43db-923d-95bccbbeaaeb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be14974-f2cb-4abe-bfea-1b8494f38e16", "sighting_of_ref": "indicator--86bba98d-0b6a-42f3-901f-1c6947f06f93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf83b51-6930-4163-a617-67b739f45e08", "sighting_of_ref": "indicator--86bba98d-0b6a-42f3-901f-1c6947f06f93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0272ac-b81a-4155-ba18-a5468b30a7c3", "sighting_of_ref": "indicator--a5859273-e8e0-4ea3-8a29-3879102e29fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9a2bfe-fb32-4784-a029-e3c5cd0b6bdf", "sighting_of_ref": "indicator--a5859273-e8e0-4ea3-8a29-3879102e29fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad4a6e5-7dc4-4f43-bce6-72da87d265f7", "sighting_of_ref": "indicator--0a2fd315-c44a-4c0e-99bc-3689da1ba3b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0823a3f-b203-4002-8426-9d4d5530c95d", "sighting_of_ref": "indicator--0a2fd315-c44a-4c0e-99bc-3689da1ba3b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bfa917-1fbc-48fa-8517-1a056747db51", "sighting_of_ref": "indicator--cd2be426-46ae-44b8-a219-a364bbe54a1c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c0b91f-ffd9-40e1-be3b-6028d3296d44", "sighting_of_ref": "indicator--3deb2b24-7920-40ef-9406-3ae70a8d2f5d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294b332f-7227-4422-8c6f-f588b0ffbe7f", "sighting_of_ref": "indicator--bde2dd70-0b41-4eeb-99bf-7e8c1f5494f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471f5452-274c-4085-831b-72c74fe97e0d", "sighting_of_ref": "indicator--c5fc2b37-74bd-4f8b-8874-df0f7b1a5424", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18a418f-82b0-44e0-bf90-7141d1341078", "sighting_of_ref": "indicator--eeb3e377-0136-4527-ba33-4195e8c52b19", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff4ab61-8777-4c21-a57b-ac26498e446e", "sighting_of_ref": "indicator--eeb3e377-0136-4527-ba33-4195e8c52b19", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13b3dca-ad98-40a9-9fc6-e452cde0a6d6", "sighting_of_ref": "indicator--71e8bb96-827f-453c-8a11-12de6a0a6540", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee116ab-0912-447e-af87-745fb4336864", "sighting_of_ref": "indicator--e4c453b3-aa6c-4871-883d-5ce0a13c51c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7297c795-8e02-4fee-b6c5-ee3cef8e5bcd", "sighting_of_ref": "indicator--e4c453b3-aa6c-4871-883d-5ce0a13c51c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf659e5b-deb6-4448-af91-6b618afa7610", "sighting_of_ref": "indicator--e07d4ccd-2449-45bf-a7a7-cb2d72398a97", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e34eca6-5981-416f-8f08-07b702c79b30", "sighting_of_ref": "indicator--8507260c-e8cc-4bef-bbb9-8d02f345483f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8601f9-df8b-44d7-908c-758d9acf4a4b", "sighting_of_ref": "indicator--8507260c-e8cc-4bef-bbb9-8d02f345483f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2220f49-c640-479a-bcc1-2957d8f56a0e", "sighting_of_ref": "indicator--71c116e0-1ae1-40b3-b547-4c2daeb7bbcb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d0253d-0d7b-47a9-8dd8-04ac12b4c262", "sighting_of_ref": "indicator--9c5f78b9-906a-4b88-b99e-58eada4de283", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd74021-3c01-42cc-82a5-2e50156b5e2f", "sighting_of_ref": "indicator--9c5f78b9-906a-4b88-b99e-58eada4de283", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500d8c6a-9d7d-4993-a58e-9db9a687867c", "sighting_of_ref": "indicator--8bd00e1d-1ae5-423b-8bbc-678a204cc727", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046412e0-768d-4bc8-9826-c5d592ccaa15", "sighting_of_ref": "indicator--d832676a-c210-44cb-8aab-e75846d5a6ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9bd682-12bc-4a14-a054-5b410bba9031", "sighting_of_ref": "indicator--d832676a-c210-44cb-8aab-e75846d5a6ff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cce9e0d-c29d-4210-9b2c-11da1c96698b", "sighting_of_ref": "indicator--6b648e0d-3b85-44eb-b98d-b7708e0e199c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb056c6-72e4-4b99-b61d-d8a63ad07813", "sighting_of_ref": "indicator--769d6812-a1ce-4e58-8dcb-4d5e152723db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdb1230-11f0-4293-89aa-1622bfb112cb", "sighting_of_ref": "indicator--09f53217-ce67-43bc-8bdc-69ff2726e878", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888b3fb9-e94e-45cf-8408-6e58b13a79de", "sighting_of_ref": "indicator--09f53217-ce67-43bc-8bdc-69ff2726e878", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222e8317-5bd5-498e-8610-4e32b9aecad0", "sighting_of_ref": "indicator--4fa4b59e-c91f-4e74-b378-69a539bbe5f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429734be-5554-4716-9060-4d5ce9ffc58d", "sighting_of_ref": "indicator--2857ae59-a629-4982-9053-1e6331e0787f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e64523c-ca39-48f5-b52c-0f1845d0f404", "sighting_of_ref": "indicator--e5b28580-a8e5-42ae-a31f-d617e60f93b4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc06e571-9c18-461a-944a-279f393ea33a", "sighting_of_ref": "indicator--21b51435-2054-4f95-9cbe-f43133d2d6b0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d36ac84-3965-4ce6-a817-c42adca72c67", "sighting_of_ref": "indicator--21b51435-2054-4f95-9cbe-f43133d2d6b0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc566a80-a772-4399-be02-e31d0068b607", "sighting_of_ref": "indicator--c6ba83f4-a493-4d5a-ac63-dbd342ce9ec0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af00ab93-2dc5-4a17-814b-5c1707d15719", "sighting_of_ref": "indicator--4e1f3568-5909-457b-8700-ee6797c64e4f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673c9326-a462-43c4-b5a9-12940f1246e1", "sighting_of_ref": "indicator--4e1f3568-5909-457b-8700-ee6797c64e4f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b796e6-f787-432d-b79e-9609e41cf6cd", "sighting_of_ref": "indicator--3574ead6-008b-4a7f-95be-9223930c5a70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb32ed7-6e80-4f94-b5d5-ab207908100b", "sighting_of_ref": "indicator--dd8f8a14-ef43-4f57-a0f8-903da2e32a69", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442f8cfe-e34c-445a-88d2-5cd35b533290", "sighting_of_ref": "indicator--4e5025c2-0a02-41e3-b8d1-c4440828b90b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1020c8a-9711-4852-be2a-fe38436b52b6", "sighting_of_ref": "indicator--e19f9bba-d144-42ec-9c55-250fd66f5a56", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f3352d-9c0d-4c75-b858-97f488be5ad7", "sighting_of_ref": "indicator--ac1da833-004e-4a54-ac8c-f2e4d52d4c2a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b74434b-6834-46a4-9823-176f96f4ff91", "sighting_of_ref": "indicator--ec03f7a3-c5c4-48d3-af1e-c3d6c45c5e0b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f831d9-8329-4659-8d38-b77352b3c253", "sighting_of_ref": "indicator--08e0bd33-a655-478d-af26-ef032c7f46f7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c2bbf7-c954-4c03-ab2a-b67b43331270", "sighting_of_ref": "indicator--693ef3ea-46f9-4dd9-880d-4cf072b97cb5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae461921-7be4-479e-81b9-3c4c7241510b", "sighting_of_ref": "indicator--693ef3ea-46f9-4dd9-880d-4cf072b97cb5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2692b80b-043e-4571-84a6-a25c1069f119", "sighting_of_ref": "indicator--f3dcfe8d-aa64-438d-9c2d-ae7d6881c114", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cfe7c5-2038-4bae-ab93-8f2bbed8b5d5", "sighting_of_ref": "indicator--f951f288-21f4-4622-ab7e-620eb4662b45", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558827e5-5499-4a94-9a1e-135d2c6aafb3", "sighting_of_ref": "indicator--8c5c84da-93eb-4dcf-8112-40464e71f0c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4052f5-ca7b-4181-ac1d-3d8a02473d79", "sighting_of_ref": "indicator--b39faaaf-ef0f-4c94-a58a-e622c86841ab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076a1e70-06dd-47db-bb5e-eb04bf79e797", "sighting_of_ref": "indicator--b39faaaf-ef0f-4c94-a58a-e622c86841ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042471c8-9965-4f4e-b83a-f9134cef8011", "sighting_of_ref": "indicator--4abff08d-91de-4300-9868-61113885e0ca", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b3390e-0294-48bd-9a29-f9ab8946c1cb", "sighting_of_ref": "indicator--4abff08d-91de-4300-9868-61113885e0ca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fb1b73-5357-4897-8c87-fab5145dd3da", "sighting_of_ref": "indicator--42b4bc37-26ec-4dd5-9522-6637cfe1beee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b385b20e-9369-47f0-932a-58343aac64e5", "sighting_of_ref": "indicator--42b4bc37-26ec-4dd5-9522-6637cfe1beee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2478c3-fb33-4b66-99d9-7f3049e7ea7a", "sighting_of_ref": "indicator--11b805a7-ae71-4a83-a3b4-4e48f0e74b94", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c022b649-66e9-4673-8dba-176192b685cf", "sighting_of_ref": "indicator--9259efb2-fb4a-414e-98b8-91170ef441de", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3bc3b9-e29a-46fd-a148-ea48f7dcc792", "sighting_of_ref": "indicator--9259efb2-fb4a-414e-98b8-91170ef441de", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5a5561-232f-4e47-bd37-4ec025fff652", "sighting_of_ref": "indicator--25d72224-250f-4024-9f07-75428a686c48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ca4f35-2793-4219-8bc0-2371cf3be095", "sighting_of_ref": "indicator--25d72224-250f-4024-9f07-75428a686c48", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebac6215-9314-4663-b608-9d7c9fcaaff3", "sighting_of_ref": "indicator--7bbef068-59e9-4f3f-9d71-70a0127a949e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7866dcde-5bf5-4c20-b646-7bea89193253", "sighting_of_ref": "indicator--7bbef068-59e9-4f3f-9d71-70a0127a949e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bd59f6-e2a2-460f-a740-ec93eb86589e", "sighting_of_ref": "indicator--7e3b625a-1253-4649-a6fa-7b12d303c02d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421e6dbd-af6f-4e99-8445-e52b01975702", "sighting_of_ref": "indicator--76c7e749-015b-4b31-8471-524cab4a0e69", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a19a7d9-8acc-458d-ab9d-018951bce27b", "sighting_of_ref": "indicator--76c7e749-015b-4b31-8471-524cab4a0e69", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e404c12-4dd4-4449-8ca2-44dd59f9c32d", "sighting_of_ref": "indicator--c164433f-2412-4722-8d37-39ee0ada2573", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c24a810-c4d4-4cf6-8ed8-91030b37ff57", "sighting_of_ref": "indicator--f92da37e-9b31-47b0-aa36-1aa7ccd841bb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6929004b-f712-458d-b1c4-bc5c5064aba0", "sighting_of_ref": "indicator--d7110388-ab21-4b6b-8dbe-490ef8d563c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47686e1d-ad1c-4918-bfb9-c73aca0c4b34", "sighting_of_ref": "indicator--011f7c49-a768-4efb-96c7-9e89260e4ef8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50094386-cf11-4e7a-9de1-2e0e9c9151d5", "sighting_of_ref": "indicator--1342bff5-06fb-4d3d-8e5d-49e133170206", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b88d78-7bb4-4f58-ad93-1b9a611388b0", "sighting_of_ref": "indicator--5ff55ae0-9b91-49cb-a61c-7dca02c9340e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc94cd5-ca0d-4214-89f2-ed657dca13bf", "sighting_of_ref": "indicator--5ff55ae0-9b91-49cb-a61c-7dca02c9340e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2248295d-ad4a-40ea-bd8b-134e59302b8f", "sighting_of_ref": "indicator--8b75fb57-bbfc-4e4c-82c6-5fc0186e6c5a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eed3bef-7c72-471b-b822-bf3a32f38e49", "sighting_of_ref": "indicator--9ae23344-5a6d-4dd8-b484-ef53a6c6534a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fedce5c-fbbe-4ae3-9490-6d379ef2a99e", "sighting_of_ref": "indicator--f0978ba1-de8b-4770-b99c-3e1c211b4910", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4dad74-7d6c-4165-9aa5-9cd7f3c82962", "sighting_of_ref": "indicator--7f2f4ea8-a0f3-4a78-aa16-9b8851ef0a17", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d16fd7-12b8-4fdd-be67-da9abce51d49", "sighting_of_ref": "indicator--20748b75-3c31-429d-84e3-926137093500", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c9dc78-9413-4a33-a12a-a3822f5fd861", "sighting_of_ref": "indicator--be334b1f-7067-4c07-8083-e2a38f224f36", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7cc367-d821-4a55-abff-565507fdb830", "sighting_of_ref": "indicator--4453e3a6-4bb9-4cff-bd14-48611bbbcaa9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7713b61e-5cff-4755-b944-fcc8955ef393", "sighting_of_ref": "indicator--7bc2e788-4fcd-4970-81d0-f5df79b6628b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f85521-b82b-4127-939a-bd021707ed2c", "sighting_of_ref": "indicator--456ea0fb-38b8-417a-b6ca-b62a2666a127", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30c4840-eb89-448b-89df-bc484096356b", "sighting_of_ref": "indicator--ffbc1df2-f3a9-4fa8-b978-ed15510f705e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42988fe-e450-41ec-a2b1-62b2a8f09b08", "sighting_of_ref": "indicator--a39ca46b-6a94-4799-8c5f-5439c85db34c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4eca02-44e1-4ca1-bed2-63c13a3c1bd2", "sighting_of_ref": "indicator--e7e35c1b-8c31-4da4-8341-3f1d98610df2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0944fa0c-c6e4-4479-b782-b94a4829f759", "sighting_of_ref": "indicator--b617d329-4cfc-42bb-b79c-d0637e8c75ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f9b2ef-cec4-49b5-b3b7-f44120d05b4b", "sighting_of_ref": "indicator--4d512c4c-9d95-43ab-9fc4-f335aa94e8bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d2d9e7-c527-4966-a3b1-6bc4d8b4bc0a", "sighting_of_ref": "indicator--4d512c4c-9d95-43ab-9fc4-f335aa94e8bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f05b45-dd63-43ce-af65-aefbff4674b5", "sighting_of_ref": "indicator--e82c7fbf-7316-42d9-b7c3-a344953c5e61", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c3634f-a982-4586-8027-5da89e10555d", "sighting_of_ref": "indicator--e82c7fbf-7316-42d9-b7c3-a344953c5e61", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f131781-649c-429e-aff4-640dad40bb50", "sighting_of_ref": "indicator--7fd13576-f5fb-4fa0-86ad-9e1259ab1b05", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a7cc39-f713-47b9-85bf-8cc8dd058e6e", "sighting_of_ref": "indicator--0e1cc2c6-b97f-4c0b-8510-7c36dbaabd08", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e1cfc9-1280-43a8-8d5b-d0207868b307", "sighting_of_ref": "indicator--410d1359-d4f7-4611-aac0-4a5760c390bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fdcf97-8f3f-4ef2-af7b-6e9e907a9381", "sighting_of_ref": "indicator--af2ed60b-8d66-4056-b896-a35fcb9f5148", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b5c70e-a10d-4fa3-ae8a-ec51fd5ebc9f", "sighting_of_ref": "indicator--af2ed60b-8d66-4056-b896-a35fcb9f5148", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dfc294-7af1-4de2-b9da-b0aff2b42a1b", "sighting_of_ref": "indicator--94fb00ff-cd52-42b4-b611-def6e0932c3b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e638ac7-d407-489b-80f5-44fbabec00c1", "sighting_of_ref": "indicator--94fb00ff-cd52-42b4-b611-def6e0932c3b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3eb7240-05b7-49c4-8617-94dbda6ce607", "sighting_of_ref": "indicator--1c0ea89a-8c05-47f9-a07e-4c28d609b9cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2260bf04-6cf1-4ed5-8626-50f9ac23a95f", "sighting_of_ref": "indicator--1c0ea89a-8c05-47f9-a07e-4c28d609b9cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a9dc7f-423d-4733-b4c0-6f17bbd5b94e", "sighting_of_ref": "indicator--8418ae57-46dd-4dea-9d65-bcefac61e356", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb76de11-0c45-47c9-bac6-8c902dd17a4f", "sighting_of_ref": "indicator--8418ae57-46dd-4dea-9d65-bcefac61e356", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a24a47-8b97-452c-8d7f-c3d2d0566738", "sighting_of_ref": "indicator--bc7a293c-90ff-4fde-9238-1d06364b9efc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbaf5b9-209a-4f2f-9fc4-7d06bc8148a3", "sighting_of_ref": "indicator--bc7a293c-90ff-4fde-9238-1d06364b9efc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a30fd2-e25e-4a85-9836-213360bf2db6", "sighting_of_ref": "indicator--b20618a2-6feb-44c8-872d-c2269d077127", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac692fd-53ba-4e56-96f4-3ca9124c5347", "sighting_of_ref": "indicator--b20618a2-6feb-44c8-872d-c2269d077127", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503ad72b-1d58-4cdc-b016-d6f7b55a37fc", "sighting_of_ref": "indicator--ef63ba16-a6c7-4671-8c4e-82f81f79d8c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a9f89f-525a-4dbb-bf58-af34dda9e90f", "sighting_of_ref": "indicator--ef63ba16-a6c7-4671-8c4e-82f81f79d8c5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2500203d-f7ff-4399-b6b9-1a89551ca050", "sighting_of_ref": "indicator--3d2f01aa-2b7f-4c07-b15f-e8ac213933d5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff29f5c4-dc2f-43fb-adce-6ec3a5418419", "sighting_of_ref": "indicator--d0b152c2-681d-46e2-b54c-9d7f20202eb5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b44abf7-7680-405a-8559-91fd0f79c118", "sighting_of_ref": "indicator--2408bb6f-2646-40fd-b4c2-8a3cb053544a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502524db-2741-4542-9df5-c331559e8669", "sighting_of_ref": "indicator--2408bb6f-2646-40fd-b4c2-8a3cb053544a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48e19da-c10f-4f9f-9517-1af450007621", "sighting_of_ref": "indicator--820fb19d-19bf-405c-a921-53bb11eb4895", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae63f33f-8e68-46a9-88b6-3bf73ce8ce2c", "sighting_of_ref": "indicator--25aaea35-7980-4d0a-8ecd-1bda3e1bf79b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace41611-82e7-4a23-8d15-41b733177e73", "sighting_of_ref": "indicator--b913b8dd-c0b8-4e85-b97d-191740e14952", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f067dff9-8c49-4675-b16c-18c4c0a70d7c", "sighting_of_ref": "indicator--9444bdc2-97e8-4fc6-acab-32ed41729614", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea6dac7-7d9b-4132-8cba-e3b04bdb63bc", "sighting_of_ref": "indicator--9f86751b-9cad-4e01-8cd6-64ba97198782", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e5ef00-b32a-402d-ba69-7aa153de1aad", "sighting_of_ref": "indicator--a5513300-48ad-45e1-9fe6-1ba83fbc25a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcea775-b69e-4147-ab28-e7b1b6969a5b", "sighting_of_ref": "indicator--9d9feb56-0296-459e-b569-1fac1ddaa5f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acb65e9-913c-4885-9186-91e0a230e02c", "sighting_of_ref": "indicator--51647547-cc29-45ed-bef8-956870961035", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3e305b-2355-49a8-a651-cd9e3ebf8a04", "sighting_of_ref": "indicator--53e1a57b-7877-460d-9538-e3e880f36aca", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d570999d-cbe7-4c51-bcc8-5ef203609a15", "sighting_of_ref": "indicator--37fba19b-8505-40f3-afc2-e1c8b555531a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a2e3c6-c609-4794-a973-3eac0a009fcc", "sighting_of_ref": "indicator--aa5a2b51-dadb-4bdf-b45b-114203db0722", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d20414c-160a-4b59-95fa-3e92b8cb1185", "sighting_of_ref": "indicator--c8e45c45-f198-4121-8bf6-854106770fab", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51cfc3c-e822-4c82-a191-3cfba259d531", "sighting_of_ref": "indicator--3c84aa7a-3f39-4db4-acce-7b03d4aace64", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60135674-4385-4f60-bf4a-f796e5612c26", "sighting_of_ref": "indicator--b1c08d1f-b23a-4164-90a7-3219f3d651d7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba337ec-b014-434c-9f6a-2487d143af8f", "sighting_of_ref": "indicator--868ce47a-f147-494d-ab85-f2991563f7d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138e2386-5d2a-42cd-ae91-f7620af128ee", "sighting_of_ref": "indicator--0a596702-5dfa-4afd-b151-f2303bce665d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcad5d15-e058-497a-99bf-2a4711be57b4", "sighting_of_ref": "indicator--73a64394-eaf1-4c44-943f-e77416a08dee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c561b52c-e4c6-4c50-a62e-9b907d3b2c96", "sighting_of_ref": "indicator--12222302-389d-4616-80d2-688f397c29d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b3168a-1380-4b43-97f9-f3a6dd742346", "sighting_of_ref": "indicator--12222302-389d-4616-80d2-688f397c29d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f390cc-27fd-4578-9795-95eb58ad3aeb", "sighting_of_ref": "indicator--b74284bd-b4a7-419f-b488-12bea20afb12", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a0e235-489e-4331-b691-23a6959f385e", "sighting_of_ref": "indicator--3e69cb29-59a3-4d19-8235-2e9180fc136b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcbd9dd-c93d-4d79-9355-7f3456a15a02", "sighting_of_ref": "indicator--10f20e96-c228-47b9-ace3-dc06f3925662", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91290c32-11c6-449e-8669-c825b3ef511c", "sighting_of_ref": "indicator--f9afa6b8-e1e1-4ab6-ab43-b501f29ebcce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66c9d6b-9f3b-436a-ba0e-d56a45afad23", "sighting_of_ref": "indicator--f891f108-a194-4ec3-812d-fe9f87fba283", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526e0d20-2613-4064-9885-ae97e805847b", "sighting_of_ref": "indicator--45505856-f8de-4354-adeb-a900544683a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfed924a-fbd1-484d-b8ce-24e7cb883f1f", "sighting_of_ref": "indicator--1adb4b30-4109-4ad9-bc72-c3861a22ce4a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d999096f-1789-4c92-92d1-f1b39d944f97", "sighting_of_ref": "indicator--1adb4b30-4109-4ad9-bc72-c3861a22ce4a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1556b4-8a39-4c4a-a13c-a0e9f83052bb", "sighting_of_ref": "indicator--17539207-18c0-4efd-a930-ee3c4ae60695", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d61ba5-1e26-4782-8db3-7f510f156df8", "sighting_of_ref": "indicator--a5bbb023-8ff9-4842-bd19-b779770a8615", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c672ed9b-96f1-4a91-ae1a-8e76742321b4", "sighting_of_ref": "indicator--5c195a08-3a55-4301-8bcf-363b65682085", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c99628-b430-450a-9a3d-aeca43337441", "sighting_of_ref": "indicator--5c195a08-3a55-4301-8bcf-363b65682085", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3993bd-1664-473e-8517-801d9eccaabc", "sighting_of_ref": "indicator--73ee6758-ffa6-4e54-990b-108807a5f6ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d00718-d8fd-4075-ab2b-4905f9c07c58", "sighting_of_ref": "indicator--73ee6758-ffa6-4e54-990b-108807a5f6ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ab3383-5c5e-4ae6-9cbb-38b22aded3c0", "sighting_of_ref": "indicator--ff0341b4-42a1-4c4f-9131-27d41ec64bb5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1afc4f-2b2c-4830-8b09-3d1be0af83b1", "sighting_of_ref": "indicator--0764189b-87ab-41c2-bf9b-acbacf68de9d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee91a198-3c13-4001-a059-c00ccc5e19ec", "sighting_of_ref": "indicator--92a0a476-2e40-41ad-a2d1-9a48f111e247", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae29e1f-378f-41e9-abe8-bce279f38398", "sighting_of_ref": "indicator--75a7653b-9bad-46d9-a5c2-30d7028204db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d80dfdb-62c7-42ef-8f32-c4919ab36b23", "sighting_of_ref": "indicator--5d41fa7e-cec8-4e06-a493-0d9aece55af9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598597a2-703d-4dda-834c-140a8e1a7c1f", "sighting_of_ref": "indicator--82e5379f-929e-4df9-885a-e6f9d192813f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8475bd-fcc1-4310-bde2-b05bef279bef", "sighting_of_ref": "indicator--dddbdecb-4f91-4f1b-99be-e8eddd8afdb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11295a16-ef91-4952-9cc5-d08dc2cbd6e6", "sighting_of_ref": "indicator--87b9f82e-6308-4457-8db0-9855dd5f4203", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e7c03c-fa72-40fc-8a4b-84a1c7f80917", "sighting_of_ref": "indicator--a3c94d1e-d5bc-4365-9edc-ebe5edd6fa10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a17cf6b-d37f-46df-8ecc-aa73bbdc0887", "sighting_of_ref": "indicator--da464555-4529-4a33-9c11-c0f191441731", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec7d9af-fd40-4fa5-a513-c9ba01875aa2", "sighting_of_ref": "indicator--7a7ea5a5-706f-40c5-b0a9-bd8611ed05f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc05a2e-a452-4968-bec2-7dae7ee654d5", "sighting_of_ref": "indicator--cc61950c-c7e6-4c40-b2ce-fa85185b1a32", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe24c00-78bb-45e6-b6da-1bfa9ddb4035", "sighting_of_ref": "indicator--4df0745d-9527-4892-9c5b-83e6ac283e73", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361afff6-899c-4710-845c-2c13052c7a99", "sighting_of_ref": "indicator--135f6d82-e0a6-45be-95c9-35eae2835da5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4b626b-5bf3-4a40-a123-7f8f74369ee5", "sighting_of_ref": "indicator--135f6d82-e0a6-45be-95c9-35eae2835da5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7539a2dc-150f-4649-b7d1-0a191815e45c", "sighting_of_ref": "indicator--d6398454-6846-4adf-a0cb-b4901242c9a3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a8eecf-2be8-401d-854e-795546f76856", "sighting_of_ref": "indicator--fdee836a-97f1-46c0-8d43-a109a72ced0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a71a8dd-6f9b-4487-8304-2ada469d78af", "sighting_of_ref": "indicator--4162a758-1960-4500-ad18-7dedab8e3d35", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0334619-0970-4d0c-a99c-55f26805d44a", "sighting_of_ref": "indicator--4162a758-1960-4500-ad18-7dedab8e3d35", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98305bd9-d602-495c-9c05-f3c4c069a9ca", "sighting_of_ref": "indicator--a8979516-b372-43bd-8ff1-e0f4bb944fea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9a1268-7759-4117-bade-ced639875a51", "sighting_of_ref": "indicator--8c4821cc-e777-41b7-bb99-1407d326a28d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1334c1-383f-4c98-98ba-4520c496bb78", "sighting_of_ref": "indicator--4fd34767-482a-4eec-b1f1-f90046e066fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06de5e7-a1e6-4ebc-babf-8022505375ce", "sighting_of_ref": "indicator--2538b184-efd6-4892-96de-4bbe0442df9f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050d1ced-400b-49d9-ae95-2239c129ee77", "sighting_of_ref": "indicator--105f46b3-b3b1-41ac-8f54-26ff1df01871", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63cea3f-b7b6-417a-b984-f164ef70aebb", "sighting_of_ref": "indicator--8e983b67-ce42-4324-8772-62017ec624df", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97530496-4330-402b-81e9-e4986ba3c8a0", "sighting_of_ref": "indicator--f5c405d8-0dac-47ea-9ff4-14a2fd7c4f40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107e1b25-f72a-4708-9b2e-3aa9d38f7387", "sighting_of_ref": "indicator--f5c405d8-0dac-47ea-9ff4-14a2fd7c4f40", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1dad16-9447-4680-aaf1-03670f695e24", "sighting_of_ref": "indicator--469b3fd7-1041-4f11-83d9-f68e0869e2fa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acb151e-8bb5-460e-8356-7249d1297c3a", "sighting_of_ref": "indicator--469b3fd7-1041-4f11-83d9-f68e0869e2fa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4763935c-3a98-4f23-aa0d-c98cc3f619a8", "sighting_of_ref": "indicator--c92aa74c-6d62-4112-b67a-a2ff90f315cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3a73bb-8ba1-4d04-9cf5-bfc72c0b292b", "sighting_of_ref": "indicator--c92aa74c-6d62-4112-b67a-a2ff90f315cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b030858-42bf-4ded-ad34-5c262b05ffef", "sighting_of_ref": "indicator--8f09c352-8540-4982-b902-3f8e0361168b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938df0df-1118-4dfc-9e99-63dbfcb5e81a", "sighting_of_ref": "indicator--8f09c352-8540-4982-b902-3f8e0361168b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e9bd6d-6d66-4d3e-9c99-a037c1722f4c", "sighting_of_ref": "indicator--0943ad34-6cea-44a0-a096-37d6bf652471", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b38a8e-825d-4c52-9888-fe02c2a71abf", "sighting_of_ref": "indicator--ba252ecb-7867-4379-8d01-3644a3548f75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3dc9b9-d647-49d0-8d96-8ef130087004", "sighting_of_ref": "indicator--21379404-ffa7-4933-983d-f5f7e3c2faea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213a10d3-dea5-4289-aae3-9fb19811efb0", "sighting_of_ref": "indicator--a331c108-0786-4287-86ab-92f588366953", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c730c0bd-4682-4db5-a0d3-c599c7ed4645", "sighting_of_ref": "indicator--3fee0db5-1fd5-400c-8e08-8ea9f321fba9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f760cc2-dd90-43cd-a154-e97d1e7bfc54", "sighting_of_ref": "indicator--20008fda-151c-4839-9bd7-e6ee9819133f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6746dcef-d88b-42b0-b0e5-439317e385df", "sighting_of_ref": "indicator--97f8dba7-99a9-47eb-9a91-98b6838c1862", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2087f182-5e35-4ae2-a1cd-03b652f9bf7c", "sighting_of_ref": "indicator--fc32ff68-9fd4-4984-8424-f239c0ce3463", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebf379c-6343-4713-ae8e-e47e39b0729e", "sighting_of_ref": "indicator--97229615-cfee-4768-ab18-731893bb9656", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6a68d7-b671-4f04-9fdb-6d0789d6ae84", "sighting_of_ref": "indicator--b62d10c6-feda-406b-a603-1d7df36dafac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc814af-2be9-4d61-ad83-2c7dc2bacdb4", "sighting_of_ref": "indicator--47f0f9da-4ba2-41b6-a9e9-67d92f36818d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cad146-4642-433a-ba36-ed6dc2ee2429", "sighting_of_ref": "indicator--e2c43ef3-b684-4128-b156-ae1e8aec370a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1822e0e1-bf7c-4f7b-ac2a-7fad81d9671a", "sighting_of_ref": "indicator--cdca559b-40e0-4061-b97c-1cf15e523eef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4899d9f-ba77-4008-a4aa-9c3753f63080", "sighting_of_ref": "indicator--ada93438-605d-4aed-ad06-7fc9cf5b940e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ae9a24-0746-4095-8d1c-d2edf04a318e", "sighting_of_ref": "indicator--ada93438-605d-4aed-ad06-7fc9cf5b940e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515a3606-48e6-48db-b238-136ae41e5b30", "sighting_of_ref": "indicator--d00aa1a4-7945-4b9f-9eb2-88e8035cbe0e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91acb449-a91b-4283-9dc8-01ed748bdc5c", "sighting_of_ref": "indicator--d00aa1a4-7945-4b9f-9eb2-88e8035cbe0e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a65be6d-8240-42ab-acf2-19f898b4524a", "sighting_of_ref": "indicator--58c4116b-fabd-45ae-96ac-a8b4926a43a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2fef06-a233-4dd0-8139-733455c8544c", "sighting_of_ref": "indicator--58c4116b-fabd-45ae-96ac-a8b4926a43a0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542dcc8b-c0ca-4937-9d34-fc077aa66a5e", "sighting_of_ref": "indicator--a9cea1fd-85ae-445f-9dcc-287096200328", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88907c7f-f395-412a-a9e4-f32b8168b4af", "sighting_of_ref": "indicator--c2f70648-c876-4e88-b8a2-d3e20694852b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01dd5e2-bccb-4777-b690-e6f62614a1a5", "sighting_of_ref": "indicator--f9b912b9-852e-4265-a8a3-39b26b964873", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf7f281-7cea-4c8f-8b6f-03b1498a1f18", "sighting_of_ref": "indicator--f9b912b9-852e-4265-a8a3-39b26b964873", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b303cf-7b92-4989-a2d7-666fba710b56", "sighting_of_ref": "indicator--fe5d6de3-f4e0-4b46-abed-57571499bca4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f915d4c-3209-49d4-b4ef-269fa59dbfed", "sighting_of_ref": "indicator--731a876e-71c3-4c08-a678-ef971131f134", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9499fe00-7427-4b22-bfde-b1f54469ffb9", "sighting_of_ref": "indicator--731a876e-71c3-4c08-a678-ef971131f134", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1812d4e-7752-4c8e-859e-a2534f28ebfa", "sighting_of_ref": "indicator--0b9fd0b9-ebb6-4cba-afe1-5aaeb36ae945", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6bb619-ef10-402b-8d15-7224c06c9492", "sighting_of_ref": "indicator--0b9fd0b9-ebb6-4cba-afe1-5aaeb36ae945", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cfe1e5-7b12-4a60-81b7-5f71e3a5b888", "sighting_of_ref": "indicator--7919d5cd-a34c-478c-9b06-48197ed34068", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f985ac8a-ce93-4e88-85e8-dcf640fafd67", "sighting_of_ref": "indicator--786de24c-a8c2-4d77-87a5-4497a4125ceb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ff5257-0dae-4b38-a628-9eb805816566", "sighting_of_ref": "indicator--bedc05d9-f4cf-4351-9dc6-3717976045ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7fab79-b802-45b7-b697-4c4dfb960bee", "sighting_of_ref": "indicator--73916ada-5a75-42fd-b803-e0c9fcb0ec5a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b492d594-d61f-481d-945c-35742e23e3f4", "sighting_of_ref": "indicator--73916ada-5a75-42fd-b803-e0c9fcb0ec5a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cca889-0729-4444-aada-4338f3bcc930", "sighting_of_ref": "indicator--8ef7c8a0-09e1-4e71-bafa-45a8c16977ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbee49a0-3390-4117-be51-de9239420b92", "sighting_of_ref": "indicator--8ef7c8a0-09e1-4e71-bafa-45a8c16977ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5134fdf-706c-4904-8003-ec97d7c1fb38", "sighting_of_ref": "indicator--3d5243de-b44d-4bb2-9ce8-a37cd5b1282d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15b7db6-64ab-40f4-a092-e8a5e275cc2f", "sighting_of_ref": "indicator--cd797f2a-09b4-4726-b3e0-183fc199033a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb2f2b1-8349-4eab-8ee1-c28a5b516ba5", "sighting_of_ref": "indicator--1ec829e1-aa97-4f46-9062-12ec7e459297", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40776f1f-0499-4fc6-a795-3031ef25f168", "sighting_of_ref": "indicator--65a4ac8e-9f85-4220-97d1-b7d82da25745", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb157a65-4b86-4a93-8691-46fc03e004f7", "sighting_of_ref": "indicator--65a4ac8e-9f85-4220-97d1-b7d82da25745", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2760ec05-3b9b-40ef-a199-0bfaa369a0b3", "sighting_of_ref": "indicator--150c4b6c-df80-437f-9d2c-21f1180dfea4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93665f9e-07e6-4101-8b42-90dd79f3cd2c", "sighting_of_ref": "indicator--150c4b6c-df80-437f-9d2c-21f1180dfea4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bfc4f3-8294-44cb-b39b-d076414d0d89", "sighting_of_ref": "indicator--16345386-0463-48b6-b209-8094a93dc765", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef0e882-c9cd-47d8-ae8a-840c73304af5", "sighting_of_ref": "indicator--16345386-0463-48b6-b209-8094a93dc765", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95aa2fc-a84e-4583-9812-6381de891788", "sighting_of_ref": "indicator--f7e1db00-6955-43ef-ad04-517890eb68b0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6467e4e2-e476-4ed1-b5dc-3a00554c657e", "sighting_of_ref": "indicator--f7e1db00-6955-43ef-ad04-517890eb68b0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dea22af-c44f-4be0-aec6-bf2d59801af5", "sighting_of_ref": "indicator--78de5d86-cd8c-4b8b-a6ea-49fc88df322f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5fe578-43d8-44e1-9243-a8ea116f4df0", "sighting_of_ref": "indicator--78de5d86-cd8c-4b8b-a6ea-49fc88df322f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14842743-43c9-40da-986f-b206e70383bf", "sighting_of_ref": "indicator--0d07f8ee-5c90-49e2-9203-dd6253d2f0d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccf6da5-131a-4f0a-ad37-d7b106b03f60", "sighting_of_ref": "indicator--0d07f8ee-5c90-49e2-9203-dd6253d2f0d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be9dd59-923d-4c79-93b4-11e5b72d2362", "sighting_of_ref": "indicator--c02a9c90-e5dc-403d-93cb-cbb5329ae7a8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da14fc64-c2fb-42df-bdd3-3a3f5b682c13", "sighting_of_ref": "indicator--3ab16853-0dc6-4e1b-94ed-f6a2bc2fcc2e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5edcf0-d462-4da0-b104-6a4ea86709b8", "sighting_of_ref": "indicator--02ab3736-6158-4087-b495-6f72acd5e23d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0678b78f-00d3-45d4-b665-5391d6375fee", "sighting_of_ref": "indicator--177c8045-97d4-4bdf-8309-b7ae1e8cab94", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fd32bf-b311-4dfa-ae42-226ffd1d931e", "sighting_of_ref": "indicator--fe6745ed-17a4-441f-872d-514fb41e09d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5fe242-de9e-4fe7-9c4c-176baf163c8f", "sighting_of_ref": "indicator--b69ca266-7b26-48f2-8629-a31a9db63144", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037114a3-6318-49fc-b9b5-8b12e823ffad", "sighting_of_ref": "indicator--b69ca266-7b26-48f2-8629-a31a9db63144", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464ed1bb-1b19-4cf6-8679-327c2fad7c67", "sighting_of_ref": "indicator--25e4bd9f-0037-4142-95e3-1ed26f7bc3c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa709d22-f876-4928-824d-94d37f7471e6", "sighting_of_ref": "indicator--13f8990d-f789-4729-9167-b6ff14b8a683", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ac93ec-5349-4677-a7c0-6d3e8248e0ce", "sighting_of_ref": "indicator--be23eea9-8db6-43c7-b17b-1c81059b3acb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8268fe5-923e-4750-88ab-9518d6b44dfa", "sighting_of_ref": "indicator--9746ee87-ff28-4f60-b008-977eaa5bb916", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5614cfd1-d89f-4a23-a0bf-a84fe3c208af", "sighting_of_ref": "indicator--471c4e83-9196-4d2f-a04a-9af1f5b28cf8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4859010-2157-4502-b454-3d517d918258", "sighting_of_ref": "indicator--1f931d71-ecdd-4b75-927c-f10af999a1ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f382ed-a109-49af-bb1d-17ea7fc2368f", "sighting_of_ref": "indicator--4136c550-3677-4249-803b-244c7c5eb852", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2f8591-19d0-4fea-8ab4-8fa360726626", "sighting_of_ref": "indicator--22ca5470-760e-48f1-986d-326859c9fcd5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cfbed6-3fc0-49be-bcf7-a6eba6ae6a67", "sighting_of_ref": "indicator--7b66f6b8-402f-436b-8de0-15f1071e0110", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c7765e-5a54-4fd0-b423-ac0886f844bb", "sighting_of_ref": "indicator--78e835cd-2f86-4b15-b27c-688fff284b1b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29354393-7463-4f15-a9d5-0521abdd5c92", "sighting_of_ref": "indicator--9e65ae36-562b-4312-865b-4bff12d60bef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35726181-b5f0-4a36-9c61-6c2a77867911", "sighting_of_ref": "indicator--9e65ae36-562b-4312-865b-4bff12d60bef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a9602-3d8f-4bf5-ba10-5762458b9f99", "sighting_of_ref": "indicator--72cd8a4a-aacd-47ad-9f99-135b0a601606", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbff228b-cbb4-4579-95e1-0deb1721d9db", "sighting_of_ref": "indicator--72cd8a4a-aacd-47ad-9f99-135b0a601606", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b81968-cb41-400e-8ccc-2a93d3ec0b5e", "sighting_of_ref": "indicator--d179e3f2-677b-41e7-a1b3-517d7db85f11", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8ce172-12ea-4818-b187-5c0648a2b0c3", "sighting_of_ref": "indicator--c5375163-e750-42b3-aae3-b84b271c122b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3ce6a9-5682-4c63-9c58-ff9d10abad78", "sighting_of_ref": "indicator--c5375163-e750-42b3-aae3-b84b271c122b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a14487-90eb-4bb5-bbc4-22222931fc22", "sighting_of_ref": "indicator--87407ec1-3595-459b-95de-3c1783172464", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a175f25a-4767-4578-a0e1-5345af444f16", "sighting_of_ref": "indicator--1538d3a8-a4b4-4180-a2c3-4b5796d32bd4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebc46d7-a761-4062-a507-499ddf821a9e", "sighting_of_ref": "indicator--1538d3a8-a4b4-4180-a2c3-4b5796d32bd4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75f9c9a-7d2e-4237-a0aa-cf95e7201829", "sighting_of_ref": "indicator--be9185b9-be42-4ccc-acce-cc861488b69d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf53ce05-5291-4ebb-a13e-7b9e85685adf", "sighting_of_ref": "indicator--c268035d-51f6-46dd-88ac-b389b6269098", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29105b22-8243-4a7a-82c8-a7a918642076", "sighting_of_ref": "indicator--c268035d-51f6-46dd-88ac-b389b6269098", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46742749-e0fd-41e8-906a-0c5d75e7c929", "sighting_of_ref": "indicator--bc093d4f-7a06-4f1e-bdb2-aa556748ea1d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df688bc-d6cb-4c6c-9bc0-7f8d97812d83", "sighting_of_ref": "indicator--bc093d4f-7a06-4f1e-bdb2-aa556748ea1d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766bdd71-4dff-48aa-a703-08ebfb02c38a", "sighting_of_ref": "indicator--e74c279c-37e3-469b-a922-4619058e8f11", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b00f2a-b782-44b3-ac4f-2aef9429eff0", "sighting_of_ref": "indicator--e74c279c-37e3-469b-a922-4619058e8f11", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2390ecb6-1960-4835-b775-4f9e8043b119", "sighting_of_ref": "indicator--03dce61c-9eaf-4e1f-a026-bb35d0b225b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80f3ca6-9f81-4a21-ac66-6c3ad6c4a78f", "sighting_of_ref": "indicator--03dce61c-9eaf-4e1f-a026-bb35d0b225b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9794a47b-f012-416e-87c1-7705e8e7101d", "sighting_of_ref": "indicator--15874436-aada-4bdf-8665-8414beb26e6d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf6e864-96ae-42b0-a2b7-0e697533db5d", "sighting_of_ref": "indicator--16a05bcd-68a1-4ce6-8297-5e29531aa874", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07dcff1-1ad0-4dbd-84c7-39fb72e8c187", "sighting_of_ref": "indicator--16a05bcd-68a1-4ce6-8297-5e29531aa874", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2a318b-c2c6-4f89-8de4-fa0fbbd6f25f", "sighting_of_ref": "indicator--0d355ad8-b30b-4527-90a0-1b62b04a1aa7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcff002-47a4-491f-9ce1-7106c491a5c8", "sighting_of_ref": "indicator--0d355ad8-b30b-4527-90a0-1b62b04a1aa7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e90347a-32a2-417d-ab99-5923d775f5f0", "sighting_of_ref": "indicator--cf5b5590-a5b4-414b-b981-67d21e8825f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b640b8-2232-4482-b03a-a271f69cfc9e", "sighting_of_ref": "indicator--d0d59e41-686b-407a-86db-3f8e152be1fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce6549b-7250-4eff-a3d5-8faf733ad7b5", "sighting_of_ref": "indicator--d0d59e41-686b-407a-86db-3f8e152be1fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb938e1b-dcfd-4ed7-83f1-da09ec5f4616", "sighting_of_ref": "indicator--5d9f2573-521b-4fcb-8f48-54ec4579a939", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fee00c-f282-43d1-b064-ba69d3f943c5", "sighting_of_ref": "indicator--5d9f2573-521b-4fcb-8f48-54ec4579a939", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b065060f-7f45-46dc-aa42-bbd6c777597a", "sighting_of_ref": "indicator--bba157d0-715c-4da7-9003-c237401033ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbe7755-eb40-4edc-957d-de08940df6f1", "sighting_of_ref": "indicator--bba157d0-715c-4da7-9003-c237401033ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1232d484-2971-4569-8d8e-dfc2109e2176", "sighting_of_ref": "indicator--85e6a165-1e0b-422d-bd2d-bfd5d88d10f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818eb4a9-b950-424c-aca3-9392d66b8214", "sighting_of_ref": "indicator--85e6a165-1e0b-422d-bd2d-bfd5d88d10f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d832b7-8854-44bf-9c40-7d2a90ce077c", "sighting_of_ref": "indicator--caefac22-0711-4a00-aaab-9b6e12665285", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e215ab-1a2f-4791-97ae-d72301efa0a6", "sighting_of_ref": "indicator--caefac22-0711-4a00-aaab-9b6e12665285", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed18e995-0f70-4b55-9c0d-721116d40ed7", "sighting_of_ref": "indicator--eb9131f1-af54-40ce-851e-b9a9d8ca5b39", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc601853-ebd5-4782-8d4b-e9f6779e0697", "sighting_of_ref": "indicator--eb9131f1-af54-40ce-851e-b9a9d8ca5b39", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca8e24f-23eb-4e72-ab59-b6041a46d7f6", "sighting_of_ref": "indicator--c07f1ed1-c182-4b07-ac37-563407a7a06b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65de5ea2-a920-4ef1-ae5c-f28b43e3d23a", "sighting_of_ref": "indicator--913e0075-42b3-45fc-a2b5-92a74bcccd2b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cbbddd-e19e-4798-9105-04fc6085cbc6", "sighting_of_ref": "indicator--1de695a3-29e6-48a7-9c6a-faa201c926a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02b7297-0d01-43c1-89b2-bbac71ba6e67", "sighting_of_ref": "indicator--1e343c08-e99b-4419-aaac-8c38d17cc082", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a3e7cd-b7cf-46c6-ae5c-9508a68607e2", "sighting_of_ref": "indicator--d1010df6-5b6e-4a7c-8a4c-0611419e0d22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9301a3b9-d006-4827-8d93-595d3c099b18", "sighting_of_ref": "indicator--d784bed4-6bbb-4452-8d4c-8df3102aaedf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bf377f-380b-4a0b-a868-3cd138cdf721", "sighting_of_ref": "indicator--ad174f13-9770-4444-bc96-ff7fdf61d19f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11841363-f98e-4794-9720-c4a2d02e4c87", "sighting_of_ref": "indicator--76b81f60-dbc7-4478-8826-73776420bfe8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d83a57-8472-4f30-8fc1-85347cd4eb92", "sighting_of_ref": "indicator--20929ee6-c0ec-4ab6-95e1-327b88f4e913", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dc438c-12d9-4fab-94bb-0f7d8c34bd2b", "sighting_of_ref": "indicator--010d211a-1f45-4c30-827b-b94028fb2e4c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f9a9a5-0628-4f30-aa7f-0151ad8cf263", "sighting_of_ref": "indicator--014af5a7-5871-4c02-a385-b89ccd4c99b0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d99406-a111-4531-b0a9-e6e3c72be310", "sighting_of_ref": "indicator--f1b48052-bcbc-41a7-9ea9-ea7066a0a1c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c1a45c-a504-4f65-872c-a6ff8480ce96", "sighting_of_ref": "indicator--c41fbb97-b120-4ce3-920b-56bc339d9c7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53db1af1-238d-4875-843a-c19e126c9a44", "sighting_of_ref": "indicator--cb8e303f-a3c1-4eb0-baf4-42c06230d252", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfd08fe-46cb-4e50-922e-424aa1b7383e", "sighting_of_ref": "indicator--0cba5e66-c7c8-456b-a90c-2e07a105260b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4acf73-7481-48da-9486-c2cae78d883b", "sighting_of_ref": "indicator--ab2884dc-8061-493a-a9f7-5581c08a27f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2062681b-90c8-49a6-aa6d-0596cfda2ecb", "sighting_of_ref": "indicator--bf896b0a-59e1-4c88-918a-5951b108f96f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df83bec-d134-40fb-bf2b-c6cac72c7540", "sighting_of_ref": "indicator--29f6c0de-a980-4940-962d-4e3ce5c65c27", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d606ed2e-6dbb-424d-8144-16f8e252c264", "sighting_of_ref": "indicator--54ab0417-26d9-4231-b2f0-0e420ed593e5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b38f77-f186-4db8-88fb-ed1b5843c5d8", "sighting_of_ref": "indicator--961c5343-d373-4581-bf16-38f1c4459865", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4276df-5b35-4691-b3c1-5f4f23ab1aa2", "sighting_of_ref": "indicator--ca256775-fa69-4aaa-ac3b-bd8e11575eae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dc989c-f359-4489-8dff-cc4a0be1148d", "sighting_of_ref": "indicator--0d92ce80-c82f-46bc-b102-921d81deb6a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc42675-35e5-4238-b696-35633abd106a", "sighting_of_ref": "indicator--b55b845f-2a4c-4e2b-9e98-52d772222a3a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a615674-2149-48b4-9ed6-2432b13d4181", "sighting_of_ref": "indicator--b55b845f-2a4c-4e2b-9e98-52d772222a3a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d22edd-1796-49aa-99b9-bd9d718258a8", "sighting_of_ref": "indicator--5b25312c-a1f4-4a4a-9509-fb6ca6db79d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f255349f-37f4-45f4-bb8d-29b72a3d2276", "sighting_of_ref": "indicator--5f3955b6-f4c4-4118-9040-b581a598c309", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f430c0f-8fff-4270-89df-2478b66361dd", "sighting_of_ref": "indicator--8a744037-70a1-46e0-8257-6ffcba4b7916", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e27762d-fcac-47f0-a5fb-468a1b9f8ba4", "sighting_of_ref": "indicator--85c9ffbe-e403-4b20-821e-8e0593dd28ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b955444-b334-48a8-9cfe-8c9916325298", "sighting_of_ref": "indicator--38a688fb-b8c1-4bd7-9191-e8a8e9d926ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b665845-1ba7-4a45-a759-d44e06310ca6", "sighting_of_ref": "indicator--7054744d-c8a1-4101-b868-d274be55aec0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa4cc3d-a06c-4a4c-99a6-1cf45336a72e", "sighting_of_ref": "indicator--19338671-8e94-427f-9eec-36d766597fbe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f81a53-9389-4e0a-9f1e-543d9ebb5116", "sighting_of_ref": "indicator--a6638bf4-4526-44f5-9c6b-b04346178b6c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25cff65-7f05-4ce2-ac9d-43d3e721f1e9", "sighting_of_ref": "indicator--3edb7a38-4a45-4126-a530-8f648e641d66", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9c0bf2-2f09-4140-a665-55a7ba0b4043", "sighting_of_ref": "indicator--f06dd707-18b1-4076-b668-fe3735544bd5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b19f9b9-4467-4157-b65f-347a36ab74a0", "sighting_of_ref": "indicator--3977452e-2923-49e4-951f-f3c86a0e23b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c5f5ea-9743-40c0-9b90-a9d19ba15b61", "sighting_of_ref": "indicator--81dec528-2ebb-40cf-8185-acb74ad933d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27fa1bf-8e0a-453a-ae47-27b319576099", "sighting_of_ref": "indicator--051d928a-5600-4572-b7b6-8e08a32ecd99", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72411281-8eee-4fb1-9ae8-9dec501d87cc", "sighting_of_ref": "indicator--36c5e803-775d-4a33-920e-423f7e9f2bce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab867bbf-c958-4c0d-9e24-4d8d60f52d7e", "sighting_of_ref": "indicator--e373ba59-83bc-45f1-a11b-69a137eebd48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a99b731-3f86-43a3-bae6-8e25039703d2", "sighting_of_ref": "indicator--ec35d47d-0b39-4d6a-a56c-aa20b4670f92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173de51c-4b71-4e88-b5b7-9dc40cd660b2", "sighting_of_ref": "indicator--5e0e8abc-d3d5-4b60-b439-76f315265404", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3025ac5b-1469-4055-8ffd-da67f556c36a", "sighting_of_ref": "indicator--203649c5-2b79-4b94-bff0-ce00bc5435d7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299773d6-1d26-41fc-a1c7-9b2bbcae96bb", "sighting_of_ref": "indicator--634d8ec6-1615-43fa-8c6b-7fa97c2d4e24", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3836444-ab02-4a88-a389-0ef2583d60c0", "sighting_of_ref": "indicator--02978d9e-f808-48f5-9dc7-15fd4be73492", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f6e61f-7e01-4b41-80d3-1e6d423ae784", "sighting_of_ref": "indicator--78794ec6-1fdd-4031-9d59-6ae5b2ac3143", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8908dd33-34c7-4f5e-a4ed-b8a11157958b", "sighting_of_ref": "indicator--78696990-4092-43a1-bd58-5fb27cbf4e10", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d46dfe-063d-4535-b532-6f3dd46b3e52", "sighting_of_ref": "indicator--78e02df1-43e2-4003-af27-bcda68682f5e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b019b0-2eb6-4b72-8087-98efa662cacf", "sighting_of_ref": "indicator--052f37ee-afd3-42c9-8365-8c2722d25713", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bae325-8bd8-44ed-b0c8-0b7ea9dd6adb", "sighting_of_ref": "indicator--2df6fb28-7461-4aef-8a14-33361c2307e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8362f9ab-544e-415b-a80b-6f0d56fd930c", "sighting_of_ref": "indicator--059a6b58-d02a-4079-a867-cdaa55e73a10", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9ce5c3-6f3e-4745-8175-8981288bee3a", "sighting_of_ref": "indicator--72cd0547-85be-4a24-a286-7cf851e6821a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fe49bb-de95-4f10-98b6-fcd9fccee5f4", "sighting_of_ref": "indicator--8129e0f3-cbd2-4def-9633-348b7292be8b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e75218-fae0-4e6b-ae31-0fb302d29ddc", "sighting_of_ref": "indicator--3ba8fca1-8788-4549-bf72-d0ce97be4813", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114656ff-8b67-453c-8982-785cd16206dc", "sighting_of_ref": "indicator--d2510a63-e6cc-401c-9672-5b36541904d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dd211c-fa07-4c03-8ac3-a677b7741c4c", "sighting_of_ref": "indicator--18d5b02c-379a-4879-a26b-5d849eb88278", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33580d1-6fe9-4d5c-a948-9d943c0ae617", "sighting_of_ref": "indicator--2cf4bf36-a48b-4509-909a-3c50dcf01624", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba5baa8-85b1-4be7-9917-916948e91724", "sighting_of_ref": "indicator--99b33cfa-e901-4e12-ac52-501193ab7941", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebcf19c-3029-41fe-8474-5b1cb138f5e3", "sighting_of_ref": "indicator--0f4ec456-3306-4d97-9d13-d50a7760b86f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45dda70-bf10-43c5-9942-369c85866c4e", "sighting_of_ref": "indicator--98e550de-43b0-4217-a32d-057021bc87e7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2343a85a-82d6-4995-9fd3-4b07231a3696", "sighting_of_ref": "indicator--bc201297-7f41-405c-b043-c154dc18971b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44414fc-a98e-460e-955c-273c68cec266", "sighting_of_ref": "indicator--27d7baec-9cb2-485f-b1ed-0deb235f65fe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e96100-ea0c-4022-ae8d-d103c4210349", "sighting_of_ref": "indicator--66fcbdd5-b8c8-472d-82d5-ea6561f9c41f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98652bf-bc60-40fe-a865-f4792b2ce318", "sighting_of_ref": "indicator--cf4c262b-5c46-4946-8923-06fece7611d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf656b6-a5d9-4a06-b132-e3ce31070815", "sighting_of_ref": "indicator--480b4261-1ea9-4a33-92d6-2137d6f5ba50", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f23757-b930-450a-b3db-76266a377d2d", "sighting_of_ref": "indicator--a5743944-3a8f-40be-ae57-45d2b489f3c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0deca9-c7a6-45ab-b1e5-6faf90545858", "sighting_of_ref": "indicator--60c03240-073e-4a90-a097-eb6b4f4b076f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fd37d4-aad7-4df8-8927-b45923b60a33", "sighting_of_ref": "indicator--4be1da20-e83d-4679-8abf-a4790f8fc07e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3d3ff8-46cb-4779-bc0d-f1b19ebac18d", "sighting_of_ref": "indicator--262a81eb-492e-43ae-9f7d-72e0d5a9c856", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d4c469-32ad-45fa-9699-0863f435f87b", "sighting_of_ref": "indicator--262a81eb-492e-43ae-9f7d-72e0d5a9c856", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39830c44-175d-4ee5-8966-4646e3fb34e3", "sighting_of_ref": "indicator--0d3fd319-74ce-4b67-9608-304ef745aa0a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e76485-ddca-4517-88c9-06b4b2009d68", "sighting_of_ref": "indicator--54138574-24fb-4e5f-a932-70e9557f0a48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b455bed4-7a68-4dde-a6cb-bba700c998ed", "sighting_of_ref": "indicator--f2e41135-a26e-49a4-a0c2-847550b0c56b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc75f9b4-d64a-4c12-8a5b-a69ab0e5867e", "sighting_of_ref": "indicator--2964f748-e3d0-435b-99fe-eb89c7505edf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ebe9fc-3e53-474a-b9b1-c0e6a32c1360", "sighting_of_ref": "indicator--648bf750-8523-456f-ab21-bfa43581160e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8e2925-4af9-4cff-af11-696c486c284b", "sighting_of_ref": "indicator--4caf3ec9-e755-4a0d-9dbd-3d10e320baec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440f949a-1c8b-4a2d-b587-f674f921202b", "sighting_of_ref": "indicator--30f7a1dd-e717-4cb2-ade8-a77bd62657e1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf91288-2468-421b-8fb8-7c06c05e45c0", "sighting_of_ref": "indicator--2ce8325c-5da7-4bf1-8be3-e7f6a8ca54e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd19ba6f-d672-4779-b490-9e4e4dde7931", "sighting_of_ref": "indicator--fa68f252-d390-4046-bbab-f8d0d9d31e92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8157d475-54b0-472f-98c1-572058f804c5", "sighting_of_ref": "indicator--e1d31c14-a9a5-4b82-98b7-3d7cbfeb187f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cbc0d9-f857-4ac6-89e3-47be6568e348", "sighting_of_ref": "indicator--f6901695-d567-4809-930d-9ee3574d6573", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad7eaa9-264b-4f0b-a70d-f0ca457fc80b", "sighting_of_ref": "indicator--99a455ef-f1ca-4164-9e46-2bf0a074a155", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3918961d-43b5-4fef-83c9-64ed4eeabf24", "sighting_of_ref": "indicator--fd71d5c5-33ac-46e8-9f5e-621af1e5e2cd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f23989f-8bb7-4461-b9ca-300e6dd1e2d6", "sighting_of_ref": "indicator--1f74290d-8177-4c69-a954-a5e1eecd8b91", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c375c588-c141-4207-9f28-80f7a8b2298e", "sighting_of_ref": "indicator--d66f50c3-41a5-4b90-899e-c1847cda6c8e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c3cf89-3abf-43ea-9150-14e854b295fb", "sighting_of_ref": "indicator--44351e39-bd20-41a5-8dfd-62ce67ce273f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edbe3f3-696e-4f7e-9317-5049e51af4ac", "sighting_of_ref": "indicator--7c4229dc-2b83-4be2-a748-1b40885dfac9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815835f3-27d6-4952-874f-fc0f210719aa", "sighting_of_ref": "indicator--7c4229dc-2b83-4be2-a748-1b40885dfac9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696715c5-efb6-454e-b431-0204cf8525f6", "sighting_of_ref": "indicator--fa76331b-0e51-4173-a326-3c50da12811c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec7f0ad-d95c-4f24-bdd1-76bd9fc80944", "sighting_of_ref": "indicator--9b65db6d-0f71-42fc-a9a4-41fab15e840b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548f3e30-0d46-4b40-93a4-436b7f7faee2", "sighting_of_ref": "indicator--372138cc-da4b-4d2a-a10d-f8ac05d9add7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a7c9a7-663d-4009-ae78-7bc22b55e6fc", "sighting_of_ref": "indicator--0d057b77-b810-4eab-8a22-72c8188eeb53", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3b540f-0fdb-4b59-a2a1-0870cdeb09bb", "sighting_of_ref": "indicator--8a86b970-39ec-46dd-a06f-169ad1759790", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e73522-5f42-40de-b644-fade3efdf929", "sighting_of_ref": "indicator--f04c61e0-8417-41aa-b390-6827011c51f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97c90fd-ea5b-43b7-878e-ff68a9bc1d8d", "sighting_of_ref": "indicator--f04c61e0-8417-41aa-b390-6827011c51f4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026bf922-925f-42d3-8b23-6aa0958f8163", "sighting_of_ref": "indicator--a1baf453-1dcc-491e-a491-02db2d74fcdb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960d4808-f659-471b-aafe-5ec61af0ad63", "sighting_of_ref": "indicator--10cdb916-0dd9-416d-82c6-ec8e021a4e1e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d4785d-d62d-4677-bb52-7c9e127222ec", "sighting_of_ref": "indicator--10cdb916-0dd9-416d-82c6-ec8e021a4e1e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6eaeccc-2659-4a42-8096-e44b190b0edc", "sighting_of_ref": "indicator--57193965-9602-4a31-8d41-14e00b7cca3a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0593f44-c7a4-4eb8-bfc9-32cf5a95e661", "sighting_of_ref": "indicator--26350822-27bc-4137-a09e-959f7cee4382", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b259e8e0-b8af-4586-898b-9f115fe1ce1c", "sighting_of_ref": "indicator--8132efdd-f4e8-4606-bf9a-2706d369acd3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de568c2-b5d3-4234-9e0b-2cd32c2f6bbc", "sighting_of_ref": "indicator--2478847a-c09f-43f4-b3d8-f087ff5f1e08", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f5515d-3fa5-4974-a474-3cdeab2bbd98", "sighting_of_ref": "indicator--b742aeb2-f739-4ac1-9f42-cabb75c04f2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13908bfb-40cf-411a-815f-50b37af121b6", "sighting_of_ref": "indicator--c7e64bd2-570d-4f5a-937f-767c0da77dc1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502ec605-74a3-44ba-8106-7d631d4f0b61", "sighting_of_ref": "indicator--ed64e8dc-5919-4ac3-acd2-40b323674a6e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b9bd3b-658c-48d5-87e6-734eb39aeef1", "sighting_of_ref": "indicator--6ed0ec44-161c-4b63-b004-f35a7e677861", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98be0399-dc25-412e-9ab6-d9a1c25938e5", "sighting_of_ref": "indicator--19f434b3-e4f6-4026-baca-0578b1b94f27", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f4cda8-9013-423b-bbfa-7682b07a89f2", "sighting_of_ref": "indicator--fc495a66-1bec-413b-96eb-d891677861c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56011cee-59eb-476b-98b4-80ed14aa5c26", "sighting_of_ref": "indicator--c1f49fa0-bb23-4f3b-a8e4-32d50d4bb438", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536dbfcc-a85a-4744-8fca-49286ba66a9a", "sighting_of_ref": "indicator--fc25f550-750d-4246-a082-d0d0f3d0d6f0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b6cd00-cb25-42a1-9b71-cebe72622cbc", "sighting_of_ref": "indicator--07c6412b-c7fd-4214-b6b8-a8c1c2043641", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7e0f1f-5ed8-46e9-a34c-d6e27b601140", "sighting_of_ref": "indicator--07c6412b-c7fd-4214-b6b8-a8c1c2043641", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40079d73-fd0b-40cd-9374-76ba4ec5794a", "sighting_of_ref": "indicator--66d4045b-06ab-484d-89cb-f5666c331e03", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d69fec9-2586-4d83-8b89-eed06c1791c7", "sighting_of_ref": "indicator--d11df16d-2c79-43af-b041-7c7982e8b18b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ca524e-a4c9-4426-b055-70e47a5aa05e", "sighting_of_ref": "indicator--1b436190-d0a2-4c0c-b907-ff2fbee72a02", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef5b761-e1aa-4808-a27b-cf3e17190e8b", "sighting_of_ref": "indicator--d090a9f6-0714-4073-855f-2ab20d38eb88", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8673bd39-7147-4320-aac0-790bee623412", "sighting_of_ref": "indicator--07a561f9-822f-4788-b7a9-9e2dbecd51d3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d5f993-bbf4-4d5f-845d-66120015bbc6", "sighting_of_ref": "indicator--e39d2c7b-daf3-445f-8e74-7d32d91c4523", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac9daa8-d1fe-4e4e-a0a2-9a5418e99afa", "sighting_of_ref": "indicator--bf09ec0a-bb12-4dc3-b874-1c410464a528", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba27c06-f900-47d4-a285-bce82ee634fa", "sighting_of_ref": "indicator--ee75086a-ffb7-4d03-bcd4-bc11be48ae9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00748ae-c7d5-4d5d-a4a3-f59278ec6cf0", "sighting_of_ref": "indicator--780f98b0-60b6-41ad-8d53-5caaa1687be6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cc0483-bb34-47a8-b40b-b8fa18690ec5", "sighting_of_ref": "indicator--7912d0cd-a1e3-4ac9-808b-dcdc9c71e0fd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4d6c56-cdb0-4eaa-951f-6886fdfcec5c", "sighting_of_ref": "indicator--d940767b-c51f-4a0e-bf51-ed04136b1167", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11944551-7235-4bb3-be3e-18f4d845fe0a", "sighting_of_ref": "indicator--0206c3af-c5a3-44d4-8f68-2714b6c6a22e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7f20ec-d41f-41fd-b0e0-5340cc01f351", "sighting_of_ref": "indicator--baa30623-cbf1-4628-9f93-d20532fdcda1", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b78c30b-8206-438e-a841-88c54a818d29", "sighting_of_ref": "indicator--054356aa-d8f0-4742-947e-b12ffeefc0db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4e6cb8-8c6f-4eb0-91c4-4ed334a7d2bf", "sighting_of_ref": "indicator--054356aa-d8f0-4742-947e-b12ffeefc0db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcb30b1-6efa-4ba7-bc04-c666403e6340", "sighting_of_ref": "indicator--76796890-7f09-4b15-872c-df2daeb03982", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5537f85a-7ed0-4804-9a15-d455f890a29e", "sighting_of_ref": "indicator--7d8b819f-56bf-48ac-9a6a-e28f77907d3e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2398ac-99d4-45d9-9242-8a3aec6d62d3", "sighting_of_ref": "indicator--7d8b819f-56bf-48ac-9a6a-e28f77907d3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e2a5f6-7379-4dfd-8de1-d8a5cd48489d", "sighting_of_ref": "indicator--01995df7-bb1e-4b49-acb1-84791091e45c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d945ed-9476-4c50-8ce4-b0576114a914", "sighting_of_ref": "indicator--9de97844-09fc-4339-82a4-816aa8d4de4b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a02ca0f-4474-4059-9dd1-ba3cdaef5b87", "sighting_of_ref": "indicator--8b0845cc-7a7d-4123-b9ca-65399c1e9432", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dfe42d-a1a2-4246-8359-d5010acd97a1", "sighting_of_ref": "indicator--b69b6a9a-b748-4216-8e57-befe6c89ca0e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab17196-7f34-4ff7-95f5-058db490f1b5", "sighting_of_ref": "indicator--97afdcb8-58c4-4533-884c-a270043f12c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cad679b-ac89-4ac2-a52c-6846bd2eb5d9", "sighting_of_ref": "indicator--957d4a58-fb75-40f4-ab80-1b856fc8fb9d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94070ce0-5247-4985-a05b-8631a136547b", "sighting_of_ref": "indicator--0650c60e-ea2f-4e8f-ad28-8e861da46aef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0916d227-1798-49d8-9bd6-8eb2125313eb", "sighting_of_ref": "indicator--0650c60e-ea2f-4e8f-ad28-8e861da46aef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff5e4c8-84c8-4602-887c-5ef69f9a4118", "sighting_of_ref": "indicator--7084974f-b97d-4d01-8837-790598bf0bb1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ee0b81-eff5-44a1-8656-51c80ab52e8d", "sighting_of_ref": "indicator--7084974f-b97d-4d01-8837-790598bf0bb1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dfcba6-a1b7-415e-a093-446ca3ab7694", "sighting_of_ref": "indicator--dce83885-5c2c-4880-8d6d-712b9c827eb1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc65a0a0-b190-4922-b9d4-6c53a25efd0b", "sighting_of_ref": "indicator--dce83885-5c2c-4880-8d6d-712b9c827eb1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9735c944-fd2a-4b19-83a1-60fbacff32af", "sighting_of_ref": "indicator--ada54597-e1c6-4594-93c5-66902368bd0e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42087232-1361-41d0-ac5a-8ed5e87c390c", "sighting_of_ref": "indicator--8e0a7da2-ee7b-4592-ab29-d1d843465fbf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8fd7c5-5ff2-4e0a-a4d7-7be3bf6b8381", "sighting_of_ref": "indicator--8e0a7da2-ee7b-4592-ab29-d1d843465fbf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7265cc-d1bc-4f04-af34-363c440766ba", "sighting_of_ref": "indicator--dac7311d-b560-431a-84b9-ffaa50d31736", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b565aea-ccb3-41ff-ad65-7cf14706819a", "sighting_of_ref": "indicator--f8f4edf1-5403-4192-87a8-043fdf2e2bde", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e6c469-2527-4ed0-827a-1230b48b0aec", "sighting_of_ref": "indicator--b75db60f-199f-4143-ac3d-5d9f1afeb5ac", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62ecd9b-929e-4e90-9076-61c31c05d15b", "sighting_of_ref": "indicator--b75db60f-199f-4143-ac3d-5d9f1afeb5ac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69068bb9-89e8-4fc5-975b-5ca94597fc4b", "sighting_of_ref": "indicator--39dd51b2-00bf-419a-9ac7-a1033a15ad30", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123a7bfa-7911-4d92-b261-e93aa8b79c78", "sighting_of_ref": "indicator--34509212-5444-4e6e-88b5-e38d4f927b57", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dad28f3-bcfb-4ad9-a60d-58c5f73e1881", "sighting_of_ref": "indicator--34509212-5444-4e6e-88b5-e38d4f927b57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dec1e38-9cb0-43f1-938e-1e60ef088d1d", "sighting_of_ref": "indicator--34509212-5444-4e6e-88b5-e38d4f927b57", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640a4582-52c9-45db-9aac-7d59ce5e226f", "sighting_of_ref": "indicator--47ba7b8e-cf4f-4157-a319-ff349b92523c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859bae6a-c88c-4dae-ac12-3a0c0ced5ff9", "sighting_of_ref": "indicator--47ba7b8e-cf4f-4157-a319-ff349b92523c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa29fb3-0b11-4c25-9770-57f91cd2ca41", "sighting_of_ref": "indicator--47ba7b8e-cf4f-4157-a319-ff349b92523c", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4ae5a3-56ea-4662-b888-100ff2b10bba", "sighting_of_ref": "indicator--6312fc79-cf4d-408b-bb21-069f9ea846da", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f367c3e9-9994-4342-898a-02209a4d80ef", "sighting_of_ref": "indicator--6312fc79-cf4d-408b-bb21-069f9ea846da", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd56004-cb8e-48fa-befc-6437eb548fb2", "sighting_of_ref": "indicator--6312fc79-cf4d-408b-bb21-069f9ea846da", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427a7c27-9d80-41b6-bd4a-2f4e594d8029", "sighting_of_ref": "indicator--2ad37bb8-c896-41c3-8828-5e9ff2785243", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2ad564-43b1-4239-b9ce-7b78b94a5bb4", "sighting_of_ref": "indicator--2ad37bb8-c896-41c3-8828-5e9ff2785243", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f463804c-d54c-45fe-a0f7-7fc2a5fcd819", "sighting_of_ref": "indicator--2ad37bb8-c896-41c3-8828-5e9ff2785243", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3144a329-5bbe-463b-b643-d2d6fcae57ac", "sighting_of_ref": "indicator--8659f419-c110-432d-bb64-f0abd76ebd47", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca74b36-0088-46de-8889-e9ed462ce262", "sighting_of_ref": "indicator--8659f419-c110-432d-bb64-f0abd76ebd47", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d8570f-176e-4955-b003-219e76e9e600", "sighting_of_ref": "indicator--14439996-3ba0-4336-aa61-be4d708be2c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5af8cc-3c17-4896-b4fb-e5e74bfca6c3", "sighting_of_ref": "indicator--14439996-3ba0-4336-aa61-be4d708be2c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5582f8ec-7eb8-4447-8963-7c0a466e9102", "sighting_of_ref": "indicator--2df57cce-4442-40ed-af0c-5ede3156c637", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360bfd2e-36d9-4b2d-8f18-42108d5831d5", "sighting_of_ref": "indicator--2df57cce-4442-40ed-af0c-5ede3156c637", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1312df51-0d82-4cc3-9fed-e886cf94a9d1", "sighting_of_ref": "indicator--c7f4315d-0242-4449-935c-dcb8e50610fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b409bcaa-57ec-4507-abb6-6d465e0988b4", "sighting_of_ref": "indicator--c7f4315d-0242-4449-935c-dcb8e50610fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8aeac41-a076-4f3e-8491-b497500839c4", "sighting_of_ref": "indicator--c7f4315d-0242-4449-935c-dcb8e50610fb", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f5e61a-300e-4724-b7a1-394c8a88fc87", "sighting_of_ref": "indicator--4e2d2de7-9e27-4619-8702-295404e856ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f665022-b0cd-48ac-8b24-d447f404b31d", "sighting_of_ref": "indicator--d748c0f5-32fd-4e80-8079-afc1e83131bf", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc813743-b1f7-42b0-a99d-ddf6a70587b1", "sighting_of_ref": "indicator--fec2d6c0-9476-4089-b87e-fccb86130d8f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a065189a-739b-4e01-89fe-5e98d515ea5b", "sighting_of_ref": "indicator--fec2d6c0-9476-4089-b87e-fccb86130d8f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e63c13b-9ae2-4dec-8284-166c7e8ecabc", "sighting_of_ref": "indicator--fec2d6c0-9476-4089-b87e-fccb86130d8f", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc6e697-bf43-4d75-8f4c-d579a7128df1", "sighting_of_ref": "indicator--6ac0c028-4156-4134-bcea-760be26c91f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c75ba6d-744f-47df-882f-45030b11236e", "sighting_of_ref": "indicator--d001ca15-4524-4884-b38c-67460a89deef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdc5129-09bf-47e6-a167-aaea9b76c158", "sighting_of_ref": "indicator--d001ca15-4524-4884-b38c-67460a89deef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b898ddd1-8e44-4850-bd7e-fb327e2ca1f9", "sighting_of_ref": "indicator--f384237f-eaa2-449c-aa87-c2d1241ae807", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d408e75d-f95b-4126-839d-c33ea441a7b0", "sighting_of_ref": "indicator--f384237f-eaa2-449c-aa87-c2d1241ae807", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c950da-c920-4926-926b-9a008140e7a2", "sighting_of_ref": "indicator--d5b673cf-ee8d-4c6f-8ff9-b29cd58cae46", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204ca791-2a83-414d-a5f6-34ac5c4423ce", "sighting_of_ref": "indicator--d5b673cf-ee8d-4c6f-8ff9-b29cd58cae46", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3f2bb8-e339-4b07-a5a3-e81b1f8e0381", "sighting_of_ref": "indicator--23b588ac-8c95-46f5-86fa-8648958ec23e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11643ac1-23c2-4155-a15e-f0c7b660b2e8", "sighting_of_ref": "indicator--23b588ac-8c95-46f5-86fa-8648958ec23e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2230fd-8cbd-478b-98f1-b39f30c2e639", "sighting_of_ref": "indicator--3dc76b9e-edf3-4337-b2b5-9fade3efd326", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6871fd2a-4ff4-4b92-b02d-77bf3076d6f5", "sighting_of_ref": "indicator--a21bc6d3-92f4-4f2a-b8b1-9b965d7fd8b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700b6cd1-4a7d-454e-ab83-44b3b5b90642", "sighting_of_ref": "indicator--179b488f-1fd0-44c6-acf2-c9094b4793e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a57504-bdaa-4041-9185-967e4c3e6aa2", "sighting_of_ref": "indicator--c23c8844-9ba2-4d9a-ab1f-478581877b1e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b06589e-8d67-4a6f-b1ee-97f20052cddc", "sighting_of_ref": "indicator--77d0315f-aa67-4e2f-83c7-c63076f20e87", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f97b9d3-29ed-44c4-8f5c-eb49760037bc", "sighting_of_ref": "indicator--e8e194b7-ca88-4ef3-b528-d7db66a54d64", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956ec475-53a8-4fba-b4bb-0397a077f2b2", "sighting_of_ref": "indicator--e0ec6ef8-ecb9-4f7a-b4f4-c0a51029ff59", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1c3654-9051-4133-845a-0c7d51e8a2bc", "sighting_of_ref": "indicator--2a2f2255-30c6-47ba-a8f0-f203753f5c11", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b852fac1-fb8f-41ab-9c8f-aa25cf6b489f", "sighting_of_ref": "indicator--0953d72c-b764-4843-89ad-f26c9bfff630", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34252314-456e-455f-907f-7e569f01a4a7", "sighting_of_ref": "indicator--b5f61b2e-b0c7-4e34-9d27-31bc1726468b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1941ad01-8165-407e-a2d6-2fde02b6cacf", "sighting_of_ref": "indicator--d7dbee06-3431-437f-a56c-f15b2725c355", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275db7b4-4b3f-49d7-8900-2574d154678c", "sighting_of_ref": "indicator--60677083-cea9-48c9-951b-03cae5c38b4e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f51747-a73b-4d47-9df1-012679198d05", "sighting_of_ref": "indicator--60677083-cea9-48c9-951b-03cae5c38b4e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d81e49a-05f9-4996-86ae-5f97405d22b4", "sighting_of_ref": "indicator--d0297d8a-1ed6-403f-bc0a-6fa7a6ebc88b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18fff6d-8cd4-404d-a61f-e5a60111f5c1", "sighting_of_ref": "indicator--dcb2938f-1aa8-433e-a407-3a52e825e151", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f8c5b3-d909-42f8-91a7-38c7c05ca6e3", "sighting_of_ref": "indicator--1c648dc7-73f4-4dc3-9f08-85a68e5bc32c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8f778b-b8c6-4fe0-8d7e-03563d7c1666", "sighting_of_ref": "indicator--5ac73341-3a07-4d5c-9e51-bb77bd8d475e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adabbdec-69ec-4a26-92e1-b6b7c9141f3b", "sighting_of_ref": "indicator--195a0cb5-6fdb-4a1b-89e9-b7edaae4581a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c3ace7-9e79-4a6d-972d-ca4a430ba30e", "sighting_of_ref": "indicator--8f03e64b-0da3-4432-b734-6711dd9d1b0d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01cca8d-7454-4653-b2df-ee8bc935b0be", "sighting_of_ref": "indicator--c84a0158-4f4b-44a3-9041-baabca3caed2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cfe595-5d85-4544-8f8a-1afade1e238e", "sighting_of_ref": "indicator--c84a0158-4f4b-44a3-9041-baabca3caed2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd9e49d-9a79-46e6-a682-c67ef16b1ef8", "sighting_of_ref": "indicator--d8b805af-7bc6-4b19-9850-183ed91d23ea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5384eeb3-09b4-41ba-84ec-bc36cd20d7ce", "sighting_of_ref": "indicator--a6c32140-3e4a-4a5e-b068-2632cd5f0c9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ff96a3-c25b-4d64-be72-163b729f0c9f", "sighting_of_ref": "indicator--c0c80893-a5e5-4ae7-82aa-9e5a5539a70d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73939a64-2a1f-43fa-a942-9837a7ce0098", "sighting_of_ref": "indicator--9cd5f9be-53d5-4635-8895-09ea4542a7cc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc65f9e-b2e2-42ad-8e73-ee902d900f22", "sighting_of_ref": "indicator--9cd5f9be-53d5-4635-8895-09ea4542a7cc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af9188b-22ee-45e4-92a2-198c217f9f5f", "sighting_of_ref": "indicator--55339dce-75ad-4abd-993b-7c36fdb2e285", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ded3bc4-11a3-4835-9e49-4172b5f29b91", "sighting_of_ref": "indicator--e7ea59dd-b7d0-429e-a295-88c7f037b501", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc171ac-99c3-476e-841a-c8ef8fced407", "sighting_of_ref": "indicator--e7ea59dd-b7d0-429e-a295-88c7f037b501", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1705537-b49d-4266-9d75-132ab31cf007", "sighting_of_ref": "indicator--9a414638-dcbe-4523-930a-0761eb17f20e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bd95f8-1188-4142-82ba-55e0d509edfa", "sighting_of_ref": "indicator--9f338c12-7879-4e48-998f-036db9d54b39", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3c0874-0171-46be-bf44-4756cd5a30a9", "sighting_of_ref": "indicator--846a78ae-176c-4096-bf41-18eb8aab3a9c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b0d389-049e-4b6c-9f59-2359509057b7", "sighting_of_ref": "indicator--e8a5bb21-6ae6-490c-97ac-3f55b104baf6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75467f80-a8e1-4b27-9fa0-c36aad141fb6", "sighting_of_ref": "indicator--e8a5bb21-6ae6-490c-97ac-3f55b104baf6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3642b0-f036-4c13-b7fa-9b831461f469", "sighting_of_ref": "indicator--f55b924d-ad3c-4e1b-ba86-c35a3f847f15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e786f30-a62b-4380-8b6b-6fd3b9706f74", "sighting_of_ref": "indicator--f55b924d-ad3c-4e1b-ba86-c35a3f847f15", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547b2c85-2b68-4644-8a76-b5dd6bdfd3f8", "sighting_of_ref": "indicator--01dd5a2c-a6af-4b74-b9b0-2fff774304fc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe455d7-0bac-4a70-94d5-0f025fad9929", "sighting_of_ref": "indicator--b31a6016-c7cb-4c65-9208-7a25d0632ed7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2825ba-e08c-46f4-b50c-f5142d160019", "sighting_of_ref": "indicator--b26daa55-36c2-488f-9fd4-99c20d4ebc7e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc97a0c-7782-45e9-ae79-f9751c10f612", "sighting_of_ref": "indicator--cd86335f-c621-4d98-9f88-ec05e099ac93", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfae9f30-204c-4794-b417-c6191f9814a5", "sighting_of_ref": "indicator--cd86335f-c621-4d98-9f88-ec05e099ac93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a097b266-5a13-4108-8f32-3f4d045decff", "sighting_of_ref": "indicator--11c7d57f-8fbe-47e5-a006-147abaa16453", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3e3dfc-fa47-4ceb-a95c-e54e44fa0977", "sighting_of_ref": "indicator--b9a572ea-3e04-4300-be6a-8edd0213730d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8693372-ff3d-4769-aba1-57f01403923a", "sighting_of_ref": "indicator--b9a572ea-3e04-4300-be6a-8edd0213730d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb7f2f0-5061-47ff-8748-fb4dde7b0ef8", "sighting_of_ref": "indicator--58245ce6-3f84-4f2e-ac2f-0be31234465a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91d13d8-37dc-46db-8a95-e57ff9188bb1", "sighting_of_ref": "indicator--b1a68f88-26a7-469d-bbf6-c588de1cf16b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b500c55c-9800-406d-b598-abd5ba18ef66", "sighting_of_ref": "indicator--e6056b40-f399-44ed-89bc-cc8aac87223b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873c15e6-6504-4541-93d1-cd56bb0396dd", "sighting_of_ref": "indicator--fd15bfc6-3ec0-4c04-be88-368394d3cbd1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d7c983-f589-4dac-ab71-aca40bcea3ec", "sighting_of_ref": "indicator--06e38c1e-ec68-4390-84f7-d0b59dbd8325", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec27686f-5c9e-4a24-8a20-bec74368acec", "sighting_of_ref": "indicator--30065d88-6121-4055-9085-6eb3b65099e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d0bad6-44d5-4fa7-b79a-f8f4b0becc3e", "sighting_of_ref": "indicator--a202c97e-e2b1-445c-b52b-d712335a6411", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21b263a-564f-4d27-b2ef-b97e120238f5", "sighting_of_ref": "indicator--b1548054-fa6d-4a14-aab4-a83ded5c8b30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd08039-d628-4155-ba5a-754376a700bd", "sighting_of_ref": "indicator--e1a611c9-7b57-4fd3-ba6d-532ed6b95926", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82cabb0-64d1-4710-b653-45fe57f69574", "sighting_of_ref": "indicator--21e2edd5-209c-467f-b645-ad90d80460e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a045637b-633f-43ea-aa8f-c413874d1581", "sighting_of_ref": "indicator--a3667984-fb15-4cee-9c28-8a8c032eca9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3877c25a-09f0-4c56-a7ef-06e8f4e31188", "sighting_of_ref": "indicator--dfce54df-fa3d-4264-9cec-c612875b084e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf90eef-2347-4ec7-affe-819364e0a1fe", "sighting_of_ref": "indicator--7fce2843-d603-4735-99af-90821308568d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a3697a-50fa-4cc8-a547-606d2645b03d", "sighting_of_ref": "indicator--37d554db-e5fa-4508-8a2b-9cca3a80db2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d5b832-fb80-402a-8ad1-9017f297c0f3", "sighting_of_ref": "indicator--dc49c47f-d5f9-4af9-937a-c3b684877276", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf7bed6-a088-4654-b488-6cce6946b338", "sighting_of_ref": "indicator--bb3cba1b-53ed-49e0-8fcf-f87cbe701622", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759213a6-44ba-45d3-856a-5bbe84d80a96", "sighting_of_ref": "indicator--8a205d14-413c-4a81-8a38-7b1910466063", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09004dea-a38e-4d62-ba22-bcdeea2fbcd1", "sighting_of_ref": "indicator--7cc1f772-0623-4d63-b0ac-22bf886d0234", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2170ec-43de-4959-b0cf-0beb1515c9ca", "sighting_of_ref": "indicator--aa893355-981c-4293-b8ef-401c4f875f42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8fe127-f20e-4f7f-b6fc-f7c0ea52ff33", "sighting_of_ref": "indicator--1581cf2e-137d-464f-85a1-bd8b9d98b4ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0adc22-9237-4280-b8bb-a1c11f6464ba", "sighting_of_ref": "indicator--5060cab6-3ab1-4931-bbed-3ac86ac60aba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2bd0df-5a0b-4e8d-94e4-f0e108b8207e", "sighting_of_ref": "indicator--ffea90c5-3b73-4c3b-aae1-d578eff4a762", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01475f28-c067-41e7-96ce-f13b4639ac60", "sighting_of_ref": "indicator--6d2073de-cde4-4aaf-a95f-081c9a952fec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d04336-e747-4522-94fe-176864969014", "sighting_of_ref": "indicator--0a360344-57a5-43ae-b083-611f80f25c13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0164940c-1ae7-4a86-8445-08a317a81f67", "sighting_of_ref": "indicator--1a214e89-3988-4de7-b892-eb015d55c865", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dc18fe-92cd-427c-b91e-6fae0f7fe1b4", "sighting_of_ref": "indicator--3b2d77ea-bfdd-4892-8706-12285018e6ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da89cb5d-b408-44dc-a3a8-c9616f2c6910", "sighting_of_ref": "indicator--6c58d4bd-8495-451d-9209-919b4908fe93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8abea68-e10a-4ece-a51f-b1b575c8bbdf", "sighting_of_ref": "indicator--ab0c3f24-8389-48ef-bd5c-2dc7dd42b618", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fec784c-a495-40f4-8e14-31046264cb60", "sighting_of_ref": "indicator--2362ed82-3e83-4b43-a8d3-7ca69755ed76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ffde06-ebea-4888-9128-d27a34db9f0d", "sighting_of_ref": "indicator--f32f1985-55fa-4464-900e-13c88ff553ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cb6e48-e26c-492c-b121-be402cb65855", "sighting_of_ref": "indicator--a2820acd-7e68-4a62-8e91-6abfd89f16a0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b219abfa-04ff-498a-9d32-a5c15c1e6920", "sighting_of_ref": "indicator--ec7ed4df-bfdd-4fe1-aeca-279e159d6544", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce54e57-4ea0-4fde-a932-1a9459e9f60f", "sighting_of_ref": "indicator--ec7ed4df-bfdd-4fe1-aeca-279e159d6544", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8c222e-7312-4f8d-a831-fc3eb43dadfa", "sighting_of_ref": "indicator--9c90e1e9-9503-443b-9279-3d10d0cac286", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7161b24c-17e0-4c06-9402-e3c1e202493a", "sighting_of_ref": "indicator--9c90e1e9-9503-443b-9279-3d10d0cac286", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfb4f81-6813-4b8e-adb4-8ba6335cd4d5", "sighting_of_ref": "indicator--4231c75b-7a8e-494c-93d4-93bce080caf1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937aa092-ce5d-4677-b472-a95bc70d03af", "sighting_of_ref": "indicator--4231c75b-7a8e-494c-93d4-93bce080caf1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bc590b-7288-4a1f-9af6-2c69e9c9ee4c", "sighting_of_ref": "indicator--cfcda254-f008-4da5-900b-48c6674f443c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56829dc-356e-43a1-b797-ef85b897c2ac", "sighting_of_ref": "indicator--cfcda254-f008-4da5-900b-48c6674f443c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95b63d2-aa36-468c-ba8d-4991c80515e5", "sighting_of_ref": "indicator--bfc7eefd-38c1-4571-a35b-b593bcf17cd9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7867385f-5ac4-402a-a562-d8d0b1e7920d", "sighting_of_ref": "indicator--bfc7eefd-38c1-4571-a35b-b593bcf17cd9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0065f8ec-7b06-4ff5-8033-a2cf52845eaa", "sighting_of_ref": "indicator--7ec2d9b2-960f-4f3e-839c-745e0797b6cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f37001e-f7dc-49fc-a686-c7b33041b11d", "sighting_of_ref": "indicator--7ec2d9b2-960f-4f3e-839c-745e0797b6cd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f202af60-1e9b-46c1-9d82-bcf0331f42d6", "sighting_of_ref": "indicator--eb2ed212-c297-4e80-b47c-3c45ed79b619", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efffdce-6e6a-4e16-a3fc-f2501404ff29", "sighting_of_ref": "indicator--eb2ed212-c297-4e80-b47c-3c45ed79b619", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be31a03-08aa-42cf-a887-4b551b0772c1", "sighting_of_ref": "indicator--460b622b-0f11-40d3-b99f-e4a1e264eee6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1bc2e4-24aa-47aa-ad8b-30fdef927937", "sighting_of_ref": "indicator--460b622b-0f11-40d3-b99f-e4a1e264eee6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658481eb-2152-4d54-be89-d3f3885d3290", "sighting_of_ref": "indicator--11faa91a-4fc5-4eec-b595-67ea3fad7b98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a56321-a113-4d86-bd0d-0783b1e47645", "sighting_of_ref": "indicator--11faa91a-4fc5-4eec-b595-67ea3fad7b98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89c6547-fb6b-4a7d-b11d-ff82c1539f6b", "sighting_of_ref": "indicator--d64fd5ed-77aa-4023-acde-0b121f7be9fb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e1d928-fa11-472f-a16d-79f875b6e040", "sighting_of_ref": "indicator--d64fd5ed-77aa-4023-acde-0b121f7be9fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09707e5-2434-4a08-8eec-6a32bae619e3", "sighting_of_ref": "indicator--2f1e341c-e3c2-49fc-8e2c-9d0a53f70239", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7246e682-b6b3-4942-b5f4-7d6292c789e6", "sighting_of_ref": "indicator--2f1e341c-e3c2-49fc-8e2c-9d0a53f70239", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33d76c1-c012-4f44-a6ec-3393606b674e", "sighting_of_ref": "indicator--2ecdba41-4d78-4a9e-8d52-7a3a5c3e0212", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bb0ac4-0c85-42c1-acce-50aa88915027", "sighting_of_ref": "indicator--2ecdba41-4d78-4a9e-8d52-7a3a5c3e0212", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844d37a4-ae67-426c-bf10-3402cc6c4bfd", "sighting_of_ref": "indicator--8cfa9dd2-3279-4f40-83e2-572bb0443e8d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25666af4-57b5-4178-97d9-f9048d2a8225", "sighting_of_ref": "indicator--8cfa9dd2-3279-4f40-83e2-572bb0443e8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00a41eb-b97a-403f-abfc-9a4b41a8826e", "sighting_of_ref": "indicator--c7953d65-d8b9-45b6-a35d-3156872feb66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc4a9d7-5c5d-4438-b3b4-39c372d9c692", "sighting_of_ref": "indicator--c7953d65-d8b9-45b6-a35d-3156872feb66", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492f4fe9-21d4-45af-a7a9-ab94080f0667", "sighting_of_ref": "indicator--dbf0701a-4465-4068-ad29-120c7e512408", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6bf148-edaa-4c00-a72b-bbcf1f1797da", "sighting_of_ref": "indicator--dbf0701a-4465-4068-ad29-120c7e512408", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0332ea6-749d-4704-902b-9bf20248b815", "sighting_of_ref": "indicator--f32eb966-5aa5-48ba-84df-7c141f75d174", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e830dd-afb4-45ef-bc08-e80becad4065", "sighting_of_ref": "indicator--f32eb966-5aa5-48ba-84df-7c141f75d174", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b06af05-962a-465a-a4bd-d0bdde25f833", "sighting_of_ref": "indicator--2ea5d727-1241-4d36-b673-c19bda39e615", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57c38c9-2399-4f05-917c-7f675971883e", "sighting_of_ref": "indicator--2ea5d727-1241-4d36-b673-c19bda39e615", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8035bd5-0a51-422e-8d56-ebb55ed7b97b", "sighting_of_ref": "indicator--ddd77bba-72ec-4d3c-b8aa-c07fa0b68db9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cde1994-f8b4-402a-b24e-92e702926a1a", "sighting_of_ref": "indicator--ddd77bba-72ec-4d3c-b8aa-c07fa0b68db9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32e5c8b-6b70-4785-824a-a34e85f6ff92", "sighting_of_ref": "indicator--82bc678b-fe93-43e4-a99b-fe7d58169418", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4be5bb-86ff-40ac-9f24-b9e0899ffd28", "sighting_of_ref": "indicator--82bc678b-fe93-43e4-a99b-fe7d58169418", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50e8211-ddd4-47bc-9ce7-0fd80f8382ab", "sighting_of_ref": "indicator--71e275ad-4492-4661-a7b9-14ad794e39d8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885ff9bd-327a-4407-a6b8-98467586a044", "sighting_of_ref": "indicator--71e275ad-4492-4661-a7b9-14ad794e39d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf60510-74e8-44bb-a190-69900ec29eeb", "sighting_of_ref": "indicator--087da470-251e-4710-898a-5a00b3dac6dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5da3ac-117a-4561-9793-c2d7cd3d0ee5", "sighting_of_ref": "indicator--087da470-251e-4710-898a-5a00b3dac6dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f8b811-4cfa-4e44-a3d0-dcd425250bde", "sighting_of_ref": "indicator--15dd0519-f757-4e36-86a8-971688baf5b0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37561120-4467-400e-83d4-ab35fbb7cb03", "sighting_of_ref": "indicator--15dd0519-f757-4e36-86a8-971688baf5b0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db543f35-4b80-42e5-8324-c4225b8efdf1", "sighting_of_ref": "indicator--0f906627-b979-49b6-a821-9cd0157edc70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1527e8-e220-4e28-8546-3bd47b5ac839", "sighting_of_ref": "indicator--0f906627-b979-49b6-a821-9cd0157edc70", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc28820-5a8d-43a7-8d5e-8f21c9e9ac41", "sighting_of_ref": "indicator--417c7729-9ef2-4665-9685-3ad152c9d0db", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d40cf4-93e2-46ff-b178-3431313b46c0", "sighting_of_ref": "indicator--417c7729-9ef2-4665-9685-3ad152c9d0db", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7a8d62-3a33-48fc-9cdc-d6790e8642a3", "sighting_of_ref": "indicator--786275a2-517b-470f-984f-d12702aab91d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a767d821-36eb-4705-a352-823bb6f36426", "sighting_of_ref": "indicator--786275a2-517b-470f-984f-d12702aab91d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4db1ad-08df-48ea-88a2-cf7756823917", "sighting_of_ref": "indicator--61b1e7f1-b063-4611-81e6-cdb24f91ff05", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341edaa6-26e6-4139-8b92-f0bcc99b3133", "sighting_of_ref": "indicator--61b1e7f1-b063-4611-81e6-cdb24f91ff05", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62198db3-32bb-4652-a29d-d30ce7d4dc32", "sighting_of_ref": "indicator--c32df4d4-580e-47a7-b8dd-026d960fb0a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c5da53-f417-40ad-b58a-1089655951bf", "sighting_of_ref": "indicator--c32df4d4-580e-47a7-b8dd-026d960fb0a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cf53a5-5152-4d9a-a146-79c02698f54a", "sighting_of_ref": "indicator--db0f1e2b-1c7a-4be9-ad2d-6832d532bcf5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79396a97-dbbb-49a5-bb3b-f983bd5f8ad2", "sighting_of_ref": "indicator--db0f1e2b-1c7a-4be9-ad2d-6832d532bcf5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975f4ead-3453-4eed-ae8c-a4d7c830c33d", "sighting_of_ref": "indicator--7d420182-e9ee-4af2-8a9f-4c4c223ab6ee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235c341d-2f15-42b2-81aa-22f5ca4f33d0", "sighting_of_ref": "indicator--7d420182-e9ee-4af2-8a9f-4c4c223ab6ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9908cd-ae34-45e7-9be0-83f20f3dffb2", "sighting_of_ref": "indicator--3a3f5034-75e2-401f-bd73-d3a6dfd78f82", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda282cb-9a83-402d-b771-05f715829ee2", "sighting_of_ref": "indicator--3a3f5034-75e2-401f-bd73-d3a6dfd78f82", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4196b29-d9a0-46e8-afc3-b4a6c071a4bf", "sighting_of_ref": "indicator--ce4468ca-ddea-4f27-8815-7c495df43257", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8fbaca-2287-4793-be92-87e48a35ef32", "sighting_of_ref": "indicator--ce4468ca-ddea-4f27-8815-7c495df43257", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c7de76-86f6-4820-918c-945c293ce6cd", "sighting_of_ref": "indicator--2eff2a33-a1c9-48f9-8224-7090b69f87ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee845434-12ef-47e0-8aaf-36c43dd425b6", "sighting_of_ref": "indicator--2eff2a33-a1c9-48f9-8224-7090b69f87ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65affdb-d8a0-41ff-b6ee-73c539da8f2a", "sighting_of_ref": "indicator--9064f581-f64e-44a4-a658-8f4030b1530f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13feb749-de4a-4bd2-995b-c308ac965b56", "sighting_of_ref": "indicator--9064f581-f64e-44a4-a658-8f4030b1530f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1109586b-41c6-4164-9ed4-96f733223a5f", "sighting_of_ref": "indicator--a95cae88-1716-4f14-aa33-6e76f2fbb5ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab9ef8e-b544-49ae-9b59-88fcb21a3ab3", "sighting_of_ref": "indicator--a95cae88-1716-4f14-aa33-6e76f2fbb5ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f204e297-a330-40dd-bb45-090728633f2d", "sighting_of_ref": "indicator--1e89e528-dc62-4e8e-a99f-b3f166b9684a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeb610c-127e-4dbd-8ede-6fddd26373ef", "sighting_of_ref": "indicator--1e89e528-dc62-4e8e-a99f-b3f166b9684a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47e958e-0b0f-42e0-8923-242fdc9fedd1", "sighting_of_ref": "indicator--7a23594b-8689-4891-8fc0-4c1b30b124c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36a2de4-65fe-454f-891e-25c9ca596397", "sighting_of_ref": "indicator--7a23594b-8689-4891-8fc0-4c1b30b124c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50e0c0d-bd5a-47db-ba4c-2530289ab522", "sighting_of_ref": "indicator--d9cf487b-610e-4d8d-89e9-c5e9196cb575", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af429b66-6a5e-479f-b46f-90852492ced7", "sighting_of_ref": "indicator--d9cf487b-610e-4d8d-89e9-c5e9196cb575", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf6133c-3804-44aa-8e2b-505cbc4e10e2", "sighting_of_ref": "indicator--20f8a58c-4400-428b-b5ca-5fbfbf84266f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f555715d-b716-4b28-a455-f575809da31a", "sighting_of_ref": "indicator--20f8a58c-4400-428b-b5ca-5fbfbf84266f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7067420b-5427-4b29-a930-731c781f6eb6", "sighting_of_ref": "indicator--8ea50ee4-fa40-4662-8e8b-d8ecb37c0a37", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56652bb-2fb7-403b-aebe-0089a96f3f50", "sighting_of_ref": "indicator--8ea50ee4-fa40-4662-8e8b-d8ecb37c0a37", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a297a1a-7b09-4cd9-9624-010de8ce294a", "sighting_of_ref": "indicator--aace1b78-2803-4320-85e7-44cdb00931bd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ec7b7a-d4db-48da-a5d9-25748c67cb36", "sighting_of_ref": "indicator--aace1b78-2803-4320-85e7-44cdb00931bd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed73ffcf-7694-4cc2-ab00-a51261918d97", "sighting_of_ref": "indicator--5cd9ba36-77df-4f9b-994c-c0f662a419b7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06141ce-224a-44d3-8269-28025c4d37ec", "sighting_of_ref": "indicator--5cd9ba36-77df-4f9b-994c-c0f662a419b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c447d79b-3b29-4a37-b7d1-5cb03c8b7b99", "sighting_of_ref": "indicator--c459fad1-7e1a-4767-8e65-1c56b8d5759f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9984ea15-b71e-46bb-beed-27e7d1c8a427", "sighting_of_ref": "indicator--c459fad1-7e1a-4767-8e65-1c56b8d5759f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c96a217-79d6-46ad-a7ff-a0bd5bc42119", "sighting_of_ref": "indicator--06a579f2-0709-40db-9346-67dbd7ea723c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf15fe0-703a-445b-ba01-c5c05b13dbd9", "sighting_of_ref": "indicator--06a579f2-0709-40db-9346-67dbd7ea723c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92db0f6-e3e6-4987-9d79-9f0f0373e907", "sighting_of_ref": "indicator--7372eacf-1a22-47b1-9a89-5c50acd701a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5438916d-6599-495f-a594-7caee116e7d1", "sighting_of_ref": "indicator--7372eacf-1a22-47b1-9a89-5c50acd701a5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ce12d3-d8fc-4a73-89f4-87a5b48ed8ee", "sighting_of_ref": "indicator--2466acc7-0bfd-409f-98d6-e90aabbafdea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc235d5-5bbf-4632-995c-687f1747ba52", "sighting_of_ref": "indicator--2466acc7-0bfd-409f-98d6-e90aabbafdea", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05c4455-5ae6-4e99-9c2b-dc2a39d6cade", "sighting_of_ref": "indicator--fef85139-c680-4e31-8eaf-9ca1d2234975", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a368b7-8dce-41ca-8dd0-f0e0ba98f140", "sighting_of_ref": "indicator--fef85139-c680-4e31-8eaf-9ca1d2234975", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0d7b1d-2aca-4adf-a944-fa79cbeee93c", "sighting_of_ref": "indicator--6452ae80-c891-46ab-85ed-eb278bf42910", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef1b96c-98fd-4b0f-b63f-7607a0f788d9", "sighting_of_ref": "indicator--6452ae80-c891-46ab-85ed-eb278bf42910", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8ef51f-2454-4de3-9c45-016c83793434", "sighting_of_ref": "indicator--9f7777ef-6080-4a26-b3bd-947bb39f7e11", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5e57c3-047f-45d4-90c3-07e1ee92cb33", "sighting_of_ref": "indicator--9f7777ef-6080-4a26-b3bd-947bb39f7e11", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196379f7-7ccd-4e52-9b6a-e5f2c255a946", "sighting_of_ref": "indicator--3a91e766-245d-447e-a204-265248430eec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637f2b18-1319-47d2-9e7e-476c42dde85c", "sighting_of_ref": "indicator--3a91e766-245d-447e-a204-265248430eec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee96de5e-dea8-424c-a60a-a487296ed734", "sighting_of_ref": "indicator--73868c0f-f4c3-4ec3-a49b-a829494786ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175fac62-2a23-4115-b2fe-e8cd2fe8db8f", "sighting_of_ref": "indicator--73868c0f-f4c3-4ec3-a49b-a829494786ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df53100d-38fe-4b90-9f56-f342eff84893", "sighting_of_ref": "indicator--44454c83-67d1-4664-abd5-6522b1e682fe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b93781-84ce-4dec-8d59-07cc332ba884", "sighting_of_ref": "indicator--44454c83-67d1-4664-abd5-6522b1e682fe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a07253d-9a16-44e9-a9dd-887b9752dfb4", "sighting_of_ref": "indicator--fbc861ec-83d2-423b-a4f3-7ffa3ade15ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac3a49d-d3e9-4bcb-bd6c-991bddff9172", "sighting_of_ref": "indicator--fbc861ec-83d2-423b-a4f3-7ffa3ade15ce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9969b01-282f-434c-b00e-e45d953969f4", "sighting_of_ref": "indicator--d6813e67-1c69-427d-98d9-d82bbe26aa98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f6af13-4591-45cd-a1a6-10aa39b5e475", "sighting_of_ref": "indicator--d5eb8cc8-fea5-4d0b-b313-112378b35208", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fcec67-ffe9-4814-b8f1-1f6b4496ea9b", "sighting_of_ref": "indicator--d70400fb-e1b9-4e34-83ca-452e215f3216", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad631ab0-eff0-4b5f-802a-01924fed44fb", "sighting_of_ref": "indicator--02b8d391-cc7b-4ef8-a532-fc8541dd5b4f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99771168-b311-4675-91ac-18596357d0e2", "sighting_of_ref": "indicator--393582c9-cdcc-4bfa-85dc-66f91a75f12b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7beeed-757a-49f7-872c-efc0e27a30ff", "sighting_of_ref": "indicator--393582c9-cdcc-4bfa-85dc-66f91a75f12b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0e17ab-0a27-412b-b638-0b7314f247fa", "sighting_of_ref": "indicator--c2ccccb0-eaae-44c8-b96d-87983ad80055", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57be1c6-54a7-4a5e-a34d-bd2dda4a016b", "sighting_of_ref": "indicator--767cc543-7f71-4ac7-a388-09c535d8b240", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca1b26c-4750-4711-bd13-e8dc372f9051", "sighting_of_ref": "indicator--767cc543-7f71-4ac7-a388-09c535d8b240", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ca2c3f-d91a-4769-b9cb-010cf1101fb7", "sighting_of_ref": "indicator--90d1852f-e55a-4a63-87a7-fd39de9f7f12", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195a2cd4-f73a-4e17-a099-7c93decbc863", "sighting_of_ref": "indicator--aa570604-7547-48bd-8b76-e1513c1683ce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f16b6cd-55a3-4c65-99c6-a28fc6552d77", "sighting_of_ref": "indicator--93425cff-35c8-4d75-9d43-4bccd47373f4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfae888-8ef3-4dcf-b8bd-8b655925aa7f", "sighting_of_ref": "indicator--93425cff-35c8-4d75-9d43-4bccd47373f4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bb1fdb-c1c6-45c6-b0eb-d82af0b75b98", "sighting_of_ref": "indicator--a31d1d1a-77e6-4dc9-ab96-a544ef7a7880", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c405e302-4705-477e-817d-743fef092335", "sighting_of_ref": "indicator--d6f737b9-5874-4c33-a0db-d2d0cc812a14", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f1347d-1f26-4188-b765-80bd032ee455", "sighting_of_ref": "indicator--16e03244-4773-402f-8dfd-6b05f99e7e92", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a30e891-beaa-4aa7-81ad-dc3e453a1b74", "sighting_of_ref": "indicator--8dd435bf-e821-4b84-8d71-e5812315f847", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d3b7b7-df4d-486c-a62f-f51c05e4546e", "sighting_of_ref": "indicator--8dd435bf-e821-4b84-8d71-e5812315f847", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1106a55-0ddb-4332-af30-6498dd2071a4", "sighting_of_ref": "indicator--b2b04b59-4961-4186-a279-9801695b0ced", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d810ad97-756d-4a93-8c37-c5ee4088e447", "sighting_of_ref": "indicator--ffd20cf8-f589-46db-a6d8-7ab486ffe20f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aae15ea-bf0a-4713-805f-cf1afe14f5c7", "sighting_of_ref": "indicator--d7fee53b-7608-4ff3-b69f-dafb6df0e64d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ad8bb4-cdaa-4212-b5ab-0a361ed04d8a", "sighting_of_ref": "indicator--490956b2-5a19-4204-ad30-e8e7e772488b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447c8198-38a5-4e49-8283-c3837333df80", "sighting_of_ref": "indicator--d8a777be-be83-4764-8122-424ec757947d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244cdce7-351b-49b0-acbd-0f4aa3106838", "sighting_of_ref": "indicator--fe936a8b-9ac7-4a61-b58a-6b83f3233315", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4927ba7-79f0-4e00-bcb3-832f548c22d1", "sighting_of_ref": "indicator--7c5d105a-ad0b-4807-ab4a-39dadfad7b12", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34c4c2f-19f0-4c1f-b7d1-bbff40374953", "sighting_of_ref": "indicator--7c5d105a-ad0b-4807-ab4a-39dadfad7b12", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0664c773-045a-4749-a516-ecd3477d31da", "sighting_of_ref": "indicator--2c6ed8bf-e460-486f-9d26-f11dfb6857bc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d75529-4068-4ac8-ad36-f26e5ae1ba26", "sighting_of_ref": "indicator--4e1e826f-9fee-4273-84d8-5f1a48ec2bb5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744b8d7e-d62f-4d16-bdb3-f647c4dd7a6b", "sighting_of_ref": "indicator--4e1e826f-9fee-4273-84d8-5f1a48ec2bb5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a99b62-8668-40da-a223-fbb773990e1f", "sighting_of_ref": "indicator--1fbb1e57-6937-4019-a3b1-1f8a9d127534", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de3e5a0-8af1-4f2c-88eb-914b58af58e1", "sighting_of_ref": "indicator--1fbb1e57-6937-4019-a3b1-1f8a9d127534", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b798549f-4ab6-4361-8cb1-6813cb6bd7a5", "sighting_of_ref": "indicator--57b7737e-cab7-41f8-8257-4410c2a30906", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0088948d-1ac4-4e41-9274-891da05a575a", "sighting_of_ref": "indicator--57b7737e-cab7-41f8-8257-4410c2a30906", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed13099-6033-4251-ab8d-a72123543bd7", "sighting_of_ref": "indicator--6a64fed2-573e-42e8-8c47-24ec7e5fe47e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcad9647-3d9d-4e21-8930-705533e78a4f", "sighting_of_ref": "indicator--6a64fed2-573e-42e8-8c47-24ec7e5fe47e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3be37c-de86-4346-bf1a-b234e79fbbe8", "sighting_of_ref": "indicator--dafea083-8c85-484d-a015-513aad6b1231", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d265d1c8-eb52-479e-b4e2-4c0aba3fd236", "sighting_of_ref": "indicator--dafea083-8c85-484d-a015-513aad6b1231", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2568b904-1499-48f9-82c0-29c09dbaff7c", "sighting_of_ref": "indicator--05cbd5cc-01a8-4a64-aa8c-6fb61aba60d1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc57f44-3471-4a2f-bc1e-7f990b93a8a1", "sighting_of_ref": "indicator--89f14f63-928f-4ac4-b3c9-acccec1af13b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efd7596-bda0-4145-88fe-a9b28a8222a3", "sighting_of_ref": "indicator--d087880f-ed39-4c40-90bd-ee6919e27321", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866148f0-14cd-4c61-b093-6e43177d007a", "sighting_of_ref": "indicator--1fc715be-a2c2-4877-b658-b873b72eee98", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26bc693-742d-4bc5-9eed-b01d4a69df44", "sighting_of_ref": "indicator--1fc715be-a2c2-4877-b658-b873b72eee98", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfe70f4-0b5f-4ac1-ab13-1b3bf0861a62", "sighting_of_ref": "indicator--e88820da-f13b-462c-aeb7-9463b1edf6ed", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfbf3e2-80be-4df0-91d7-7b5202183855", "sighting_of_ref": "indicator--e88820da-f13b-462c-aeb7-9463b1edf6ed", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35751abe-441d-450a-bdbd-03bc9ea2dcb3", "sighting_of_ref": "indicator--b65e83aa-e5c4-4e34-96cb-6658cbddb2bb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c95e425-ed9f-4063-aabe-68aa3be951d0", "sighting_of_ref": "indicator--b65e83aa-e5c4-4e34-96cb-6658cbddb2bb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f122d183-686a-485d-8b63-0e3c8e5d301f", "sighting_of_ref": "indicator--03abbca8-c5e6-41c9-b516-87a0f3ee4434", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21c087e-376a-44d9-bab7-748fbd05eee0", "sighting_of_ref": "indicator--03abbca8-c5e6-41c9-b516-87a0f3ee4434", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f004eaa-d22b-42f6-a19e-32bd074fbbf3", "sighting_of_ref": "indicator--764e3e47-120f-45a6-b386-ba4157bac9b8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bf2e45-b749-4fea-848f-b3ecd9e79261", "sighting_of_ref": "indicator--764e3e47-120f-45a6-b386-ba4157bac9b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9f4cd0-fde3-4722-a8ea-efdf257fad54", "sighting_of_ref": "indicator--7653f4d5-414a-48f0-95c9-67c6ecb6e0ef", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e739dd-cc50-4304-a9f5-6ca9791682f8", "sighting_of_ref": "indicator--7653f4d5-414a-48f0-95c9-67c6ecb6e0ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f74b237-1281-4792-836a-e1e787a95ee8", "sighting_of_ref": "indicator--680e72d4-7b2b-4dc1-820f-722793fb0aff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea13a78b-612f-40c9-848d-6d29c82df7bb", "sighting_of_ref": "indicator--680e72d4-7b2b-4dc1-820f-722793fb0aff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41da6e8-f2c9-4774-b7fa-74883e6616db", "sighting_of_ref": "indicator--dad577f3-2410-413c-9cb1-fd6443222ceb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4614e3-3cd7-4283-9a63-c672b2116a97", "sighting_of_ref": "indicator--dad577f3-2410-413c-9cb1-fd6443222ceb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6b7375-2777-4912-8607-ee75a1ef35c8", "sighting_of_ref": "indicator--40bc7fe0-d2fb-4bbf-8b9f-5499aeca6f8c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738ba3c6-02eb-4c5d-b371-ad2bddf6a6ad", "sighting_of_ref": "indicator--40bc7fe0-d2fb-4bbf-8b9f-5499aeca6f8c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a453b948-36ec-4e57-93e9-62e5868e4b88", "sighting_of_ref": "indicator--d01834a6-a111-4bdc-a06b-dcd03a8fd96a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1134fa-7345-481b-a47f-ca4178493624", "sighting_of_ref": "indicator--e9af6998-b6ee-46b1-8565-890fd7a35cac", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0d1b17-2c95-4c1b-ae43-2999f8cee0c4", "sighting_of_ref": "indicator--2afc9264-ea91-4ca8-9bb5-1261e2e3bbb3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700b1d5a-e6d6-488b-8137-5d49d6a670f5", "sighting_of_ref": "indicator--981cd2ce-81da-4c5e-b49d-af28db4b93a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508c9235-27d5-4024-8e0b-3121dbe301db", "sighting_of_ref": "indicator--5e0ba8c6-842c-42f7-a30c-3041537bf1af", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c59561-dbd3-4aeb-9ca3-9e92df68660a", "sighting_of_ref": "indicator--28ed8d0c-10a0-45bc-8ab6-792a4e75ca9b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b61146f-2566-4b7a-928e-fb7a627a59e1", "sighting_of_ref": "indicator--f0f257a2-9e31-4e22-bae5-c5675cc1eef0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3694abaa-6a04-4c26-bf2c-e85893d67824", "sighting_of_ref": "indicator--2d9dc550-5cc1-4484-bf2d-959b8020973c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fe9a89-668e-4db5-ac86-2f5983c6b4a2", "sighting_of_ref": "indicator--2d9dc550-5cc1-4484-bf2d-959b8020973c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcacae84-e843-418d-ba7e-b7e6380fc424", "sighting_of_ref": "indicator--9af72942-1f88-42d8-81ca-9263b234595b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430a6219-52fe-413e-a112-dc771b68886b", "sighting_of_ref": "indicator--9af72942-1f88-42d8-81ca-9263b234595b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a12a3d-5a31-4610-8a04-463ae0f59474", "sighting_of_ref": "indicator--4bcc42cb-086a-4ee5-a82a-0bcf98c58419", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026c39d0-18f0-40a8-bad3-47f897e86320", "sighting_of_ref": "indicator--4bcc42cb-086a-4ee5-a82a-0bcf98c58419", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760313a7-b06a-4ced-ab8b-6338a6a1cdf3", "sighting_of_ref": "indicator--fae1d667-ef62-44ef-94fd-d6a4fa14da3f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce12e73-f661-4e69-8c87-ceaf8a337bbc", "sighting_of_ref": "indicator--fae1d667-ef62-44ef-94fd-d6a4fa14da3f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edc42ef-11b0-4b2a-9340-c15fcff8dc68", "sighting_of_ref": "indicator--200f9141-5855-4590-ac33-8633ccc71e14", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c226735b-78db-4060-ad30-992c9bdb36ae", "sighting_of_ref": "indicator--a5bed2a3-3dd8-429c-9db7-670b09dfa762", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf90d869-05ef-4ae8-9730-659036068b4a", "sighting_of_ref": "indicator--74c05c08-5a2c-4bbb-b447-9cc9631e46f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f21f744-ec52-49ca-8328-cf4d63d23702", "sighting_of_ref": "indicator--74c05c08-5a2c-4bbb-b447-9cc9631e46f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29db318-9a54-40aa-a840-038550f1f74b", "sighting_of_ref": "indicator--b6b0f1b8-f9e4-4e13-b41c-89a48e976d0a", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e595f1de-cfc1-4494-b857-b0e9173b389f", "sighting_of_ref": "indicator--b6b0f1b8-f9e4-4e13-b41c-89a48e976d0a", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23df6ec8-f777-4a7a-98b3-bc775d56d63e", "sighting_of_ref": "indicator--0bebdf76-7d5c-4c1c-8a4e-d530a8ac8994", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff521188-c692-4fcd-87d0-518869cf8e8f", "sighting_of_ref": "indicator--8a8759a0-3d66-4579-bb11-34e82534f900", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49b10c5-14d3-41c4-ad06-e104d9e8761b", "sighting_of_ref": "indicator--92322824-d0da-478a-9966-79225e8998c4", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28421c37-e7a7-49ed-8f03-3d046de3cf72", "sighting_of_ref": "indicator--92322824-d0da-478a-9966-79225e8998c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45d5892-df76-412f-88b2-db1a6ca056c0", "sighting_of_ref": "indicator--171309ea-ec13-4402-b6ed-3c41ab11dfbb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe775d5-d3d9-4fba-bd8d-9eb7fcdd2289", "sighting_of_ref": "indicator--171309ea-ec13-4402-b6ed-3c41ab11dfbb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a630845-469a-4081-a59f-34dbb1cba8ce", "sighting_of_ref": "indicator--f8ce4e54-c732-4dde-8721-d253228a8ae8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2169745-d5d4-4f11-aaa0-83c7e276b089", "sighting_of_ref": "indicator--f8ce4e54-c732-4dde-8721-d253228a8ae8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df9707a-97ae-4758-a737-5a48614e6e2e", "sighting_of_ref": "indicator--ed0fdb80-c806-4335-aacb-6b29cd2b001c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bea4e0c-6f58-4cd8-9e92-59f83ca8c4ec", "sighting_of_ref": "indicator--ed0fdb80-c806-4335-aacb-6b29cd2b001c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1d6a8a-1a62-4e53-9197-e85bad18d3f8", "sighting_of_ref": "indicator--b77da48c-c41c-4410-8f84-2822f439d2b7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5c72f6-9470-413d-a384-c18ec2f950d6", "sighting_of_ref": "indicator--b77da48c-c41c-4410-8f84-2822f439d2b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58348570-6041-4325-9f6a-da7bc83ba4a1", "sighting_of_ref": "indicator--11b1cb13-f044-42b0-b425-959d3cd1e0f7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaf2e8a-60e0-4d35-a55a-53f5500ea7c0", "sighting_of_ref": "indicator--0028aea5-a4ba-44b9-aa8f-f741ac45b8f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83533c3-4a2a-4b8c-8748-405bd76f37bb", "sighting_of_ref": "indicator--f97a7eca-cbc7-465f-840b-8f1fad305363", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683f4628-9087-4e62-8ae5-00d5ca0da5e9", "sighting_of_ref": "indicator--f97a7eca-cbc7-465f-840b-8f1fad305363", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c66120-e107-4504-8c2d-54595bf02ece", "sighting_of_ref": "indicator--87942bda-04cc-458d-a4b0-980380885064", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c164e6-d7fc-4f3c-b604-acc5bc2b3129", "sighting_of_ref": "indicator--0b6e5c76-4269-440a-bc03-7b26c9c8bb70", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb37f44-6029-44a1-8301-b733232d60c5", "sighting_of_ref": "indicator--ca03daab-a5bd-4a34-847c-32ce59bbb387", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe519a85-2783-4916-a0a4-11521907149a", "sighting_of_ref": "indicator--94764874-ecc5-4560-b64f-f8ca3efdd438", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7850fac3-db56-4daf-a8c8-f960b4dbb75a", "sighting_of_ref": "indicator--94764874-ecc5-4560-b64f-f8ca3efdd438", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ff408c-1ba7-438e-b722-7ff7c606297c", "sighting_of_ref": "indicator--868b5fe5-25fc-4e60-94d8-195c74c7d0a7", "where_sighted_refs": ["location--3530022c-5e8d-4cba-8662-4503b3c0f2a5"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e7bdc0-83ed-4c92-be17-7b32b7ee8e4c", "sighting_of_ref": "indicator--868b5fe5-25fc-4e60-94d8-195c74c7d0a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149c0d04-b584-430e-9531-b7b5fdc3be0f", "sighting_of_ref": "indicator--066f12d6-23a1-42aa-80b5-fb0535609ae5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b2d9b0-2012-4b8c-ade1-6ba06d6e5d0d", "sighting_of_ref": "indicator--11a476cd-a63b-4fa2-ad87-f8fa963ffd66", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ba4d04-7e60-4fbc-97e8-387d3d0b7bb1", "sighting_of_ref": "indicator--63efb31c-34b6-4e5c-95f0-4b4dc2e81c73", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069c5a0f-ac12-44af-8e8b-e14b941f3de7", "sighting_of_ref": "indicator--1def01f2-87f0-454c-902d-327450bb450e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a616b0-64db-425c-a97c-e309ce514a50", "sighting_of_ref": "indicator--6c9ac2aa-4c0a-4c44-b7ed-185a4d377e0b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7587b1d5-1973-460d-b30e-c483b84db749", "sighting_of_ref": "indicator--8b8fa957-5414-4fb3-84dd-77c8f61ec048", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87867fdd-2817-4a77-bfd1-1735029b1fa6", "sighting_of_ref": "indicator--9b6848a2-79f5-49bf-a400-89a3cc0aba65", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e864ff6-6a54-4e1d-b2b5-480972f9b7d6", "sighting_of_ref": "indicator--9b6848a2-79f5-49bf-a400-89a3cc0aba65", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a314d1f-352c-419c-9d85-67e3bb2b5a37", "sighting_of_ref": "indicator--9a64c022-1fa7-4d36-92c4-754ccb0fba68", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2528b2-b41d-4360-a0c7-a45fd9b79d94", "sighting_of_ref": "indicator--9a64c022-1fa7-4d36-92c4-754ccb0fba68", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60843941-e41c-4723-9a55-cecc7ed582aa", "sighting_of_ref": "indicator--19a47c15-11d4-436c-889c-14d96c3e9d40", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a27f0c-17dc-489d-9796-61e807e910a5", "sighting_of_ref": "indicator--19a47c15-11d4-436c-889c-14d96c3e9d40", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c161fc1-8b5e-42c9-b0ef-7996bd67f5d0", "sighting_of_ref": "indicator--3cba2d51-755d-4d8f-8e61-2599e4cd24c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f39c55-1196-4563-b0d6-a53f93b031f8", "sighting_of_ref": "indicator--3cba2d51-755d-4d8f-8e61-2599e4cd24c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72881bf6-4f65-4af3-a646-532de4184f94", "sighting_of_ref": "indicator--bb636095-4f23-4563-9e3e-8d24ab41efa9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cd3a21-6a5c-41b1-898b-9402d075bd3a", "sighting_of_ref": "indicator--bb636095-4f23-4563-9e3e-8d24ab41efa9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89426252-d27d-4e91-8eff-892c6b9f10ee", "sighting_of_ref": "indicator--ef160cbb-c0af-4470-8688-45784895adc9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa495602-be93-41f7-b373-eaa0fb607c64", "sighting_of_ref": "indicator--a73c80e4-d5dd-426c-b99d-3faa8225bfce", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7317ad9-bebc-4237-880c-ffbb5c940146", "sighting_of_ref": "indicator--a73c80e4-d5dd-426c-b99d-3faa8225bfce", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa40c61a-4e90-4e9c-811f-5e15a9b0b55d", "sighting_of_ref": "indicator--ad3e821a-9f45-4f58-b5ae-c93ee4c3edba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919b454b-5fb8-417a-a9b2-b2e17591247a", "sighting_of_ref": "indicator--ad3e821a-9f45-4f58-b5ae-c93ee4c3edba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e94ff4e-8a1d-4ed3-9028-9376464e27df", "sighting_of_ref": "indicator--3fc2f859-cf84-4bd4-b621-3e2a7256912f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09019b9e-c77b-4cbd-b5ca-1b3365763eb5", "sighting_of_ref": "indicator--9751fa0e-a40b-4284-b997-8ad2ccf513ba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6a095a-d804-4481-a795-1aca957d5270", "sighting_of_ref": "indicator--8b3b7a2d-9162-47eb-9344-75f610f2b21a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc5adf2-391a-43b3-9458-b87b43e1ce6e", "sighting_of_ref": "indicator--2946a8de-e269-4fd7-9a5b-115e046510c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b339273-a632-4654-9dff-0d5bee8991ac", "sighting_of_ref": "indicator--2946a8de-e269-4fd7-9a5b-115e046510c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f77fc0-5aa8-4371-9eea-7cf79292d4f5", "sighting_of_ref": "indicator--eff01120-caac-486d-89d1-81d13dc25d12", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50634d8c-f160-44ae-8e4f-0b354b5ee7fd", "sighting_of_ref": "indicator--74cb6c1a-2100-41ae-a6fb-af4de77fa124", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec4276d-1cb4-45d9-bb7a-08277ecde372", "sighting_of_ref": "indicator--b1da978d-e33a-4b9f-8fb8-7c278982c321", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3bf08d-a973-4aac-9406-21e87cc3ee41", "sighting_of_ref": "indicator--def2f398-c579-4273-853c-e945aad23e50", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6425f548-1b82-4d47-8ce0-1afe38b1d969", "sighting_of_ref": "indicator--25a07553-11fe-4075-87e4-d5f15265a110", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9517bb5b-9a05-408e-a9a2-4df95152ba15", "sighting_of_ref": "indicator--cff1e269-f45b-4fd0-924b-5f0949989ce6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9935b4c-cb60-4876-abf1-462d765a3863", "sighting_of_ref": "indicator--e04aec4e-d4e9-4a11-a132-cb797e3258f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d558e96c-2af9-4b9e-81ef-0eb0ee72ef42", "sighting_of_ref": "indicator--e04aec4e-d4e9-4a11-a132-cb797e3258f6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e0fdd2-590f-4284-a505-879ef9e32568", "sighting_of_ref": "indicator--ad6ae000-0cf1-4612-b9a0-5cc3f5d2f1fc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52502391-d7b1-4d28-92ca-dd1077cf4d9c", "sighting_of_ref": "indicator--b7b09c46-3a7e-438b-b6ce-f307b6281f33", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91aaec5-c98d-40fa-a102-cc5c1bde06d7", "sighting_of_ref": "indicator--b7b09c46-3a7e-438b-b6ce-f307b6281f33", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b323d61-db18-4ab5-9225-0686945021a6", "sighting_of_ref": "indicator--18e57531-32e8-4c5f-9a18-0a06dfc4215f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05bbe01-3e30-4279-bde8-bcb159c5ec03", "sighting_of_ref": "indicator--18e57531-32e8-4c5f-9a18-0a06dfc4215f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dae9858-b452-4b89-a3e5-d3544c203126", "sighting_of_ref": "indicator--28acbe0d-6108-48d3-b889-2e3a9bf81e96", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6caf6cad-9490-4d65-b522-096d129916ec", "sighting_of_ref": "indicator--5eaea48c-a6bf-43a5-a0ac-2df9057d363c", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e73de9e-ebf1-454f-9ac1-c0a578d04c7c", "sighting_of_ref": "indicator--c61a78e7-a276-41cb-ae3f-72f3b01660dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6e439b-a5f1-4a00-ac8f-2dc47983c569", "sighting_of_ref": "indicator--f70088ee-8ec5-4f2a-98d8-4d4ef3975533", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f168da80-c225-418d-bda4-03bbef5c09ca", "sighting_of_ref": "indicator--9b259496-8353-425e-95c7-8cbc5287e9f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cb0091-7a6f-4577-bfe1-c6cb75dbc5c7", "sighting_of_ref": "indicator--9b259496-8353-425e-95c7-8cbc5287e9f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a899d4ff-630b-4678-87fc-c2a146549c2e", "sighting_of_ref": "indicator--7892d456-28e8-4245-950b-271b7932aa17", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d26b3e-7ffc-48c9-a476-78510cf0cf8c", "sighting_of_ref": "indicator--36cd1818-86cd-45a5-b2e3-4dced201d8bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae53fca-a9cd-482c-9dc9-b10aa313315d", "sighting_of_ref": "indicator--36cd1818-86cd-45a5-b2e3-4dced201d8bf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f128c296-c4d3-4bec-9889-6229a6457e7f", "sighting_of_ref": "indicator--31a38c0b-ff1f-4acf-89a4-6a43987aa7f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d2fe2b-b0aa-46a2-a757-7c7ec64205df", "sighting_of_ref": "indicator--31a38c0b-ff1f-4acf-89a4-6a43987aa7f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04e3773-9d35-4ce6-a87d-acaa29ebc4ec", "sighting_of_ref": "indicator--22fead3b-8f2a-4cf8-aac4-641270852601", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7f54bc-6c56-4d33-848d-3487a2f3a727", "sighting_of_ref": "indicator--22fead3b-8f2a-4cf8-aac4-641270852601", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef77276-f86e-400b-812a-d109441190ae", "sighting_of_ref": "indicator--f0d709ec-ca1a-417c-98c6-2a38d06e2a76", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f13a3d-2d9b-4a46-a609-c9bb3162686d", "sighting_of_ref": "indicator--f0d709ec-ca1a-417c-98c6-2a38d06e2a76", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e0e92d-1926-4200-acb6-6a58a3c3026d", "sighting_of_ref": "indicator--75c2c50f-4217-46fc-8744-97529c8e902d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c0080a-3353-4f10-a244-f3f0247327c5", "sighting_of_ref": "indicator--75c2c50f-4217-46fc-8744-97529c8e902d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcab0a4-eb35-4f88-bf3f-966ade956063", "sighting_of_ref": "indicator--cd5a10b9-3798-49e4-9891-94a7b6c8495d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fa0a13-85cc-4357-a6f1-0e4574ab396b", "sighting_of_ref": "indicator--019cd3fa-b87c-4d19-b7ff-8f31519089a2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd012fc-e79f-4639-a2bc-116276f527aa", "sighting_of_ref": "indicator--a2e9b9e8-7de7-4391-908c-e88bc74083dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a03223-4686-4c13-95b0-e753eb3acefb", "sighting_of_ref": "indicator--1efc0a1f-9cae-42b4-b909-c5c63e449bee", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97905d23-00ab-41a6-a7f9-9cf41e0a7876", "sighting_of_ref": "indicator--587d04c0-8168-44b8-a405-1567b66e9509", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb39b28e-bdc2-4d4b-8fce-1e38c53e5a9c", "sighting_of_ref": "indicator--b44b35ba-2e4d-4971-8bea-3ffe62d1fe60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff469c75-9942-42b2-8b2c-445d84199ef5", "sighting_of_ref": "indicator--19294452-ae0e-456e-b7a2-a3916770486e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecacb874-9d4c-486a-b4ab-af0a919a10f8", "sighting_of_ref": "indicator--b113116d-b2b1-4fb2-874f-de1a3faadc15", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b40784c-f8dd-41fb-bebe-58fd7278ad68", "sighting_of_ref": "indicator--92d4306b-38bd-4cb9-9f90-c4d91593e87f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df64a653-f646-498c-a936-6331342352f6", "sighting_of_ref": "indicator--92d4306b-38bd-4cb9-9f90-c4d91593e87f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdc72ed-4e30-469b-aa81-53fbb50a48a9", "sighting_of_ref": "indicator--55302464-14c6-4940-9817-47b48ffc7261", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c6bfec-ccfd-422b-aae5-cecb1e70ca24", "sighting_of_ref": "indicator--2a1c421f-38d8-4b41-b6f8-8090693820d2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ca6e8d-63e6-4d0b-89d2-9286f9495832", "sighting_of_ref": "indicator--84cb923e-f1d6-4d22-80d5-8cb9afd93f15", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ea606f-76a3-464a-922c-73166466898a", "sighting_of_ref": "indicator--2269a92f-c6bb-44ed-86ed-03a44e7a059e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6b35c3-0f28-4b76-b7c0-a6ff4af57bc2", "sighting_of_ref": "indicator--6e471e49-a8b8-496f-b830-0f242cf3e820", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c43be48-1a2c-4e31-8340-c5d8473c33e3", "sighting_of_ref": "indicator--fda439a3-113a-4a1b-a1cf-69f6de0addbc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bde33e-4756-4776-9bc5-6b4ec5612e77", "sighting_of_ref": "indicator--746f6f0a-fbb5-48f9-be89-5a4a29ee4806", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a013b152-c6e2-4af3-b567-3a6d674fc453", "sighting_of_ref": "indicator--ffe5fea0-0b49-460f-a566-944dbda8bd6d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b567e9-7b84-466d-a09f-92bf9ac5e904", "sighting_of_ref": "indicator--3edd00bc-c8f0-42c9-bc0c-494abaf6419e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a60661-7548-43e7-8f6e-3905d18f95e7", "sighting_of_ref": "indicator--dbb1ed5c-fd97-48c4-8e50-5ec8e7bf6144", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1f3941-7584-447c-9736-7c768d8df7c8", "sighting_of_ref": "indicator--11ae5124-3c77-4741-b9f7-41846cbd0794", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9bb59d-8ef1-4cce-ac73-ff78187bf0f6", "sighting_of_ref": "indicator--3944b63e-6de4-4a17-88e9-0b3d95149b34", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706267e3-e75c-4799-be4c-6053f5df3f9b", "sighting_of_ref": "indicator--b058c201-213e-40f2-9d06-d84340b599f3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ace3a88-1d01-443a-b504-ea317d3cc087", "sighting_of_ref": "indicator--3ac4be61-098a-4bb2-b5d2-eb9788cea827", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa41ba8-1d69-4ac8-af61-3549fc0b4c2d", "sighting_of_ref": "indicator--13908696-9fca-4930-8e57-65582061aa52", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdd1ab2-f44a-47ef-9173-72e30ef9a15a", "sighting_of_ref": "indicator--ccd87c63-7eef-4be4-b488-1dc17d41969d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9ef368-fdaa-4e4e-ae86-507eaf6620bf", "sighting_of_ref": "indicator--100b3a94-2b9b-4683-8a6c-f92ccaa0c507", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29af48a1-3d12-4e4b-bdf9-56e6dd92d652", "sighting_of_ref": "indicator--51de9d38-b3ce-400b-b86d-1d6074c07b27", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc5c11d-a834-451c-9205-6f8623300101", "sighting_of_ref": "indicator--dc89db94-9104-4bf2-b7e2-67bee34b6995", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d8eca7-6e46-44b9-9e29-0987089cb8f0", "sighting_of_ref": "indicator--30addc5f-f171-4fec-9f40-296b0ec51d90", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22914821-03a0-40f3-86dc-8553217df3aa", "sighting_of_ref": "indicator--2049903a-8fc3-4ad9-aea9-6c5f47c4e3c6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099e9dc2-08a8-49f9-ad18-a4d4a76afade", "sighting_of_ref": "indicator--fac939fb-3027-4994-af50-3dbe81350f18", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab1accb-a5b9-45d6-a7f8-5e0a973239fc", "sighting_of_ref": "indicator--359a9bfd-b52e-4979-ba04-b64302435446", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3a1601-9a59-4ea4-90a9-b06ffec20ac0", "sighting_of_ref": "indicator--851cf464-4765-4e16-93ab-ce515f1cc8b3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8ef5e1-293a-41cd-a341-b595528f984a", "sighting_of_ref": "indicator--26c7c1e8-e9df-4678-aea3-21bed77bc3b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fd3802-9c8b-40dc-9574-3085e23182fa", "sighting_of_ref": "indicator--47f5c6b3-7acc-4c94-9a00-5d4ed070ecab", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bdd691-835e-4e40-82c7-e93540a238f7", "sighting_of_ref": "indicator--9b7d6daa-ee92-4593-835c-0b34962a7333", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385abfe0-c9ad-4377-b07b-07d42555ff2f", "sighting_of_ref": "indicator--f4f34b29-ba67-4052-97c5-9354e447c341", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233efb22-302e-4391-acd4-4ff38cd350cb", "sighting_of_ref": "indicator--39ffabad-6d35-454b-b534-45a0607ab95c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872540cf-b4c6-495c-a357-c0c505733555", "sighting_of_ref": "indicator--0e6170f3-fdd5-4e32-9c09-c83c8a15c739", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6e0269-d6a5-46aa-b689-88eb5e45dd38", "sighting_of_ref": "indicator--8b1c9f1e-e6c1-42d3-9eb2-cbb530a94602", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf07b03-1c52-4383-89fe-88a514ebad72", "sighting_of_ref": "indicator--bbbfd604-bc08-4ac0-b20d-3b17da49a9bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe7da56-7177-4c73-8d69-0f68eaf02328", "sighting_of_ref": "indicator--f4ac7f01-f1ca-4b7c-bcec-eb2af1272d88", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102697e7-23cb-405c-9a59-32d2635a4c84", "sighting_of_ref": "indicator--f4ac7f01-f1ca-4b7c-bcec-eb2af1272d88", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618707f5-8663-4e00-b9b9-fc931ad51f93", "sighting_of_ref": "indicator--962544c8-b2c6-4a9b-94e6-6b3ee69965b4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998af544-33ff-4184-a8c8-88cc1bd87bb5", "sighting_of_ref": "indicator--f1b03ec7-ba32-4d1c-b175-45386ed5a040", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0d0874-56fd-47fd-8fa6-e03d1ad6c283", "sighting_of_ref": "indicator--17c55fc6-9a89-4e94-bdfb-4e9a5e2945ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860db47e-88e2-4735-88c5-351b38f65cf8", "sighting_of_ref": "indicator--bf0a0380-0a4a-4617-938f-29b6f71738cd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4c5cb4-4b7f-4c35-8723-184335d196ca", "sighting_of_ref": "indicator--f6a711ce-27c3-43aa-a532-d8e239cfdb03", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd022f7-fbcb-43d2-b041-e175c8c69f34", "sighting_of_ref": "indicator--17157e5e-1a13-498c-8d61-7f55c98d55ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d06b212-4729-4721-8406-cdb25b31ad63", "sighting_of_ref": "indicator--12885583-798f-49d8-bfb0-02294720206e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0d5fb6-44ba-4c9b-b298-782d67786879", "sighting_of_ref": "indicator--55da7574-64e5-4d34-aa01-8c3b0ac736f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a32f59d-62f2-44f9-a428-98526258941c", "sighting_of_ref": "indicator--b09580c8-7a65-474d-b3ba-c2d5dd67d07f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6961e8-990b-45b3-979f-7a0300328a21", "sighting_of_ref": "indicator--3a538f27-9a4e-4dec-aa86-430ca7711f49", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d093270-56de-44a8-bbcf-999cc3118cd3", "sighting_of_ref": "indicator--3a538f27-9a4e-4dec-aa86-430ca7711f49", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2510c7ca-1b29-4d5a-a32a-b3193adf006b", "sighting_of_ref": "indicator--8cd0f50c-5b13-4349-b295-77c01ddf1669", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8851eb-5fbb-4621-aaf5-80f960998bb8", "sighting_of_ref": "indicator--6754f2f4-408b-4fa4-9a09-24f9ef1929b1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9a4a9a-23e2-452e-9e83-9566fe8fbd9f", "sighting_of_ref": "indicator--6754f2f4-408b-4fa4-9a09-24f9ef1929b1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8c770f-e852-446b-9494-6cb8e20f6de5", "sighting_of_ref": "indicator--015dbd9f-3a1a-4a4b-85a7-66292f56cdc2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6274ecf5-a019-43b2-8f04-ea3efdf27d98", "sighting_of_ref": "indicator--f26f410f-13d9-493e-a149-a13a41828167", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac11c09-1849-4a69-aec0-60ec00fec0fc", "sighting_of_ref": "indicator--f26f410f-13d9-493e-a149-a13a41828167", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf277cc1-5e56-4bbf-8bed-770bc82a25a4", "sighting_of_ref": "indicator--c98d1b1a-f9b6-4cb4-a29b-4a68e2ffa722", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c059d920-0135-49bf-b882-eb9db3fe9938", "sighting_of_ref": "indicator--c98d1b1a-f9b6-4cb4-a29b-4a68e2ffa722", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efa07f7-a059-474a-9ed4-bbcd6d08c5d4", "sighting_of_ref": "indicator--3d6c33d0-78c3-4008-a364-6f59cb1fb091", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3c7b22-2985-415c-8d1b-c392ef4b1a45", "sighting_of_ref": "indicator--3d6c33d0-78c3-4008-a364-6f59cb1fb091", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb90c367-d8bc-4d3d-8860-ba205514ac08", "sighting_of_ref": "indicator--a0c19915-5383-4518-b8da-edd2cdac23dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ace3815-7bfe-4395-85fe-09e060c40ac6", "sighting_of_ref": "indicator--a0c19915-5383-4518-b8da-edd2cdac23dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ae7249-5fe6-45d5-9053-bbeb9a5eb850", "sighting_of_ref": "indicator--34aabb08-9351-45bf-81fc-a849c02c3fc7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370113cd-d3b4-444e-a9a9-77e452099671", "sighting_of_ref": "indicator--9a3f35b2-d456-4d34-96f4-7eea4ed7a95f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0373cf4e-089d-4402-ae03-c0f071b51353", "sighting_of_ref": "indicator--9a3f35b2-d456-4d34-96f4-7eea4ed7a95f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d2242e-bc7a-446f-b2da-f0c2f493298d", "sighting_of_ref": "indicator--dd8578f0-4d5a-4327-af25-ab116b118d09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3756926-750a-4d38-85f4-84c15dba819d", "sighting_of_ref": "indicator--b851e356-0cf3-492a-becf-b030e1eb0823", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88efdf37-79f9-4922-8b8b-3143258571fd", "sighting_of_ref": "indicator--c891aa86-aacd-46cf-9782-bf11d693b40a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e8a409-9ef3-42cf-ade4-3411f62d1821", "sighting_of_ref": "indicator--649da84d-46ad-44aa-bddf-6e7dc9c34a54", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8409c3d8-9823-4368-b896-4d6fbcf67b71", "sighting_of_ref": "indicator--e970d413-a1fb-4d02-9ddc-415d558a896b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfb44c9-90fb-4c64-85cf-3348f8d0449f", "sighting_of_ref": "indicator--7fa758a8-78ed-4dc1-9849-80c2e6878341", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdd6232-c063-410c-946d-1e1098f261e9", "sighting_of_ref": "indicator--965e0aea-4121-4d1d-a4b5-719e370f2890", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3956e9-25e9-4fd5-9a06-3a7478a7c84f", "sighting_of_ref": "indicator--965e0aea-4121-4d1d-a4b5-719e370f2890", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4343f3-1a94-4dbc-b84c-ed3c325639f8", "sighting_of_ref": "indicator--073374fa-90d1-4e31-87af-fa6c08f91fb3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52db835e-389d-4de9-a2b9-329b3a07b31a", "sighting_of_ref": "indicator--919eb422-9aad-4756-bb42-60c1a4d584a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597bd110-fff5-470d-83a1-e6e4afc68ca0", "sighting_of_ref": "indicator--a69a02c7-4836-4d58-bf9c-d4f871c21c94", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff0cdcc-fdc2-4f93-ba0b-498f001c1a1e", "sighting_of_ref": "indicator--26d26dc6-f2dc-4754-95d3-80d0c44295ad", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b497240-5145-46a1-89cc-6eafe9b51b07", "sighting_of_ref": "indicator--0d41759e-9dc2-4766-9a1a-046ad60a70b7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b13705-e948-4571-9d88-31fca3d9226e", "sighting_of_ref": "indicator--f0b1ab96-36a7-4592-ab51-1053c04a4f9a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed82d9d0-6ac6-4c3f-8822-932001ededdd", "sighting_of_ref": "indicator--554c2eaa-5f5a-4ec9-a70f-69f2dcc9cf81", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da238862-7166-4000-b7f4-9aff3ba9f8ef", "sighting_of_ref": "indicator--43b4c823-a3d1-48a4-80c3-2d5d2693de72", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ef730e-d2ec-4786-8e7b-5895413f5271", "sighting_of_ref": "indicator--98b24e35-9ead-4da5-a01b-df95d26bda82", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2f3674-5d48-454a-a736-f26789e29ce8", "sighting_of_ref": "indicator--c003c025-295c-44a6-8e9f-cfd374194bf5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacef4e2-3e4b-4bf8-b60d-ac135fe588cc", "sighting_of_ref": "indicator--74d786fa-604b-47d2-9049-24417b9a7e0e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1ff18d-2252-4119-83a5-d5e2fd7aac3e", "sighting_of_ref": "indicator--d4a467cb-1c73-47b1-924b-e3b473389f2f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67194dc7-c5e4-446f-90ad-4f17025e840a", "sighting_of_ref": "indicator--8358b830-fd43-46f5-a387-27ce641898ab", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9bcebe-1b53-431b-8a5d-5516e07bf538", "sighting_of_ref": "indicator--54c4884f-1d6a-49eb-8429-b21515df92e9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf02674-ce16-4258-be8e-842b47eb7822", "sighting_of_ref": "indicator--030b6d2f-1d66-43da-b087-5db5d05fcb51", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edc52ae-93ae-486a-b696-d260f1200c7b", "sighting_of_ref": "indicator--8f157014-5229-4f34-bb4a-1ea567d94d09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd748eee-73a6-4a81-b2ee-8f4816c5ddd3", "sighting_of_ref": "indicator--1ce13016-6e0e-4cdb-b026-c1c7ab20dbf4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1cb7a9-0da2-4242-a9c3-29ac981588fc", "sighting_of_ref": "indicator--b962677b-ae04-46a9-ba82-76cd5395f0c5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08775967-12c0-4ad8-bf50-6a61966f737d", "sighting_of_ref": "indicator--69508d51-19e7-4a51-a269-7a007fac9a4a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59784f8-6868-43e0-b553-3c6dca8a7f02", "sighting_of_ref": "indicator--71e114ff-620b-4e8f-9a9f-36c190f3e4b2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf316b0-9363-40ad-b83c-ee41e6d8c3de", "sighting_of_ref": "indicator--973f1a98-ae4d-4fa6-b36f-045e24b93b92", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea70be4-19b5-4b1e-8605-deddc9234d1b", "sighting_of_ref": "indicator--45bce1e6-2d37-4c2e-bfd0-9b89ff3373f4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92533425-0c55-44b2-924a-eca63c22cf9b", "sighting_of_ref": "indicator--37be4e84-b6f7-4806-a0ba-1b7718b362b6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefabe7d-8ab2-46c7-88db-75e14fd89e2c", "sighting_of_ref": "indicator--37be4e84-b6f7-4806-a0ba-1b7718b362b6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7c64a9-d58e-4262-bc25-a13fcd4bc09f", "sighting_of_ref": "indicator--159672e3-06cb-49b5-b4d4-c28ae7b2c103", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69184a20-700b-46e4-baca-93576b490452", "sighting_of_ref": "indicator--31a8240f-f7a1-498d-a65b-e20752d48039", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b908387b-4072-40e6-b031-d3209a6a9701", "sighting_of_ref": "indicator--af274cc0-832d-44b4-8781-4d5992302083", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04835be-586c-44d7-947b-ca7e9362cac4", "sighting_of_ref": "indicator--670f6614-4508-48df-a38f-0f3ceffe7423", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49e4dd3-ed83-4d88-88e5-52cccdc47517", "sighting_of_ref": "indicator--ebe5bc73-4694-419a-8ef4-24d2c05c2713", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4086d66c-e6a0-4930-80e9-c4e2674681f3", "sighting_of_ref": "indicator--8b93764a-98ec-4f25-b47d-1fa8ad8e0dae", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65669350-7796-4727-8d5a-f20e4f23ab4c", "sighting_of_ref": "indicator--35934ee0-52de-45b5-951e-714c30fa70c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586106fc-d234-4770-9ab0-a1fc6fbcc423", "sighting_of_ref": "indicator--6bd39ab8-4070-4a9a-a344-5083c887eb83", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c969bb9-bb34-449c-85fb-d17c9f8b6274", "sighting_of_ref": "indicator--f62cd12b-69c7-4da9-a0d8-ad0b70effb3c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66a49b8-ad40-4b68-a0bf-9c7101bd9f9e", "sighting_of_ref": "indicator--98244d55-5770-4f18-9e76-91b837962b83", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a127b419-cc1a-473b-8059-adc8b63f17d1", "sighting_of_ref": "indicator--b9debc42-10b5-432e-87a9-50efcec8144c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a03f280-57a6-4de2-bea4-570be95a3221", "sighting_of_ref": "indicator--4eea2c35-cf21-4539-9b69-8cf2cc627042", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b982db70-8f09-4e04-a0c0-5f8379630b2d", "sighting_of_ref": "indicator--4eea2c35-cf21-4539-9b69-8cf2cc627042", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f92434-97ed-46b2-aa0b-e20ba2f25e39", "sighting_of_ref": "indicator--31f03b3f-af39-4e47-8a90-acd1715c8641", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841f99aa-ff4e-418b-b3a3-b769e256a555", "sighting_of_ref": "indicator--31f03b3f-af39-4e47-8a90-acd1715c8641", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27b0950-8159-404f-bb1d-47093f214a51", "sighting_of_ref": "indicator--890df18d-bc27-45f3-8e15-088020b95e16", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e2e7c8-f917-4ea2-a12d-0d390a02cdba", "sighting_of_ref": "indicator--a62cf8a3-5e9d-4fef-bca6-396f30cfae51", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1cffde-ad15-44e8-abae-34b39eb6b1b5", "sighting_of_ref": "indicator--dec02087-1966-4ffc-a9e6-c147077105a6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2042c45d-f22f-4370-9b69-4b86a1f3539d", "sighting_of_ref": "indicator--dec02087-1966-4ffc-a9e6-c147077105a6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b10c8e-8698-4b20-94a8-5b6b3cd51475", "sighting_of_ref": "indicator--6cfcd341-3026-4c9b-bbe6-658c66f227aa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469a92de-6679-4091-a493-3c605641b0c0", "sighting_of_ref": "indicator--6cfcd341-3026-4c9b-bbe6-658c66f227aa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a54dc6-16dd-4627-8bc7-697c64698619", "sighting_of_ref": "indicator--4f1300d2-c0eb-4387-8e15-bc0c71c2f25a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df80fed7-2043-477d-ad9c-4f0592c8fc8a", "sighting_of_ref": "indicator--bda89919-6a29-45a6-8112-2919c99592d3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98d9329-c64c-49a2-9c33-015570787588", "sighting_of_ref": "indicator--797b4e4d-f424-4e69-8a73-ff2c27ad2187", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a79e4a-b6a5-4753-9f7b-57584ad8b74f", "sighting_of_ref": "indicator--e31d16ec-af02-4520-97fe-a3ababdbe378", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6126976d-2cf2-4ebb-850c-667faf9047d3", "sighting_of_ref": "indicator--ab614e27-acfd-4793-9588-a04f87375f1e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b00dbe-b0ff-4b7c-a89d-f47ab1b6da9b", "sighting_of_ref": "indicator--cf37e205-9ec5-46e6-aaf4-8c75d3240add", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dda0325-35e6-4b9e-9ea9-4c3047556e65", "sighting_of_ref": "indicator--a479b8ba-3516-4c60-b814-804c95f8ac84", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97aa4a4d-e05f-40fc-ae8a-0f3a64efc113", "sighting_of_ref": "indicator--be87a28b-ef2e-44b2-a3f9-17e8e9e17768", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6556c3-d44d-42c4-ace4-d1f58a9f1e06", "sighting_of_ref": "indicator--ef74eb1c-738a-4955-ab94-9b177d91dce9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b12675d-aa21-408a-84ae-7c5d384d4f26", "sighting_of_ref": "indicator--2d76c892-f0ef-4775-9d05-ab8ab35140cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b204ae3-9946-4068-b983-412cd7235c9f", "sighting_of_ref": "indicator--57c48b57-d53e-44fa-82ec-a1a47d4e916b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c9b4e9-0f94-4029-85d2-ba9fd2655e12", "sighting_of_ref": "indicator--f634f2f9-0662-498b-8cc1-273cfa43ee35", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c92d065-8192-4900-bd65-4a22874a6969", "sighting_of_ref": "indicator--6a197f50-b572-4e0b-8607-88deb82b169f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1b393f-e1b2-4542-b147-3e98661102e0", "sighting_of_ref": "indicator--6a197f50-b572-4e0b-8607-88deb82b169f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c6074f-8f91-4b47-b7ab-9cfd99a5502c", "sighting_of_ref": "indicator--8b619903-a5af-4ede-ad44-9b4ef9032463", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8c83b7-0028-4699-a53e-1c97f4bed239", "sighting_of_ref": "indicator--d925e305-c48e-4763-89b5-85adb2f45b8a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636a98af-69bd-4961-960e-6387e24e4e1d", "sighting_of_ref": "indicator--90a74c6b-6fd0-4c22-9662-d95617b27a4b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebc46c7-6db4-4259-9d19-0898180411a2", "sighting_of_ref": "indicator--108b034a-0f00-476e-b49f-4cffadd8b05b", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b5f501-c220-4a19-acfc-a0e0b6d699de", "sighting_of_ref": "indicator--5c800230-d97e-4c6a-a9ef-a3f14d87fb2e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7902fcd-fda9-48cb-b0d6-c5abf0a6ba2d", "sighting_of_ref": "indicator--796d3c0e-3192-4868-a624-b5949b73a3e2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b2eac4-a57f-4648-86e1-6e1d6630bdb8", "sighting_of_ref": "indicator--bb7d0890-4b4c-4971-b734-d10c526fc60d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdd01c1-11ea-432a-b469-adc8640713cc", "sighting_of_ref": "indicator--e9debf63-63a6-48d7-8985-740d41f1b64a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0791b6eb-251e-4360-b3e6-f08c65fabc6f", "sighting_of_ref": "indicator--c0166a02-33ee-4019-9c1b-546c931a14d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67ba735-07c9-477e-b033-a884494dc76b", "sighting_of_ref": "indicator--27476028-d42a-4ea3-ba18-ca0806dd0d36", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ceecc4-42bf-42c6-8c40-81571e8f7085", "sighting_of_ref": "indicator--0db85b52-c52f-4321-97f0-c3531296c095", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f057a3-7421-459c-96c5-657274a47c2a", "sighting_of_ref": "indicator--0db85b52-c52f-4321-97f0-c3531296c095", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1918f3a7-1626-4ce4-8dc8-5722937c29fd", "sighting_of_ref": "indicator--1c76e377-516b-4f61-815e-ce2e9786d789", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f67725-d89f-488c-916f-7612dd372ecb", "sighting_of_ref": "indicator--2fae3093-4026-4228-bde0-aa94adbd1042", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234db649-79bf-4911-a9da-39255d4ba258", "sighting_of_ref": "indicator--f0411616-77e3-4c27-b7d1-d1f0d1ea4301", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb8e9c0-7527-4ed5-adfa-400c9cf14814", "sighting_of_ref": "indicator--ee1f2f05-75c5-4554-b601-5b19b1c995bc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748828be-12be-4ed2-8773-76c9ad59b998", "sighting_of_ref": "indicator--5faedd63-6b75-4126-b3db-7e8324daf89e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9806c6-37e2-4b78-9881-c605dd583980", "sighting_of_ref": "indicator--007cd5a0-3be7-4c95-a16b-e8f4b2b8497a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b0055a-a25e-4fcf-ada2-e325059e4b17", "sighting_of_ref": "indicator--1014bec8-c9ae-4743-865e-fd232d357e63", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3e138c-24d9-48b7-91f1-bc62a0bc001e", "sighting_of_ref": "indicator--e39ee871-37e0-4667-935f-8bcc37bb6c33", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b35ae4-e6b8-4050-9128-eda68dee250d", "sighting_of_ref": "indicator--c1fc45e1-3891-4828-b7fd-1fe6c844a66b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a048b4c-df82-41da-989a-f2c48b7b0d0e", "sighting_of_ref": "indicator--4467059f-fb1a-4322-908e-87169ed0a010", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee35615-fe5f-48d8-bcc0-c5a2deb5ec66", "sighting_of_ref": "indicator--19add7c4-25d9-43d2-b20e-8b9de7d1b3cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a1b01b-0b95-43b1-9e8c-d431ef4294e7", "sighting_of_ref": "indicator--19add7c4-25d9-43d2-b20e-8b9de7d1b3cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbb15d3-11ee-41b0-872f-079e19b6c15f", "sighting_of_ref": "indicator--1d9799d0-b7b9-4077-9a19-425bf1025de9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17268472-ffbd-4b1f-a1c2-d7fb7c1ff5d0", "sighting_of_ref": "indicator--eaaa5590-2f31-4eeb-8073-aa7e34c1db7b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968c96e3-63f0-4395-8c92-6c6a0ab2258f", "sighting_of_ref": "indicator--b70e3705-199f-4642-b0e0-80a5494d99ec", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc0f322-6428-4862-87d7-e1e90daefc59", "sighting_of_ref": "indicator--e5d3f63e-e0cf-488a-9953-0b65678c5be8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8048563-f79a-4616-99b6-4a8e1a1d4915", "sighting_of_ref": "indicator--25765016-392a-45cb-97bd-ff717e68133d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab55364-f643-4611-b9ed-e4c380e16289", "sighting_of_ref": "indicator--89467593-316a-49e3-9241-76e7b08f3ff5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84076f3-6126-4b6c-8758-c14893e71d6b", "sighting_of_ref": "indicator--e3841956-69e1-4f9e-b52e-2281061861b5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80968809-1484-497c-91db-199952aac453", "sighting_of_ref": "indicator--494ac264-1bfb-4e76-a095-46d03cada9cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51eb70cf-3139-4cc5-a2f8-a192fad1b96a", "sighting_of_ref": "indicator--b3302eb2-539b-411d-81c9-2bbe19cbf37e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1d7fe9-4afa-4b11-925b-4af08d1ca3db", "sighting_of_ref": "indicator--9ac4b45f-2ec0-48d4-aebb-84338a5cda26", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9a894b-9afc-4050-a47c-f791866a8cd0", "sighting_of_ref": "indicator--db49d6f3-8acd-4097-bde6-4ea88bf64ffa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de33628-ffcb-496b-ae4a-ee7cf2a3c68c", "sighting_of_ref": "indicator--fa076a11-e032-4820-b26b-caefe0f0ec75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26789b8d-1c16-4e92-b20d-9ae4cb851441", "sighting_of_ref": "indicator--f8e1ccfb-a6c0-4a08-9c73-be3c58883437", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d133611-1a32-4bc3-af1a-5a85f1047e62", "sighting_of_ref": "indicator--0f55bcae-e90f-4575-8603-e574fa21eb3c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba98830-d2f9-45b4-8f54-f75ef04e20ee", "sighting_of_ref": "indicator--25390bc3-4144-469b-9bbe-1b1924d2d519", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d6451c-aeb2-47d6-ade9-0614b0752bad", "sighting_of_ref": "indicator--43713b71-88a3-4999-94f0-59e88b74cb77", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507e472b-aee4-4cb5-b3b2-12edeefc1ecd", "sighting_of_ref": "indicator--86b1ff0e-b2fd-4229-b388-a6b6084a072d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d8db5b-84bb-4bc2-8134-391f4f78045d", "sighting_of_ref": "indicator--86b1ff0e-b2fd-4229-b388-a6b6084a072d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c775a9-3987-418e-b0b5-14005e06e687", "sighting_of_ref": "indicator--ea463cf3-1853-42e0-9380-093e9dec17d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c67666a-be94-4b8f-946a-63a682d9fdd8", "sighting_of_ref": "indicator--c03b1e65-ecc4-4438-a14e-36ad92bb2734", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b769f2-229f-4323-ae72-a51eef5e1c46", "sighting_of_ref": "indicator--8ffd573c-d438-428b-8e79-621d6eb5e185", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242f8821-35c0-4414-875f-2a1c0e438d71", "sighting_of_ref": "indicator--8e4b8765-04b4-46ac-9cc4-b37d21786124", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4d9508-f91c-4bd1-b982-cb1289c5ec66", "sighting_of_ref": "indicator--205e4222-4814-4e63-b01b-2115a20c9983", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943f5800-2d35-474f-bb8b-d9a117200260", "sighting_of_ref": "indicator--e921d8a0-27c5-4d0a-916c-919f25599233", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22bb5ca-8aaa-4eb5-b4b2-c8cbd93465f4", "sighting_of_ref": "indicator--b27ede08-d48a-4573-8156-9f0bfb7f1401", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262ede38-aa7e-43b6-b43d-32565db34668", "sighting_of_ref": "indicator--3fe8878e-0390-4888-98f6-fc28fee88bcf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734234cb-5e9f-4e20-84d3-2127f94279b0", "sighting_of_ref": "indicator--6bb13528-3b60-433a-9cbf-2107a08bc5d0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35255fa-c3a9-43e8-b177-3fbefa037074", "sighting_of_ref": "indicator--20a70ee1-f80f-4ba3-b642-b3a350b59e9d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c64e26-ec9d-44b1-98ff-b727a13b23be", "sighting_of_ref": "indicator--b29d164a-8e99-470f-8b56-2cf97a1a2d83", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed17226d-28f4-419b-aac5-22d41812742c", "sighting_of_ref": "indicator--088813b2-4b94-4d4d-9d56-4fa293dada2a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33209e94-57ea-4b88-8a4a-bd4ad6285009", "sighting_of_ref": "indicator--22b76476-3722-49c2-a183-de9332699084", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40437c3-7341-42b6-a483-b4019840cc1a", "sighting_of_ref": "indicator--08b3cc5c-cbc0-4e3a-a9dc-a5dd0b6e958c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ced1d4-4c0a-45f1-9108-0c0e9707168b", "sighting_of_ref": "indicator--17d96bed-c04d-441a-8865-b1250dddfb04", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132a5e63-1db4-407c-a0ac-aeb74a54241f", "sighting_of_ref": "indicator--468ebd28-afaa-4a4b-848c-dcf9c57dd2a0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe31d34-4e21-481d-9ce4-677e761b8bbf", "sighting_of_ref": "indicator--37bcdaa4-4c70-4efc-836e-28444e7d3447", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5c32da-62ad-414b-98df-281fb64d9f94", "sighting_of_ref": "indicator--334385fc-b55f-4a43-bf25-2c7b24fe67cb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a99f135-5753-4fdb-98a1-d5a11dcd0543", "sighting_of_ref": "indicator--04e335c9-07fa-477d-bd4b-bfe0ffe4ddba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb2274b-6d68-4961-9aa8-638969817435", "sighting_of_ref": "indicator--3f856729-2486-4a24-940f-96cc20c415d2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334d63af-780e-4983-939e-2fda93bf73d9", "sighting_of_ref": "indicator--e50e0bb4-6d02-4ce7-a9b2-653513e43daa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5635e097-8411-4093-ac84-a73aa12ceed0", "sighting_of_ref": "indicator--2c23cc6f-7ff6-45da-b383-d8714feb5f28", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd6395b-3c7a-43b4-be83-65714a3ef996", "sighting_of_ref": "indicator--7b0200e6-f465-48b4-bb83-11c4a4c60273", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c86395-f99e-49d2-9751-c89f6b801db3", "sighting_of_ref": "indicator--6781fd67-2b56-482b-9bb2-b05b86f37c92", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f8834b-8523-493c-be6e-9a721eba2bed", "sighting_of_ref": "indicator--7aad49ef-0ee6-42fa-aa0b-1f827b204313", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd02b195-7ad5-4265-8042-f4f41bd57269", "sighting_of_ref": "indicator--8155a075-b3e9-4808-bccc-7f5b0ab53cfb", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa44cbc8-1233-4b50-a149-c3ea03f1ce14", "sighting_of_ref": "indicator--923cfe87-59bf-4ecb-9e4e-d5b96d4b75f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6838dde-7f50-4fbd-b6cb-5f973790023b", "sighting_of_ref": "indicator--2eb09ea4-5dce-4926-ad2a-0a241d373d5f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0264d3b4-2346-4b77-a0e0-e213ad0d3c92", "sighting_of_ref": "indicator--9a34b58e-9632-4789-baa2-7b8fd0dfe019", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2703b29-fedc-452d-b449-1caaf7e827c1", "sighting_of_ref": "indicator--a9f10061-5b60-4953-b441-ff6804f804e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1560b79e-d5bd-40d3-aa95-5eae92b593fe", "sighting_of_ref": "indicator--0c3f90b9-c83c-4996-b4e1-e8e9193f0922", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7abebe-d3b5-4f00-8d4d-38fc2952781f", "sighting_of_ref": "indicator--c4b6a217-3a56-44b0-938c-18794b8aea46", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba24d4b-a7fa-4e70-bb08-b30f6b19148b", "sighting_of_ref": "indicator--9d3ad909-fd1e-4073-ad59-dbbcd160d653", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18245c6-c2fa-4286-8dc3-e03359438818", "sighting_of_ref": "indicator--9d6501ba-ef8f-4ca8-879f-23a1ceb01824", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a907abf-cc00-43a7-8784-1278dc92cb48", "sighting_of_ref": "indicator--0e77eb7a-6a0b-4a9e-b24a-8dfb629e9e75", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978b5e1c-4244-454e-8209-5459690af449", "sighting_of_ref": "indicator--51860224-4118-4725-b9c0-e3fcf9c60f41", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a10aa3-8722-4199-8f9f-14bcf05bd24b", "sighting_of_ref": "indicator--f371553e-63b1-4f97-bdac-bf3ad2b04f54", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05211e15-ef58-4f00-b449-137f3ea9c4c3", "sighting_of_ref": "indicator--7a253a7b-f1b1-4e4f-bb2c-86c64a953d13", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6a6ce2-3e2f-4af4-b97f-63cca7660aa0", "sighting_of_ref": "indicator--68bc2639-961d-45e5-abf0-cb72dcad74f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ffd080-b275-4885-a431-0b00f084459c", "sighting_of_ref": "indicator--f127fba7-df66-4e53-b7ae-c74120a87806", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa5edb7-39c6-4cb6-b6d0-85d4c01cc7d7", "sighting_of_ref": "indicator--d901be81-161d-438a-b35e-03d6babe6be8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e186909a-829c-48fb-90d1-f9c436b98ff2", "sighting_of_ref": "indicator--7d27a416-219a-47c5-9c12-a61898887f0b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e29135-1a08-401c-8b84-4dcc106f6543", "sighting_of_ref": "indicator--82467411-909f-4e50-8426-3c7fd49d9ff3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8273b8f-5d60-4d74-be50-388176e489af", "sighting_of_ref": "indicator--babc11ef-981a-458e-a18a-c276ab9f4c90", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e631b811-f37e-48a0-8276-4bb33398e9b1", "sighting_of_ref": "indicator--ba6b0cd0-0a53-4488-a60a-341940116134", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9d63ba-5a3a-481f-9b8a-2d5e6408d79e", "sighting_of_ref": "indicator--8cd69efb-f711-4f2f-99b7-cba639777e55", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb1d518-e20a-40fb-8a13-f3630547cf07", "sighting_of_ref": "indicator--8fef52e5-42c2-4d65-a938-f3e69592a4dc", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f62b8ba-6dc3-4c4c-83c5-09eb101bccb0", "sighting_of_ref": "indicator--d27699cc-e727-4d01-a16c-006fa72497c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae6a627-ae83-4403-a2c7-e3edcf92fa46", "sighting_of_ref": "indicator--531e096d-be58-4525-95e3-d80fd85ee495", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d08e78-c4ae-4661-b194-a15430d6c5ce", "sighting_of_ref": "indicator--14eca7ad-8acc-456b-956d-903526083287", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86357028-2199-4dd4-b56e-c8dc3053cb1d", "sighting_of_ref": "indicator--f793aded-9185-418d-8118-48e8a5d1b2b5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d5c6a4-6e5b-467d-ae91-5ad6c821dd78", "sighting_of_ref": "indicator--b5d25aa8-2e47-4615-8fe3-27e6180a7c53", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ce355d-017a-4237-aa2d-b77c8993cdc0", "sighting_of_ref": "indicator--a060b516-a4cc-4dcd-b193-99a89b7b7009", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2940c409-74e3-4480-8165-de6a6ea6c6a9", "sighting_of_ref": "indicator--fd23b4f7-2773-4370-8fff-b9bfaaff69ef", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ece25b2-0392-4d17-a4ec-236d0a136d4d", "sighting_of_ref": "indicator--87769e28-2f43-4d81-b436-fe3071d02568", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd174170-bcd1-43e7-b0db-81986dfcfafc", "sighting_of_ref": "indicator--f0f086d6-b2b0-441a-adf7-263d27281218", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699228b5-89f1-4fb5-bdf1-ec152f8a9402", "sighting_of_ref": "indicator--fc14b29b-d982-4642-85ff-e9c0c19a33cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98c6a1b-c2e1-414d-964b-0b1546807acd", "sighting_of_ref": "indicator--7df78e50-b236-4c8f-aae2-513d3f759e32", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81eb3b36-54ef-4802-979b-20f29a6a7b77", "sighting_of_ref": "indicator--5dc11080-d222-4054-bc24-e0eb6ea5e70f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679e9b57-002a-40a5-b8dc-e88cc47b3dc9", "sighting_of_ref": "indicator--ad1c9038-d7db-438d-bbb5-8e2386a7a0d9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cedfeaa-939d-4d70-8a9c-109f44505f31", "sighting_of_ref": "indicator--e6ffdad2-bf0f-4734-b465-465a7c4e0a09", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b649f56a-1ab0-4b77-a4a8-4750f9ed7275", "sighting_of_ref": "indicator--2d5c43fb-7e30-49a2-abcc-c2758b3e24b2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1026878b-b129-4b89-a92b-796224eac400", "sighting_of_ref": "indicator--ab4f7d68-ec27-43b3-8f6a-dfc376d9e3a8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf6a2e2-ccc0-4265-b856-6f8f337a5730", "sighting_of_ref": "indicator--fb347ced-2e00-48a7-8ed1-faf6b1bec56e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0bbe00-a2fd-4f40-92ab-7ca71190b6d1", "sighting_of_ref": "indicator--5a3e8800-aba4-4a72-997c-e7b89b97e22c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434ea9dd-dcfb-43dd-be5d-daa83de4bbd3", "sighting_of_ref": "indicator--00371f3f-b3c1-492c-aa22-acb21ae25091", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a154e4b-c87e-49bc-8506-16ce06d3ec0e", "sighting_of_ref": "indicator--86014902-7bd7-40c6-a91a-9d39dd809e43", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e272a849-05e5-4a9d-96d5-c03026899630", "sighting_of_ref": "indicator--6c087593-7f53-457b-a5c7-75f5427d99e2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24961632-8fe6-4478-b840-06a7acd18046", "sighting_of_ref": "indicator--3aa09c18-e13f-4c83-aef7-295af724dbe5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95653e19-4d82-4570-b177-0780831ac373", "sighting_of_ref": "indicator--e15f1dc4-13ac-4698-8754-3311bc30d9dc", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ea3ad2-2d3c-4ce4-b5d5-0da777045e2f", "sighting_of_ref": "indicator--f8a845ee-6af3-41e7-a39e-fdbe7cfa4117", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf50854d-2199-4d72-8bb5-df8d1a896735", "sighting_of_ref": "indicator--57abc4b7-20d7-444c-8112-4f6928a0c7f3", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f888c50-de76-4aba-9557-b4a0724019b7", "sighting_of_ref": "indicator--d11225de-074b-4820-bbf1-a5e1e03b2297", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f3792e-bbc3-4d7a-bfab-d305e2ef9ca3", "sighting_of_ref": "indicator--b82ad22e-2ca3-4c37-ac7b-eebc1a5aefcd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef46a5e-f258-4ce3-b7e6-b0607b27669d", "sighting_of_ref": "indicator--b8f3bbf4-290d-401f-97f4-ffabbbeb2c8b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbf744a-4a16-43e0-bc89-1b35042125ae", "sighting_of_ref": "indicator--35c0dcac-0480-4b97-b74a-797ca37add41", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faa163d-0283-4418-9a01-fbfa9ff93012", "sighting_of_ref": "indicator--3f78a285-156d-47fc-84e0-bc4b0f020299", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3872ad12-ed34-4e62-a495-6c35ca96e2b0", "sighting_of_ref": "indicator--67f4e1c6-1622-4554-b199-bfdcb525d87f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf24299-56e1-4463-91e9-05c7f80c82d9", "sighting_of_ref": "indicator--a005d3df-659f-47e7-8b1b-961dfebee485", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a782596-c98c-4280-a992-73b590f7cc0b", "sighting_of_ref": "indicator--b98253fa-189c-4721-b6f5-701cefb08b93", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9cee78-f4fd-4ef3-aa95-458f84a8b0b3", "sighting_of_ref": "indicator--ee7d5d26-a795-4afd-96eb-63bbaa097a46", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6445db-1540-4783-b4d6-be82177a7971", "sighting_of_ref": "indicator--d698f1e4-b407-4cf2-a562-5aeb62784f02", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50dcb7b2-55ae-430a-90cb-1391d3a0acb1", "sighting_of_ref": "indicator--d698f1e4-b407-4cf2-a562-5aeb62784f02", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652d7bbd-2085-4d8d-b0d5-b9f8a6138893", "sighting_of_ref": "indicator--57023e76-652b-4851-8094-f42f6bc308f2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16066ded-3f07-4ace-a3b5-ba4805aef79a", "sighting_of_ref": "indicator--57023e76-652b-4851-8094-f42f6bc308f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc70ba3-6162-49e7-8e6e-c5ed4f421e39", "sighting_of_ref": "indicator--dbe1fdb3-a4d0-4fc0-9bc4-7e68560bc89e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f66459d-8188-472c-a001-4748e62f5134", "sighting_of_ref": "indicator--7ea15dad-9958-40d0-ac07-328a7a7f215a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157f94a7-738c-43dc-a95f-d2c9995cb29e", "sighting_of_ref": "indicator--8c0de554-c03d-4a54-b826-59ff5b9ffb60", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5418c68f-ad52-48ce-bded-087814943206", "sighting_of_ref": "indicator--9426b314-c1cb-4398-8271-573283babf95", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589d4bb5-90f0-4290-ad0b-4c08918462a2", "sighting_of_ref": "indicator--1aa0c9ff-8bc2-4e6b-b0cd-3658bfeedf8c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42e2fa2-5c6c-44da-8e14-86f87b138488", "sighting_of_ref": "indicator--ef05eb11-34e3-465a-b76d-511bedfd9bff", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d76fc5-2b83-48f2-82f3-8771d524f32a", "sighting_of_ref": "indicator--6ab07be2-2129-4a14-8ca5-d57e98e65a94", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78e82fe-e88b-406a-9bce-c52309b9349f", "sighting_of_ref": "indicator--d984c8ca-8e65-4651-8e59-bb95c50e217d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee0eea7-aece-4e1a-860a-daaf80ef744e", "sighting_of_ref": "indicator--affb063e-f4f1-4ec0-a263-47c015c436e8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d66d482-76a4-4137-adba-a0bf43fb4195", "sighting_of_ref": "indicator--ba365646-ae7a-4277-8c8b-5634da7aaae9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d52d1d-6281-411b-8d10-5fcb4d5f582d", "sighting_of_ref": "indicator--189a49da-c963-41c0-a836-297d0f9f2573", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b31e0e9-15a6-4209-a3d1-8e18d1400198", "sighting_of_ref": "indicator--ba5c1521-762b-4857-aec8-9f1fb3ce78d0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c47a311-decc-4203-92bd-888b6ab96961", "sighting_of_ref": "indicator--0a56d4b8-b47a-4f52-9b71-ca5d4beb7458", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c99466-beaf-43b0-9b9c-fac70b2351ef", "sighting_of_ref": "indicator--fb84c841-fb99-4761-8aa5-f857c7d73095", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba421932-9acd-4ca4-a72a-f56b703b45ed", "sighting_of_ref": "indicator--c353e0b5-ed99-4b37-b726-af78090180ff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483e53ae-fb2b-4fd6-beaf-074f099ab089", "sighting_of_ref": "indicator--0a8b21b2-e2b0-4da7-8485-e14f27aabd72", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96370cb9-106e-48da-8415-54fe861b1ebc", "sighting_of_ref": "indicator--6f5bde95-6779-4f2d-ba9c-81b2d00bb448", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45080653-041b-477f-b25d-c5a4a2b4146c", "sighting_of_ref": "indicator--33e07e3e-61c3-4c36-bbbd-0d597e0faca6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a558a50c-c173-49ad-ac27-b092b4974fc4", "sighting_of_ref": "indicator--33e07e3e-61c3-4c36-bbbd-0d597e0faca6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafb61eb-2696-4b52-85bd-79877f7fcf6a", "sighting_of_ref": "indicator--713b7384-5cef-4514-a3b3-7e87191a7117", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb260b9d-5022-441e-bec9-340a928dcb84", "sighting_of_ref": "indicator--afe65294-90fe-47be-a8f9-8f6b47552cd6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b269a81c-37b8-4843-b2af-51223fb9153b", "sighting_of_ref": "indicator--6cf7a7fc-1a5b-4301-b703-15c1351d1040", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38af19f9-4a38-4cca-a0fa-3fd64bf1224f", "sighting_of_ref": "indicator--1deff4aa-1472-41b6-b497-2a140df9af00", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944861f1-be3e-4530-bfc1-d69d1a594ce6", "sighting_of_ref": "indicator--4cb5e9b4-976d-4c25-8914-c3ae65d291c2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6f8a79-32c7-4c3d-9b13-5704672db749", "sighting_of_ref": "indicator--c32b2b66-0019-4f44-9083-c9ad11bd7ed8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d2de98-58b5-40f7-acab-5203c3ad011c", "sighting_of_ref": "indicator--901883f2-220d-42ee-a773-1462159bfaf8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1806d6b6-b827-4ec8-83a8-bbcd79d264f6", "sighting_of_ref": "indicator--3aa09781-857c-4072-b62b-ca1cca1195f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071a321e-272c-4ce3-9d55-0738e36c647d", "sighting_of_ref": "indicator--e46515e4-f8a4-4cb1-a89b-87a34217c3fb", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ad7455-1be9-4ad9-8fd4-b1becba022db", "sighting_of_ref": "indicator--1d54a16d-b2a4-4987-8ecf-192fc2d25e62", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9342a3d0-a59e-49c7-a8a5-a02b1767a4ae", "sighting_of_ref": "indicator--bd261864-82aa-4ad3-94bb-a1ebf8c6b9ad", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0426302c-3570-4d63-b127-a707120dbf16", "sighting_of_ref": "indicator--d4cfd95a-8aae-4a47-a804-f740964777a1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fdd01a-64aa-4fa3-b99f-cfade41f2c12", "sighting_of_ref": "indicator--9dc9e2b6-bf3f-42b8-8565-444e968408e3", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca16b434-1cb2-4271-b996-76b1d560f43c", "sighting_of_ref": "indicator--60c40bba-8b1c-4efb-98eb-8fbcb3bae6bf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb20481-26a6-4a87-afc1-0e3c5ec8299b", "sighting_of_ref": "indicator--5321ed63-ea9c-4c6b-bf43-1e32757350c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cc9dc0-0bab-4617-961f-657214f476d9", "sighting_of_ref": "indicator--c957a25d-5898-4575-a459-1d1621bc5796", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb69fd7a-add2-4e34-b223-5fb155946a32", "sighting_of_ref": "indicator--8610fd18-8378-49ff-bd02-4bcce7361312", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5cafc7-6da1-4b91-93e5-64867c13fae8", "sighting_of_ref": "indicator--c1dfa960-0208-4891-9df2-78e0b2908801", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681e0c97-00ff-45f3-ad10-be0e7a58d3c0", "sighting_of_ref": "indicator--51c6b45a-9e47-44cf-b966-84330415b0ec", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c05424-2f92-49fe-93c5-e9170b1a5e0a", "sighting_of_ref": "indicator--279c86b9-ac75-41a2-8496-8092ca3a9eff", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a6d9bd-16cb-48e6-ab3a-e17ba7afaf45", "sighting_of_ref": "indicator--8e56f540-475c-4c25-910d-fe74b02fa0e8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9437ef15-fbda-4eaf-a643-e972fdf4f143", "sighting_of_ref": "indicator--75c97b7f-1811-419a-809b-1165d21496f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399ae72d-294e-4545-a2ef-39018442b8b1", "sighting_of_ref": "indicator--1317f3ff-2a04-4836-82d9-866d389b3e78", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d54ee4-1501-4837-868f-d7f46357fc6a", "sighting_of_ref": "indicator--a6188869-57ed-49f2-ade8-4a7363b7aec5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1124971a-e2e5-45ee-99c6-2eefe4ecbed7", "sighting_of_ref": "indicator--4df74aec-778a-4a24-8d4d-f2de9b6ba798", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49359ea-807c-4c09-bb0d-5a2b0b359d58", "sighting_of_ref": "indicator--249d21e5-6873-4d30-b9b9-c1a6801b909e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39dcdfc-e794-428c-9939-67223ca9219f", "sighting_of_ref": "indicator--fe8878f3-53fc-45de-97a2-b422883d14af", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1189b3e2-f878-47b8-be71-0762071766b3", "sighting_of_ref": "indicator--43df72ed-32fa-4be5-b738-25835238de3f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4e9196-dd70-449c-8874-ca2e0e6d45fc", "sighting_of_ref": "indicator--dadda6b2-d070-4416-ad11-d7e7a1db947f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7ca3ec-3ace-4245-944f-7028d22a302b", "sighting_of_ref": "indicator--622c2cd2-37c5-4257-9138-110aa8d7bee0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a08157f-05c6-416e-aeae-3da8bf674be7", "sighting_of_ref": "indicator--5d3741e9-7ce8-4eab-87ab-92e5e5e2783a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a181f8c-706f-48a6-8ded-85e0461e945e", "sighting_of_ref": "indicator--d9e617b8-b01d-4736-9672-fed698f606c0", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f748f573-f2e8-4454-a66c-9461c7ab0c17", "sighting_of_ref": "indicator--3cd6a53e-b443-48f0-8ec7-23d86a9aaf32", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40678a1f-c823-428a-98f4-ae25d3a62f94", "sighting_of_ref": "indicator--6ffc5cd4-b3fc-47ba-80a8-7a7ed02897cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1734495-8849-4942-bb63-beab93c6f840", "sighting_of_ref": "indicator--39185c4d-0c74-45a5-a132-797cedce0bf8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c50be3-f7d1-4d1b-a544-9baa1614737f", "sighting_of_ref": "indicator--39185c4d-0c74-45a5-a132-797cedce0bf8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f804f1d3-4790-4d75-a324-9d1bad4d46b1", "sighting_of_ref": "indicator--c8453ad4-4bf4-4c71-b61d-28868467114b", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ff78c6-4444-46ae-a24d-1f3339ea67d8", "sighting_of_ref": "indicator--41e741bf-7a61-4ecb-bb02-fc3993eec954", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748651a8-6668-4444-aae9-d45751fad1c5", "sighting_of_ref": "indicator--9db25f04-a0dd-483c-8bd8-01030a7bc8d8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c4d64b-6612-4fca-9607-b4598df48820", "sighting_of_ref": "indicator--bbbfdf0a-a7a9-487e-853d-f4039c858802", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88946109-b14c-4c90-bbcc-7f1b06cc88c9", "sighting_of_ref": "indicator--da6231de-005f-48d9-a26b-8f9fb0f2094c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b949de7e-f8b0-4bde-bd5c-42e037653250", "sighting_of_ref": "indicator--5dcd7956-33ca-41ab-8d25-615399cbadba", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f62127-8bf5-4c22-826c-ac9b6411e335", "sighting_of_ref": "indicator--d507f19a-ba16-4d04-8b74-38f1f220a0a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2d007c-c9d3-4bb3-ab7c-2992fefc7ae7", "sighting_of_ref": "indicator--329d792b-ed44-4221-ae44-b94c48091df2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6de9c4-cd2b-4374-8394-8bfc3f534b96", "sighting_of_ref": "indicator--c97bc994-0df6-48f6-a39f-f9a63841e8a5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a8b6b9-49b4-409c-9b67-56b35254081e", "sighting_of_ref": "indicator--15b1ef33-8287-49e0-bdd7-07be09470d2e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a027e58b-d219-4d98-a33e-52a5dde26c4d", "sighting_of_ref": "indicator--9cc15bc0-6a4b-4d2c-b0bb-06b9e75f6ef7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf7a122-ea95-4408-ba74-2dae0ed2dec5", "sighting_of_ref": "indicator--7a467ce5-547f-4abd-9cc8-5ae54a99c61f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7787d4f0-606a-4978-a4c2-30e9fe6e3fd2", "sighting_of_ref": "indicator--a0910191-56cf-4dd1-9bd3-7ddf327545f9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b3facf-84f6-49e4-85e0-a36e7b39c166", "sighting_of_ref": "indicator--77055c55-1d11-4ac9-8a06-9504b91234c4", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fa10e1-64fe-466b-89b9-f9298343b742", "sighting_of_ref": "indicator--1d049c81-fbc8-4906-95dc-6c4598dd8ea5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae82116b-c4bb-4d83-95f7-af1e9090d659", "sighting_of_ref": "indicator--7ea01c5b-96ca-4689-b89e-1eda7305c13e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f56086-03fd-455b-b7b7-124cf90613f2", "sighting_of_ref": "indicator--f63017a7-15d4-4fbb-a379-3ef75a726103", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1ae002-2b89-4455-997a-cdbfffde1dea", "sighting_of_ref": "indicator--cab88f47-d9ca-4666-8a33-0a6211862661", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17870204-31b8-4413-b8cf-eb7daae973de", "sighting_of_ref": "indicator--083c7c00-c18c-4835-a2a0-5c5ab7ae50f9", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874af0af-17da-4597-9c90-f4bce039c610", "sighting_of_ref": "indicator--dff57b8f-d503-4ad8-a2a5-9d0414d80907", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7978e257-4c0b-472e-8886-997bfb9836e2", "sighting_of_ref": "indicator--ace27b9a-2de4-445b-871d-af12e03a4398", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b708d3-a9a8-4919-90d7-435315753bf2", "sighting_of_ref": "indicator--ed09b82e-7dbb-4750-aca0-a81f976c318e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cf12b1-048e-462c-923c-411f8a5bf8fc", "sighting_of_ref": "indicator--6ee1d592-211c-4fcd-b19d-48cd08958b3e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79c5729-5391-4fde-8836-807f126b81db", "sighting_of_ref": "indicator--c5084a10-4a35-4ae8-bd08-1995432caf05", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f13dd8f-2fcf-4b9b-8d08-3d42b88db024", "sighting_of_ref": "indicator--6416173d-40b6-4050-857a-eb5824e0e1d1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f17359b-6fa9-473b-96e7-ccd4c39b6493", "sighting_of_ref": "indicator--355d148e-0e71-45f9-9bb2-ccf6a8391def", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4132209-e5d5-4714-b920-9dde69a0b482", "sighting_of_ref": "indicator--4d5b0866-9cfd-426b-ad81-61ec8be94b8c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935eedfa-52bc-4000-983e-806cb4480c35", "sighting_of_ref": "indicator--25c6bba7-fa4d-4743-8f3b-1f73920405f6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1199a97e-5bea-412a-a69f-db9086a6fba0", "sighting_of_ref": "indicator--7b560635-c8cf-4479-9d3f-1bf5fe58cd6e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7435caa6-6388-45fd-bc56-8a79a1263afa", "sighting_of_ref": "indicator--5cf417d2-25d8-4a3f-9549-4247d064ea5e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eceb3f5-df64-4955-887c-fc0614937b91", "sighting_of_ref": "indicator--5cf417d2-25d8-4a3f-9549-4247d064ea5e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52db13b-51fa-4a69-9856-3cf4272473ec", "sighting_of_ref": "indicator--cadf6bfd-4ab2-484e-99fd-2e086c2bd49a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5bdd9f-5a0b-4569-9263-67cac9bf23a0", "sighting_of_ref": "indicator--e2d8f78b-363c-4430-a033-ffa5a8f9c18c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcac0bf-0e34-4487-812b-66852adf4568", "sighting_of_ref": "indicator--e2d8f78b-363c-4430-a033-ffa5a8f9c18c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f246bca-6ff9-41df-aa02-2403b506421e", "sighting_of_ref": "indicator--c8508c2e-61d3-45e1-a8c4-706bb3128c48", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4094482a-ccc4-4d98-a30c-8ad667673a84", "sighting_of_ref": "indicator--c675d71e-0b0d-4273-8044-cb9404f94b44", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b1d32b-3232-45a7-80ed-2116b61471f1", "sighting_of_ref": "indicator--c675d71e-0b0d-4273-8044-cb9404f94b44", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d52f6b-f1c7-43ae-858c-799876ddc1fe", "sighting_of_ref": "indicator--afe9e877-56f8-4bfb-b539-a514cdc17b1f", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1248c6b9-b053-4535-ad4c-5e5411332f55", "sighting_of_ref": "indicator--b0a47ef1-7b4d-45f0-aaa3-cd682d556d0c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f64c62b-b65e-4422-9225-42c3c6704c7d", "sighting_of_ref": "indicator--b0a47ef1-7b4d-45f0-aaa3-cd682d556d0c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596529cc-0407-4eaf-b3a3-1d368fcc7ba4", "sighting_of_ref": "indicator--f6d39124-9e85-4c5c-ae27-7437e9813192", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944cf3f1-59d3-4195-acef-96369f14e1f1", "sighting_of_ref": "indicator--f6d39124-9e85-4c5c-ae27-7437e9813192", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347c1456-3e56-4175-bc39-274e591a87b3", "sighting_of_ref": "indicator--f6d39124-9e85-4c5c-ae27-7437e9813192", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88b2ac3-9376-4144-927d-0fdb43c6a36e", "sighting_of_ref": "indicator--726f39ee-4d14-44d5-aae9-ffd51c7bbe7e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f445bcd2-14b7-4eb3-bf87-e3be75e19c91", "sighting_of_ref": "indicator--726f39ee-4d14-44d5-aae9-ffd51c7bbe7e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3f01ba-973e-451e-928e-87c3dae40745", "sighting_of_ref": "indicator--726f39ee-4d14-44d5-aae9-ffd51c7bbe7e", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad11943f-b506-431f-827d-68f6a34a0a21", "sighting_of_ref": "indicator--94f1838c-d447-4f11-93f2-4f2d62926464", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9edadbb-2a52-4292-97aa-c13ae08809cb", "sighting_of_ref": "indicator--94f1838c-d447-4f11-93f2-4f2d62926464", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab66a06-1881-4434-9b01-77468537e55e", "sighting_of_ref": "indicator--94f1838c-d447-4f11-93f2-4f2d62926464", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a453322-9041-4a06-a1fb-1a305dbf7e8b", "sighting_of_ref": "indicator--6f2ac2a4-cd21-47cb-8a45-2552461543f1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b268198-f0bc-48a6-903f-87d043d4e915", "sighting_of_ref": "indicator--6f2ac2a4-cd21-47cb-8a45-2552461543f1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1356d2-5902-49b1-bf72-79c8afd1e5b6", "sighting_of_ref": "indicator--6f2ac2a4-cd21-47cb-8a45-2552461543f1", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be471d81-cf6d-42f3-b118-434d5b5591ce", "sighting_of_ref": "indicator--df54b290-189a-4d8e-82c5-092b81735fa1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c39f424-d0a5-4a47-9677-c89ca132bb3a", "sighting_of_ref": "indicator--df54b290-189a-4d8e-82c5-092b81735fa1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f78422-a619-48e1-aa00-4ca6425bbe98", "sighting_of_ref": "indicator--df54b290-189a-4d8e-82c5-092b81735fa1", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18225873-1e8c-4eeb-9cc2-876fb55d15e8", "sighting_of_ref": "indicator--4fb7e1b1-57d3-4295-9e0c-925e8a398efa", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b2c589-0c36-4556-b4af-f0a708adfb94", "sighting_of_ref": "indicator--4fb7e1b1-57d3-4295-9e0c-925e8a398efa", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63b5a85-a106-4d14-b167-2c6a812a7b20", "sighting_of_ref": "indicator--4fb7e1b1-57d3-4295-9e0c-925e8a398efa", "where_sighted_refs": ["location--3b978f96-7864-4251-be46-bd66e81d6bb4"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127bfa9a-3fc2-4a39-914b-1ea599da923b", "sighting_of_ref": "indicator--fdcb6791-af71-417e-a8c8-fe1b128d4e9c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48958f35-109c-457f-b951-66afe9ad5934", "sighting_of_ref": "indicator--fdcb6791-af71-417e-a8c8-fe1b128d4e9c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57d7871-d1cc-4e20-8287-f1e08f8d0c0b", "sighting_of_ref": "indicator--5ef0acdf-9a33-4348-921c-823597e816ae", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d5178b-dca1-4a33-a87f-803b2ec84835", "sighting_of_ref": "indicator--656c2abf-b81c-43cd-a066-9e4ba14e2136", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a67f0e-8b9b-44be-9b14-74f0493a2bb2", "sighting_of_ref": "indicator--c117526c-9736-42ae-8afa-dec1c1f7aaf8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645663b9-407d-4b98-97ef-5b6d71ee9174", "sighting_of_ref": "indicator--90c179cd-8025-48fc-85b1-61c642b70857", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83875afe-3d0e-4c5d-908f-2c51428aaee6", "sighting_of_ref": "indicator--78b614c2-d2c6-43ce-b7f4-1db2ca133787", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6163d53-38e1-430f-baf7-a4d22e1cfe76", "sighting_of_ref": "indicator--78b614c2-d2c6-43ce-b7f4-1db2ca133787", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cd9d5a-7d51-4c2f-9e7a-4ef4dbb8e1b7", "sighting_of_ref": "indicator--b4f64b5d-efb0-4933-948a-b4afc5d8d31e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3e9e29-6a62-4564-93e3-c7ecbf465218", "sighting_of_ref": "indicator--9156a5c9-de14-418b-8cf4-01882c0f916a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366f131d-7078-4379-aadd-594494108d36", "sighting_of_ref": "indicator--9156a5c9-de14-418b-8cf4-01882c0f916a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fccfa71-6e1e-4bb8-ae64-df7e20e45e90", "sighting_of_ref": "indicator--36310503-bd8c-447e-ba1b-1c6a71119edf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a7032f-d997-4359-a668-30d715b8d580", "sighting_of_ref": "indicator--36310503-bd8c-447e-ba1b-1c6a71119edf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d942f762-db8b-443b-83bc-69bf874aca5d", "sighting_of_ref": "indicator--04ec8509-6f92-40cf-9f78-53c51ae802c7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085da308-94c1-4e7f-acac-69997d11e15d", "sighting_of_ref": "indicator--04ec8509-6f92-40cf-9f78-53c51ae802c7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb65ecc-9051-42dc-8e53-58ac62a5311a", "sighting_of_ref": "indicator--57dd17b0-0982-4d90-85ef-6be2064e2b51", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963dcd55-319a-4f63-944c-9966b0f38260", "sighting_of_ref": "indicator--57dd17b0-0982-4d90-85ef-6be2064e2b51", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8523c710-ce40-4d51-80bb-84e18eec6ec8", "sighting_of_ref": "indicator--30881583-18d9-43aa-b5cc-b3750424a6e6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15c4a23-baeb-4d95-95a0-26a97fc1a2b3", "sighting_of_ref": "indicator--30881583-18d9-43aa-b5cc-b3750424a6e6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ae2001-d7e3-429e-8006-7c9e01333d98", "sighting_of_ref": "indicator--07010f68-071c-4e33-8fbc-66f445d11a52", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407e3ad9-4676-45a4-94af-cb5fcb56787e", "sighting_of_ref": "indicator--07010f68-071c-4e33-8fbc-66f445d11a52", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f27e0ba-3348-4490-88e6-fa468b0ea0bc", "sighting_of_ref": "indicator--18c2463d-a9d7-4fa0-bba6-4e2cf5a07f22", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4da598b-49cd-4856-a4be-45a0f179fa85", "sighting_of_ref": "indicator--d6842553-1f3e-4d65-a132-234f8c955245", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ca5f6c-c72f-4c49-a935-1c11aa06b35e", "sighting_of_ref": "indicator--d6842553-1f3e-4d65-a132-234f8c955245", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae640f2b-0bd9-4fa0-b18d-67509541a800", "sighting_of_ref": "indicator--04a85378-71bd-4398-b006-5d8b3bee2815", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21777aa8-008e-4157-8b64-16fa69345625", "sighting_of_ref": "indicator--04a85378-71bd-4398-b006-5d8b3bee2815", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd57e9f-6bf4-4baf-8cdd-87a67e6a379d", "sighting_of_ref": "indicator--442474c0-fff7-4d60-bf7e-f0ffdff3b803", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842c3dd0-87c9-4bb7-8aec-7313ea25dbfc", "sighting_of_ref": "indicator--442474c0-fff7-4d60-bf7e-f0ffdff3b803", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd5a031-eb91-415d-bd1c-894a18e588d2", "sighting_of_ref": "indicator--a102b623-7b44-4a52-a291-b2b92958e212", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe1c2d8-3f10-4f7c-a9fe-bf0f2e981669", "sighting_of_ref": "indicator--28bb17d3-bdf5-4f06-a0d6-fb9099bc9bc0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff86660-cffa-4fd8-93dc-7123bf7095c8", "sighting_of_ref": "indicator--ac0729d0-4a97-4ceb-84a4-4f9b3d2c1b79", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79eb2865-c157-4a20-a73e-0b5ceb398fd7", "sighting_of_ref": "indicator--f1a9941d-91d7-4ddd-9f67-b9aea441600e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc4c333-0d92-4a0a-843f-1b30d6908ed4", "sighting_of_ref": "indicator--f1a9941d-91d7-4ddd-9f67-b9aea441600e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bc44c3-8aac-45ca-8393-0261cec8277c", "sighting_of_ref": "indicator--5478cdfe-78ad-4525-aede-ee68fc70737e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54662b98-7302-45b3-ac38-638d5210e130", "sighting_of_ref": "indicator--4366305e-b7d0-4b62-96f4-5325c61dcc0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678f1dae-2004-4dde-9daa-1527f9a09e0b", "sighting_of_ref": "indicator--8b3b8c45-91e2-43f9-bc57-d3b68c53de57", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf7d671-fc1a-423c-9f82-281e7f81093d", "sighting_of_ref": "indicator--a6d45ffc-4738-428d-867d-015bc7468cc2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f91365-4315-4b4a-9c69-2aff476df666", "sighting_of_ref": "indicator--a6d45ffc-4738-428d-867d-015bc7468cc2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c72b7e-8ff6-4fb2-a0b3-0dd18a8ed970", "sighting_of_ref": "indicator--46eaf883-acad-4a1a-b3a0-0f84a383fcbe", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e78e121-07ac-4c28-85b0-dba9b44278c2", "sighting_of_ref": "indicator--46eaf883-acad-4a1a-b3a0-0f84a383fcbe", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc42f0b-5958-43bd-9ff1-96a094136160", "sighting_of_ref": "indicator--4b9ba682-df6e-4715-a8c5-11461d21173c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130367ab-3fa9-4a71-9d6e-a8fd8d3c6e0f", "sighting_of_ref": "indicator--4b9ba682-df6e-4715-a8c5-11461d21173c", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed169b97-c2a6-4afa-a7fd-4dfa125e439a", "sighting_of_ref": "indicator--2a33778c-53a0-494f-a91b-3aea1367d91a", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4044bd99-4d54-425e-bb20-918659d3c957", "sighting_of_ref": "indicator--58ae90ea-3acc-48f8-b3ac-e562c79891a7", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0eafb6-c72c-4202-85cd-b1ac0565b5e4", "sighting_of_ref": "indicator--04baee9d-f7d6-4835-94a2-7d8cf31d721d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34aed670-d15f-4210-ba68-68dc2421ef62", "sighting_of_ref": "indicator--0947096f-8424-4b43-bd48-3ec95cc8b8e6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8f6fd3-10a6-44e1-977e-ae7de7db9baa", "sighting_of_ref": "indicator--40627f82-f54b-4827-a30d-82fa60224d5d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2d0d64-e48a-4bc1-9c66-7ea83bc26994", "sighting_of_ref": "indicator--12b56779-4eb7-4837-af03-78acadf6b658", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96a08c7-ac9c-45da-869f-6797ff8d968f", "sighting_of_ref": "indicator--12b56779-4eb7-4837-af03-78acadf6b658", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d78a90f-239f-4dfb-ac96-de3c9c6c2945", "sighting_of_ref": "indicator--4d3a159a-2271-477e-9300-e63d587f7141", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462df104-1f24-4ab0-b207-43b14600cb16", "sighting_of_ref": "indicator--d39cd663-c8e3-4f47-8a59-1de7218fd7e5", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530175d2-53bf-41d0-a2ee-d40739787cfb", "sighting_of_ref": "indicator--1644ba19-68cf-4893-9e2d-18b672ce53f8", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457e9f68-59ee-4019-a1e8-faabf1fff829", "sighting_of_ref": "indicator--1644ba19-68cf-4893-9e2d-18b672ce53f8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b10f6d-9289-4452-bf3a-b619938d5788", "sighting_of_ref": "indicator--809687bb-819d-4055-9369-764bde0ec042", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b54965a-6034-4615-9a68-f395d73eddf7", "sighting_of_ref": "indicator--12ce33d9-b9c6-48e0-b3f5-a2b0fa647867", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6522a6-c1cb-4082-a785-662892103de2", "sighting_of_ref": "indicator--bec67533-e8b4-42df-ac5e-e9ddeb6d5014", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5e62ed-c53b-472e-b6b0-58558772329e", "sighting_of_ref": "indicator--bec67533-e8b4-42df-ac5e-e9ddeb6d5014", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02560428-06e6-42da-8a0e-c1d27755a9a3", "sighting_of_ref": "indicator--186d28ba-44a4-480d-a36b-aceafd8c85dd", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0be800a-dd8b-4717-a7b9-654fad0fb2b5", "sighting_of_ref": "indicator--186d28ba-44a4-480d-a36b-aceafd8c85dd", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc65d162-5475-473d-8ad3-0761a239fa16", "sighting_of_ref": "indicator--059f07ef-ef4a-48c5-a162-eba1875590c0", "where_sighted_refs": ["location--277b105a-05aa-4309-9579-8379274bdbc0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c99e43-5b9c-426d-ab0f-eb4af9b467f4", "sighting_of_ref": "indicator--1f710d00-6d80-4940-abcf-927cf91ccae1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c91eecd-6e02-40c4-86bf-3637d365f74b", "sighting_of_ref": "indicator--1f710d00-6d80-4940-abcf-927cf91ccae1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923d17c4-7d1c-4f5f-901c-2bbc377c7fac", "sighting_of_ref": "indicator--64f484e9-6e0b-4e73-b2a2-ba8129832c02", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a638daf-c980-4eb8-8b8f-7f3bfad68d55", "sighting_of_ref": "indicator--5eee88f4-ead8-4d20-935f-5810550237e7", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c297465-741e-4676-be8f-07bb9033dc85", "sighting_of_ref": "indicator--f8692bfb-ce89-4e62-94b0-34e15aaa03ea", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaec5e4-4a69-4ed8-ae24-a1656d86dc1a", "sighting_of_ref": "indicator--b20ccd54-27e0-43d8-909b-de5327b93aa5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d12956-8d14-4def-b86d-8dbbc96df9c7", "sighting_of_ref": "indicator--325e5577-a965-4446-b4c0-a2a1e0c9794f", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9b7b3b-bdaa-482d-a529-1a1003ed35a9", "sighting_of_ref": "indicator--639b92c8-a69a-4dfd-b526-4ff52654ee0d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45712b71-1e45-475e-a593-3795a7b1af8d", "sighting_of_ref": "indicator--227e28a8-24eb-48dc-b10c-b93b1bed74ee", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092f86cd-c456-4506-81d4-e28176a12307", "sighting_of_ref": "indicator--c405b495-a942-48a5-b964-1d832bf15c34", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb837ec5-28f8-42b6-9df6-02aa710fbbd8", "sighting_of_ref": "indicator--b5cf3962-2920-4a76-8128-70d7be05c5cf", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d30dd13-4022-4024-a410-cd846ce49fcb", "sighting_of_ref": "indicator--b5cf3962-2920-4a76-8128-70d7be05c5cf", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe4d0fd-f52d-433d-bf34-2cf6a19ef166", "sighting_of_ref": "indicator--c1629150-7784-4b96-9868-2a38979f32d6", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cd8f7f-70db-47fc-8a91-dbc6bf961724", "sighting_of_ref": "indicator--c1629150-7784-4b96-9868-2a38979f32d6", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dc156d-e2b7-41e1-81f2-559e2d518716", "sighting_of_ref": "indicator--edc945f5-415d-4f43-acdf-0dde34ef4c9e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f0d319-3a05-4195-a7af-870aba70917d", "sighting_of_ref": "indicator--1ba307cf-9dec-4cc5-aeb8-8f86fee41b83", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8e7400-546c-4d82-8867-cd180b1d9c3f", "sighting_of_ref": "indicator--9ec0dddd-e1c3-48a5-88f1-71fbb41151f2", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b3e7bb-2fcb-4e85-a8fc-15f6d42fc2a5", "sighting_of_ref": "indicator--656e88bf-ccc9-4a36-888f-43a598aa36c1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edf18e5-fe31-4fd9-b9cb-857657a817d6", "sighting_of_ref": "indicator--794c6673-34f8-405d-a795-8de35cdbfcc1", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13a7a26-0717-48f5-bab6-7d5105ae90b0", "sighting_of_ref": "indicator--97fb22ec-47cb-4ce3-bad5-5f98ce061bb9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb56600-88f7-4d2d-ba57-a4a0a805e7d4", "sighting_of_ref": "indicator--68595821-114c-496a-914f-7c17f40b62b8", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90db2f4b-003f-4b63-b5f7-bfbc67a96ed4", "sighting_of_ref": "indicator--aa8d6b09-fbee-4842-8bee-d462dc26265c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a837fc5-c535-4785-81a6-55c9bd13aca9", "sighting_of_ref": "indicator--57c2a21e-e739-4d68-b45d-d95066accf5e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352b2f44-9019-47ee-a1f4-de70c82140e3", "sighting_of_ref": "indicator--9bd1fb1f-f9f8-47ce-b141-352addcccee5", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba5f3c9-9bbb-4c5f-b0a6-f004460523a2", "sighting_of_ref": "indicator--2feb8b44-a63b-4508-900c-afbb078d4595", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c957cc5f-272d-45df-a329-cbe8e7f9b9f7", "sighting_of_ref": "indicator--e1490a14-e7cb-48fe-8b3e-a370f17fe419", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbc10aa-280e-4362-986d-4bc88f2935a4", "sighting_of_ref": "indicator--532e70d8-12d4-49c8-bbc8-7c8e35eb6aba", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c9c34d-5bae-4123-93b4-4291b78b1281", "sighting_of_ref": "indicator--30174e84-5197-41b1-b9c5-b3e60daeed8d", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d9cde7-fc63-4332-9da1-c59125513693", "sighting_of_ref": "indicator--30174e84-5197-41b1-b9c5-b3e60daeed8d", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5ddb49-f021-46ba-892f-f3d9ffb49c51", "sighting_of_ref": "indicator--89954a80-aa68-4c80-93ae-f168b9589b40", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89652cce-6eb0-4266-95a6-f22d3be8b54f", "sighting_of_ref": "indicator--cb5e828e-7b9c-4e1f-a0e4-e16548c7852a", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f5fd96-86d4-4c48-a86a-51d68ada5eab", "sighting_of_ref": "indicator--b4e5438f-3761-43a5-8110-e7a6f874c106", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7654b1-bff8-4827-bf56-ceed436bfd4d", "sighting_of_ref": "indicator--975c6ea0-f1ad-4343-ba59-a700f8bf1c06", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e331e81b-c9da-46c0-a9f7-54d5a88544af", "sighting_of_ref": "indicator--975c6ea0-f1ad-4343-ba59-a700f8bf1c06", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a2d1ac-d6d2-4c33-bdb3-e7b002ac3cf6", "sighting_of_ref": "indicator--e765f1a6-6452-4a65-bacb-6187f8467b8e", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a609f1e-1cde-4202-b174-e6281bc95d0e", "sighting_of_ref": "indicator--e765f1a6-6452-4a65-bacb-6187f8467b8e", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6e120b-a04b-4a92-b8ef-f3abc6319781", "sighting_of_ref": "indicator--aa58d417-adb0-4279-85e8-815335e541a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8827952-0636-4201-a481-03ba51bc6071", "sighting_of_ref": "indicator--110273a2-2f85-4715-a469-7b0dc57096b9", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede50a9d-fa0c-4431-bf1b-a9cf2fd2dd24", "sighting_of_ref": "indicator--bd3b1750-ec25-4981-a919-c30b6a0767c0", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3c6cb4-89cb-4ff2-aa3f-951faf902b96", "sighting_of_ref": "indicator--a0663448-225e-406a-ba2d-930d7fd5728a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49d7ff2-d1bb-4b92-a086-4a59002294d3", "sighting_of_ref": "indicator--08039933-a051-4851-b259-1cba93eed4a1", "where_sighted_refs": ["location--3df3ac92-a154-48e2-8316-e8ea9c6e1608"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261e887c-163e-495d-903d-b71716d3edc8", "sighting_of_ref": "indicator--41a0f0b3-5282-4ba7-81b8-2531ca3d1e7c", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f9d2b6-10fc-479e-b390-cd8128a42c2e", "sighting_of_ref": "indicator--6899609a-8c87-4a77-a2cb-6ae8ce718149", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0357730d-35c5-404d-aace-8742fd1adcc2", "sighting_of_ref": "indicator--f76f44f3-7686-47f8-b46a-b4263d446972", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90563507-17c3-4bca-a853-e05654692b54", "sighting_of_ref": "indicator--1b3de2eb-6f68-4bbd-bcc4-89d5e94526c2", "where_sighted_refs": ["location--b110ec0f-57d5-41df-abfb-c2303bab2464"], "first_seen": "2026-05-12T00:00:00.000Z", "last_seen": "2026-05-12T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--cfc0c7be-1045-4669-9e83-8e2d38363c37", "name": "Threat Report for 2026-05-12", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-05-13T11:00:02.162Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--3530022c-5e8d-4cba-8662-4503b3c0f2a5", "location--277b105a-05aa-4309-9579-8379274bdbc0", "location--b110ec0f-57d5-41df-abfb-c2303bab2464", "location--3df3ac92-a154-48e2-8316-e8ea9c6e1608", "location--3b978f96-7864-4251-be46-bd66e81d6bb4", "infrastructure--af5b8a3d-b145-4271-8db1-fc862924930a", "infrastructure--35e16e56-dfdd-438e-b288-fabe11ffc803", "relationship--889073ed-abd7-49f2-8880-ef0537a1be1b", "infrastructure--4d0f9c9d-efdb-4478-89cf-d513b6ea4a1c", "relationship--cb396395-24ef-4bf1-bc2f-c033cad6449c", "infrastructure--2a9ab86d-1960-4525-9b99-62cd48234e1d", "infrastructure--20f21288-56f2-4c58-a0ba-5bbb7e7df2e0", "relationship--caa3646a-49ba-4593-915f-299e29acdf2c", "infrastructure--8ed6cb0b-de55-4d6c-908b-2b5563fde319", "relationship--63f71928-e111-4d75-8bac-47f7f82c55dc", "infrastructure--3bf23aed-3b8a-4f60-9a7c-8deafde6ce52", "relationship--a0836293-763f-40bb-b4c7-455e3d930164", "vulnerability--c2582b8f-cc8c-40c7-bb9a-27618b3e6bf1", "vulnerability--797a26ec-0907-4b56-a235-47cc083e7136", "vulnerability--5d4d7749-dff6-40b1-9895-49482c613731", "vulnerability--10d8e540-78c9-45c1-a41e-2319cbfbc671", "vulnerability--0580933d-3fbf-4d55-9e6b-1b6da4d0e758", "vulnerability--382dbc2e-4941-47f5-8e36-f24ec3e8e262", "indicator--421503b7-04d2-40e4-a88d-5d74f8792256", "indicator--2dd7a6c3-50e8-4aeb-ab37-d78e8bee41dd", "indicator--e522927e-ef5c-49ca-aa12-34339d305b25", "indicator--c88a1854-afa6-4b98-9f33-cc9d5cca6752", "indicator--71ce5542-c9a2-4578-a858-8d2a2be97c66", "indicator--e694af50-ec69-43a7-a39a-a03f1ebbeeee", "indicator--4d1abb71-d017-40bf-a19b-b6a60c33c1e8", "indicator--5cbf08e7-3965-48e9-8cde-1e8fca4e9cfa", "indicator--d489a2a3-93db-45a3-ab42-0a76f3e575a5", "indicator--1b55fcec-a55d-4723-9881-4dbbbfc0bbeb", "indicator--6a64fe10-0191-4f58-b671-dc8e27920879", "indicator--cdf1f1d6-fd55-4ed2-abf8-0592908b0576", "indicator--92d219c5-0df1-4d4b-8d15-51f84e727096", "indicator--2475bca1-a844-41e0-8473-30060e9d9a6c", "indicator--836c6acf-d379-4d7a-9fb8-21575c8f0159", "indicator--68636d55-52d1-4ef9-8701-1f03be59d586", "indicator--43ae9474-4c52-44a1-aac7-1b0fc54934bc", "indicator--8b52b525-3190-4713-8f4a-1b57fe65eb45", "indicator--8c1ccbe9-4b04-4325-94ca-cb24969f8fa9", "indicator--0dfe5a3a-792a-4e29-a060-7b708d3b7630", "indicator--0efa39e5-30fd-4561-b987-ed82547717bd", "indicator--5994a44c-1676-4193-bfa1-b2ecf55406e9", "indicator--c93a3e85-26c7-4881-b077-8dbf62463ed0", "indicator--9764b966-90b9-400f-8a9b-88f2d855b86d", "indicator--48ac7ab9-45ff-4ed7-989f-cfe1c8434fe0", "indicator--fb5b06e2-6dab-47b2-a6ec-d4359a6710e9", "indicator--d3143bdf-2a72-4d71-933b-db85abed3399", "indicator--3a65d743-425b-44f9-a3fc-8ed4b5a10d45", "indicator--f7df882c-9c25-4f4d-bd81-6e94b6674496", "indicator--c23200a3-ed88-4cd4-8a92-5239d6bef97c", "indicator--d5cf73d3-9105-4733-917f-42f7f033ca99", "indicator--c5e65dce-0c75-4dc5-b523-c4486c103fdb", "indicator--2e8a6689-7725-4a24-a832-1f319de7750d", "indicator--231aedae-dbc6-45d4-9782-16722eba36e2", "indicator--d43a1e0b-d6a1-45cb-92ef-6ba0b84ecf2e", "indicator--fb564c21-3f42-4aae-a6ba-47635814afa6", "indicator--5ac142eb-6523-4962-9244-65378d6bbc0b", "indicator--ec7b4ca5-cf06-40fc-b306-c2742f70991d", "indicator--b3e33342-6041-44db-a3b4-f1eace92fb5a", "indicator--916bd4e8-4631-4f04-9c99-aa74d2c956c5", "indicator--2dd3025e-741b-4e8d-831d-6e2843fcf244", "indicator--65f41b2e-451c-48f2-bdf2-b0860440a4d5", "indicator--75d2c1ed-2b91-44cc-b149-4c44e5019011", "indicator--f50cc0f4-6813-4049-b041-a5c01ccc7996", "indicator--ce038d30-fbaa-454f-80ad-c24f584ce6a4", "indicator--c8b3fb03-b862-4677-97c4-76841b8743bf", "indicator--8d073193-b9a4-4d70-92e2-a42e60735da0", "indicator--0752178b-4991-4334-b3b1-0d3d87ad3cac", "indicator--c8cbbf79-465f-4ed6-8c24-97b1642bfcbb", "indicator--e6778196-c88e-4107-9cf4-e0195a43d2eb", "indicator--1720fc72-8bd0-47fc-b030-c0f95a6d6c86", "indicator--b61bc646-0c11-4708-a7c3-af8cb2c52979", "indicator--6e157c22-d6f5-47ac-9044-8b208ea08c2f", "indicator--ea918fff-01ce-48c5-9033-b2ec7ff48e56", "indicator--f9756eff-1067-4eeb-8d78-047ead4df5cd", "indicator--2d36ad8b-b268-4af0-837d-53ca81c0aa49", "indicator--4dbcbff8-f526-4701-ba4d-6d36fe987a53", "indicator--438a8f44-790b-4979-9150-7ecc70a73c5e", "indicator--f98d2280-b0f1-4dcd-be62-88757c25a8ce", "indicator--3604fcc5-314e-4bc1-9aa8-159fb10afa2b", "indicator--ac8b2fb6-1049-4361-86a1-58db9224bf75", "indicator--d48eca4b-0a7a-46db-80aa-2714ee6a4025", "indicator--c83e8e68-2d8b-4297-a41d-9ea0f206f8f3", "indicator--78796d5e-32f5-4d11-bf7e-5147ad019d03", "indicator--3012fe8f-0063-4292-a214-dfae807aaf95", "indicator--4f2f9ce3-1c1e-4d94-a1e8-259037a148e1", "indicator--1974ecad-fc83-4557-b378-f41c90681a3c", "indicator--96574e42-68ef-43f8-88ef-6d513cb178fa", "indicator--5fa105e3-1c49-40f4-9dbb-6da77ec1f98b", "indicator--aea27b6d-7a14-43cc-8973-22434c1682f7", "indicator--cf761f5a-3b0c-4a6b-9e5f-2166852e9c73", "indicator--e50d0dfb-3f37-4606-adba-fea6c856d698", "indicator--e53c5c1e-28c0-4cde-a67b-6e33591a16c5", "indicator--78149728-7519-4b5c-a5ff-1a1e2e0a133f", "indicator--4531934b-920f-44e7-b1bb-f73c7db171d4", "indicator--db45600d-4c6f-4a44-bfe6-173556cdbfcb", "indicator--962bc7b5-cf65-4725-8a91-21ddd66596d2", "indicator--10eb304d-0338-4c04-ac9a-9d365efc3c87", "indicator--dc196f7c-b61e-4b3d-a116-4a80c8a3ae5f", "indicator--589dbf02-59bf-4318-bee8-d400b3ce8283", "indicator--6fd833df-e9d9-4e60-9bc4-abe965b698b4", "indicator--e18c2132-eb12-4fe7-a071-0c92b4153a4e", "indicator--80c80853-ec98-4584-8b8c-0648dc5f8521", "indicator--a1a7f0f6-3a05-46ee-8619-014538e0d70e", "indicator--3a45c7cd-d8da-42ac-bc1a-6281b0dadbd3", "indicator--74191c27-7742-4d64-a0b4-bc54021b5c3c", "indicator--f26615ad-27d1-4b33-bb7e-6cc953d14437", "indicator--c99d7909-5899-462f-a2dc-4d2810e85b5d", "indicator--3d36bd3c-e176-4e9c-961c-a9d3ce94f87d", "indicator--1f099d73-38d3-4c89-abbe-ef00951b2575", "indicator--1283d98f-82fe-4089-b595-5331fff12606", "indicator--7c943929-7ae5-40ba-b1fa-5f0f5638adb6", "indicator--81ad8cad-1911-434c-9701-37f678f95a2b", "indicator--1765a263-b4e6-4e66-a9a2-d7dd9da0c1d6", "indicator--b473a560-a97d-438e-b5b0-45ce42ce293f", "indicator--8c1ebd8e-dc12-438a-9319-4a20c8b53114", "indicator--a9990ac1-142b-41f1-9398-355915ad93ad", "indicator--0e599941-7b2c-494b-83f0-0d9459df00ca", "indicator--dc08ebba-f27b-43c8-b2a9-98d6a29b1251", "indicator--2d0e2cf6-0596-4b03-b5bf-c4e331a1bb40", "indicator--bf2584e9-f11e-41b1-99ec-2e8a7558b62f", "indicator--afcc32d1-c693-4233-9ca1-e13d5561f09d", "indicator--376dce45-717c-471c-b117-369bf25cddf2", "indicator--c7d42c1f-6ed2-4531-aa7d-6378792eea8e", "indicator--2dcab3ae-02e0-46b4-9859-f69b7b0522dc", "indicator--1953b00f-39e4-45f7-9adc-b65aa47f74bf", "indicator--f29c4196-0242-46aa-a7f9-49cbe9b8de43", "indicator--27b8c6d2-d063-4a34-836f-93704de973ff", "indicator--7a723655-778b-469b-a6fc-b10d13fbeff2", "indicator--aaae2238-c723-4c9b-b201-18b28f89c033", "indicator--0152c07a-65e5-4cd8-ad27-8a70ff952496", "indicator--dd45cd31-b00c-49a7-ac5e-bb57024ddf35", "indicator--49c968a3-dc01-424c-94c4-9d54916d281e", "indicator--b348c32b-c9f9-4341-b270-91fb7759a42a", "indicator--c9cf87da-db63-4aa8-9b27-cdb0dfd1f0df", "indicator--0426ead8-b00d-4e31-8051-76160fa12482", "indicator--44e97ef2-f30b-4655-bd6d-4f32afe52da6", "indicator--16fb2451-0657-4244-80e7-7e2f0f7cd47a", "indicator--6ea3a439-e625-4d94-a978-628766b62390", "indicator--14c78a7c-2e17-4e4a-9b5d-fb9d4cdda875", "indicator--45e81c67-11f2-4061-b2de-b8a267cd387f", "indicator--f9df837a-9c75-40a4-a4e7-0df237491406", "indicator--913af565-f8f5-40ad-8668-41a82d9865c0", "indicator--165552c5-70b4-4e7a-a015-68db97e3d0f5", "indicator--cfd45812-affe-4fab-bd24-b2b5c174d394", "indicator--92c763f0-57e2-4e2c-a575-8a8244c5d1c3", "indicator--208ab660-3314-4a2e-aa6a-9eac2d831dde", "indicator--345e29b1-c353-4aaf-8397-ff45c6954118", "indicator--8037ece2-9f4b-46cf-8b75-dd7573995cfa", "indicator--41bdc94a-af95-4e73-9321-05bdc43cb039", "indicator--1a0055e3-1ad1-480f-b90e-a21fdc713c2c", "indicator--ce1a4f47-f441-45ba-ae34-375201669414", "indicator--4672e7d9-6074-4a0f-8e87-bd47c4ac80ed", "indicator--40fedc05-b481-4442-bfdd-86e488517fc2", "indicator--78946bbb-5121-47fa-8962-d5d6dd2cea08", "indicator--b5ea6d1a-776b-48f1-83b3-247941f3542e", "indicator--aa0565f3-5f49-4824-b687-c060f5290877", "indicator--c9768be5-9121-4f51-a014-71371e70ed8e", "indicator--71f38e05-2415-4fd1-b76a-a0153eb87766", "indicator--731e7d1c-0527-4624-96a4-8447be98f944", "indicator--7210d0f2-3749-4248-ab52-8167a0cf383a", "indicator--2f11c5cf-9c2b-4f31-83e4-8145378117a9", "indicator--ec2b5f0b-de0f-4761-9e09-3228404463ba", "indicator--bc355a96-1131-4b5c-b08b-3adb141f57ad", "indicator--195a9e42-ecbb-45cd-b10e-2fdc2b3104ea", "indicator--017e81ed-ca32-49d4-b407-27a70f9e8b67", "indicator--8ce5587e-2dc3-4500-95db-6174a5531254", "indicator--aa6a3be0-443a-468b-a82a-0a87092baca6", "indicator--5b91f300-9339-4170-9ec5-459463fcda23", "indicator--6022d8ce-bc9c-45a7-89bb-6439796ec2cc", "indicator--68d2b8a6-18df-4b16-b1fd-bd77c633b8e8", "indicator--7a903950-5ba1-4ce6-8fff-951aabc39a25", "indicator--cbfb7f5e-68a6-4625-9ddf-3bd683b9f1d0", "indicator--9e8d3a92-9ed9-4578-a35a-686bfe9783e7", "indicator--1ecd621e-205c-4f0a-96c2-c4574d5bc2e3", "indicator--a9e703e5-2cda-48b4-9c64-fc534e952b8f", "indicator--82e1f9ad-0b4a-4529-873c-fbb48680ce52", "indicator--c7422364-fb24-46ec-a989-46ad5ff7546c", "indicator--1d62c5a3-cb94-4185-bf9f-ea96cc3511ed", "indicator--2b2b6336-819f-476a-8fcf-addb3ab72391", "indicator--7fce97e5-fa76-4c72-8284-f4608617e5e2", "indicator--9fa160a8-06f5-4fc7-8112-b0c2235248b0", "indicator--164e4c72-4e33-463a-87c4-aa1e445692cc", "indicator--5a4fbb8c-ba87-4f90-9838-22f3e4de22bc", "indicator--7dee036c-1a6d-4454-a6fb-8379d874006a", "indicator--845b1be3-5935-4323-81d5-9b5b03a4394b", "indicator--0780a548-2d24-44ab-9343-67cc0ca40fe3", "indicator--f9966f8d-48c5-482a-bfa4-6819518e4184", "indicator--c5451ed2-a131-4294-b0ef-e8789f716b9a", "indicator--b38263a1-d98a-4924-a22d-337a13be54b8", "indicator--b323bc3e-5047-4502-9700-26b3f57c0a6a", "indicator--0d4a12f4-2f6c-4f65-8f32-5b52b64fc4a9", "indicator--2aad540e-eb25-4e80-bb7f-2c7986d8f848", "indicator--9f8a45fc-02a3-4e06-9e9a-7345ea6663c2", "indicator--521fd691-070f-4211-9603-dcea3be012e3", "indicator--9bbed5bd-13c4-4480-a0de-ca521a53eb37", "indicator--19419a37-e41a-4758-932f-a77c8bf4634d", "indicator--77b71051-9c96-4705-b631-bf60fe3d9aa3", "indicator--c3bab8d6-d346-4eef-9268-7bcd0d459a5d", "indicator--783a366b-314e-4f29-b347-3f3752ca2146", "indicator--9b0cd228-70b0-45a6-89c4-4b3920573990", "indicator--55ddbe99-a0e9-4894-8da3-ec7ed6e2767c", "indicator--23ee7582-5a09-428f-8608-a20194968ee8", "indicator--afd75131-5c91-4267-92aa-41d7e3c14911", "indicator--66ece56a-d31e-40d1-aaac-ca5af83dc39c", "indicator--3d5c824e-ea34-499e-a27e-a665d1875701", "indicator--169b566d-cbb0-4527-b176-ba0bb6396df9", "indicator--72cb6ac3-625f-4b88-80d8-cf856a8a0daf", "indicator--a807bae5-bd99-4270-85d4-3f167758f6d9", "indicator--88897eed-d1c7-41f5-bd89-79dd18501c63", "indicator--bbc5ea51-fd62-449f-ad21-318d2ecda6ae", "indicator--c845241a-e58a-4353-8790-b0e0a9596c70", "indicator--4911a6eb-bfac-4bec-9260-d09ca06f8393", "indicator--9d5723fe-bf3d-43e7-97ee-b54dca2b80da", "indicator--201da877-08f3-4c55-9092-dc74d37d78a5", "indicator--f53b326c-b515-4b59-b4aa-bc55e5f16384", "indicator--aafb3ae6-1d95-485d-af0b-cf1e3dcfe923", "indicator--ce7c837c-8884-40b6-91de-9a4cda62aafb", "indicator--4b4da251-ce18-4d85-9312-25eb311db827", "indicator--1096c35c-740e-4163-a287-a37c4d5d4657", "indicator--b932682e-d5c1-4394-899a-43202f10274b", "indicator--2a07d489-ce4c-432f-9c22-17f25dfdd2a7", "indicator--8e797d74-3cbb-45cc-9369-d420930b8d10", "indicator--0e4a22eb-9829-42ef-bff7-7ca992c8b1ad", "indicator--1e9b4f9f-862a-45cf-881d-03a5459df27c", "indicator--315c42cc-ed28-40f8-a510-df6632f57fa5", "indicator--ff99ddbe-1abe-49fa-9487-a194daf1cb50", "indicator--682f3e06-337c-42bc-8c96-02b5805185a8", "indicator--f7a90ded-a9d2-47f2-b74e-4b42ce45a133", "indicator--299a9e37-4458-45ec-bef1-5a9f3f1a1cbc", "indicator--f913a9ab-5284-4dbb-b3f3-ea732e31c9b7", "indicator--a6a974a2-73c5-42f6-bf28-b25b30eeaf4d", "indicator--06eb2bee-1c5d-4739-a24a-2944152aa98a", "indicator--6a4b613e-0530-438d-8af5-687d5e10436f", "indicator--132fa1d1-c7aa-4fb0-9a9d-908a24b28aae", "indicator--3ef891bf-bcfa-4a83-9af8-8e89b30883c6", "indicator--8ac7dc72-19cc-4895-884d-6ade9c0b9b2b", "indicator--1ff20a39-1e58-4654-8fc8-1bcb579f8a47", "indicator--46211fa2-bf78-468c-97c7-f76fff36d5ec", "indicator--7a067458-36da-408e-a6a4-b76834824224", "indicator--46e6cda1-1f00-4b10-a6ca-5d13057084b6", "indicator--83608d68-b552-4a59-82e0-72384ce841bf", "indicator--3db03ba2-f230-4e48-9a15-d59e3788f313", "indicator--d499088c-76c2-4e39-919e-4e4b2cd4c91a", "indicator--6849c0f5-a6cc-489a-9802-485b0b6b483a", "indicator--1fcc5056-cdec-437d-a4df-6cdfb06a715a", "indicator--d441646d-d758-417a-83c8-f9a47f01ee8e", "indicator--06c67e75-1751-4fb8-a098-f512177f07a3", "indicator--cdd019a2-d887-4849-984d-c5e28253982b", "indicator--076b7301-7c12-4457-b86c-b309333ec296", "indicator--094cb239-6c51-450c-8763-a7bf4a30477f", "indicator--da3b5e00-7332-4248-b945-4c5155a68fc1", "indicator--bd317b4e-f534-45cc-82d3-3bf6d30aa833", "indicator--4628dc47-ba89-4ee3-9200-55f95d38e773", "indicator--f83d7110-3642-4a81-9700-d5fc5592f87a", "indicator--ccd5a277-6110-436c-8a5a-4571f4fa3d87", "indicator--90d43c73-846d-41b6-b983-1b40f55221a9", "indicator--cc15ede5-2a5f-486a-ab65-abb8cfa87e4f", "indicator--c96f70b7-bd46-495a-9054-c40193abe545", "indicator--a1225554-f10a-4f43-86ef-57eeaf150dc8", "indicator--3dfa2034-16c9-4971-8e8f-cf9f6cd996bf", "indicator--c4b874f6-c791-4c2b-9a32-559eacac5d10", "indicator--3fbe94f4-c8cb-4a30-84c6-e61d1423c48d", "indicator--f7c0339d-64ef-42a0-8f24-de055e48e373", "indicator--6b949c62-075e-42a0-bd64-ce3cb5f5f915", "indicator--f3960e35-4094-4c05-94ac-5cf5f06bd235", "indicator--eead1396-d979-4113-8e3c-79ad1dc6e064", "indicator--8cc419b7-308b-4ecb-bbed-3077a0c6fe3b", "indicator--d4641fe3-1514-4995-bb80-7673b52cb069", "indicator--627f4513-d1ce-4c9c-8d9d-a93abaf6cbe8", "indicator--bbb02d74-b5b2-4173-824b-088aea76dff3", "indicator--10f03e83-a0a8-4b47-9349-4dfd45a3d18f", "indicator--12cafbde-62f1-4f39-85e9-043820d9210a", "indicator--5d431709-17b9-4896-b117-5667e410bc6f", "indicator--7d14a237-adac-4e31-a61e-3e5623680210", "indicator--3cace0b7-2373-4c5b-ba51-6e5ddcfea4eb", "indicator--48fa69e0-2ebf-4c45-8c9c-9a99bce16615", "indicator--1e108e8a-393a-4713-8bb5-a3acb0cde501", "indicator--df944048-d2c3-454c-8da6-2af1481429a8", "indicator--92fce964-0ccc-43b8-b055-3d70d2ca38eb", "indicator--cca2ec88-dfa6-4ed5-9c0f-166e76b9994d", "indicator--c0351f01-a527-43ed-aa21-5b7bafa8c66d", "indicator--0625ffc5-bc2d-4d66-804b-b47d6eb3e112", "indicator--d9d01a7c-b086-4878-8845-80d23de96556", "indicator--9a6743d7-8da6-4022-a760-053d353e33d1", "indicator--aafa569f-4276-45b6-a291-ce0c6718c20e", "indicator--cd26d393-2ecc-40f7-b8e4-38810ba568f8", "indicator--26367869-0901-4de6-b76f-46c084e873c1", "indicator--67074f0b-a6ca-4fc4-bb54-363187af2ead", "indicator--b71b81f2-0f6f-4869-bafb-d6b1b5b0f00f", "indicator--301415da-901d-4b1b-8b26-decb142001bf", "indicator--621e2227-6dd8-4d9a-bb2a-d613c19659d3", "indicator--b17085d8-9a4f-4a02-860d-9fd3b5adfdeb", "indicator--0afcfcbb-2dc7-4ac0-8375-955689004094", "indicator--e7bcf6e9-b882-44b6-b3e8-88cc3d86c5ef", "indicator--8f1749b8-0788-41d3-9422-87bde96580d2", "indicator--60107acc-e8b8-42a8-95aa-1ce706d104da", "indicator--f3490cdc-b437-4ffa-a3e0-c4e54584eec9", "indicator--7b2f89db-08a5-48e5-9006-1302e458f673", "indicator--e706718e-3c78-460c-9e79-3d0ac8f9ba6a", "indicator--313e20a4-4ef4-462f-a495-8ec89acf8415", "indicator--618476bf-f51d-44a3-8b1f-a85626d74ddd", "indicator--0746e9a4-679e-4312-b242-4c4b4efa23f4", "indicator--8b9af0ad-d37d-4c84-969c-b9d34d4593b9", "indicator--c1e3602b-4981-4938-b8e6-eb99f5c2d242", "indicator--281d9a9a-6776-44a1-9b4e-cc859545115e", "indicator--cb1d00fb-f319-4f20-9e47-2dbb050c7b2e", "indicator--ae62eaab-85e4-4343-bc6e-583265ddb923", "indicator--08efcb41-e02e-44a8-8492-31fa5152490d", "indicator--60acb51e-dd40-4581-aec4-1717921c2fbb", "indicator--2f92e53d-dc13-40cd-950d-2c71dc6a7967", "indicator--8e72c31c-6d31-42dc-8ee1-2873b71808a9", "indicator--0a8fb2e2-db6f-4d29-8dbf-ac29d1bcd346", "indicator--6bb694ae-6280-4cc3-aeee-d617921b1ed1", "indicator--b9b1f1d2-b464-4c47-a2a4-c5d2118dad88", "indicator--32615630-d5c0-46ef-8c8f-1623e70fe035", "indicator--24fc260a-2009-4333-a004-c89bbef45f50", "indicator--6f5ef361-4b96-4e96-9215-59f42ed9312c", "indicator--675b10b9-1ce1-4623-b361-8478e8584627", "indicator--5a6c2af3-526f-4fe1-bbcc-6bb6fa84e84c", "indicator--5a772e3c-8815-406b-baa4-e4e957f5afff", "indicator--d065db70-c244-48c9-8137-07cf08a61fe9", "indicator--4d62a860-3f34-493e-8964-658ce13e40e4", "indicator--2dcb710a-cb45-4b73-ab34-eed0ef82bab5", "indicator--7ef3c1b6-09be-4db2-a538-52a9b70b1fe5", "indicator--809bd1be-2cff-466b-bc95-b8af6df5ed58", "indicator--26ec4cb0-7bf4-4dd9-ad3c-e2e1fa69270e", "indicator--86202621-1c60-4ef8-8ec1-eeed3d116106", "indicator--ab14d7f6-3589-4fe1-9360-2a1347326435", "indicator--482e31b7-ae70-47f9-94de-eba25ec7d3ce", "indicator--2412e4b9-ff03-4359-8466-4e1cc1455928", "indicator--240cab36-d70d-4245-9405-405e4e96a15b", "indicator--e295f6c7-6e35-417c-9b92-95b0550c2d48", "indicator--0d382bc9-68a9-42fc-b2f8-2f3226d895d6", "indicator--e5472a30-4f9d-4c19-a4a0-8a7948ee8caa", "indicator--781fea25-0299-4fbb-8d73-63b45c3eda76", "indicator--5ebe2ed0-31d5-4bde-9a74-27d306806397", "indicator--cf7be003-37c2-4ce5-9f19-5677e569a939", "indicator--9eb5211a-d53a-45c2-a31f-12d1ce827d4a", "indicator--d35eca1b-6243-4333-ae15-23da2cbfde6f", "indicator--e9a42858-cf59-459b-bcf3-cf176e47506a", "indicator--c0222e55-7904-44f1-b317-867c47bfef41", "indicator--ee5fb93d-27cb-4583-b436-ef4554e41980", "indicator--e93b5be7-8f23-4970-a567-ce4c3090dbe5", "indicator--dd159ac1-0782-42d0-a434-562a9e6d89f1", "indicator--2f1c3236-276f-461c-b329-1671cde2229e", "indicator--1767897b-6cd2-4ef9-8af4-4fdd0433f816", "indicator--5174265b-29be-46d4-a6b4-b624dfce83ca", "indicator--9bde35e1-2f8b-4145-ae93-853cd497fbaa", "indicator--e853b19d-91c1-4f2e-9c26-c0c43bf92001", "indicator--45aca171-3622-4c26-8027-d7d67504d3a9", "indicator--279f1966-ad72-4673-875a-3cbd2e0b063f", "indicator--c85d0d92-c998-4adc-ab04-1e35818aea19", "indicator--a6b83b94-9ab8-4d62-bc71-75c0beff61aa", "indicator--d75f799c-5ef9-4031-9fbe-fb768ef1287a", "indicator--14c171d3-219f-40b5-b567-082817dba70d", "indicator--7552f152-32aa-4fb9-96b2-64730ab7b726", "indicator--6e00cc29-a5cd-441f-b309-4b47340aa67e", "indicator--8365ec7f-3281-49d3-bf96-cff9f46f5b57", "indicator--a0015a27-86f7-4596-ab2d-36e408b0071d", "indicator--dad965be-f5ac-4c04-a8b4-8010faa2fa92", "indicator--a1b46bac-754f-4acf-a64a-055018a24741", "indicator--323474df-5420-4f82-975c-fe9f57252627", "indicator--94d8e92b-033f-406d-92c3-1967ecdb3f5f", "indicator--86f6a14c-f51f-4b6d-83c0-aab8cc565501", "indicator--e9de1ea6-655f-44db-9b55-f912fac92726", "indicator--84660be8-a09e-4d43-b9de-2d23610a75da", "indicator--aa47c92b-f5df-420f-82d8-1f7c5330b613", "indicator--63ad4246-fe16-4079-88ab-6e32b4775b3d", "indicator--e02c5ddb-121b-47cc-b59c-0ae8531f8c18", "indicator--d34f9f91-75a5-4836-88ee-ce7fff7ebe3d", "indicator--3da61797-0c2e-4a96-9b25-9fbbc2469826", "indicator--9ec3149e-5b74-4d7f-be62-f778432da0d3", "indicator--5a3746c6-371c-474e-8b9e-1363e05faf30", "indicator--d5478cc5-3d79-438d-9a77-424b6e02bfac", "indicator--dd5da718-e20f-4e3f-b030-7f0b29683c5f", "indicator--bb075a33-c956-489c-86dd-ede0a9776f39", "indicator--69a89f1e-f2b6-4a46-a704-a9d536d72aa7", "indicator--9b61b925-92f0-4e8b-8957-abdb1f2792ee", "indicator--19097d9d-b7f5-43bd-b7f6-7d21e6ec4b55", "indicator--e5e3f888-5cfe-43ed-bce6-99f2ac754f48", "indicator--05c1170e-d024-4a49-abf4-ebcfedfd2494", "indicator--8aee9ec8-d26c-462f-a4a2-6e178300aaf6", "indicator--9e9eb8aa-cfdc-42c8-9350-badf63db7829", "indicator--29ad81b3-e63a-40a8-ac17-e93e3d332af9", "indicator--4bf7bf1e-c1d2-4f9b-9c96-b050abb26bfc", "indicator--ebd4e097-8e09-43b4-b203-b5ccdeeef2e1", "indicator--9b3126c5-5918-4e5c-a36c-ee9e1b34c316", "indicator--0bdf19fc-6054-46b1-8df2-24ba35bf3147", "indicator--212b273e-efc2-4e8b-ba76-e0202259819f", "indicator--6f44df1d-57b0-43e6-b601-779661d864df", "indicator--a512a74b-5e64-41da-87b7-3bbed1b9744d", "indicator--6cb24bce-b931-4e5c-8b61-b49c5425a6af", "indicator--a00a67e4-d5bb-4e17-8147-3a1f005b0592", "indicator--ba649abb-20d3-449b-9cb3-ec888970243a", "indicator--5a43ae31-70d7-43f0-9d31-f229a6d7ed8c", "indicator--47ee2587-6f73-4cee-9254-24963174b75a", "indicator--1295d1fa-d950-40eb-a91b-94d6f0286bc7", "indicator--53e99bbc-775d-4e1b-ab4b-54d78119d49e", "indicator--db017044-997b-430b-afb6-0c0e64adf949", "indicator--176d911d-07d8-47e7-bfe1-4087f5de49dc", "indicator--d0099fd2-d92b-4103-b359-c757d2a3da94", "indicator--c6a75ba3-1a2a-4b85-b427-a8285a98c723", "indicator--4cf1ca4b-650b-46d0-bb80-8f75747dd884", "indicator--5fd96fd2-defe-4338-858d-ad97ea9e98f4", "indicator--64f7ad0e-db6c-4cee-ae74-c5c3f8243b03", "indicator--c967864b-8d3d-41c9-8a88-b0ee75a66972", "indicator--707efa5b-f0c9-4cb5-a9af-731c2496429b", "indicator--f6664ec5-c91e-4c8f-be76-04f856f5d589", "indicator--7507d1a4-40e4-4e5b-be73-5a9015ce98e0", "indicator--9d4ef82d-5861-4fda-b8e9-c3b309b0b993", "indicator--aa4c62fb-5628-4866-bf06-97a1228ae9e8", "indicator--329d3c6c-b91a-4a6a-bfb3-022dfdd7657b", "indicator--4e477790-bc88-4cf1-a65a-bae8017c3887", "indicator--2a0f5cc6-43c9-4357-a7ef-3049f66e7492", "indicator--52b02020-663a-43c2-a2e0-09a9a9de9a32", "indicator--517b1d2b-f325-4b90-800a-1b24785efbea", "indicator--5fd3d46d-05cb-4532-948d-3ae6429b782d", "indicator--48efd246-d76d-4572-adad-216cf51a43c8", "indicator--ad4fd896-1ad2-41dd-b245-e8f14ba2e403", "indicator--cd1b2b7a-1a8d-4d69-8bc0-e3ac99b1b59e", "indicator--2fb75fce-bf60-4a5d-8c51-87164d4e1562", "indicator--065b91c6-1e98-4ba6-b1c0-098949a6f899", "indicator--57704c77-407f-49f8-a8f0-5ca565a8da29", "indicator--e07b8164-7582-4dd4-9e40-0097df98a0f1", "indicator--f728046e-d4d2-4fab-b0fb-f4627531a687", "indicator--3ca045d5-00d3-40b6-88e1-c70d00620b10", "indicator--817a26fd-bf96-4214-b9b8-c1c7aff5a69f", "indicator--e86d6a4e-56e9-428a-8d1b-ad381f6f2fcf", "indicator--41f564ef-ade3-4666-aa22-634210037eac", "indicator--b9064118-6b78-4454-8a28-dc93ff8eeddd", "indicator--ad6585b6-9bcf-44bd-b48f-8a4b63a0e9f5", "indicator--48993342-8c7d-485f-85cd-f24ac90b847e", "indicator--44beca7e-65de-4bb5-9e7a-587645b6aae6", "indicator--f5ced2cd-58e2-4527-b512-01ecea31734c", "indicator--e2e1bc1a-fb35-41d3-88a0-ff8c010c8dc2", "indicator--aeb0f30e-159d-4269-8865-dd6d749b4fa8", "indicator--cc83e5d5-9393-4d38-8ef8-f087a93b90ee", "indicator--885e2722-a106-475a-9301-15af922cf254", "indicator--442c8e7c-7911-4bc1-ab3c-3b574ab9ae3c", "indicator--b9766c83-04d8-4ebe-bf1b-ca0f9d3beea0", "indicator--8ef233bb-f36b-4239-8890-6a790e371d99", "indicator--0683c07e-ef54-4f2f-9f71-16e7b54bbe3b", "indicator--47c7f9d3-c431-4de3-89c6-0425f473fb0b", "indicator--3d8fee75-2b77-4ebf-949b-98be1ccc6489", "indicator--0c7d17c7-ff97-4af7-b20b-800a23488c24", "indicator--72ece80e-565e-4fcf-8e4c-a76497b1d547", "indicator--db848011-0fcb-4f1d-87bf-c5becebfc817", "indicator--b7b89fb9-75db-4f07-822d-041aaafae116", "indicator--322de091-c2a9-4301-ab9c-309150187387", "indicator--f7895338-cd09-48e8-9c9b-21e77bc7bb04", "indicator--07d91ea9-cc13-4795-9e4e-68055d3b1c54", "indicator--d8500c41-4ac2-49c9-ab06-1f0dfa5fa2ec", "indicator--32fc1d4e-3603-4c8d-a6ce-129352373231", "indicator--cb7b8efd-d629-4569-9101-bef4725f17c0", "indicator--3202fa10-0b7c-44eb-8bac-5b28dc0be16b", "indicator--bb50aad3-24b1-45d0-b857-702f493c82c7", "indicator--3d1a8fae-b916-4e20-b86e-5d1850145b6b", "indicator--718a48e5-dd0d-4175-bb49-1c3ec06158d3", "indicator--a2a317a0-0df1-443f-8072-dbc0cbb69ef4", "indicator--cf647166-0b7d-4daf-8d63-4db959b3b49a", "indicator--9ff2ea27-0d66-4904-8e57-a0fbc50db624", "indicator--90dce0f1-7dbb-4717-b48f-93f7903dfe4b", "indicator--799cba71-b89a-4500-883d-c859bad05d4c", "indicator--d4232fb1-6217-4cc0-be2d-28e4b1da14c0", "indicator--3ff32e11-1190-48a2-8abf-28181a42079b", "indicator--24ae16e3-7e0e-4b30-aaed-af7969837561", "indicator--9d6a97bb-e931-4855-8f6e-a362fe390948", "indicator--e3ceddee-13c3-4426-996c-851bbb083a57", "indicator--39a3144b-fdf6-46fe-86ea-119d6519fa8a", "indicator--13adb916-03ee-4302-8263-1548ef870b78", "indicator--a61a3515-c549-44a8-afff-ee7dd19a68ab", "indicator--da7e3219-e9bc-4f8c-b4f6-ad5bc86ea6c8", "indicator--d4d66ec3-4912-4169-951a-0d2fc3e82c31", "indicator--bbea46e8-d0fd-4c3e-97a0-8dea549c78ff", "indicator--be8e94b2-778e-4667-88cc-c103447bcd1a", "indicator--ec72ad24-6dcb-45b7-b8bb-1db6d5ddc883", "indicator--7323f123-b1fe-4c0e-96e0-f4a404188a37", "indicator--e66df2b1-8720-4c48-9217-8570423d03ed", "indicator--6376a6be-5f7a-45e0-bafc-81e71c139740", "indicator--f90761b7-530c-4f42-a993-d25d3ac74a71", "indicator--512481ea-21ea-472c-bbf6-429eb7d4c8ac", "indicator--d8345d13-d829-4343-9704-cf4f57c0100f", "indicator--0d9b2d32-07c7-4cdd-9130-641b057c86e7", "indicator--58445139-5393-45d4-839a-cfd238a463dd", "indicator--226e81a1-77a3-4c29-af96-6153a8c44345", "indicator--6316633d-4e7c-436d-b3c2-ee265b32c292", "indicator--00fcdae3-1f69-4ec8-925d-981f6f96cd19", "indicator--face8044-1079-400f-88b1-105f99c509d0", "indicator--bcdcb596-dc3e-43c1-8fdd-573d5e22e40c", "indicator--942a43bc-1010-440d-9dfd-d2e3725b0949", "indicator--9f6bf1be-cf1a-48ac-a094-29b4df657976", "indicator--0a24995e-4559-43f1-bcff-8a4070ad2cf0", "indicator--43232d13-4d46-470b-b505-d25a26ca7ff7", "indicator--f124efec-4585-4ba4-91a8-e023b1b348ed", "indicator--cf086957-d9bc-4cfa-8469-76238ae16cb0", "indicator--8184253f-f77b-4383-a75b-92f17e5c7fb0", "indicator--cc5c7e7b-3b38-42a7-bb08-5bc864121e35", "indicator--0ef1dfc7-bf6c-4838-9d00-4ffc54c92a2e", "indicator--fdec03f3-b10a-427f-889e-7693cb829734", "indicator--440659e9-147f-457f-a5c2-3728d77d9428", "indicator--72500bd3-6ce1-42c8-9614-8b3942fb1363", "indicator--adf6f794-9717-460d-bec2-7aa809a515ff", "indicator--60734f8c-e43d-4838-aa39-25ad547288ac", "indicator--decb30e0-eedc-4456-b9ad-d4eca346e4e2", "indicator--7fcff355-c21a-4adb-ae34-b338d6e48de4", "indicator--752e5440-586a-4814-afab-7b3960b6c757", "indicator--00760fd8-b500-4ac2-9f26-f850289ba7d4", "indicator--74b57307-87c8-4a98-b566-71758a705d8d", "indicator--2e1a8a28-8fe1-429f-87c1-b7313f9e5f04", "indicator--77234214-6d4a-44d3-9175-7ed668265773", "indicator--4962c200-987e-4d5c-ac59-25fa6d04560a", "indicator--8ae0194c-9605-4135-b2bd-8d3f03c1b5ed", "indicator--987b8716-8719-451c-818a-a7e9e7fa9c81", "indicator--365fa600-d51c-4712-bf88-e00f9b2beb96", "indicator--7870c93b-e8e8-4e2d-8d83-98ed5ba74c44", "indicator--5e67b7c5-ee68-421d-9ade-0774172fac23", "indicator--79e7a1cd-4250-4554-91f5-396168a1ec30", "indicator--e217fd01-e86d-44a5-9961-c170233dcefd", "indicator--f58eb7bd-7372-4857-bf75-51f7713835af", "indicator--05d8d71c-0f38-499e-bdf8-d6878e5a5e5f", "indicator--62eb6c1d-465f-4b46-9ec6-0c7ab9811e4b", "indicator--13084c01-5ee4-4d76-a542-66c85b6a581b", "indicator--1c4e4b95-6c76-4250-bcaf-311171ec2f09", "indicator--b6996d28-c3e7-4985-9a2c-d0f860772926", "indicator--fd85d1a0-d4a2-4fc2-b55e-8de91d59dedd", "indicator--9b698795-9c84-4f7b-b800-e7946e53f943", "indicator--02c77c2b-af4b-4e8d-b903-22c8d46c97ab", "indicator--8abf7139-8ce4-4ea3-bf39-11aa546e0032", "indicator--85fd94a3-0b8b-44f8-9582-df1d889e66ad", "indicator--d2eb8940-d0dc-4082-932c-99b64eb2b5ed", "indicator--925301d3-991b-4784-bfa8-7af73d2148c1", "indicator--7da030ee-9217-42eb-8b65-552b99f753b3", "indicator--aa7493ac-3c48-4f55-9ad1-308d2f1cc88e", "indicator--e174f5d6-afe9-4f18-8022-e3282bf9fc4a", "indicator--05c25a2b-a13d-4959-b867-267ab35c0dbd", "indicator--837a1d4a-1ad2-43b4-bf99-d1d5e3eb12ff", "indicator--95c4cb1b-029d-48bd-8fe6-9f1e4a3ebabe", "indicator--bcf1e87e-01ba-4c8f-bcb3-7411a2a4dcc3", "indicator--b99324f0-e1b3-417b-a462-9d07151996ba", "indicator--0a0b9f5a-b40c-42b9-8a10-7a692274358f", "indicator--5a7faf50-d474-4733-9a90-8fa3439fc80b", "indicator--2f086382-b5c1-4607-be2a-f9cc9c6ea0d0", "indicator--b3945ee0-a763-41ec-a21a-b44194122647", "indicator--f0da878d-ea09-4c9b-808d-c45dbac4e732", "indicator--8677565e-ca21-4c83-8e85-286c1b0a55e3", "indicator--0a30f507-0629-49da-85f0-ca4092b8c395", "indicator--d5d1f019-7a28-4948-8073-57c19bcf470f", "indicator--47138300-feff-4329-8a92-a7ba5514b585", "indicator--076f8e39-776b-4a99-9575-2a8cc790a9b5", "indicator--03d0657e-9cbe-46fa-a0ba-ee745a985443", "indicator--5a478452-8315-4160-a32a-474a5ad5b08a", "indicator--12b9df5a-656e-4e23-abbb-e1ff9425865e", "indicator--6e1adbda-5fe3-4690-8ef2-051c96506ed9", "indicator--75420769-54c7-4034-b7f0-49cb89cda981", "indicator--037d0f01-f7e7-4e66-a994-a57ee36aa50f", "indicator--bb022eba-7ddb-4be1-b136-cfcca66ebe68", "indicator--e661c371-9699-40e8-b2d0-978b08e3999a", "indicator--6440f43a-9ccf-4860-b65b-8ffc120cd68e", "indicator--d90a30bc-a1e4-44c8-b64d-8a77a110954c", "indicator--6a09108b-80bf-4fa5-9f5f-921345b27d85", "indicator--2f81b42d-aed5-4a7f-a3f4-4659e6f940ea", "indicator--652aaedf-e1ad-48d5-9083-9082d09f6f42", "indicator--8809bf87-cdbc-4f77-98d9-9335b94112f6", "indicator--db1e1c3b-9d88-4548-a031-f822ad7ac598", "indicator--bd27c751-af04-4b6c-8559-95a634db964d", "indicator--ae1233ae-399e-4df0-babf-4ad7f82dc451", "indicator--b9ef6b8b-60e2-4f28-8328-3448ef7bb8e8", "indicator--0fdfd262-1663-428c-9d81-7cbca261bc44", "indicator--4b69051d-ed80-4011-af83-f21c5a60c252", "indicator--cecaacf3-a922-4b5c-90e2-2dd54ba57242", "indicator--9a633ef7-3447-4161-bb3f-eeca97f15199", "indicator--3b4bc921-91b2-4edf-95b9-0a3658533d88", "indicator--9bbd9992-6d76-42f9-ba5b-fe3bc6d88deb", "indicator--1d3d9f61-6b09-48b1-9afe-16ba6dc31117", "indicator--a7ebccea-0c7b-4cf1-b402-1b47f21915b1", "indicator--ecd3bab1-734c-47fd-b9b5-ef1d0a5535d6", "indicator--26964524-0c95-4555-af26-b4f97acd0c6b", "indicator--8ddbf6f7-af25-42eb-b15d-25e2396dd138", "indicator--c7235082-cb64-4cb9-8a7a-a6540fffcaeb", "indicator--2dfdbda4-ecc4-43e1-9592-504d35a17e97", "indicator--4760c635-3c92-4989-862e-f2dce45dfc1c", "indicator--b955eb42-7bc9-44ae-aae2-54744470b397", "indicator--84e9df69-403d-44f7-9e67-06e52b39511f", "indicator--e83b9e4a-2752-46a6-a364-78d26272794c", "indicator--e0286ff6-5b0b-4f9a-8d66-6365146328e5", "indicator--390d9378-f0e9-462f-8194-3b4a73acbb4b", "indicator--f3c32eb8-5c1b-4dd6-b56f-a573c1aded37", "indicator--0fa70cbb-a11f-4e3a-819e-3ded72662624", "indicator--1e08a159-6beb-4c18-b96e-4c088d2697f2", "indicator--419d24f4-6351-425c-8e5e-e579a8586125", "indicator--fb59f73b-2e99-433a-91ee-b804beaf9cec", "indicator--343d44e5-f720-4d84-b318-6dff21a04770", "indicator--ad3dfd38-e611-4a5c-ab5d-a05ed77500dc", "indicator--89e09ba3-002c-4452-a403-e35b6d6ade10", "indicator--c184c795-22bb-44ea-8c1d-a51181fbf42d", "indicator--180642e5-f281-45b4-8929-ad8cf5175ac8", "indicator--3468e668-cf1d-4fe1-8996-5df3e7e63198", "indicator--7700696d-2337-481e-b942-df5130a2a77d", "indicator--97eea3ef-b223-437f-9374-a5c579289e06", "indicator--7a6452ca-8b38-4826-9dad-b967e9528358", "indicator--3421289c-b0e5-4d16-a134-489c9a5e761b", "indicator--e799cf7b-4493-450e-901b-ce71ea38adf6", "indicator--7dbdacc2-ee63-4e06-a26c-8e5e369e9f65", "indicator--6e43bb6e-d832-483a-99f1-c20faf6939e2", "indicator--f2bdb9a4-ecee-44ef-bc50-38a62401cb19", "indicator--39aada7f-ac67-48f8-ac6d-e0e984fab4dd", "indicator--5a6a6289-4fed-4ec2-b205-93e00325511d", "indicator--4d5b4f34-080d-45fb-845c-fa61ad3ec4d9", "indicator--53d6f98d-69f2-456c-9444-7e901ea9199d", "indicator--aa91900b-6c37-4c43-9734-47b429a7120a", "indicator--e4a69643-2811-42e5-838f-3b971575f2da", "indicator--a7b3a57a-e85f-4e5b-9ee9-7b404fd81a73", "indicator--c5201384-bb45-497e-af30-aaf0e814f3be", "indicator--959c87fe-2a32-401f-9a65-8e9d91fe44a2", "indicator--e5f1a042-60df-44f7-80eb-bae55b2cb2a4", "indicator--bea785c6-60c2-4932-882d-e8fea919a210", "indicator--0ffe3c01-7915-4e57-9e91-68049cdd8c76", "indicator--8defe1fc-5c66-4ba9-9f4f-ea483643c133", "indicator--a7365a69-0b66-4523-81e5-019429804f58", "indicator--887286b6-9696-4086-833d-cb413ac890fc", "indicator--5a369f14-8b80-426f-885e-f72f12f66447", "indicator--f4dda615-101b-427f-bdb3-15806995ea3f", "indicator--8b5355f0-0b4d-441f-b5c9-99d25e27073e", "indicator--f4ca9e69-652a-4476-8288-a63dd72b0d19", "indicator--4cdc9ce9-9186-404b-b3ac-f8ffc2a1530a", "indicator--e6fe5597-bc35-497e-8947-34fcf820e22f", "indicator--c8f6187b-c451-4fb3-a184-6996801bfdbc", "indicator--8228226f-9281-415d-ae0c-27351ee226b9", "indicator--c54e4cb8-2da6-4d6a-8ef6-c3629cbfdf50", "indicator--c9ec992a-bfbd-4e31-9ed4-2bf40e9588a6", "indicator--8ac9685f-48c4-46ab-9759-5a6f40a70e36", "indicator--77a2e154-8ff7-4e1e-8768-9d83e33ec240", "indicator--9c863915-25d3-477f-b289-f40f244a4a59", "indicator--07bded74-487c-40b1-9618-dec0358d8e5e", "indicator--fa9f9262-6b65-438f-9427-defb5a3af138", "indicator--1f247bc5-9495-4e42-bcbf-1ff89e8659f3", "indicator--83e013f0-74e4-4cb0-95c1-caa3d2bfce3b", "indicator--8e43862d-0f64-4007-bd88-953d5a9934bd", "indicator--029ea951-738b-47c8-8a15-2cb5cb7fbee9", "indicator--949ae134-9f9c-4681-98f6-39980a62cd9c", "indicator--684f9f8b-3234-417f-9c61-da57070042f3", "indicator--5ad8383a-951c-49ff-a540-c7b414e0441f", "indicator--f70128e5-d0b5-406a-be8f-7bf95cc260d0", "indicator--54b6e203-b395-4137-8fc4-c103684a72e7", "indicator--9ba69522-c829-47da-98ac-77af49f0d343", "indicator--94c7c974-9492-47f0-9a66-183010267c90", "indicator--a495523b-ce69-4695-91ef-85bf1592f440", "indicator--9ca1a3b4-0dde-4936-9dea-520a55bccb0c", "indicator--ce3997c9-1733-4e78-badc-ef5c45aedb39", "indicator--c2ef2dbd-4e53-46b7-aabd-a1a8c18db5e0", "indicator--72f9a119-bc28-4928-9916-6b71cab15a62", "indicator--8fd1503b-76ed-444c-9c96-8206856fed32", "indicator--01e94a50-2afc-4856-ac70-4882f57db3b6", "indicator--7177eef4-8e8f-45cf-8f23-4404cb1a808c", "indicator--2c6654be-f398-4d9c-a1c4-fa264852a667", "indicator--52eb4d28-a7a2-4352-9c00-2cd9860716b0", "indicator--6bcd589b-be52-45e5-bd88-dede60a949fc", "indicator--cd1e89d1-3d07-40fc-af13-f5f8bbefd9bf", "indicator--3ce1f891-6f2c-417c-ac35-84080a142817", "indicator--ebf45b4b-2aef-4afa-80b9-0dd6f67e5615", "indicator--db046ba7-45af-48f3-8538-3fac50507742", "indicator--c25ee681-3780-4b90-bb26-19d87afbdb8b", "indicator--1c7e7c5c-0a73-416c-b7b5-cddc3b7cbfb1", "indicator--5f195af2-d235-4baf-9d0a-85a7b600584f", "indicator--8a1929fe-f5bd-4dd8-9cce-9c4e2f5db0e6", "indicator--befd64c1-3203-4ffe-99da-4e50eb0d114f", "indicator--493c8d17-f18b-4a5f-8c78-222652ff34c5", "indicator--196b3b64-c468-4e85-b934-ba283f1b96c7", "indicator--45913cd0-d988-46e3-97da-1d7c7c801a9e", "indicator--117c7a4f-5f4a-4994-b8c6-041bd8dff9ce", "indicator--1dba7fb4-9c39-4cdc-b237-0d956507ff12", "indicator--7aca4d3d-4ce9-4fe1-8ccf-184c205c558b", "indicator--dfed70cd-1695-4277-9c30-620db207e10f", "indicator--4e3c1b99-b2c8-4640-ade7-70b00772af56", "indicator--9ee5e086-3d3a-4a6c-9dcd-99c1824f9171", "indicator--1a00b0f8-cda3-4584-9858-01769ae52517", "indicator--bd18b23f-2bf4-41f9-88e8-24a01ffb5a6a", "indicator--85cabe33-849a-4ac0-9b2e-1c174e53a1ab", "indicator--e176327b-f044-4e2b-b974-b8f6f6413013", "indicator--cd1c585d-fe43-4068-bdff-2e74a97a879d", "indicator--fd2d637a-baa9-4ba6-83d1-f5bcd190bf21", "indicator--dc162fe1-cff1-4401-a5b9-fd9450393c82", "indicator--9683b2dc-8c88-4078-a3cd-4bc5cd0e6540", "indicator--20b64d39-5e2a-4495-b561-3cc170775353", "indicator--a3f96135-0b3b-404a-8bf6-653d085363bd", "indicator--cee630f8-9fa2-4afe-939f-415217e09ebf", "indicator--55807860-4240-415c-917e-4c447220fdf2", "indicator--94964874-064f-4bee-80bf-720fe061d59d", "indicator--8c0e9e3a-17d9-4775-9475-fa8ac04f1435", "indicator--86e08d0f-bcd7-4c7a-96bc-8b857d898987", "indicator--49211c6b-6112-43ed-9f1d-578508dc52f7", "indicator--e6fd0618-2b77-447c-9300-fdd9ff3d453e", "indicator--50658566-edbf-4e58-ad1a-559e0849d0a6", "indicator--0d86ea70-136a-48ed-a16f-0c7f18b0d3da", "indicator--b7ad0f09-e7ab-4779-91bb-f6e5f61dd419", "indicator--83d03c47-586c-4f45-9821-8ef57d6893bd", "indicator--4ed7509b-e2b2-492c-ab69-94c9056ba739", "indicator--d1c2dddc-2d09-444e-80c4-8081df415095", "indicator--d1b68b72-7454-43a0-ae46-7987f4cac6c9", "indicator--8cc5248c-7045-4730-83b9-ecae2a27700d", "indicator--cb7a6fc0-833a-4168-90ea-898c6bd0e359", "indicator--1c2230fa-0b0d-4e1f-ba8a-e1c81379f30e", "indicator--1c941be7-0d50-4159-96a5-f7ced3720aed", "indicator--89fc61e3-ed0d-4fbe-8de7-0394ebd222f5", "indicator--28a2bf43-9b9c-415c-a6c0-ee3710e64901", "indicator--3fdaab45-a849-4c0a-9f81-a08f058643e8", "indicator--283a8c5f-3db1-4e0a-a65e-9baca33083e6", "indicator--9797f061-1ebd-40af-bdd9-95c73db3147e", "indicator--c7093a73-1d7c-4e74-bde9-5b4f15c3fa81", "indicator--eb8dd19d-91f7-4730-9353-aa6463598988", "indicator--88d2db4c-b1e6-4b1d-9516-02a37d1404ed", "indicator--44813ff9-7cf2-42ac-a75e-42269196fbed", "indicator--5c881e16-0d33-4ad0-b6ea-ed1809f2cf48", "indicator--d6490d6a-e77a-4194-a890-a07399e04289", "indicator--48445ab8-7bc6-4008-b597-6489c747b6a9", "indicator--c4e335e2-2a1e-455a-b89f-1660b37b2747", "indicator--cedab35c-c81e-4ac5-9dad-57742e95c834", "indicator--d87e16be-d790-49d6-9879-cbfe1ef74eff", "indicator--7ca2761b-c3f4-4db1-88c5-15cf48cd92c6", "indicator--f34c8efc-8e11-4588-b2db-dac26cf9bc50", "indicator--e6e43d9c-5ce1-499e-99c9-4271519deb7c", "indicator--bc1f618d-c7da-4ac4-a3a7-dd80965de98a", "indicator--93acbdc4-12f0-4cdc-b6ca-4212e66b1504", "indicator--bff1bbec-2440-44d9-9c15-ccf0db7bb0bf", "indicator--21a414a4-7a31-482d-82dc-49a5830d9bb6", "indicator--cb46ac16-84c1-4d65-8a07-df8ee6162a24", "indicator--29e99daa-dad4-4702-8023-223ec2fd4c04", "indicator--72966c15-c0a5-448d-81ed-2f1f71e6b25e", "indicator--9e938e4c-3d7f-41ab-a0e9-79a6d62ed906", "indicator--5b1796d5-7d35-4a3e-9232-d399b4216d5b", "indicator--4788c155-feae-4efd-85d6-95262af8778f", "indicator--0d165179-83e9-4be3-a766-456b2cd94db4", "indicator--fe10078d-1fe5-4e0c-a464-2d7d884848f6", "indicator--383d34ec-b407-432a-a9ef-782f05e87243", "indicator--7cabbcd4-e0a1-4a4d-9941-0257cf30e361", "indicator--a252bb7d-6c73-42c6-9877-00c77b061495", "indicator--743bb20a-e85f-4821-b456-790967b49760", "indicator--f85c06e8-1c7f-4f6f-8aaf-1e938f9d811c", "indicator--5ec1a1c6-c853-4cdc-9532-2bb43ec0165e", "indicator--17983f06-2224-41ee-9816-5e439be1b54d", "indicator--82b97adc-deac-4ac5-a1f0-594632d44f4e", "indicator--868d3019-5574-44c4-9c60-221338436daf", "indicator--ee91b892-d012-4f3f-a132-a7e7abf92dfe", "indicator--1136d494-8bac-4395-9588-4124ddcca1d0", "indicator--3f1bd45d-dd13-4e0f-a977-6faeac40f984", "indicator--b525ed68-f7d9-4296-8ec9-204602f0d69e", "indicator--180dddbb-58b0-4fae-91eb-f0f2b6420cc1", "indicator--22eb1050-0f08-44ba-b3a4-bc1b6eba5bef", "indicator--b078efc4-cc9c-43d6-8acc-ec3d5310caae", "indicator--982da711-f0fb-49ed-8fc4-b9d490eb59d5", "indicator--2a524019-d730-459a-b493-bf1e4a8261f8", "indicator--a4252acd-d4e6-4d3f-8084-8e285a960695", "indicator--49122005-c8f8-49d2-beeb-edb243b4fc38", "indicator--af3648f6-016b-40ed-9e6a-1ce750013d59", "indicator--241461b0-2625-4ad5-8b63-486c2633ca95", "indicator--001b4430-b6cf-44fe-838f-55a39e291589", "indicator--bab2f9e6-579a-4c6e-b87e-2247b754d905", "indicator--fddee682-c728-4526-9c7a-630283f1b4a7", "indicator--a560bada-6096-4a62-8e19-b1592a1f4562", "indicator--13638813-8c1e-4bcc-ac64-2e51260e8c5c", "indicator--8d4349b0-0c2b-499b-b278-4c9bba4098b0", "indicator--a0b7a26d-22bf-4a5f-8882-6b9b45812449", "indicator--4aebc60a-5ae1-49eb-a29e-7f964b82959e", "indicator--3b588e02-99f1-482d-8c77-34cf825fa56c", "indicator--1077eb90-fe49-4c90-9287-d3e2a80690ee", "indicator--a073f1c2-4d61-4dec-b297-78f0de73ce7c", "indicator--7e2f2ef5-d0d3-4d99-a5ce-bbd9ba5f5ac8", "indicator--b36b0f96-9990-443e-a7a9-4c9cd3fd32da", "indicator--2471d463-d97f-45e6-93cc-845e95b5ac8b", "indicator--8aed3413-a85d-4a36-ab03-2532fcb6998a", "indicator--4a6bcf8c-da45-4f57-b272-818e9969b8fd", "indicator--f23cb687-c11f-4401-98ad-784ffaf1df03", "indicator--f1799826-029a-4994-9bb7-56d163e6811f", "indicator--ee7d04fa-a368-4f5b-aa73-b1a183fc6cfa", "indicator--f1538060-216a-4420-b5d6-bf2d47944272", "indicator--65141417-7766-484d-97a2-d76bd223c4a2", "indicator--4b700c66-d646-4221-902d-42ef26277540", "indicator--d6b97b0f-254a-4001-a12a-09f959897a00", "indicator--c5d49197-7c83-4eec-8735-91adebbeda7e", "indicator--eae322f0-31b2-4f75-af6e-c2a1920b9dd3", "indicator--53162a58-33ad-4b7a-89fa-6a3d2dcb0f81", "indicator--a782bb62-66bd-4545-82b5-d02ac904c259", "indicator--1bffef8e-7ff4-4727-b8dc-f43e7886696d", "indicator--d8127674-67c9-4a36-9f97-0fa44eb6ff2d", "indicator--93f36e7e-c9ff-4b53-80a9-e0bcd0992e3b", "indicator--f8e14a04-993a-4382-a94b-25b821e6c072", "indicator--c1407220-6ec9-443b-8f9f-34e1c1447886", "indicator--014bca20-802a-465e-ad61-3459c31c3e8f", "indicator--a265fa35-1819-4889-b00c-f236151eb674", "indicator--41294e9f-471c-4cac-b05d-462e334cf162", "indicator--2a249eba-3506-452d-a0e1-c0ebd08ad0dd", "indicator--c0927e16-2142-417b-8a41-27da022d2d6b", "indicator--1b41ea1c-2c84-4dd0-8c69-cab385e65f52", "indicator--da82d9da-50e0-4980-a7d7-1086144005c0", "indicator--31e68fea-b93a-4df1-8bb0-8bbfaa84d77d", "indicator--17543ce1-a7b8-4222-9deb-0cd14a4e20f7", "indicator--43205fd6-5dd9-4d8d-85ee-3320955f15ea", "indicator--a8016a13-0a98-4abc-a649-848581ae32cb", "indicator--8a4682cf-92a1-40db-b9a4-f1a3d09b1781", "indicator--284d0089-95eb-4bfd-99bd-a4afdcfd9d4b", "indicator--81538f1f-c3ba-4f56-836d-9dec2d60c7e7", "indicator--88bc5b75-832f-42af-86e6-205e65288119", "indicator--7eaec518-b858-44b1-b805-07b254b45f6d", "indicator--95d514c3-15c7-4fc6-95eb-cb518efd9b11", "indicator--62c8ea4f-523b-41a6-8190-e717354bd218", "indicator--135cc5d9-24a0-400e-b551-72ae4c30497e", "indicator--245353c9-ff4f-46d6-a6a8-b978f97882ff", "indicator--06b088d2-39db-4df8-937d-a4ee38ec7425", "indicator--66734ed9-6692-4862-a44d-b70ed6b9b10a", "indicator--b1481cad-2267-45d7-b52f-2d80348cdd9e", "indicator--2016a1c1-dd4e-4e5a-9215-0528c8204dae", "indicator--07b6290b-1c49-40f6-b0ae-76003804ce4c", "indicator--677ba37a-bd0c-4d56-8924-515118a7a3b3", "indicator--b4c01fd8-2b19-43cd-ae75-69132167f0b7", "indicator--9d1d0d33-41b2-4379-a4e8-5ff2e6d50ec3", "indicator--92e71724-336a-4d4f-abee-8764da588318", "indicator--8ccddd57-6a6d-4414-b36d-834f62a21c69", "indicator--29264db8-fa32-4662-8251-07216633f303", "indicator--c3a7586a-73b1-4e84-b82a-fc9b2b739807", "indicator--67028e48-6f0d-43f8-b490-9e80efbf9934", "indicator--4f469f41-2122-4922-b8cc-2e8f55060da7", "indicator--844da32b-060e-4234-8f27-6b42138e5896", "indicator--c9437b6b-fcc3-4900-9851-790c092ecc4f", "indicator--bf1ed8c3-e632-4d9d-9ef3-02e5a4685692", "indicator--62981c72-5120-4e62-a441-5c80c84bd9ae", "indicator--6ddd8f9d-a8a7-49ab-af11-2320bb7eca09", "indicator--18aacbbc-4e8c-4b38-999a-608918794c0a", "indicator--8f7049f5-941d-4137-93e0-2318c252ccca", "indicator--08fd5fc3-996d-45ce-8ee4-b95b7f4da9c8", "indicator--ee14acb0-7c91-4a22-8278-77dcc3828ca0", "indicator--718a2b4f-f033-4718-bba7-d48e98b4b8c7", "indicator--7a59a252-303a-4c25-99a3-ac988c3871df", "indicator--6ca28cfc-8fbe-48c4-8101-2db98d31551f", "indicator--71e66285-87bf-4fac-b548-c8ce80e2c745", "indicator--1ff912b4-fc1a-47a3-b985-83928b8a5e14", "indicator--25e91013-5fc3-47a7-8a15-151659b1d9b1", "indicator--bdf24816-d9b4-4f41-8478-5bff1476bc66", "indicator--0d831bbf-9b43-4ec1-8351-e29e86595b57", "indicator--b624e55e-96da-4366-941c-3c849fb7bbd8", "indicator--4f19bbeb-5113-49b6-b208-0bf2174b7454", "indicator--b87c4a53-6a3f-4001-8b08-4429f9ff4582", "indicator--db46f6e1-6cc1-40ed-9abb-d25a89f69cf9", "indicator--573bfcfa-6ff1-4b76-b24f-8565023f1d22", "indicator--e8aed473-0956-4151-b5f9-5ce0d487c3c9", "indicator--b2eb5e73-0aff-4714-bc35-f18f0d23f6eb", "indicator--60f44645-c4d9-4ae9-af29-0237d4245c1d", "indicator--5c2a834a-e99c-4b5a-bac1-db27bea54dd1", "indicator--e930813b-f8bb-4d2e-ae7b-005d4167e1fb", "indicator--5fe4c9ec-0dc5-4394-8d8c-01e87ae3575b", "indicator--10d48179-9d34-4c07-917d-e7bf771af624", "indicator--1d520354-89a4-43c3-a4c2-52426ff3723d", "indicator--39762a3d-c523-4bb6-b817-eba48f7db6bf", "indicator--7b295970-8a86-4a5a-809f-68d9ad182941", "indicator--ba233761-eaa0-45b6-b5e9-7ab925f0d977", "indicator--d870ed11-f157-4e4c-b7db-64001dd369a3", "indicator--35ab256f-db09-4432-8b7b-db5f2e0a570f", "indicator--2380dd50-b5a9-4bc2-afa0-bb78ea03f344", "indicator--231a1a02-3d2f-4367-b568-7f2dbb4a2d99", "indicator--dd546d37-029f-4ab5-b8c9-72e25ef13781", "indicator--fd749663-1a98-4895-a76f-1386d33ccf75", "indicator--f48a3b0a-77a9-41c4-ba1e-7c8789591600", "indicator--998475c6-17ad-4816-9dd1-2f4a121d2d2c", "indicator--7f694598-673b-4054-9dfc-ef7aaecbc65d", "indicator--48d14b99-663f-44e7-aac7-6b09fc812f99", "indicator--1cd23e58-b180-4509-b9a4-7671ebd078ea", "indicator--353f84b3-7f75-4109-8866-40e18bd2bf52", "indicator--64e267e6-2904-4dfc-9d7e-7f7e5069c60b", "indicator--053ca900-4fd8-42b7-8181-8ba509f65d43", "indicator--3dbc5b3c-c2db-45ad-8ceb-ffafc8ffa5f1", "indicator--4227bb80-bd10-4d80-b9ed-a8f0d46e3ca9", "indicator--b04c7b3c-c0e5-4a11-bdac-5064504cf006", "indicator--d9528441-8389-4274-876a-0aa2d89dbfb3", "indicator--7af7404d-1a05-4e5a-8e97-ad01f5642658", "indicator--b93b02ac-17b9-4852-be7a-ed2cb3a528e8", "indicator--a2ee5e69-b995-4256-932c-8c30fb05ef94", "indicator--5e657e2a-5456-4cfd-a59d-6a969bc98b16", "indicator--2cbfec43-3bcb-4ba2-a044-fea21b90c82a", "indicator--2d5286c3-e4a3-43e1-a90f-c6a5a52eff45", "indicator--ac2e835d-852b-40a6-9af5-20ebbbc6a9cf", "indicator--f6840a56-9042-4cbf-88f8-7183de5eedfa", "indicator--508cfced-7670-4e16-a88d-35003d374693", "indicator--6e909dd0-ecbc-4431-bdaa-0d57861fed66", "indicator--06862efe-32ba-4118-89af-d0f417f088e2", "indicator--744cd332-c0cc-4dce-a132-bf0820edf786", "indicator--1b4be072-a8a9-4b04-9430-b935db6f5699", "indicator--c0a63e32-7b8d-4528-8368-9cf2fb3f555e", "indicator--4bafbd6b-a984-4a36-877e-b78f0a310e89", "indicator--b0572135-595b-4896-807b-9bb52b07eb57", "indicator--7ea745bf-3bbc-444c-9443-360ff698785b", "indicator--dac7d7b0-130c-41cf-910e-d74060a480c6", "indicator--0ae9c156-ee3a-4960-a2d9-582049292d6a", "indicator--f48cab88-12d6-497c-97dc-a0595f69147f", "indicator--ec174abe-1ffc-4b69-9045-0fe6fd0b18a2", "indicator--80a58781-f401-4924-b6df-7b5c26d258bd", "indicator--88e7630e-1e2f-45a0-93c7-96434819b9c3", "indicator--fdc80fb7-d921-4754-a9a2-d8118b13c465", "indicator--ae6b4d1d-c702-42d1-a5eb-c85ee3204304", "indicator--b4ca75ce-6054-4e9a-a1c5-c1f3e884a767", "indicator--61d0cb76-9113-4da2-9ff9-11c160ccc54a", "indicator--2cb7e4ab-58bf-4798-9245-e5b8196f78d3", "indicator--2550c09c-c40a-4f27-8970-7261d7d8f6b4", "indicator--f1f90b9e-7dba-4738-9f7c-9711cd18217b", "indicator--8df99acd-db02-45a2-ba53-8a3397494e00", "indicator--4c41b5cd-fb28-45f3-87c8-a9e13c51a603", "indicator--af97867e-4dad-432f-81fa-d0b0f3a8fee3", "indicator--a116d18d-3d79-490c-a61a-be10c567c988", "indicator--4d2f4899-68eb-4363-ad05-c2bfd84b89ae", "indicator--cfc94714-9545-45b8-af64-54d3a2aab01a", "indicator--e35a0af4-2e66-487b-aded-9ba66db0e248", "indicator--b813965d-b43a-4cfa-9d8c-c70352c43592", "indicator--1c0bcb60-d960-4347-9bdc-121162e61302", "indicator--6c50dae1-8e0a-4938-a32a-e649cb1e3e2f", "indicator--4119fc5a-96fe-4f0f-9535-09a6dc23bdeb", "indicator--4044f4c8-bcce-49a0-b529-15c9cbf7712e", "indicator--e2e8a7a7-36ff-4ab2-b990-226708387a0b", "indicator--d603c90f-ad7b-4056-9e7b-a3f9cd3a8175", "indicator--a9013d83-649a-4618-8c10-c8dd1d593116", "indicator--56ef2753-2560-45c8-bde0-1bb0b430dc2e", "indicator--adece832-da6d-4114-b9ee-ffaf3f2ed676", "indicator--a6b4a63f-6357-4cbd-aacd-b442f35528e4", "indicator--b5a012c9-67d2-4e35-8db0-7af181633141", "indicator--d1b5a4b2-ac37-4f24-894e-a153ad10fd2e", "indicator--845e0286-d9be-4aac-acc0-5036e2de7728", "indicator--8f9f139e-b81e-4c6f-b231-5a852f0e3b9c", "indicator--ca1b38d8-7c93-478e-8e34-2bf3d97a4eaf", "indicator--64b7511a-b447-4db1-9e96-ba43040870d4", "indicator--c5d8352a-5c48-45f6-9313-b06010286ab0", "indicator--951c8053-e770-40d5-9ccc-4bee99afe775", "indicator--d5924def-b72b-4e76-885b-1d686879ce01", "indicator--cee2c80b-6f54-4f57-87cf-afa9ff0f1ed4", "indicator--f9c775fd-d473-414d-b742-b86a0d92b9d5", "indicator--85417c3d-6fb2-446b-ac7e-c734d404277f", "indicator--fb351fa7-2264-4e1e-8c86-276ec4f6916a", "indicator--94382a42-79e6-4fb6-8e82-f1cbc5aa154f", "indicator--36582f0f-ec1f-4519-9263-3702cfa93a3f", "indicator--9046116e-dad3-40d7-ace3-625c21301663", "indicator--fdf69a1e-f0fb-4040-9ea4-c3538676b84e", "indicator--a8060c38-b466-4586-bb3c-bfa0948db465", "indicator--be33fe66-deec-4438-9170-220129537502", "indicator--ebab5647-69bf-4ab2-93a1-8972a41e2f7d", "indicator--a8aa4800-2db2-4c1a-911c-b973569eda71", "indicator--23d57725-0c01-4576-9564-c21f8395ee82", "indicator--0f618e22-84f4-44cd-a7f9-ce2128d86525", "indicator--5bee08eb-da37-4281-bc4c-978bbb9c7f74", "indicator--b995ce01-7032-4cfc-8ee5-7e289efa6ac0", "indicator--51a4fc7e-c5b6-4445-b070-e8c38da8a4ba", "indicator--527efe7d-4331-4037-8f63-61e8881e48b1", "indicator--52795d3c-c469-4f6d-8814-a5769310c6f0", "indicator--91da636d-875c-409c-b1a5-b494a57cd244", "indicator--71aa8da4-acb0-4cf8-9b36-c8e61bdf1f67", "indicator--8ff867b5-e950-4437-97ff-4b42e72ff20b", "indicator--a5dd5368-de95-43a2-b4aa-b31541188487", "indicator--1072a01f-fb7f-4205-a00f-0f62c371f410", "indicator--5c3e1adc-9462-41d0-8d9c-310a60eef184", "indicator--020d63bd-5597-4014-b778-a8f7bf174860", "indicator--f27db961-1c43-4837-a974-c6c057fcd6de", "indicator--baf5b01f-41c5-47f1-87bf-3558c5a4ad10", "indicator--786af464-cd51-4881-914f-ed18aa26353b", "indicator--bc376a31-782e-4d2c-9a78-e46cc661cb81", "indicator--0792c59e-e72f-4217-91fc-094b4e821e17", "indicator--d33ac832-4e8e-4c31-9d55-236078636991", "indicator--1e943a48-0a97-440e-bc6f-bd3c2247caac", "indicator--4eb87e64-d583-41d4-951f-b61d46eff36f", "indicator--62ae46f5-8f02-4c86-8302-f36c988e92b5", "indicator--e5f5dfa6-9619-4045-ab55-20e4e104ee4a", "indicator--4449cb6a-1836-453b-a343-9a52c3df43b8", "indicator--7fa40598-7518-420a-8b66-bb21950d7ddc", "indicator--5942288c-a47b-40c3-b711-9bfe3dde1a4c", "indicator--afcc0358-9a48-4563-bb25-6549db6b385a", "indicator--bd9a2ec5-b891-4cc8-8634-95e8b4c775df", "indicator--dd1f3a48-43cc-40ba-b944-f2c2bcaa2ee2", "indicator--08b3b089-c6f0-4cf0-b38e-4f760f745780", "indicator--651ce90e-a83c-4a92-9dd6-5da179cacdbc", "indicator--e39bd1e4-1dca-48bd-930b-e6c360e3e8a5", "indicator--cdb2f794-01c8-47cb-b204-d229d53a71a8", "indicator--ca26666b-6a06-496d-8f5a-42d66dc5bf5a", "indicator--80c37233-1da2-47df-81ff-836524e06d93", "indicator--15bd430a-071b-4ee2-8d68-49859aaab877", "indicator--b1b015c3-c828-424b-aa41-9902047eab31", "indicator--d0f4c0bc-d4cb-4c54-93c6-067c68da1186", "indicator--c7060c05-c59d-48e8-ab0f-2dd236578985", "indicator--a1973957-5566-470c-b6a1-dc2014bc45b2", "indicator--8ec39233-1282-4223-a6db-d59ab911c217", "indicator--a20a309e-cd85-46da-9516-5b6b10b4a28b", "indicator--17cd3103-0d01-4727-bb0d-618b74046528", "indicator--f5285ec2-5c55-46e1-b616-b0c08a459025", "indicator--ac7d227b-0370-411a-8bef-c0185d667a5c", "indicator--ccb2fc5c-6b40-4464-b9ea-6dbfeb3d46d4", "indicator--36a711ce-4c4c-439f-9374-03468cf055de", "indicator--611d813f-b635-4329-93be-b4e4e9414c2d", "indicator--a1bcc1a3-0edd-44fa-8d96-330feff08df4", "indicator--c394a363-3f6b-44b3-9dd1-cb4e4997844b", "indicator--e3e3f791-c30b-4a5f-beef-abfad8ee5048", "indicator--19ae6f51-bf48-49eb-8549-799cee3dc862", "indicator--363e78ae-b971-4338-a5be-9347dad5224e", "indicator--0b667c9b-16b0-4342-8840-fa9752fbbb0e", "indicator--8e2bb394-5516-4713-8156-810ec0a7631f", "indicator--5715c023-640e-4f93-9f60-d72a6ae2712a", "indicator--802996ba-3f41-4206-8783-29d6a4575594", "indicator--dcb80456-ad47-436a-852c-50af064a6fb4", "indicator--9eab9f14-9be5-4aea-8e62-bcba8c09096b", "indicator--0591607b-e0a2-4193-be8e-4048dffe4b4f", "indicator--968da910-8838-4039-8b1f-07181fb32f3b", "indicator--b6fe0725-06bb-4244-aeec-e03ef8f6148e", "indicator--1a4ea1ed-6312-490c-aac6-9435a56568cf", "indicator--3c997c34-220a-4643-a34e-a57ff2664f93", "indicator--21d0ab18-2dad-403a-adab-e6faff6575a1", "indicator--6804bb01-4e34-44c9-b852-2c3b2630c530", "indicator--ae7d9cb0-59cd-4358-8cc2-bc2b4ce690a8", "indicator--874d3dac-ede8-4bb7-b92d-f80889a2edf2", "indicator--ab3f7132-56c7-4c05-9ec0-5eb3f99ee218", "indicator--ca9108bd-e907-460a-9c93-06cfaa1c9bdc", "indicator--14db4159-d79c-473c-9cc0-e990f2a43eba", "indicator--2855fda8-028f-4ea3-ab0f-47f266a6c737", "indicator--da336a26-b695-4e4a-af29-bd26bfc6968c", "indicator--6ac1a0ca-83bf-42a9-80f7-3123e9062276", "indicator--f7d0eff9-1ad2-4d3b-9c15-73a40e2ee153", "indicator--7af00263-94b5-4468-b5e0-f7f61989b0b0", "indicator--4233d006-686e-44b6-8ada-edca523cb52e", "indicator--3ed4e7be-0867-445e-8838-9f15054752b2", "indicator--71430b44-b8a9-4dce-9850-5483874f80bc", "indicator--80c8c2fc-814a-4db5-958e-c64a7dc3e341", "indicator--2223f17f-4ee2-4b05-8427-2cf693c94d96", "indicator--e582aa92-c412-4b4f-8a13-bf56404b2ace", "indicator--37e57100-4ca3-4eba-8fd6-c322058238f8", "indicator--c0b49c1f-b309-4ad7-a807-8232cf6d0c35", "indicator--9ff97117-e4d8-49e2-8a47-91db17055761", "indicator--3308b266-4e0a-42e8-b3b0-846ecca1f9e6", "indicator--f6fffaf6-a39e-4247-9249-1c6dddecd561", "indicator--c171c4ce-f17a-4a1f-b58b-67d795b5fad8", "indicator--2741b605-38fd-41a7-96af-36db6cc2cb3c", "indicator--2288320a-dbde-4403-9867-fb0feb003ab2", "indicator--25a3925c-1f9d-486a-bbef-b00068d7bfcb", "indicator--8ca25481-6618-453c-97f4-1ffb3ce16476", "indicator--5cf1ad4e-9643-4843-a7ea-f9044d3c12e7", "indicator--418177f0-a6f3-415f-a6f5-f41cac3ca2e3", "indicator--fa0b6df1-913f-4c7a-ac2a-b4940bcc962a", "indicator--ab869b1d-12c5-4d54-adc4-272ee271cfd3", "indicator--30723bc6-2946-4735-b24e-3dfa60727233", "indicator--243b6f2e-5ba7-442a-8ec4-ae93685025ed", "indicator--de8fa358-0259-4d0e-80b3-446d349a3a60", "indicator--78ae2bf9-5edc-4ee7-811d-3d19a1601ed4", "indicator--95e1ec48-6c16-414a-8391-83da1e9abdb9", "indicator--27f1ccea-bd3f-44d8-85ef-481347fd0807", "indicator--2a68f221-b493-409d-b376-e60dfdc2d90f", "indicator--eb86a137-0e18-4d38-83ad-c2f9b24c3801", "indicator--b58c9d7c-ebc4-4e6b-8d21-0e852b6deb74", "indicator--83d6dbc7-4d90-4647-a685-9b257892abb7", "indicator--4d757c32-ee6b-4b3a-a6b0-7549da3c9cd0", "indicator--a1c79c4f-d833-4275-9cb7-12477320299f", "indicator--3ff9fb55-0944-43b1-a52e-ed6a1bffa6ac", "indicator--b8e1e6e8-eec9-49ed-862e-ff380f28987b", "indicator--b5008133-a041-4487-95ff-795e7c534573", "indicator--cd104074-4160-40f9-bc1f-36df3fd4c958", "indicator--41a1cf77-5065-4a06-9862-28e3d857397b", "indicator--38e715d1-5b42-4d9b-b10d-a5e4bd4e28ea", "indicator--9dc8be7c-0489-4fb6-a66b-7025c9e513f6", "indicator--e7b1a8f8-5f0d-471f-8fe6-368d47a6c55a", "indicator--91d68b87-732f-4f15-be55-d1d9dfc728e6", "indicator--f626b90c-6f26-439e-99b6-c9eff3866485", "indicator--c5060338-2e81-4626-8d1d-2ae447e802b5", "indicator--8037a13a-1c61-41da-b740-204d412aa632", "indicator--8a72906d-72be-4931-94b9-fea92a53d773", "indicator--366e0705-e5e5-4664-91a2-e9b4dee47516", "indicator--46718f71-8fb2-4e55-bed6-6668ef0a8f03", "indicator--c96082d6-0aec-4ccc-a33e-9f723820c8cb", "indicator--093570da-a151-4555-8b08-d28cd1b99912", "indicator--37f8d7f8-eb29-4e69-b321-448e38011803", "indicator--2861c48e-60a5-4ab3-9fc2-e33aeff9ec16", "indicator--f7192757-729d-40c6-b7fe-500e03f06038", "indicator--127d8f31-8bb8-40e7-ac50-277e9beaf993", "indicator--f5b55b5e-7ed7-40ff-870e-dc1db96e0a2a", "indicator--660ad77c-af4f-4434-93e5-741a49cf0314", "indicator--180729f4-ddd5-49ac-8d5d-146223c1853d", "indicator--144725ef-4fe7-4ae2-93ec-7bdb3d3b2841", "indicator--ef4dc238-d04e-4000-9bd6-2322ae548f62", "indicator--7ae3723f-76e0-40ca-9a0a-fcac2ca02093", "indicator--dbb222ab-c914-4ecc-aac2-1998e6a4f344", "indicator--e7103986-ba65-4d9a-bb87-80fc16c0718d", "indicator--719288ba-1abc-4e43-8f3a-eca330ac9fcd", "indicator--40637e72-2582-49c0-8644-b210df077611", "indicator--cfc92276-e715-4f95-95d6-7c96af8dba81", "indicator--75cf5610-448f-43cc-a42a-46ddab9d504a", "indicator--59fb43ab-3b38-4079-9f10-2f6647b555a1", "indicator--414a0ba8-e60d-4b85-a4ab-369dae5883d7", "indicator--7991cf18-01cf-434a-85c2-7afb4b8b7bea", "indicator--fc5688b8-b3fe-45cd-bcf5-980318b3c0f6", "indicator--c54322c8-84c7-47d1-b31c-5a28f13cca3f", "indicator--43839641-1a96-4c73-ad67-053e7761e7cc", "indicator--06336a46-7c5b-44a7-bd8e-9ad3c4e5e771", "indicator--a5030957-5923-4fa6-8428-a5a7dd7e40ff", "indicator--4ba047ff-78f2-4306-9217-3480bddab771", "indicator--460c14db-9278-412f-bf8c-e405f60ac70b", "indicator--d42638ff-d3be-46b5-8437-b4fd28270a8a", "indicator--1188611e-c056-41d1-85cc-28659b9e92d3", "indicator--9f4a9e53-6044-48e2-9ac6-1889c9a49871", "indicator--3c8d5726-00d6-426a-931e-02d9f5005a0c", "indicator--622213d2-49fd-46e3-9336-32785c0703f6", "indicator--101adc96-25f7-481f-88ee-501f1dc67341", "indicator--633c8753-f7d8-4f16-b3f8-b49355668f51", "indicator--3a40f7f9-d389-4a08-b6be-063cb58caf0b", "indicator--f12afd49-fdd1-43f9-934c-1c17c542fa53", "indicator--15a64197-e759-468e-99c1-90ba50923b49", "indicator--356b1c32-37b0-48f0-9d3d-321873e5378f", "indicator--f38c8ddc-aa97-4dd9-a593-58a129b70c75", "indicator--d6dce7a4-8222-4985-8f2d-5a2a761c5d64", "indicator--7d6b10cc-14c0-4f69-a37e-b5528c791cad", "indicator--808de0a1-660c-416f-b2fc-826067d5edc4", "indicator--83ed4579-53b3-4b41-ad4b-95ad3d700712", "indicator--73a0fb4f-472a-4a52-aaa1-f4c99cd4ea9c", "indicator--4e13ecef-121b-46cb-b53f-507f94f5fb19", "indicator--d6c72d87-c3ea-4c3e-b8c3-b29dda78f3dc", "indicator--ce05c73f-d856-4c02-8bf5-2c8b955bb3ef", "indicator--9fcec2a8-e8c7-43d9-bad4-29c2faa4204d", "indicator--587a7f4a-4fd6-436a-b52d-cb030708c679", "indicator--1f34f19b-fdb2-4fc0-9ad9-14243e3abe82", "indicator--75cfc783-1a0a-4346-badd-fb633201b424", "indicator--9292f74e-6fbf-4dea-9198-899c1b9f63e4", "indicator--f5dcb431-808b-4bf2-8424-ba719ffb88b4", "indicator--601a5de1-9483-4eb5-9bcd-8d22f96fb4da", "indicator--4e359abd-b158-42c2-b3a4-d024395e6d66", "indicator--119e44c8-bfd9-4e2c-a8d1-bedf17cd26a2", "indicator--fe2206cf-9816-4deb-b8e3-625e79cd3fd1", "indicator--9ad0baaa-ec25-4a6f-9c7c-fcc94758a88e", "indicator--8827cace-7fa3-43b8-a09e-c85c973a009f", "indicator--ccd94f3c-961f-4406-a090-534e7925aac8", "indicator--573415a9-79bd-429b-8cb7-5efa1d90423b", "indicator--0efb7bb7-b896-463e-934a-76ce385ea43a", "indicator--7c2b9f3d-d150-4166-9a47-6d168c951f61", "indicator--42e14df9-733c-4308-8b98-73815a48c3da", "indicator--8b2229ef-1149-4154-b763-8ac0df5560ed", "indicator--66f304f7-1878-4d50-98c4-b6d1024d1c98", "indicator--d97fcd43-bf27-4b96-87b4-cd6553e8e78b", "indicator--00d43ebb-610c-42ce-a5d7-b1bdc926ae86", "indicator--46459eac-0d29-4117-a91f-d4ff6dbbeda2", "indicator--c504c9d1-8015-4835-bde1-0403ef714f30", "indicator--f0d986e5-d783-4582-8a48-2972643ac926", "indicator--f17d2b83-93ec-48ea-8b54-b4875b9b17a3", "indicator--eae9b4f4-bb2a-4112-bcce-dc0943f2a92c", "indicator--44fcb0cb-ffaf-4d21-a8dc-47b62ee63785", "indicator--dfff5516-903c-4515-aa31-10dfbc5d0db7", "indicator--9f681595-58f0-48cb-997b-0882a1b756d1", "indicator--7765ed3b-67c3-4db5-be43-f2773a94b124", "indicator--a4c136e6-7796-40ca-a4fa-d1fe00918c0a", "indicator--761d3b29-93a4-4c88-86d7-be636d9ad35c", "indicator--3b6419e9-e2d2-4716-8135-36f32d14d893", "indicator--3f115310-6a79-4be0-86db-f6a226de2f1f", "indicator--07f0b7ac-47b9-4a76-8f30-b125c40ffab9", "indicator--45b75fa3-4a9f-4d34-aff2-df3e6c247c8a", "indicator--23d6b7fb-cc15-46c3-aecd-3d8f13ee16be", "indicator--236f3698-f683-4997-b3cb-a9d85b84f4b5", "indicator--38c8a6de-d3e3-41a1-9b17-29474df5e835", "indicator--67e44edf-45dc-446e-9a93-70505b34bf8b", "indicator--cc98a914-d1ed-4f7d-b196-bfce8d63b388", "indicator--cfe0156f-3fff-4409-8789-3fdd7e8dc481", "indicator--058545da-f340-4af1-b6bf-bdae080a61bd", "indicator--4db15401-a0a9-4c87-b8d5-c8701c9ac694", "indicator--f96c9c01-99b0-4c0a-b22c-1813cf7d4a5e", "indicator--ed2d9732-1d39-40e2-8907-ab29fe3b7076", "indicator--71b89637-225a-4842-8c3f-aacbaf63ab76", "indicator--9b2f5610-abdb-4c5f-91ed-123aac4a8ae7", "indicator--21e0d83f-650f-4a21-a2eb-081ceefa0cd7", "indicator--b3c533ff-47a1-4f5f-8380-fb74b020ba7e", "indicator--0198f7c8-ecbf-49c0-971b-aa3fe131ade1", "indicator--89f81ce0-025a-4602-98a8-858197b330c8", "indicator--bed01e8d-de86-4c63-87d2-1944fa9d56f3", "indicator--6a1d9658-a961-4c3e-b2f2-1b1debe91610", "indicator--7ab108f4-5a31-46d9-bc28-ff1fb467f962", "indicator--12ddc5cb-bcde-4f38-bfa5-da0946201335", "indicator--b40acce9-0ee2-434b-adad-9675e62b551b", "indicator--4c2f0d14-c708-48c6-845e-367a412c97a3", "indicator--ebd9a7ba-22a2-457a-a503-c9494f1064b3", "indicator--5e4263da-5bb3-4148-8ee8-1e1c7a5ff9b5", "indicator--944d88a0-fbb4-42ad-a4e5-a02840776044", "indicator--26a43d24-1477-4522-87f7-c602982aa336", "indicator--8e5f1e51-0b36-45ac-a96c-1d4eaf3f07d3", "indicator--5ddd007c-8b6b-4895-a66a-9d76aec9d3ab", "indicator--ee0757f6-60a8-42e6-ae57-eb644539c89e", "indicator--7118f0c0-285e-4104-a5e4-3a5060b721c8", "indicator--e7c6d0fa-2575-45a9-93d4-02d49b10a0b5", "indicator--47a26657-ca7a-4b8f-b3c1-99316840f6c1", "indicator--39bc0f97-c969-4113-96e3-73a442862b81", "indicator--15132d9e-10a1-40c0-8fe9-5f6fd5e1f975", "indicator--a14f4876-cbac-47ee-9b2b-dafd38297b16", "indicator--ff4c3409-9a73-45b7-adcd-c7dfcc4245a3", "indicator--236eba2b-23ae-4d24-b36d-1f457a38d38d", "indicator--5b9ec39f-8b15-4593-a0d1-d305c5cfb72b", "indicator--f3609c6f-5f66-44fb-bf57-6fc81eb0dee0", "indicator--3106da86-9890-4963-9fd2-0b5297105467", "indicator--708d9423-a6bd-4096-bbb0-15173137fea2", "indicator--9f9261b0-644a-4d55-a260-7f43f5b3fb2d", "indicator--cddc03cb-7ca2-4054-9bde-a6f45db367de", "indicator--30e72e6b-0609-486e-acd0-4b6dc9b17d81", "indicator--f7edc2f3-67cb-4338-9d41-ea02125ac127", "indicator--5964487c-4230-4654-a816-71d753b15003", "indicator--54a4d1d0-6bc7-4521-b419-3272cbe52587", "indicator--e94a6801-24fd-4e6e-b469-d38184600808", "indicator--153f1f86-2fec-4971-801f-4dbeecb033d6", "indicator--dcd3fb6a-4e69-423f-bc76-3793ea5beea6", "indicator--e498ce3a-43b1-48f4-8efa-fcff22100989", "indicator--17a1304b-b141-469d-b377-2c813a727c55", "indicator--3897f723-5751-44bc-8586-32cd68dd0600", "indicator--01e3ba6e-7467-48cc-966d-6a23d0357e24", "indicator--6b3783d9-5018-4cc9-91a2-a722fecdcf21", "indicator--f9356c53-61ea-45a1-8e3f-0d0f2f025665", "indicator--cd899262-e7e3-4899-a9df-1beb9341186f", "indicator--c7c1c814-60bf-44dc-a10e-930896481cfe", "indicator--5558f991-20dc-4ff2-bf31-586aa719262a", "indicator--28c345c9-1663-4017-b017-6ec2822ad57d", "indicator--71891083-7d7f-43bb-b6a6-995933e30f77", "indicator--7ff6c87b-76f8-42a4-8524-6ddc6cc41c38", "indicator--f8af65b8-0b3c-45f1-872f-7886f72c50c4", "indicator--9c2cefa8-54c3-4b64-aeae-ce8c4b669699", "indicator--6b3aab58-4c7e-40de-a08f-609aceb106f3", "indicator--b272bce6-9662-430e-82d7-239361648968", "indicator--dc5e6c01-1772-4a9e-b834-4d6c0bbc9ffe", "indicator--e4345c63-e5e2-4902-a3e7-493ae7af4edc", "indicator--5477d38c-d6fc-4a0e-9f52-54f1f238f150", "indicator--c045b90a-b3df-4f42-bff7-020c51e091c9", "indicator--ecb5ee0a-3ef3-45a2-9c6d-5caa4fbab126", "indicator--4b4abbb8-26bc-4fac-bd49-c3ade9b2bde2", "indicator--62c1cca2-87f9-4b99-b5d0-5280c61ff552", "indicator--8cc39e09-c012-479c-a646-b86c28bfdc86", "indicator--94e79b06-39ce-42cf-888f-bcac89968c7b", "indicator--adec23c9-a445-4cce-9032-eb7cc8271efe", "indicator--af06430f-a150-4359-8ff8-f50f4a321033", "indicator--63ba9690-267e-4fb5-88ef-eb3b67b2009f", "indicator--85d6c604-4825-4dd8-8b96-8a9c27e89c8c", "indicator--8c4eb687-483d-435d-b923-95e5b71cba2c", "indicator--53c1fb59-7470-4481-84ff-1d801258822c", "indicator--1e10ed7b-50ad-46d0-bece-1a972a5caacd", "indicator--7d00f347-4e7d-407d-9d07-02c3a4dc5bf6", "indicator--18cb1b8c-20d2-4bef-bd46-0c8ca512a495", "indicator--13ac6470-a002-47b2-b785-7d54992220ab", "indicator--c438b5d9-a752-4a09-a0f2-7684d130470e", "indicator--cb245f63-0903-4e27-98f3-409136986a61", "indicator--567919ad-75e9-4ac9-af61-8317608df7ff", "indicator--37f81773-0daf-4175-8574-eb531ffdc7e0", "indicator--423de3ed-d89a-470f-a5f9-38dc09221bf8", "indicator--948ba43f-61af-412e-8787-11400720ecd0", "indicator--a96dc8bb-990a-483f-a68c-541dcdc58ab2", "indicator--8aed65dc-1b98-428d-b55c-5ebb7af722bf", "indicator--982a42c9-cedd-47d2-beb2-204e710f14d7", "indicator--e1f15436-4738-4607-b94d-34b51d98157c", "indicator--c962b1aa-eb76-425b-8efb-04afb14f1e99", "indicator--7559f4ed-6a8d-4eef-aeb7-16880df06b75", "indicator--c8dc981c-19ef-4497-ad3d-afa07d58e337", "indicator--29eab5aa-0dea-4e1b-afb0-d20a8b4e5a71", "indicator--3f118307-da41-4fd1-9961-c7617c54a001", "indicator--13b595fd-618e-4262-a705-ed865db7c676", "indicator--77acc498-010e-4bf5-8cc4-5c45589619ca", "indicator--6ba2352f-e02a-4110-95ae-633ad973fcd6", "indicator--54dcd83b-bc07-4828-8722-ec3b8477c9d7", "indicator--3f708056-7761-4930-91a0-5d9432554698", "indicator--fcf30586-a9e2-4bfc-8c2e-ad7b49f01612", "indicator--79e6044c-76e2-4af8-b0fe-46e42b7c27de", "indicator--496b5d01-f27b-47af-9adc-536467b32b04", "indicator--5dc8a616-9da0-4094-837c-44b2c1496487", "indicator--080fc154-eae9-41c3-a221-8d788e3ae55d", "indicator--8f4458be-cbb3-4b2c-97f4-7c14d1eaa6db", "indicator--ca61004e-7082-4a81-b2ad-a0c35baee4bf", "indicator--339eec97-3c8a-4e8a-9789-bd8307ac7ea4", "indicator--2b355f22-b58e-44f8-8430-9156e81d0719", "indicator--73d6bc12-7235-42ef-9e01-7297415c7cb0", "indicator--a4c363b0-62ff-482d-8c01-a1fdbe505f6c", "indicator--e7094377-939e-4b1c-8163-c48c789751ad", "indicator--bced3b07-4d12-43b8-9439-cf4f5e76b6fe", "indicator--a3b7a41c-7730-44e5-bc59-3ddb4c1a67e4", "indicator--870ecdcb-ea25-442d-8f44-a8fb83e869f3", "indicator--bcb44fc0-a18e-4b95-b86c-c0ebb49ee91c", "indicator--f82eb210-82e7-45c3-9ace-111fbb2fe7c9", "indicator--c067a8d8-c38e-4056-bf64-73e9a40a0b56", "indicator--02d3c1a7-af0c-4b5b-b285-b47b4909e280", "indicator--ef35c093-7e1e-41de-86e3-9b2f3ebcc2cc", "indicator--da8950f9-a0f3-4c7c-a4a2-dd8aef23d7f3", "indicator--3226dfbd-2361-4748-a708-02cc56eb2348", "indicator--e3f909c6-63f7-4df8-a4fd-bfeee24bf520", "indicator--da8a7202-e107-4438-a736-c654819aad70", "indicator--b4646e88-9d81-4abd-baf1-cce0d7458d04", "indicator--affc0b7f-6bc2-4833-addc-65f1151ba4e9", "indicator--1ae370bc-17e8-4420-830d-40ed0c0cd08f", "indicator--b41d10aa-dc79-4ed7-9959-d9b50116d930", "indicator--532b117b-0362-41cf-a1a0-cb3d299377e0", "indicator--8348995e-b6b8-454f-a06e-0e948a2f7c89", "indicator--3e24a7ea-c8d7-489e-9621-02dc761a1996", "indicator--99640d88-7223-4d06-b124-1416aedc54fb", "indicator--aa0ea01f-d6ac-44e7-8db3-ea25750960f1", "indicator--8d47d4ef-268c-4fec-a3bb-8abc1179d10d", "indicator--8782bec2-214e-4c77-a588-4aecb30d7ca8", "indicator--7602f336-83c3-4aff-941f-c567ac2e9067", "indicator--5aa61cab-b8f7-4bf5-ba88-1adb533a3e74", "indicator--389a5c76-7689-4cf3-89f1-6f4db5959df9", "indicator--8cdfd336-b462-4523-8f61-cd120c5a95aa", "indicator--08d1d437-c188-47d0-897d-a7173dd8ae9c", "indicator--ce00fad9-461c-404b-bd7b-9d2df762a689", "indicator--57349415-4b50-44d5-a0d2-8a530c2c202a", "indicator--58b897f0-d6b9-4168-b1f8-39d3b9560355", "indicator--1fb0d682-33ee-4069-9c5b-983af29b559b", "indicator--3aa75094-f78a-4f61-9ff0-d66414e98570", "indicator--33d315d4-ac46-4535-b332-f6076133260f", "indicator--6d150d86-0c22-4d8f-ab2e-52050954b1b4", "indicator--56a39c92-635e-4c5e-87b0-19633b72a0eb", "indicator--08c2c89c-6d6d-43ce-aa7b-f2680a5a37ae", "indicator--153bf6b8-7922-413b-b58e-4d30e441844a", "indicator--fc14dcc4-812c-4afa-969d-070f5abfc387", "indicator--1540379d-d45f-401c-a2ee-a98e413b7577", "indicator--60e730cc-2957-4a08-8d87-e483fbd91aa1", "indicator--37ef2ac7-18c2-40c1-98a3-9f0b86ac2b03", "indicator--dd50b339-0fb4-4282-90f2-b7f0674c105c", "indicator--8abcf1fe-344b-4d82-b45c-ece8e6358815", "indicator--4ab8590a-ec7f-47a5-9a36-2dda8699f30a", "indicator--f43c5f9b-627e-4db2-9f19-90f50062bc75", "indicator--3d08d02b-b2e3-4fdd-a52f-d981108b256d", "indicator--9be98868-97ae-475c-a767-3310ffa18ee9", "indicator--17f943a2-333d-4d62-bff1-b456994eb23a", "indicator--3bcefdc8-89a5-4458-817c-f3ee5a84d644", "indicator--b2d7e1de-4f3e-44b7-8670-a0421901d709", "indicator--5b8ce590-e1e8-4af1-b311-41b6c70b7007", "indicator--b1bbc5c9-e7c7-4809-9666-31b7b421837e", "indicator--176072fe-abda-4cb0-912c-f4dbfd78fe8e", "indicator--bc5bdbc7-2da5-4c9e-a7e6-20454c89aba4", "indicator--00c837aa-c290-4a2c-88b5-d6e164aeccae", "indicator--3e8d083a-a551-4713-ac47-297984158404", "indicator--4c0eaadc-ed17-442a-b269-744758058a20", "indicator--a09bfde7-17ef-4f34-8802-c25fc85ecb93", "indicator--dc124f09-5cc6-4273-8785-d17e4130d029", "indicator--1438af53-91e4-4d84-aeeb-a2b40205f624", "indicator--679498c1-b561-4402-b18d-7842c22bb6af", "indicator--1e34ea5e-576d-4cf3-99a2-59059d7748a7", "indicator--12b82b4d-8477-448d-894a-a84a267e1ecf", "indicator--331ce97a-728a-496a-83eb-3cf88d1b842f", "indicator--78248a6d-d497-4af9-8ba3-2ebc41c2be91", "indicator--67c012c8-4bf5-4c06-a991-6bb416199070", "indicator--ece33164-5b19-4b0f-a052-60fffe149e77", "indicator--d6ea876e-b427-47dc-95a4-8ab9583ada12", "indicator--60468680-0402-49b5-a3fa-8e3f4427c499", "indicator--84e49f0c-f780-4380-9935-5e868e3ce041", "indicator--f034754b-1212-4470-addf-9d02e7b9bbaa", "indicator--16817682-55d1-4c03-bbcc-3aa93ac9bc8f", "indicator--5a0ce4b3-5c2b-4b86-b5ba-5e31f1443bd5", "indicator--bb758798-69c0-47d7-93e3-5df240fd7f00", "indicator--fe73bb73-5b10-4c99-8194-5e8571020143", "indicator--bc73d1e7-11dd-4ea1-a850-04d457a6b2d2", "indicator--a1ea61c8-a200-4f13-9f6e-42947af26d87", "indicator--a5135173-b69c-4a21-9840-cc61268bb00a", "indicator--1596cbc9-306a-48c6-a505-5d8b756c4a14", "indicator--c8ff7603-3b55-465b-aea3-8e30ea24867f", "indicator--33a7bb2f-ebc4-408c-a2ee-96465d076cf4", "indicator--ffa4893c-e61a-458d-a3bb-8e46dc1618c4", "indicator--c8051726-c376-4ba8-82c3-c52b7f2807d8", "indicator--b587bd21-07ac-4fd0-8394-cf0dea7b68e4", "indicator--609a38e2-ee07-4c01-874c-cec93a14f6f1", "indicator--6de2bee1-aa1c-4819-8241-d4b7a95949ac", "indicator--4401eceb-6fbe-4b2d-9dfa-e7bbf73ba891", "indicator--e545afdd-3b14-4cfd-b98c-e08475d666bf", "indicator--66cc8a64-5959-4938-9983-d382fd8f9ee0", "indicator--21865e7f-ab51-4f64-b325-7f547ac5709c", "indicator--19b0c58d-863e-4b86-9cc6-eaf819148ee6", "indicator--fec57053-a8ed-4031-935f-ec445133830e", "indicator--fc50d5b5-a116-46d2-833f-8d07e03711f6", "indicator--904179b4-1527-4ed5-a0c8-aeafb970f4f2", "indicator--32c8fb58-afb8-4b8d-8322-dd1690d7df9a", "indicator--95844b4e-3a64-424d-8365-6a46baabac03", "indicator--b1608cb2-fe1b-4d98-a4ed-36d7a150e5fa", "indicator--be1ec947-8959-463a-b608-04d96d3b99db", "indicator--649130dc-e997-41d6-89f8-90f3fe5e1423", "indicator--a8492d4a-e600-4a14-a53f-eeda05463977", "indicator--604d6cb6-71fd-45a8-89ff-c5acfb9753fc", "indicator--8ee70283-013c-4ee8-b0d3-5c482c187425", "indicator--31af84a5-c58a-4272-b0ce-25ba396428de", "indicator--d41f47fc-e6cf-4cae-a33c-2df8a5e9a4d6", "indicator--ca286f88-6b6a-48dc-a681-7792f1c7dd99", "indicator--70203292-819e-482f-a09a-de7ca87ae8c7", "indicator--e3800c36-cc31-4a3a-8d79-d71ab3cbd0ef", "indicator--f9ecebac-1a51-40da-b589-68df44aee838", "indicator--d60aa508-791f-431c-a6ca-15241d3609e6", "indicator--72e3ba30-6187-42df-a670-90ded072d3c1", "indicator--8d82f722-1b2a-47d6-b798-aaff669d40fa", "indicator--3a6b987d-1b0e-4091-a9d7-4d719af9032b", "indicator--79e90dad-ac8f-4d6f-9291-c56ac4c63baa", "indicator--621ed880-f3ae-4522-a7f3-5db77fa1c1c5", "indicator--9c777090-56a3-448b-97d0-3ad91ecb890e", "indicator--4deaaf4e-ef6a-4f8c-ae93-64575fdbeabb", "indicator--b9b8b3f4-3041-4412-8a8c-435488ac837a", "indicator--169db939-64a6-4051-b661-b228e4402fd3", "indicator--7fbe2f44-d8b4-4b80-9220-7ac8ac18e1bd", "indicator--4acbfb38-8040-41ea-9112-cdceb6de2c0a", "indicator--3bc3cb86-bd0d-4af3-841d-b9916ddb0011", "indicator--fefc9569-e225-4c51-bdfb-3509dfce4293", "indicator--68e1bfe7-8db5-423a-8748-a2388fc3ab28", "indicator--c67717dc-6e5b-42e8-a9d0-c2c7bebae92e", "indicator--57101fbb-bc4a-423b-a03d-c6ff904fc456", "indicator--e19a41be-c845-44ab-91b5-bb673e61746c", "indicator--1912aad3-635d-404c-92f1-b18f6ffc8b6b", "indicator--86d130cc-0b84-4c73-aa47-ec2d20dde88b", "indicator--621bed5c-d395-41e8-a43a-749b8330faef", "indicator--a37dd60e-2c09-4854-9d23-ebc03e4b48b9", "indicator--2bc37067-1b47-4973-a49c-a779b0e36d27", "indicator--f147fb63-89f3-4b04-85a5-e88d8e427748", "indicator--6b0bca7c-63dd-4580-bd13-e6a64e79163b", "indicator--b32622cf-4f4e-416e-a265-b9b88326b772", "indicator--893df9fd-bc6d-4244-8cf7-2b69f0a3aaaf", "indicator--945d3830-0551-4166-9888-81947e36e4ba", "indicator--4bcc181e-d933-4d4d-988a-05f7752037c0", "indicator--0221436f-ddaf-404a-8412-9a6ce0458b5e", "indicator--e3a9d801-6c0c-4581-9778-276c5e4d9853", "indicator--703c0aa3-c3a0-42a8-986d-37a522e18133", "indicator--832e8741-3ad8-4c47-951e-24ab1628ff83", "indicator--9c0c4856-7bcb-4193-ab36-430c394991c0", "indicator--cefaac43-cb6c-4a03-892b-8b3e182beca5", "indicator--f8c48971-49a8-4659-80f1-259c3033f542", "indicator--01f72081-a578-4c84-abfd-6b1b57ed9ef8", "indicator--00960d2f-d644-4b4e-8761-c23c679e9b99", "indicator--75560872-34e2-4e85-8e0e-8ea2dda30c3e", "indicator--3146fbd3-96f8-4d8e-8fa2-798d7713640c", "indicator--a3dd2058-f874-4d9e-a653-0e4501613d9d", "indicator--724d1d3b-43bb-4cab-a700-8ffcaa350121", "indicator--36e2efdd-a473-4428-9fa0-19e849cb6119", "indicator--4841e795-4d45-4cd0-8238-a72c2f066d28", "indicator--22aaae93-7e65-4938-af07-86b84bfcedbd", "indicator--437f0b26-ee8d-455a-ba19-233f4314acde", "indicator--23e5a3be-3543-44ff-9313-5bcb59da99d9", "indicator--0aa1ede5-2ad6-43eb-84db-1fe8fda26252", "indicator--916566a2-e5ba-455c-a546-60d7573df951", "indicator--be6a1b77-a118-46bd-8770-267d6ff01f8d", "indicator--8abb5651-385e-485c-a3dc-5589f1defad8", "indicator--e32d61b2-89b9-4934-ae5c-71365e654657", "indicator--fb8d5f4a-318c-413a-98d4-db13b06d0118", "indicator--3fa67765-47f6-45f6-8805-85a890fd2b52", "indicator--7e20d32f-17fd-462f-bd6b-aafd41ef18a2", "indicator--fe813c24-033a-4bba-9f21-ad5b1ee71446", "indicator--7f766a69-add5-4f2e-a4e7-5a0390e0ed3a", "indicator--18260639-94c4-4924-944d-286daccafd21", "indicator--5c6478dd-4601-4115-b4fd-92fce005ad1f", "indicator--9003ab22-8de5-4240-9794-22199fa8ad58", "indicator--c021c2f8-df81-4f5b-8ffe-981fb9b77a84", "indicator--bcd7725a-505f-4cf1-90fd-a31856e3c57a", "indicator--c4920845-dabf-4ca3-92e2-9f1df7b55d91", "indicator--154200a7-4861-43c1-becf-d00e516190c9", "indicator--995c4cb4-e017-48e9-bd3d-26c91802d10f", "indicator--e9737b3b-3cc5-4171-8052-6fe1e3576865", "indicator--a5b873b5-324b-4948-8341-a6204d230e15", "indicator--e91f0035-8eed-4ff5-a44c-3dc93092d444", "indicator--b9ee8544-133d-47d3-bb65-409038ca8e9e", "indicator--b91e90ed-0fd0-4901-95fc-26573fd85162", "indicator--bb269058-8e3d-456d-a7ba-a90ddeb5e318", "indicator--cf0e0af9-dc61-43de-bcbe-5ad9b87472d0", "indicator--578aab24-8d40-4500-aac9-dca094e37276", "indicator--1badd78e-e675-4411-b35e-3fc7e15b8746", "indicator--5635f3d5-d47d-4b4f-938c-20d4e3e41097", "indicator--03b02ecb-9363-4583-b276-8ca0d2e19b90", "indicator--cc298d42-6a67-4896-8c20-10edb3a96635", "indicator--9a64825e-1f7b-4907-a807-bab01f333db7", "indicator--a843a758-9d24-4921-afb8-cd266a7780b8", "indicator--d12ebfb0-679f-469c-8535-d9fbe247beb4", "indicator--417e5fea-e90b-4891-af5d-f85b9e03c4e2", "indicator--e7c6a707-15ec-42a0-9d5e-e2d6ea5a2c63", "indicator--1bfd0376-5f86-4a26-b6cb-a7236b8ada74", "indicator--991cf12e-4faa-4c12-b470-9dcebb047c6f", "indicator--789ca709-cee2-4514-9f6b-a8294b92883f", "indicator--e15059fb-763e-4f7d-b630-ea09b87678b1", "indicator--9e047652-4019-44e8-af97-0d331ead0b40", "indicator--a82bae11-a1b3-4522-89a4-41e3ca56d5e3", "indicator--f32b273a-a01a-409f-ab3b-63097ee3854f", "indicator--5b421000-6d91-4bb2-beb0-cf3b19b272dd", "indicator--3f256296-c3b6-4fbc-bb62-2b76d8265f62", "indicator--67375f4f-08b2-438f-8985-8689aa63d498", "indicator--9895a10e-58fd-4ad2-8e34-c7119a8c67ec", "indicator--386c55be-1d60-4f4e-9d50-56634437fae7", "indicator--21b7ed1f-3a48-41aa-af01-d042503bcb1b", "indicator--affa2426-02c0-4457-9fc3-6ac0b0d28d7b", "indicator--6e7d110a-1fe5-4b7e-b263-6d9159697ee1", "indicator--369bdd13-f514-44ab-8e77-6a1a1b1ab212", "indicator--79178891-140c-4c51-b81c-3a614cf141c6", "indicator--9a6a4eab-72e6-4277-b68c-52d0eb2aef19", "indicator--2adf7bc2-c127-412a-be7d-285f5297f536", "indicator--9ef6fcf1-92f3-4c3e-8004-66f4b7f5f1c9", "indicator--8e8a7d2d-98a0-4144-a02c-e5a9212cd177", "indicator--793c1ee9-10fc-4ea1-b230-2c1c98bc2f73", "indicator--946c7206-c322-4d27-8fc8-618b8420bcea", "indicator--eb3245f4-9267-4257-aa94-928da8c08d92", "indicator--495f5864-d0d6-4923-a52d-0e8c21898322", "indicator--7e6d57a6-ea9b-4473-8320-fe9cb5d892b6", "indicator--90a4bc8e-e28b-4ba0-9ecd-5ff91d9d7507", "indicator--5412aff0-b202-4444-951a-95b937cff641", "indicator--aa06eec9-a14d-4c2c-ac74-9958fa79b958", "indicator--5a89fc31-72b4-443c-b729-56dc90b8e190", "indicator--f42cb92d-9a7e-4ec3-9aa8-2d03c49d3d25", "indicator--276b40f1-2fc3-4147-83b0-8e79a49ba9aa", "indicator--439576ec-ad7c-41ec-8b3d-c4002875f187", "indicator--901b253f-b7bb-4d0f-9960-febcc1f0f1ea", "indicator--592682c4-1976-4fb9-b038-2a92d309ea55", "indicator--dfee6562-1eae-4f1f-8481-524e186ad4d7", "indicator--3bae502b-a5fc-4b58-83f5-f2e22a31b1d7", "indicator--87bbe76c-50d1-42d4-b1e9-a989836e3aa5", "indicator--1b2cfcbb-1665-4458-a641-47923cb667a6", "indicator--ae579f33-c4df-4582-aa2d-7455d12247ce", "indicator--45b2d488-916c-441e-bd82-8e1e7670a5bd", "indicator--de96c196-0d85-4f73-847c-99c50a29d93a", "indicator--aaba31b2-628a-4a3d-b8ad-a9a1330e057e", "indicator--1951aff7-477f-492a-8d83-aa7e6458ede2", "indicator--89d5adf4-1fb5-4184-b8f2-e565e7ed3c84", "indicator--c721c55f-d0c6-4228-a0f1-73c76840cdc9", "indicator--e9529070-0ae1-4f8e-98ab-7249e04a00a8", "indicator--65e51917-d852-48b2-b3fb-8c998ef89ae2", "indicator--2cc63903-22dd-4d08-895c-1309d92e1807", "indicator--ed2e9d02-232a-4170-b157-aad90320c571", "indicator--e00e91c5-ed94-4a76-8732-c14c0752e7bb", "indicator--3d195115-a603-4214-a931-69e15bac3459", "indicator--3ce2cba6-bd8c-4105-9589-cbcd21015643", "indicator--ff138740-8288-45ba-bbdf-50f7d51b4b7a", "indicator--bd98b2c2-f1c3-4bb1-979a-079b2d5df3d4", "indicator--3d7adda8-b7a4-4079-9c24-2d328f471f19", "indicator--61905bb7-9efe-4ba8-89cf-b3298d9ed01c", "indicator--3440c54a-29ac-4476-a64e-179d899cf456", "indicator--cf8b6a9b-9132-41f6-b538-27208d32998f", "indicator--8299d49e-6326-43c7-b8dd-08c1f0b76d2b", "indicator--4f74d875-a5df-40d4-918d-80c8bbf01112", "indicator--2b1d49cb-deb8-4f75-a8f3-e914a2eb43e1", "indicator--42142780-7eb6-44b2-9e97-870b4168241f", "indicator--0dc4c183-c458-45b6-a5d5-d4c8bc508ffe", "indicator--feecad3e-f852-4c37-ab5f-7f2d35ba3ab5", "indicator--60177d3e-059c-4900-b7e5-616ef07c8363", "indicator--023cd9b2-527c-496a-a713-8a316ad0f7a2", "indicator--c84ae68a-bc73-44b8-b088-90c8e338a329", "indicator--8f9e42f5-2ef4-41be-882e-13561afdc534", "indicator--11499785-3f2e-4d17-a265-a5867fb3d283", "indicator--5545ba9d-9d03-49b3-ae40-e30bcdedf617", "indicator--8cc76dfc-c332-468b-8196-b87df039613d", "indicator--ceabdce6-d1ac-4fa0-b324-78bb8e2ca263", "indicator--82547042-51fc-453c-830c-191bab96dfbc", "indicator--e399fda9-79d1-41bd-bb96-4b58fdf7ce1e", "indicator--2060b377-87d9-4ba2-a366-c0c6242b9fd6", "indicator--f7319647-8493-42d4-af51-d1ef67396ee1", "indicator--6c109439-4f2b-41b5-91dc-b3583653d19d", "indicator--19f73712-5d76-49c2-ad87-fe87be89ab2a", "indicator--11a7cad7-4df7-4ad6-8171-db6d4231fc37", "indicator--8b7832e3-91f1-4d76-b7b0-1b6acf25df4d", "indicator--faed6902-5645-4e24-9b68-66a980c52d03", "indicator--d18d89fe-e0b2-405f-83bc-db7ee9c089de", "indicator--772ccbe2-fa29-4e02-9e8c-38d890389883", "indicator--bb76ac37-be79-43ae-872c-d34b79316a98", "indicator--7a8786e2-9ca0-4567-add6-f4dd822942a4", "indicator--9066babc-ad10-4442-9a14-bc46cd29fec9", "indicator--6cad22bc-8f9d-46d4-9cd8-0b8c87be34ad", "indicator--1d34e8ac-cdd3-4f7b-a925-9a7aa00c5b66", "indicator--7fa76c71-6fd5-42ee-95ab-a2ad42a3107b", "indicator--2e599a1a-c98a-4169-9040-bb9eedb971b9", "indicator--743b9e0e-0db8-4902-b83b-e617c6178d15", "indicator--45fd8cc2-3a29-4f1a-a76f-a124d78cf957", "indicator--0d374058-95f9-4d0c-be22-31763b02ebec", "indicator--25922090-d1a7-4385-80be-adc5b60f936e", "indicator--062443bc-5238-42ce-8f1f-a6f811d2ac27", "indicator--d3dd1a81-04a7-449d-8d99-780173b99e6d", "indicator--7febdea7-3555-40d3-b653-64141c647aef", "indicator--ba1b24b7-9f23-41f9-9992-821e99300542", "indicator--93dde631-0479-495d-8430-c3ab0b2e934e", "indicator--aee838f0-9a74-48bc-9f13-74366e4db576", "indicator--5d3fb6e4-816d-45e7-8cc8-1d72b7fb68c9", "indicator--b43c1105-6508-447e-bfd3-0d8ef7c7c534", "indicator--ffd435c4-74f8-47d5-b649-1b6f872ab972", "indicator--7aefa13d-e844-4f0a-a1b0-ca66a0fd239c", "indicator--291ec0f2-d6b0-43dd-ac30-e7e748b6ac7e", "indicator--a787aac9-8224-4caf-82b2-c156fb6c674c", "indicator--2af8a6ff-3b80-4aac-8c9d-d20d282b46b6", "indicator--29ee3ff2-18b6-4e72-b29e-30eddb20fe8e", "indicator--127ffad3-e979-430f-acec-92d89cb06f9a", "indicator--3ed0ac6e-7f08-4f4f-8ae8-29d1406324c2", "indicator--baa47ee4-22a2-423b-9cc7-3a9e87da23ed", "indicator--058b196c-8b49-4dad-b83a-d55123da7a55", "indicator--98765a09-dc1e-413b-9d54-8b0c07e5b800", "indicator--4e1bdca1-762a-49d6-be63-419cf3a5f166", "indicator--160687e0-c0ac-45c3-9003-d2f4da9528b2", "indicator--1ded1b9f-5045-443e-a586-5ee8511c30b3", "indicator--28477e06-4edc-42c8-be80-105c5b7b0e1d", "indicator--dcbc4615-2bff-4868-999a-bee610fb21d8", "indicator--e29b0e46-aef8-4302-bcce-028508be594e", "indicator--26421cb8-9ce7-403b-86e9-c53658bf73da", "indicator--edb9e999-60e9-4934-9b3b-ca93a1f5863c", "indicator--0d7b3ee6-ee18-45a5-9a82-8ba45db9d324", "indicator--4c644d6a-309e-49fd-a048-1ef15c45d0ec", "indicator--04d0df42-4633-40c5-989a-59e3d64acf26", "indicator--bfdc6108-3879-4eb9-a134-aa6eb8242058", "indicator--aa956144-2423-43f4-bdc6-1f5c67f9df3e", "indicator--541b4187-7656-4711-8622-954332f31efe", "indicator--a8dca3a5-9b4f-419c-8f86-dda9d79e1034", "indicator--126e951c-5a3a-4fab-ae39-0a1a704be7fc", "indicator--f29f37dc-71a4-4c23-ae6d-b58e8e374d60", "indicator--1112902f-60b4-4c47-8597-8c1fdae45021", "indicator--29a3a4f8-aa4b-4690-be25-b75fda783ef4", "indicator--30f48105-0c76-4375-b87e-511af5ea24e1", "indicator--1092bfb4-02fe-4915-997f-0639147e5545", "indicator--ce06a69d-caf6-4d87-957a-e6fa7e46cd09", "indicator--c747b3de-5a0c-48bb-a8a9-57e77a42f539", "indicator--d48ffa6c-affc-45ee-867e-62b1e2f56803", "indicator--9481aa2e-4192-4b7c-9597-5fdc0e461d52", "indicator--a63ee2dd-eaf5-4ee4-aae6-83e594c8b945", "indicator--3b62fd4e-1b28-4f86-ae5e-9d5dcf7ac1d2", "indicator--f82b8c62-4724-434d-aed8-f42cb082dd73", "indicator--0fed53b4-ee34-4e7a-9b85-750cea651195", "indicator--194b494f-4591-41c4-9d4f-947c3cef0407", "indicator--0964f709-7451-4099-a11b-27089e0e65ac", "indicator--92917ec8-69ff-45b7-a332-d50530835a44", "indicator--3c127921-c92b-4143-b639-89c0dc78987a", "indicator--eac1d04d-74bd-4d85-ab93-791812ac432a", "indicator--b1cc97bd-709d-4e93-af5b-f1b972d52b61", "indicator--8c09a6d5-23c6-4abd-b9a4-5af2143ca179", "indicator--681a6b21-0b6c-4945-9997-c585587b5900", "indicator--4b7210c9-e34c-44c6-a844-38c13ac9489b", "indicator--ef873af7-b3c9-4e42-84f2-cbcb3e35f4f5", "indicator--212ded4f-a0b2-4366-98ca-8b1073cdbdd4", "indicator--d5d6be62-5b12-4980-90aa-365630b91a13", "indicator--c16e2d52-bed4-4437-8179-e9d5f5a1f7c9", "indicator--4ee984da-41b1-4ec8-aefa-3a87b044593d", "indicator--8b2c313c-4890-4a6b-9429-3042aa573ef1", "indicator--ad7a2a9f-c169-485c-84d7-4d6e9ed39bf1", "indicator--c21b0b60-cf58-478d-a561-73eaa94233ac", "indicator--1360a7a5-8279-4dab-9e4a-f2101cf268c2", "indicator--be8ce347-857b-4be3-9bdc-2a87a02ece90", "indicator--77f42f88-a98c-4e33-8d62-246e8a46f3d7", "indicator--47a9601f-4eaa-41c8-9f50-2d9481ac9efa", "indicator--e2871d01-ef6c-4a28-8877-384a4a742798", "indicator--5156d732-d9f2-4e4b-a5fe-30b7c970ec80", "indicator--7c7239eb-cdc6-4d76-b426-2cc22c82ee8b", "indicator--4a53635e-a8ab-4e11-b74c-cbcf9eb657fb", "indicator--9da05e9d-e6f6-47fb-a11a-ceadacf4483d", "indicator--ae81cbb3-04ad-4786-92fe-72b41e18538d", "indicator--40a13c73-c05d-44fd-bf24-34506eca19f5", "indicator--d6e1d9ff-3c9a-4a87-a437-9c18ae7849e1", "indicator--d1d3ed8a-1701-4858-94bf-41353431be5c", "indicator--2b545bdf-2b80-4ce4-88b1-4803858ebe7d", "indicator--cb1942a0-16e6-40ca-b9a6-c9f6adbe7fa2", "indicator--82d84f8a-76cb-46fa-b047-5f960ef42596", "indicator--c7944070-f58d-4dbc-8ba5-f33e3cb2fb77", "indicator--77b2529c-beea-4fc3-a32a-23eee44823d6", "indicator--fd5f65a0-fc27-4458-81bd-8ffe994dcdad", "indicator--2c9218a8-5b9e-495a-8c5f-cfd58b1fe8de", "indicator--2bee2444-c45e-4590-8711-0242a7380977", "indicator--28225b22-2677-4684-8b9b-b9e23cd802fa", "indicator--bbbb3f20-93c8-4f7f-9287-6e389098291c", "indicator--5e7d7090-c518-4c64-a626-ec28e237dad4", "indicator--60ab6b00-6906-4440-99b7-70ba67ea64c0", "indicator--a5fed1f0-2d34-4f8a-9b6f-967bfb5d8b4d", "indicator--1204bce8-9bbf-4007-bb90-93bf2d910c0e", "indicator--6bd63385-25cf-4772-85c1-219404bae730", "indicator--a68eb1a6-7082-47e4-8d91-3e16bc3391af", "indicator--b5fa08ca-30c9-41c3-b6c4-ac3ee7ee5055", "indicator--f3badfc0-3deb-4cf0-9463-7a2c6acea63c", "indicator--82830e09-9121-48dd-94d1-211c4e43acb3", "indicator--48673631-4f77-4d6a-bcdb-2d7d501aefd5", "indicator--24108774-4222-476f-8e21-52b70497f31e", "indicator--5534fec6-41f4-49a0-84bd-8c17b2f91656", "indicator--6fcda091-2d88-4431-b772-25e946e5c3d6", "indicator--d1228477-b3dc-4788-88c0-64990ac42b86", "indicator--1254c2ef-488d-4f2c-9272-bc6e09646106", "indicator--5bc91f4c-7eda-4a48-8cde-0fd263cd0ec1", "indicator--2ebf68fd-d86b-4fe7-b6c5-399f1dbe7fc1", "indicator--47c2ab77-dff4-4362-9b28-6579ecd2206f", "indicator--696a1045-2bcc-437d-9391-10b1fc95e020", "indicator--bf3a6e88-9021-4975-8604-d2553e6941ca", "indicator--ea805997-59ae-4879-a7be-81aa742208c3", "indicator--0f298125-e97a-4d0f-b5e0-fe6d5543d6b1", "indicator--fafa644e-69fe-4ac7-bf45-158d5f729a99", "indicator--02a68285-a0ef-48c6-8309-202052cd0cf0", "indicator--77ff0814-9347-49ca-97de-be57924bcca0", "indicator--7802d27c-162f-47ef-8bca-37589d9d69ab", "indicator--67a18d6b-dfce-4fb1-83e3-051aa71b54f1", "indicator--e80c277c-56c0-46d0-a085-c78a5308725d", "indicator--dbb3ae59-6c55-40ab-9290-4d67d942e275", "indicator--d3ee6cc0-9213-4600-93d7-ab1aa61a0e47", "indicator--5c4628e4-d4d1-4b6b-bf41-9fd380cce7ac", "indicator--27fbef03-8eb9-499e-838a-aa8ea8edf9e2", "indicator--9c9aab05-ee42-476d-b1ff-6db6d87e465b", "indicator--e01cf192-9f06-4a0d-8c76-1172c5a6fd10", "indicator--608f37e2-412c-45ad-b111-4ca5450addec", "indicator--37ca1e5a-dcb8-4b24-97d2-c9746fed3294", "indicator--3ca1969c-bc33-4408-8c85-875ca884fe73", "indicator--3c917bf5-db03-4d32-982a-3a16662b9f9a", "indicator--9cd7657c-2c3f-4f76-ac1f-736a6adc62ac", "indicator--0fe5fc60-6854-4b46-9b06-ea64f26a1f15", "indicator--e1e7a76f-e55d-4fc1-b76f-d6a1f1665d7d", "indicator--7904ce75-1d39-4ff2-aa79-6e898ab005c0", "indicator--80944d74-7227-40cd-a5da-18d3d78b6a98", "indicator--393cee19-6774-4791-8b5d-67e788f9bb7f", "indicator--cecf064e-e54b-4d33-9bdc-e1ff1e1d78a2", "indicator--2fa90be5-6003-4972-9b8f-c25df7cf5ffb", "indicator--cc117815-f19f-480d-ad44-9819672426d5", "indicator--99fee2ef-0ee8-4df3-8b8c-aecfeb1702fb", "indicator--7bd936a9-fa3e-4b93-9b35-62a1404548c5", "indicator--c9968adc-6ad9-480a-b78f-7db79ac3c3b7", "indicator--e58ce5ce-f7b4-40e4-a49e-8a5d2ba486bd", "indicator--add57729-81d5-4a10-864e-cecc6d25e892", "indicator--378bed0d-18bb-4f51-99d1-4cfa6c13810e", "indicator--b07cd327-0e53-469b-9d36-860d64b1dc43", "indicator--c90822dc-8487-4ee3-85d4-a9f08025f220", "indicator--ad95c877-187e-40a7-95eb-0a410f093c3b", "indicator--9295eb0a-2012-4020-ae41-3bea9896fddc", "indicator--6b767244-7a73-4796-9348-0fef7652a00e", "indicator--fc1bf0a7-a11a-41c2-8eac-eee0b64c3223", "indicator--15280520-cd5c-4e40-a5cb-9faf133f002d", "indicator--5dedb696-db2c-42a8-b3fc-f154d435e06c", "indicator--c5fa42e0-af8b-45af-8469-06d069d836b3", "indicator--e1ba8451-6706-4f63-8eae-d9934ee3b58d", "indicator--eb113189-45b4-4797-ac84-b6e64d397a81", "indicator--6415fb5e-cd70-4cfb-828a-3a81e3907dfd", "indicator--32a677d2-9ad1-49ca-9278-83af91f0e638", "indicator--571e30fd-f1d1-43e2-a750-ad10d2501dda", "indicator--a0e52f95-62ec-4dab-879b-34020773945a", "indicator--17fed0ea-65ef-48ad-81f3-afbe3aaa8392", "indicator--9552078f-b08b-4d4d-8700-a8ddef63ff98", "indicator--c01964a1-5920-4540-b109-31f03b90cc01", "indicator--f26eac74-17d5-46d8-8e44-80d45f50de2c", "indicator--888fe1dc-fba1-4f3c-85e0-645a3fb264c2", "indicator--6ead6c6f-90b1-4b19-afd2-925900703c36", "indicator--c8eeb6ff-8d87-46ba-85bc-4ee33a7fe496", "indicator--4c4d2dfe-9845-4b83-9c50-8dea11ebf71e", "indicator--a6b822aa-515c-44f5-b499-6807a4595117", "indicator--9e7ece28-2780-488d-8feb-8cde46014e3e", "indicator--797d5b0b-31f7-45e7-a045-682742e794c0", "indicator--6143b48f-f815-4001-9eda-0136a9faa54f", "indicator--31ced4da-2173-4d8a-ae1d-9719bea4b3ae", "indicator--0ad73751-4e77-432a-af49-249e717c83d0", "indicator--37c98bcb-d882-49ea-a608-49ab58556443", "indicator--fd723125-c235-42de-a97e-09f990e144df", "indicator--08c18d13-d4f4-4b5c-b1fd-49c27e752c22", "indicator--272bf708-f612-42a3-87e4-d7de679d39b3", "indicator--20736624-892b-4180-b93f-4ffafeaf8b9a", "indicator--af8fc226-a128-45cd-ba4d-9677a431d5f8", "indicator--87c6f12a-3d80-44c6-82ae-3229147fe5aa", "indicator--1abd7aa8-0ff6-4ca3-a512-3edbd65aa8b3", "indicator--727f7f0a-c347-4a49-a7f2-0103fe515cb5", "indicator--909dbf06-5d07-4b08-9c2b-579a1a3bc378", "indicator--f43e7d50-fdc9-41a2-a6c2-218ceadef47a", "indicator--b0ee672f-801e-4f0e-a134-0bb26abe7ed1", "indicator--b252f0de-7046-4357-b94f-010b7681f2f8", "indicator--857008bd-77ae-49c5-8470-25956d2f3b2f", "indicator--d82ec734-c8e0-415f-80bf-c8bfadece1f9", "indicator--68ed20b5-d403-42e4-972f-2247ac578326", "indicator--7d0e2563-1cfc-441e-8f7f-2f2eef495a55", "indicator--278004ce-fc1f-40ce-99d5-152306ec0164", "indicator--3618d876-48af-451f-a42b-f4304fd98080", "indicator--e180659f-31c1-4b92-9a8a-eb6d1c0d0dbd", "indicator--38228047-fcc9-431e-8e42-cf552f4e43c2", "indicator--b6d4ad95-d036-4633-b2db-850b50fabcf7", "indicator--f83b724c-fd27-4d14-abb9-acd611b6691f", "indicator--eab3f656-0938-44a0-8f10-f2056888987d", "indicator--e0c03a34-4eb4-46fd-99a6-328df8a772d6", "indicator--9c01afbd-e491-4f6d-9903-34e4796333d3", "indicator--45d1dd6e-2030-486f-9f74-fb093796f6ff", "indicator--0f5781f6-5660-4a31-bce9-279cf81b9162", "indicator--3a7f89b7-0c63-4c9c-9858-c713d7d15465", "indicator--e22e2457-c410-4c76-9a79-15f1c0a7db98", "indicator--5371115c-5c9b-415e-bd63-976a68334d47", "indicator--5709dd1f-d18a-4361-9d0b-5841b6e09a1e", "indicator--f95a4612-7089-49a8-92fb-1100691b4c7d", "indicator--7779ddc3-074a-417e-9e41-f12facdaff00", "indicator--5dd5f905-4d2e-485e-986f-56b255936745", "indicator--1dc6f419-a43c-43cb-adc3-2f3734093d04", "indicator--ba9f9a40-0ee1-491c-8690-c717b7210456", "indicator--60b31a56-cf62-4be1-b774-3313f21510d5", "indicator--944951b4-6fa7-4f69-857e-44b11b0803dc", "indicator--0ad23123-1b01-4923-a45e-4340770a5635", "indicator--6ac81e32-da8a-4316-8169-12a68efb0d59", "indicator--1862dabc-805c-4fd3-85a3-676889a7abce", "indicator--b0bb1301-8d8e-49d7-a1c3-9d62e138f665", "indicator--b26aa80a-c1e8-4712-8ad0-fe3f733e3147", "indicator--9996110c-3328-4661-9816-fc430c74eae4", "indicator--5614e772-8150-42b4-b088-5d99f79d8868", "indicator--44b1e1f3-512a-42d7-a021-1f66efaf1c9a", "indicator--9492ceff-60bb-4889-8e88-2f9bba9a9e6b", "indicator--f3de0580-5b76-4da3-a09e-de29bc7591e4", "indicator--058f0c4d-c7b4-4939-9876-184b6f34b732", "indicator--a4986d74-d61f-40bf-aaaf-9418eecde6b0", "indicator--5e4175d9-4842-4649-aa95-1c6cc3633a46", "indicator--a6349baa-aff7-4e37-ad95-f5ffa352dbf4", "indicator--a742c82f-0096-4430-af16-a1149952be48", "indicator--24d168e0-c73e-40b2-9286-d2dd07828043", "indicator--d185038a-7058-46f7-ae4f-e76a6c15a2a4", "indicator--a58bc7c1-53b5-4acb-9bfe-37274c7136aa", "indicator--07e218d1-d456-4951-9788-fc2ab963f1a9", "indicator--864f78a3-1f3f-41ec-837a-ac14907b3189", "indicator--cbcb89db-080c-4332-825e-8f219d65c700", "indicator--535e74f6-6c37-46d9-9c91-865bc1a5d931", "indicator--fea85d66-2a4c-4f32-be9c-ee1aa01dd695", "indicator--d5929efe-2d0f-4c34-8398-cc69d22f14d5", "indicator--ed4425cf-153c-4930-908a-5aff093593c0", "indicator--b8d2cc93-9570-478d-b14b-a53969e6605e", "indicator--d3129bf8-f3fb-4ded-8381-58971aeb4506", "indicator--a42108d8-fd44-4589-af9d-fec120e7f0e2", "indicator--1cf9f1c8-5bc8-4280-a489-5aa595c21e2c", "indicator--5831e4ec-6a17-44ed-a428-aef9dbf93b34", "indicator--299dce50-88fa-4aab-b2ba-0376c537ff86", "indicator--09bd943e-7585-4881-b629-0d682ff0fa72", "indicator--1ca9d8b3-f85e-4c42-9bf8-39b8ac8d8668", "indicator--7df2f9a4-402d-4881-8cdb-7ef719e4c725", "indicator--e6e960ba-fbdb-45ee-82f8-8c401f271222", "indicator--af268730-5743-4ed2-95e6-bcb85d235563", "indicator--d620a2c5-a786-4084-b0ca-6d7701e12c5a", "indicator--b58be3a8-c0ea-4aba-a393-2c8ef91fcd98", "indicator--6f2df2d2-43fb-4e08-8d51-fac4ca578486", "indicator--eadf996e-81e7-44fe-9c8c-9e518530ad55", "indicator--adab97ce-75a3-4383-8615-ad4173449262", "indicator--53afa16f-5e99-4e21-afbb-e66a3f154600", "indicator--e488d300-ff49-41ed-a1d0-6c34bb637f8b", "indicator--65eb8ba0-d41b-4c4a-8e03-033b733fc830", "indicator--d6c6681e-79e4-48c4-8645-cc7610f40538", "indicator--43afa12f-0793-426b-8a32-4aaa60ffe850", "indicator--28914a1d-32f3-4011-ac76-02269a605462", "indicator--5474b957-49ff-425b-8c80-a3287cd3b6fb", "indicator--18da9513-de9a-4cf1-b2d1-6202f272d21b", "indicator--0c8ef111-1188-411d-805b-e767f9c96223", "indicator--f45c0b49-4e7d-4b1b-8e09-e000cc6d43cd", "indicator--7cedeaf3-dc5b-4ecf-845f-29b2272dd142", "indicator--2b1005ad-5874-46cc-863c-91f754eb8bde", "indicator--9128074e-4e34-411e-84de-e285ccffd803", "indicator--7d09dacd-d6e8-41f9-9e3a-d39d88cb3133", "indicator--9e18e7bb-06b1-4d37-bf24-902adf3ea733", "indicator--7dc2c5ab-060d-4ce8-abed-e06f3307cde8", "indicator--c9c9231f-b0b7-4e06-93c1-8ed8b6cb463b", "indicator--03c3066b-00f6-489e-8ee1-ecfca7b3dccd", "indicator--a2718b54-56a9-4930-a45c-9ac597db5728", "indicator--76acc77c-a6a5-449b-b22e-4a62a3e62678", "indicator--a7380f7e-e943-4aa7-b409-bd7c54a60a4d", "indicator--ee25da33-3577-487b-b626-71467c2b711d", "indicator--34157c3d-e9b2-45b1-a808-37b30832d0a3", "indicator--0779e6eb-96f9-4825-83d3-9c0b95de0dfa", "indicator--8b739277-7f68-4929-9a16-39329fb9a6c9", "indicator--9284c72b-f788-46dc-b4ea-f008e72c97d5", "indicator--7162c239-0b99-4cb0-837a-f76eca68139c", "indicator--a6d44625-e303-4c0d-a3a4-37790cdb20aa", "indicator--47fc3229-b70c-4ab1-9f79-2fae85a5b637", "indicator--9e8b0ee1-dfe6-4c59-9d21-2c76904d113c", "indicator--26c34eec-f6eb-4b8e-91d0-19125aeab881", "indicator--d22db5ce-26d0-42bd-b916-6fb9ba0f0eb3", "indicator--191bb899-c5fd-4178-8e19-3c1679f32e3f", "indicator--5a3c6a1f-b299-46d7-9099-37c7791f9ef6", "indicator--15f33851-8180-40a7-8f6c-e3b5f90ac560", "indicator--e01fa89c-0c66-4d06-b1d8-9ec291c926f7", "indicator--fbcbe62d-6427-426e-8c41-b39582b78fba", "indicator--7ba2574d-169c-4271-b678-b6e6ab04f644", "indicator--d43c0c77-4a53-4101-a755-3ca705f16d7c", "indicator--6c63fca2-ccb6-4822-a7a3-4bd2b239f2dd", "indicator--209c3ad7-e27b-418f-a342-fa253d2e6a30", "indicator--794ad203-db27-4fe6-8903-051d3f087045", "indicator--ffdbe82d-a765-4dc0-b650-b889ba42b2ef", "indicator--a3252d1b-04e8-4893-aa30-91f47b8b915f", "indicator--daa18b66-6ccc-4169-b3f1-59c57e0cca36", "indicator--62f3dd33-62a6-48f8-af5e-1436e04b7002", "indicator--2e805bde-d097-4f1f-82a1-2a67aa0f3594", "indicator--4ede46ef-db47-4617-8a1a-ba060b46ba11", "indicator--477264cd-9f99-4dda-b1ce-196bdc1b1e0d", "indicator--a3a9489b-88de-4ea0-8bc2-cccb0b431e99", "indicator--705f8c8b-2dde-4363-935d-553a8275bec3", "indicator--9554b18d-a294-4481-b922-9ed52cef5ccb", "indicator--eff6b2b9-12a6-44f8-996d-070e82878583", "indicator--62e2f681-7585-4e92-97a2-b5e26ab19124", "indicator--6c880ace-7906-4fff-86ba-7bc71bdcffc5", "indicator--dce2b397-7e79-4fc7-9df4-a591177afd93", "indicator--7dd43eb2-f5f2-4678-9096-e2241f564b93", "indicator--7d4bb59f-3c28-4df0-ab0f-14d199a43b86", "indicator--b6f5cf00-4b51-474b-a5d0-d53e26fa5c73", "indicator--772f85cf-be3b-4b45-8f62-d15b09e61a98", "indicator--a1df8465-cc59-4af1-8486-58fb26627a57", "indicator--35ed2c8b-5d4e-4bc4-a8ea-1d86a773d2c0", "indicator--bc14b382-043d-41ae-9569-85041b7a9de9", "indicator--7823d6d6-c4fa-4eba-9932-fd781260def8", "indicator--97fb76be-4ea6-4fc2-9b33-6b6fce2a98f9", "indicator--103a48e9-0fe4-4416-b7ff-756ac8583dce", "indicator--afe743ad-2071-4ec5-8a4a-f63c2c096063", "indicator--860ac4ad-1b68-4147-be70-e5b52266b3ca", "indicator--cf5fe6ae-dad2-4598-af76-96a720f3e948", "indicator--4c6581d9-4238-4017-9e24-77c0b40af40d", "indicator--5b79b425-97ae-4ea8-8657-36358f133628", "indicator--8b320915-0faf-4000-8838-16ddd41f1c15", "indicator--c2643b2d-b608-478e-b7c0-46ad60ddac64", "indicator--bc65e5e0-98c3-42a0-b2f4-ee3dec78031e", "indicator--4c6dcb32-fc2e-4efb-89fd-3b1f7747f1cd", "indicator--849894d8-6c51-4d24-a38b-dc48e2750704", "indicator--7b83545e-3ba2-4982-a823-31286dbd488a", "indicator--677c8072-01c2-4c61-b745-c44a3efb7220", "indicator--71d45c37-9428-4d39-b3b8-e8b0b5c9acd7", "indicator--4840e2ce-d512-4b76-a55a-6e57c6926da9", "indicator--7da76040-a99b-455d-8fb3-0dc637f68fd3", "indicator--a88c1671-11c9-4dbc-9dfc-f671f03f1135", "indicator--c5fdab0c-07e4-4935-a534-d5f947659f9f", "indicator--9a303076-b1eb-4099-a193-5ee387b41091", "indicator--6ac97eea-cec5-41fd-aa49-4e43f5b5deed", "indicator--d044a11f-7063-477e-b518-179bd6083019", "indicator--71e60d8d-5c3d-4b43-b121-e588b5f242f2", "indicator--c4eba745-b8ea-48ec-ac75-d06f08496bba", "indicator--96938dc5-00b0-499f-b99f-405db2811d15", "indicator--2f3cff3d-4444-45b8-8ebd-b493104e3a8e", "indicator--961785e0-735b-4592-a548-e8bf0717f29f", "indicator--3ce38c9f-95de-41c4-b910-b22b60203e98", "indicator--6e7e61bf-71e9-4ea5-8159-5bf349a2526c", "indicator--952737e2-6580-469a-ae62-493140eb8fd6", "indicator--a19cbbdc-e42d-445b-9881-5ea2fa55033b", "indicator--d479c674-847c-4972-a6fa-8bf734082c19", "indicator--5f36c342-d1ea-4f64-bec3-426a5a7a016e", "indicator--598fd559-b94a-481f-9b16-794a7867338e", "indicator--ffbd69d9-9d52-473f-ae07-f0f671c0a0d1", "indicator--f784f3ab-d593-4d5e-9e16-f0643429d412", "indicator--09b9a37e-c6e4-42da-b7d7-25fd49cb5708", "indicator--eac7b552-d735-487e-9921-1e1df61f2175", "indicator--48e5e2e2-de5e-4a59-a1a3-c671d2bea8ec", "indicator--55520b00-6664-4d2f-99bc-25a7c8343533", "indicator--d1f11602-2811-4ac2-a19d-72a037e7e267", "indicator--03f7c665-ec3b-4df2-8e78-27ded89af42c", "indicator--085495b1-fb0f-4e10-a215-43ebebd8c985", "indicator--c0e3eff3-0592-4654-84e3-2260f7a0027d", "indicator--9f9a2e97-69a9-4374-9866-d382fa91c806", "indicator--8312183c-fc13-44fc-89d3-8977cf9639f1", "indicator--908b2037-2ccd-4457-a84a-5ee2f718c7a3", "indicator--6c19034d-4c89-49c1-8c8b-169e497bdc74", "indicator--c9e5b0e0-e819-4ee1-84da-fb2ea9ab3566", "indicator--98ac13d7-9d6f-45bb-a10a-2813dbfdb85c", "indicator--726e3f4a-e23f-4710-a150-589912f1d066", "indicator--a0b76356-ea6b-4b7b-8927-72431b7ab7a0", "indicator--aac7569b-e23e-4db4-882c-fd90cc94a402", "indicator--090cdf74-9c11-4e56-b7f9-4ec2ab615333", "indicator--bb22d155-0074-49e6-aff4-9458322f3b0c", "indicator--ac658ef7-23af-4362-93a1-7190a7ff3a04", "indicator--12391b70-3ea7-4c47-a946-6d8cd3f5e1a9", "indicator--62d83276-40f6-406f-8879-e1cf5ec2f1dc", "indicator--43fedcf5-3d7e-4a49-9942-890fde2686a5", "indicator--8dee5eb4-0ac9-4496-bbd9-52bb0deb842e", "indicator--97afb2e4-973a-4e1e-98f9-11f87ab21426", "indicator--5228865e-f592-4415-80d3-6adf201f7276", "indicator--9aae3ac1-d4cd-457d-a211-776e7b00564b", "indicator--82b7aaba-ce7e-4f15-8b04-2fbb17135294", "indicator--b499d205-1028-414d-b6a4-2dbcc682c7a3", "indicator--01223fda-d8a6-4885-ae38-c13a968a8964", "indicator--678ad598-fa6e-479e-aa54-99007b0cd9d4", "indicator--78b96762-fad6-4b05-abf7-51750aba8df3", "indicator--1e009884-d7df-4e3b-878a-1a513d5b8d7e", "indicator--dde4accb-eee4-449f-8a8a-460feb374d76", "indicator--0fef17ea-7cfc-44ac-815e-d1f21e52b6a4", "indicator--68fabe43-4462-4e27-94b3-941a32a596ba", "indicator--f32a0a24-579d-4e91-ac18-d96f0323fbfe", "indicator--10e27864-7392-4558-855d-80c1fec9bb91", "indicator--a8578307-a0c7-48b6-950f-46bd7b6eea2e", "indicator--34fda15d-6d5c-4fe3-b2ec-a07579511a81", "indicator--091d1d2d-6518-4617-92c4-de32203ce268", "indicator--b38048d9-dfab-41e3-8b9b-56c3b418c552", "indicator--d4b47134-7428-430a-82f8-252df6636dde", "indicator--6ce36927-5736-4a39-8035-f699c9afa7ff", "indicator--30031d5d-cf17-4413-b2a7-7e67d7518cef", "indicator--3a6167a0-809b-45ef-a762-007228e839c8", "indicator--8e523360-c971-47c1-88c8-3b55be480f33", "indicator--03a38fb1-315d-415b-a23f-b9f386fe8c4c", "indicator--16e4bf33-7327-4b48-8bda-548389f91697", "indicator--44df0ca2-c239-48a5-8c12-0e2f83266a66", "indicator--9384fbd8-5c52-455e-9679-a5f2d7743c31", "indicator--488f6c75-a1c1-414e-a1a0-4a81c0360aa1", "indicator--ad4f58ea-539c-4e80-a337-e04304f899f2", "indicator--ca33bbf7-8c66-40b9-8614-5fc05793cf4a", "indicator--1dfc1dba-a103-4211-9cae-4e74f76802a1", "indicator--0a4c5ea9-f92d-4734-af96-61b4a035ff36", "indicator--6b4d11b6-338c-4e16-a4bf-66ba9e314abc", "indicator--7c6efed9-2683-4a51-9a75-bbdd46588e5d", "indicator--bbd90068-c942-4e3b-96e2-1f216c0beee9", "indicator--ea6d2bc1-d938-4a2f-9419-6612726d6bb2", "indicator--343054fb-b9ca-431f-948e-5e0d09579362", "indicator--9b5209d3-4195-417d-a332-b397f2b0f46e", "indicator--37dbbf4e-d927-4a13-a997-8dd7cff9bf80", "indicator--fed161c3-97f8-45b0-89df-5b0c8360e89a", "indicator--17084954-e4fa-4c66-a00f-0ead950c1d17", "indicator--6fba3980-2de8-491e-a7f5-aaa3b43b5456", "indicator--86402f76-50a4-43f5-8489-823a457282dc", "indicator--6e300ac5-6aa0-4e05-a1bb-4a84636b096f", "indicator--e9c02359-e4df-4b3d-b1d3-10bd87199618", "indicator--6a391827-11f9-496b-965e-44d7083fc75c", "indicator--7aea11ca-4d0f-4874-8e3d-032dd97169e0", "indicator--341b9201-b9d3-4901-b60f-afccf978402b", "indicator--ef0deaa6-6d43-43b1-8ba7-e828f058c6a5", "indicator--1f6ac0e5-2710-42a6-ba16-79e58834f789", "indicator--67ddd328-1cc3-42dd-9ef0-64db3ffd75db", "indicator--a14e6f80-7e13-471e-9ae8-5d2232810e72", "indicator--d998489d-9b08-493d-82f9-1119f74ca5c2", "indicator--614ab996-9e01-4b60-a20c-cf5b3020f6fd", "indicator--ea0b0316-8968-480f-8d42-5684d341359a", "indicator--2ef18dcf-8132-4d00-94d3-95372e7866bb", "indicator--a4f65dd1-9ae3-4bc5-9084-c0fd7619890e", "indicator--fb4fd21f-7e11-4d60-96e7-ef7505015564", "indicator--f5ce1070-1210-46e5-9758-ad93a73b61e3", "indicator--5971922b-7d94-482d-ace1-711994157c04", "indicator--fa67e925-21fc-4a72-ad29-3167c3d48c8c", "indicator--33513423-6857-4769-a1e8-558ed5fab523", "indicator--73692823-1215-43d9-bdb9-83ce28026bc8", "indicator--614942ef-82e7-4a69-a6c7-63e9369f8923", "indicator--cfa163a9-1515-4624-a80d-71e2b88244a9", "indicator--922dbfd0-849a-43f8-a60e-8891b836d842", "indicator--02b24595-7fc2-4af8-9923-ade6c7aba19f", "indicator--91cfebe1-c3c1-400a-b48e-9efc6b910250", "indicator--6172f1ee-5074-44f9-b030-1bef9669fb1b", "indicator--6b4358aa-01ea-45b0-a59d-a4a8b30bbdd1", "indicator--1add9546-aad2-463e-87ab-8e93b2900d74", "indicator--02a68dcd-ce5a-4390-988f-465e1cd1f501", "indicator--09bc3660-b08a-450d-8964-3d0d421dba43", "indicator--58624af7-c8ec-4bc8-affb-c24d39ed7d5a", "indicator--5941b4d0-dac4-406b-be81-febb617d84f3", "indicator--105bfa81-9b50-45f8-98a2-24a08ec5bb30", "indicator--1a19cebb-2d96-4753-bad2-a155b11c7c5d", "indicator--bcccfc10-be51-4e6a-ba2b-f0da3202c246", "indicator--04e6bda8-1f97-4646-b7db-3c096d9356c9", "indicator--a0875571-aa55-42ce-980b-e6710664f7ef", "indicator--48fdae8e-de81-4b4e-ad4f-f0a69590bc26", "indicator--d7834f7e-6eff-47a0-aa77-cf2eb99bb5e6", "indicator--0c33846e-dd46-4108-9fb4-d519fc0e4a23", "indicator--d57d92a5-439b-4675-a17a-cf51805e0055", "indicator--0b2f4782-aa84-4b02-9e61-cd032d58096f", "indicator--8a895746-3ce6-4218-9c0d-164854e1156b", "indicator--7e1f123b-533d-44e2-a1ab-f4490829ef48", "indicator--accdeff1-a013-4dda-8961-b3a76bef2bbd", "indicator--10c6ff97-c4ea-496c-bca3-df47b987916b", "indicator--06c2577d-55b2-42db-8781-b09087450678", "indicator--6817f8ba-3d5d-434e-855d-bca6b20d679b", "indicator--dc4e9704-fbaf-4e42-89c0-8132ec9b2e16", "indicator--91ba0445-a40a-46f0-94c7-5f819647a1eb", "indicator--ae70f4e4-5a4d-44d8-9d2e-ad6e23e4a2c6", "indicator--4f75101a-bd03-4167-87d7-3ccd0175e221", "indicator--63776e3b-16ed-446d-846b-cbe86dba67ae", "indicator--63f75763-018a-4aa9-94db-b0e4cb9164de", "indicator--76aefb7c-e8ae-490b-a7a5-944ad1ccc8ab", "indicator--07f31006-1130-4ce5-9e6a-0e40f0c62085", "indicator--e367d6f7-1298-4259-bdcd-c3c8d3017a2f", "indicator--4f5646b3-4340-4e80-b3f2-e12256c08541", "indicator--b4e349a8-9a13-4f08-ab4b-0fc0cfa3fe72", "indicator--a85ceb88-e077-4e2c-8551-a79271c57124", "indicator--f5f283cc-02f5-4ec6-b290-d51fe34b4981", "indicator--5b305f2f-ab15-443e-a7a8-4cf6d30a1b08", "indicator--5ddffc02-f692-495b-b3e4-8691d560ec13", "indicator--8b794658-7de3-4496-a399-5541a7fb35db", "indicator--25f703f1-df4e-4b87-b33d-e1bf72801f9e", "indicator--6b568d93-1276-407b-915f-8aba9bc1257f", "indicator--be213897-7ae3-4aab-ab2c-1f2204929b58", "indicator--70cd33b9-5dcb-4fae-a739-6453eccaf07d", "indicator--8999d9a1-87e7-42a1-acdd-39503031333f", "indicator--e5f3a559-0c02-4856-9cc2-e214aad94b76", "indicator--0b6dd54e-6d51-4eab-b51a-0575a4061431", "indicator--00c42b2a-55a4-4c7a-b645-4a8f99500f4c", "indicator--c0d4afcf-a466-4413-bcf9-90fb21ad78db", "indicator--22caf2b2-2073-4298-b4c5-8a17401981da", "indicator--f425e572-9277-4aa4-86ee-6777b25c6a97", "indicator--3232c6c1-8a38-4b4b-89e7-9a2a308a0a82", "indicator--69dd88f6-58d4-4131-bf92-fe605c371ba6", "indicator--cb5adffa-e9c2-418c-901c-4067c367ccad", "indicator--c028aceb-35e6-4bd6-8f84-701d7d36ef8b", "indicator--06621048-3e58-47f6-a592-7abe167a3b41", "indicator--45f558e1-3363-4b9a-abe8-6443901215e2", "indicator--57747b93-0fad-4627-9b44-7406efee1c21", "indicator--bbd72f49-5b87-4872-b8f1-56498131db4d", "indicator--d18fb7e0-f917-4b24-b1c5-46115c8d3235", "indicator--065a5d13-7ba6-4331-89ba-b2f3943d4e4c", "indicator--233c032b-3b70-4a94-84a3-ed18e497768e", "indicator--af663a85-249e-4108-9f0d-7f6f9bd743a6", "indicator--7c6df39d-319e-4d7e-a216-8eb61626b578", "indicator--eddb8878-5626-4905-94e9-ccacd34b389f", "indicator--e2ccdc2c-cc61-49ef-8300-9aa424bdd357", "indicator--267fe450-0b1c-4364-84a8-de659384c467", "indicator--052aadd6-2291-4e7a-b126-8790199d21e1", "indicator--a8c27bb5-e528-4bbf-abed-2e4d3ca85ad7", "indicator--e78e6311-562a-486c-b081-e8a0bdcdc013", "indicator--17198185-8186-4388-b424-5135de6d984f", "indicator--01142e62-8200-4951-af1d-a9223403e6be", "indicator--0bc8938e-2baf-4344-8d33-c9726790b471", "indicator--b1fcb4bf-3b4c-4431-957c-7e258a203372", "indicator--64b4148d-6722-4e10-988d-6a194364a850", "indicator--259c7834-5a63-4704-b6e7-322e32cebe3b", "indicator--1048cf31-dd5b-443a-8028-13927e828b41", "indicator--c1fac418-f857-4f36-8ec1-a174c9063271", "indicator--199142af-73c8-4cac-942f-be7c8f0b02b7", "indicator--a022cbb6-c4c8-4629-ad20-f3878cf448cb", "indicator--33d50a52-85f5-4f66-882d-18162b894a56", "indicator--48932768-ce77-4813-a91a-74ec2284237e", "indicator--af90f6dd-0d7b-4412-9f23-1d0a31607876", "indicator--f38331b8-9b9c-42f3-9ece-6a513583b0ad", "indicator--64a212f2-1eb1-4552-97c9-d90db9c057cb", "indicator--3a403e61-997c-4f4a-b066-37ed65c9ef25", "indicator--10718ae0-9512-4607-992d-eb17250392a5", "indicator--b4bbbf9b-aa53-4caf-9f33-d9dc7ddb4d4d", "indicator--bd7821d4-9955-4c60-b1fe-e95d2919436c", "indicator--25abc013-e182-4f54-bd64-23e148e85217", "indicator--8bdf6189-2546-4abf-bd07-69cb229437d9", "indicator--fa5b8692-1f84-4cdf-ae24-eef9d989d833", "indicator--eec206e1-daf8-46ff-8b1a-bcd69c418313", "indicator--7d526021-30ee-4b17-9daa-3f8ddea7d227", "indicator--8c78046b-d1a0-450f-849c-711efe76f9a2", "indicator--4bbfdd04-07f6-4c90-b065-b1f80de081ab", "indicator--2b9cb94f-31fb-4e7c-8461-a7f606f9336a", "indicator--110cd97f-bd43-44e3-802b-7cf8819e2f0a", "indicator--ed5b4218-ea23-4cbe-9670-71d43d858a7f", "indicator--74800dca-ee39-4fdd-bacf-32d5b98ec42e", "indicator--2161ca8b-c5c3-49df-8465-8bdf35dc07ae", "indicator--07f561b7-60b8-441a-b747-e75b3d83357f", "indicator--aa826ed0-796b-421c-a208-2f25093b6e34", "indicator--a95226d9-28e6-4e34-90a7-5210b3c3cee3", "indicator--145803aa-5d3d-44f8-8e70-fb9a0add316f", "indicator--4f027519-a25f-4875-8fa0-8002fa3e69a8", "indicator--24b704bf-0b86-4878-897b-aa4d6c0292c4", "indicator--bbf747c9-8334-45e3-8f24-0be195fd9f82", "indicator--0a24a69d-97b1-43d1-89b1-9f58873a8e03", "indicator--169c70ad-f75a-47f9-b786-7284f425c17c", "indicator--2bcb0f6f-40df-49fb-a0b3-174e7212f46a", "indicator--7b0296a2-8f61-450b-8962-dfa8b41d922b", "indicator--f8535f16-369b-4cb5-b550-8295dd9aee78", "indicator--72ad02f8-561f-474a-9dbb-2e42a079c8ec", "indicator--33124163-b814-4a71-b6a3-4e33448a394e", "indicator--9aa32d82-8ca7-46b2-824d-faebb7726544", "indicator--79134485-85d0-4f19-974c-1b7fbe49164c", "indicator--4f22ec8a-e174-4a84-b8b8-af04047908bc", "indicator--d1c43e33-3fef-4466-bad5-5162393841d7", "indicator--c1aff968-31f8-4748-a47c-4f5d40470f22", "indicator--a351ee48-f6d8-4a8e-8b91-3a5773f60054", "indicator--bb355b6e-e3b4-4b81-9b72-b3b8181bf647", "indicator--acb08a4b-0e47-4650-91ea-f0288d0b9102", "indicator--11a82fb7-5d20-446c-88e9-8670c6dd3d6e", "indicator--89a43186-9924-42c7-9987-6ab121f3fa06", "indicator--c69b9040-5643-4984-88f3-5a9b9b101a4f", "indicator--274430d4-89a2-4e34-932c-9cb05cec7be8", "indicator--dc316021-7a90-4451-ac08-bafc5ee33a89", "indicator--47196a26-ee09-4216-96d3-1e750b370494", "indicator--66ad9f58-1584-4557-84aa-2aaab8cadfc8", "indicator--4ea36a62-6d27-4bf8-96d3-39be3e701e73", "indicator--acbe1422-ab18-4225-8a63-f00fec018a40", "indicator--6ac157ad-f299-4ec2-97c4-3e6b1c27c5fa", "indicator--0ed7cc8a-f1aa-4e0d-a8ea-119c0b39cfcc", "indicator--bdc37901-9356-45bb-aca7-eaff2986830d", "indicator--b8b749e2-d9c5-4997-b688-c097231e74ef", "indicator--27f50313-b9fe-4f30-ab5d-6103cad90d17", "indicator--93207004-c253-4fb4-8a9c-6c96cf095a8b", "indicator--868949e9-5768-4e71-aa56-4ae8b90d23ce", "indicator--b8ff66bd-2910-4a39-8177-59e0e69b3d02", "indicator--d020bbfb-5f2e-4540-8f76-ad3804c4516b", "indicator--5eb360db-0929-4bad-a36a-17d567c296cc", "indicator--62a865fd-ad76-4c97-9cb0-f8b9b736d0ea", "indicator--59a1c81e-bfbf-43a4-83d7-28802884d64f", "indicator--830836c7-a5eb-4a4e-bd44-bd7cc816af79", "indicator--9e057c66-a8b5-4764-b7f9-b3c9b00a16b6", "indicator--0fa0c192-6f8f-49c3-a317-4d0012a461c9", "indicator--24c1e2fd-0608-43ba-91c5-594f1f560945", "indicator--56df8e7d-e92b-4eed-b81a-50bd8bcc46b1", "indicator--e80fa33f-07e8-4d4b-8e10-4e9ca0ef28a0", "indicator--9f50f80b-7157-4a71-8636-051bd1c13e04", "indicator--fb46dc82-8e30-4daf-8c35-ee610ebb9068", "indicator--509de03d-ee65-4ec9-88df-f706afa5db98", "indicator--75ecde8c-6b8f-442e-be81-4ca0b7e42101", "indicator--73e853a3-7b18-4326-b069-8a581e3ca1f1", "indicator--8a8621a9-61df-47dd-9a3c-75ea5637093c", "indicator--93196648-cab9-4f5d-9bd7-de9839de604f", "indicator--373f3519-33d8-4e10-b64e-b2d0688de2dc", "indicator--21129cd2-c4bc-4504-a7bd-1dbb2f7f706e", "indicator--0282d958-861b-4001-8d22-6b3c715589b8", "indicator--bc946de4-52a5-4151-b032-98d6c4b7b13a", "indicator--e83fce15-2cc7-4bcb-a79c-cfb7184388f5", "indicator--4901efc5-e321-4f89-8da8-82825575e959", "indicator--a37e7b28-2337-4f12-b3c1-e882608d6ac1", "indicator--ef811646-9681-4068-a7c2-71b713d65045", "indicator--c1413f86-4b46-49b5-a4c6-ee0ccfeb15e4", "indicator--12dd57ef-5a5a-4c70-8c3d-3f081b9d6d44", "indicator--1626f98a-a1ea-431d-a6d4-0159a8814efa", "indicator--bc8b8218-cff1-4553-ab94-114210614d6b", "indicator--14b557b9-3272-4ec9-a9e8-3ec2b12c51f2", "indicator--795b6848-4efa-4fca-9403-f1775f213b5c", "indicator--30be1a98-9ffa-481d-a035-2c599f514ba3", "indicator--5cbb374f-c5ca-411c-adc8-cf91b6c6f285", "indicator--710e4f25-5116-494e-bf7a-a1cd7ab069dd", "indicator--de64463c-dc30-443a-b581-e946f8d908f3", "indicator--298e0255-ad79-4395-abd9-b19ee0a76008", "indicator--8d86e5e7-88a2-4c27-9e90-ca50b9565184", "indicator--6d5316ed-680d-4915-8015-83851a97c3f2", "indicator--2ac07c4e-83fc-4079-9ed3-61521186888e", "indicator--6a6e926e-c260-4ff3-a18d-ebc1c2c996ce", "indicator--c05a6cdf-26a2-456f-969f-54de9223b1cc", "indicator--758ba0a1-f646-440c-a557-e74167c2378b", "indicator--b7df5273-1bf7-46b8-875e-a6133ffa956a", "indicator--fedb9b9d-5b6a-4e10-bfb3-3da4029da22b", "indicator--9b3b4f65-702c-4def-85f0-ca1f23ce3b22", "indicator--cbe04d99-130c-4fe5-818b-e0838c6d0378", "indicator--222c7aca-a0c6-4892-b4f5-fc8e61ca568c", "indicator--df1e99b1-b549-46cb-8f28-d90ee0f7714f", "indicator--fe0dd618-1aa7-43fc-b975-d33ab314b492", "indicator--1d725bcc-fd4b-4c29-8f34-d12fbcb3b13c", "indicator--9da84c27-77c9-45c7-81a9-a7e8038b0eb0", "indicator--f548af38-24e7-47d3-adfe-3b9af588fa71", "indicator--a1755349-d4d8-4823-95c7-d6649361965e", "indicator--39b996c1-d385-4864-b475-e5f0dac7d8ae", "indicator--5106a743-7c45-4d2a-96fb-b1f3329eb33b", "indicator--6d4d13b5-c557-4ace-a1b6-99176c06318d", "indicator--03bc92cd-92b8-4aa3-874b-033100d0fd4c", "indicator--d12fd9fa-7015-49d0-a240-efe4d66f2601", "indicator--760472f5-4533-4705-b10f-6b5790e72c74", "indicator--7287d28d-8966-40a4-b2c8-9b1794550de7", "indicator--6374592d-7ebf-4762-902f-9cca85f06d22", "indicator--1440d052-208c-4476-9d6f-fadd5cd36689", "indicator--4a94388e-1f81-4a37-b4c6-85cbdf975557", "indicator--c9b80d94-188d-4034-b1f7-e7b28e740274", "indicator--bd685ec1-d663-401e-a8e5-7864fbcb06de", "indicator--a68489ce-9b77-4b69-a380-260f43f6f9f5", "indicator--0eed568d-4673-453e-ab1e-0b558344c20f", "indicator--bbf148ed-7cc2-4fa7-8c0a-6f38e6fa7851", "indicator--747fe7c5-76a0-4c4d-96f1-ef437f9a6796", "indicator--df9469c3-00f3-47e7-ad77-a04cc58d794b", "indicator--bc287f3b-eeaf-4fa3-a167-b395af57fdb4", "indicator--c5c5f689-bddb-4fb4-9aec-ee8dbc24f200", "indicator--363ad3ea-79d4-4c06-b60c-217ae7f35a37", "indicator--5c04e535-b78d-4ae4-9341-9f73d2914069", "indicator--92a3178d-ba1d-43d1-ae59-1e6b24a518c1", "indicator--054bd6b7-36c9-44df-807c-8236d8b6713f", "indicator--18f8c95e-ec0a-4cf0-aa07-f297cb3cc4b4", "indicator--960ed98c-0ef5-4599-82bb-17775295a771", "indicator--f0b621c2-3a89-43a1-9778-e7d6212d6161", "indicator--94ce7e63-a4c1-49dc-8cff-a655ebbee411", "indicator--2ed023ed-57cc-42bf-a089-d0452e98abe6", "indicator--62b58506-bb44-4957-b03d-dd85d6e225f7", "indicator--5d6cfd00-4310-437a-86d9-0fadc52db1d1", "indicator--b7a9e2af-9e89-4867-b763-6fb2f2f22365", "indicator--daaf4be7-b9ac-447d-884f-23f2d8164ea7", "indicator--1d1a6cf5-aff9-49f8-bb1a-79f5e041d9ab", "indicator--63767419-c066-4f55-be20-e2a345d55888", "indicator--7dd3fbc7-df42-4d36-b470-61b269777db7", "indicator--eb8b75c6-5894-4b62-bde1-6767b0d7e941", "indicator--61bc4fb4-48d1-47af-99eb-8cd0edb055e4", "indicator--ff2be211-0b59-4af6-b6fe-7f919519cdb5", "indicator--a13b9174-65d2-439b-b8f3-5f23ea278bbe", "indicator--b1ce3081-1e9e-4fee-b6d4-f4d795a2fd4f", "indicator--e8243b5a-19ee-49d4-a51e-14ace327831e", "indicator--7f7958d5-79bb-4210-8233-7973f8a301ce", "indicator--95f68f2d-bd99-4fe5-97d7-9a9cc3d2dcd4", "indicator--ed4b30d1-c00d-4360-a7c3-ead98140f51e", "indicator--9e1a89d2-f555-4d90-9e1b-33ffda2f4163", "indicator--f9defaa2-9c37-4f00-b1cd-6b30d43ce8f4", "indicator--282e1ad8-eb3f-4d3c-8013-c25b742ff843", "indicator--cf4dc371-7bfa-48a5-91ed-5f7b1e97f4cb", "indicator--84827e18-cf21-432b-9e49-e286af03de25", "indicator--868fb3cc-f471-4783-a0ac-5ee3a0baaba4", "indicator--4afd85ef-2b7f-4e89-984f-e5017de22dbf", "indicator--8e70a435-a4ef-4909-bce3-58ac0419f0b0", "indicator--c6993092-1276-4282-b363-1e057c7bd555", "indicator--aceb8d07-1359-48de-8c48-233fae15da5c", "indicator--1194e908-5c48-4da9-a68d-4a35489b4105", "indicator--87dc6b0b-35e2-424c-8d44-44cb5984188a", "indicator--fd9f865a-3f08-4e8a-93e4-c7bcd6794cab", "indicator--76d839b1-bdea-4798-b1f7-6c47b1ac5721", "indicator--3a245b0d-e44e-4969-8ad2-c7e761c6d435", "indicator--c6fb4cfd-41d3-4d48-9a96-64a9f9e11d34", "indicator--dd4401fc-728b-4973-8294-f555ed9a3da1", "indicator--17b0ed98-e1d4-47cd-87f6-e39e64d67032", "indicator--819e9c4a-699f-4b67-940e-0fcdf8da474a", "indicator--16aaef7f-af74-4a4a-9d5f-316e833b019f", "indicator--8d71a893-dcb4-4451-8b4c-c81b797aaf15", "indicator--53676b4d-ff0d-476b-a451-813a44394f4f", "indicator--75dc118d-987a-43bc-a139-1c5b13062926", "indicator--fc37f3b7-e61a-4cd6-9d9b-2408ed430caf", "indicator--ac7658f3-8106-49ff-8b51-4ca37fdb5d69", "indicator--85e04a1e-33c3-4540-9def-76fdfebd1090", "indicator--ef237d1a-0b40-4616-842b-f09c823c90e5", "indicator--168a69eb-bb8a-4c18-bee7-83274740c42c", "indicator--dd633175-fbb9-42b1-80ea-8aa612ca15c0", "indicator--ef5e7b13-7e24-42fb-a59d-23150e701bff", "indicator--2fcb3cf0-9699-4ab7-96fd-2a8af16df4bc", "indicator--5f9b6ebc-9c92-4ab7-983d-575933fa4bf4", "indicator--b1d9c9d2-ed62-45fc-bd2f-8fc8e890b26f", "indicator--450391f0-9db5-45c1-ac9b-4fb7c6f303c3", "indicator--14fa0803-f2be-44b1-a8bb-c9e2bdaf77ee", "indicator--df9b6562-bcaf-49c1-b1a7-0e3681531d22", "indicator--a271a3e5-3b43-4f35-b5a1-a8c5f67e6718", "indicator--0487be8e-dfd5-434c-9852-fa383d6cc600", "indicator--4929503d-1ed3-43a8-9b6a-d69abd651dd6", "indicator--fbf709f7-b354-4797-9446-ff364b622758", "indicator--3953cbcf-04a0-4389-b9c4-93be4b79694b", "indicator--833fce09-7f99-489e-80c5-e546bbbe8828", "indicator--87d3a4cc-c235-40d6-bdd4-8b0cb6d9de10", "indicator--e378c7fb-f22a-4e32-b8ca-07d9f8a75f26", "indicator--a9360939-f108-4b59-8ea3-241c06366faf", "indicator--344bc146-81c2-408a-88f7-77d2bfc70c81", "indicator--c7b152d8-7606-4ef3-b866-b5a04b106440", "indicator--02335883-9bc3-4329-920e-15ac8a1e6639", "indicator--ffa91b0c-467b-481b-b069-a1817dd2ea90", "indicator--d195676d-ffaf-40a3-9c5d-a22509f36e5b", "indicator--6598f0ee-9608-4cc9-bf73-71740d9d5e65", "indicator--55239617-88b9-4e9c-a00f-fce327853905", "indicator--c70a611c-4bf8-4eb6-8a4b-cfe12a9c6e63", "indicator--8f0b338c-717f-4f55-90d0-7cf5ab32247d", "indicator--4a9727f5-5767-4717-bb07-0c23aa0d71f7", "indicator--b05853a9-2410-4586-a165-7466222a4470", "indicator--a53f128f-08a3-4519-b0d6-66c37d9452c0", "indicator--8e3e48f1-164c-4eaa-b979-5dc38a0926a7", "indicator--0bf20f31-c956-41b6-87cc-b55c7a4ec37e", "indicator--5dba3c70-6900-46e1-a039-fe1edc16e562", "indicator--b272aeaa-ebe1-4c0c-b60f-79286285e4d9", "indicator--16488488-7ed6-4343-aae2-e79cf14350c0", "indicator--f69b7bdc-38af-4667-be3f-ef26575591ee", "indicator--67c3d040-a252-42fa-b535-38e3a348669a", "indicator--a17cd8e9-8410-4307-9dee-facad9a057fd", "indicator--f74c10c2-41ba-472a-9e61-9589d0db7d4a", "indicator--dcfdcf11-2e71-4876-b26d-6b01e34c98f2", "indicator--9acf712f-8596-4c1d-8676-7afaa7a087fc", "indicator--5ad9b41a-f8cc-48a8-9024-80f32a198837", "indicator--743a454d-6ee8-4b77-87e1-e33f5bab00e4", "indicator--b522c80e-1766-47f2-a408-e9323be857a4", "indicator--ff52816b-924d-4057-8f76-d1abfc9d7f9c", "indicator--12060177-0e6c-4d59-a0e5-c2e14fa05a30", "indicator--6ecd4cd9-845d-4f2c-87ab-ddb90dfa4885", "indicator--950aa7ce-18db-4f2b-bb02-d11348475fbe", "indicator--943e9a94-31a4-43af-b1c6-02703070e32d", "indicator--b8d8f76f-2c52-48a1-8a66-ba8c9b6c34ca", "indicator--0d8d6eb2-e527-4032-b541-48ed796e1b7c", "indicator--0642df18-4a6b-49a1-80c6-50fc02999053", "indicator--a749149f-a63f-4c13-9b17-b7d0a099f582", "indicator--ab28b8e9-1f28-45f1-b3f7-dafcbb8be5b9", "indicator--67ea0719-4e4f-4765-85a1-42afcafa97b2", "indicator--7bf573ad-a737-4015-9272-071dfef59ea4", "indicator--c7913171-eafc-4dfb-b346-f39638a466c3", "indicator--ac55b4a4-6710-44a4-8e95-e4976b4d0f46", "indicator--e2089c55-7b83-42e6-a7be-5193b0b6e1a6", "indicator--a4e8d2da-61f5-42ac-90a7-36557933488f", "indicator--f67f6ab8-2153-46dd-95b0-d7bd15a9723a", "indicator--da724154-4a00-46dd-bf79-a93b9ae31bd4", "indicator--ec2af29d-238f-436d-9263-78fb9761e202", "indicator--3c8d79f3-0440-498a-9842-10af11dbca13", "indicator--d31a7eda-d209-47a6-840e-2c7c1fde36ad", "indicator--3995ef83-7afb-4477-aeb2-9ebb1bb4c741", "indicator--11cdd865-08a4-48fe-a971-1fb1d1317ac9", "indicator--cc4270b9-db49-457a-b16e-cea4148766a5", "indicator--bb047ebd-abdc-47a5-a744-e28b62e42f7c", "indicator--d063f2cd-7037-47b6-87e8-450fd9b58287", "indicator--d74995aa-f762-4662-ab9d-f1f983519f4d", "indicator--46a31db8-215c-4516-85a3-3b6665283172", "indicator--ac9d467a-35c7-4217-a4ec-6f3848c7f5eb", "indicator--85b766a5-c3fd-4cc6-af37-28070d2942ab", "indicator--dafdf2c1-7e3f-4505-8e84-be198e9b1df3", "indicator--da262d98-6247-4e50-ace7-3436014bc433", "indicator--ee8f3a4e-c569-4aa2-9a9c-0c3aac89e271", "indicator--29e7ed3a-546b-415e-b57f-2762cc7e5419", "indicator--a6815274-589f-4333-9b59-08bce2640c94", "indicator--438123ff-1709-4706-9e57-9ee489f86387", "indicator--75a86465-3ab0-4b1f-a7d0-8c79a283963f", "indicator--bbc1c3b0-a46a-4534-bfbf-325e3b4e6105", "indicator--c7a07ea4-0bfe-4576-948f-b03fe0ccb12c", "indicator--2f232926-95a2-436d-9edd-4e89bcaad617", "indicator--2b9eb203-7edf-4592-a77b-169c902b721a", "indicator--5699598c-42cc-4b52-9872-b55c0ec4efd3", "indicator--3b037c29-0eef-46ba-b3ce-576000ac2fb7", "indicator--5c9da280-22ef-483b-9fb7-286caca12894", "indicator--cad86d88-223a-41b6-a016-fe6d3bf468a2", "indicator--59be4692-2f62-49c9-b024-307c0c356327", "indicator--c1b09daa-aa74-4ec9-a0f4-eb11f256e96a", "indicator--c127e3fc-724e-411c-b57a-e9fbc1cb51a6", "indicator--62177b0f-b6c5-445b-83e7-6ee888d44037", "indicator--73179227-1b74-4866-8afe-f2bac6ba5eb3", "indicator--099875cd-47e5-4f83-98ac-69ef5a0d9f2d", "indicator--f725dfba-9d06-4bd4-92dd-850467704d73", "indicator--4da2a92c-e37e-466a-9f6b-fcf72701b549", "indicator--8c8626e1-095c-4b02-afc7-eb93406a6840", "indicator--85fd7d40-a2b2-49ef-a74d-1bbeaeb690c8", "indicator--9b0223fc-9647-4e27-87fd-0cf21e2f14f3", "indicator--7c017be8-d0ed-4e9a-af0c-05fcacfc00fa", "indicator--3b7a3761-032f-455f-ad2b-e9de681ac78b", "indicator--a68f6dd7-c761-451f-a8b9-9c6581389f62", "indicator--294d03f4-0008-4dcb-bdf6-fc8462ccbaa7", "indicator--cbdce748-2963-453f-bf3e-7bb58c741c27", "indicator--b2d0a862-8cf0-4b45-9cd6-86044a4f9386", "indicator--030c7731-1fba-48ab-9c9e-1df88d7f341f", "indicator--70fd0bd5-84f6-4637-afdf-da763a534b63", "indicator--abe9304c-c1a6-4131-acd1-909ae2b122b5", "indicator--3fb97830-7fc5-4a82-ae4b-c445af11f895", "indicator--fcc6b3a4-9fd0-4a76-9298-7fbb2f2228cf", "indicator--0e3a43b3-dbff-41b6-9634-611d60052537", "indicator--50d0b304-e13c-45f1-b2cb-9725b81ff08e", "indicator--374c50f2-07f9-4525-b26e-b2b63d71634d", "indicator--0f8942a0-01dc-4258-9196-c3cf4a34efe6", "indicator--17de879f-eefa-4bb7-bd4e-f75c79dda5b6", "indicator--2492e728-a784-445f-8906-9e1cb21f1ac2", "indicator--8ddd3a9d-ac5b-41f4-aafd-98a1afd94b91", "indicator--7fe3c9a1-ad70-4d8f-bb4f-0854f2f7c4c2", "indicator--719a0dc9-bde0-474e-9d88-6e3fc06b1278", "indicator--c5712758-02bd-4d48-9913-42ea28aa9872", "indicator--4e2d2707-bd9d-4ba3-836f-3e119995acde", "indicator--dbcfe355-bbc7-4d82-a9dc-dc0b8a67a498", "indicator--2136cc4f-7d7a-4d09-83bc-02c9013f2c72", "indicator--6710ea4e-60c1-4ceb-b9f8-48374bcbfdaa", "indicator--b6d9cc8f-95aa-437b-bf49-77ff6b2b22e7", "indicator--6300580b-4cca-4bd3-83e4-ba5cabb023c5", "indicator--13a9fdc7-d86f-4524-8edd-b69373bb0150", "indicator--33152092-8c82-4cac-840f-3fb17eb55673", "indicator--1e157ebb-c66e-40b5-8b6f-40c618c3b334", "indicator--7f0c80ae-10a6-4903-9912-d2ce4ff11a43", "indicator--f682991e-ceaa-4351-a6a8-818e8d5a2390", "indicator--8db996bb-09ec-4f1d-8f56-33c74db12eac", "indicator--1994bee5-1936-4a76-9cf0-72acda3ed5ff", "indicator--36f9b492-0274-4589-9895-a56c781211c7", "indicator--0c8591e9-94e0-4236-a75f-85fe7042a1fa", "indicator--855c453a-48e9-4f46-90f1-301cd7119863", "indicator--d47834f7-9850-44fa-ac64-bf3ea3769ba0", "indicator--4a1222e4-e4db-4633-940d-4db34e0c67ea", "indicator--f6d7f85e-3adb-44b5-b63a-fc3d29129434", "indicator--4eec6317-4636-4836-969a-aa8e1d402690", "indicator--8bedb4cc-4319-4178-b9ba-c0726f377942", "indicator--996eb4e7-61eb-48eb-b1a6-2f88039736b2", "indicator--0f8dc773-9bb9-48c3-997c-8099030b863d", "indicator--e633a028-9b98-434c-bbfe-80278d7c3482", "indicator--7d3cadd2-c7e9-4663-9eef-24d8a07e81bd", "relationship--3e2dbb45-fdbe-4029-874d-4ba17d306476", "relationship--f4fd2f20-b97f-4cbb-bd71-6eff70c986b9", "relationship--6ff63c5b-a7e2-42be-97af-4d0fbdb64eec", "indicator--363d2864-284d-415a-b8b7-c23aa1469fef", "indicator--0294f470-0dba-4dc2-9eda-8d573ec2d2e3", "indicator--0454d39e-8e6f-48b4-8302-cb6b64d95f08", "indicator--928de9e1-c3fa-4249-86b8-cb7b217d89f1", "indicator--3ef9c14a-02d8-43d1-ab06-8b069c237c8a", "indicator--2fe7d9a5-0210-4611-b2f4-a76843b3416b", "indicator--c8078402-2793-4d67-855e-c916903e721e", "indicator--75348493-824d-48ee-bb72-ca69c05519b6", "indicator--10b3347d-6238-494f-85b3-a26dfbeea2c8", "indicator--6ac3d1af-6921-4393-a57c-d5924fc3fe45", "indicator--127d66fa-d811-4d07-864f-7ca29534e635", "indicator--35baeb6e-a474-43db-bdea-c5cfc722b23b", "indicator--7697e3f8-f71c-4205-b3f6-7a06e7a1f718", "indicator--ad36d493-2aae-44ff-b2ae-7aa7d6b612c1", "indicator--0ab305cc-48ba-4e74-bdbb-87c9c1f143b5", "indicator--f6c001a8-cf2f-4dd0-8755-ec4285fc5c83", "indicator--3a5a5377-c25b-46de-bfe3-f4c50a626800", "indicator--e0a2810e-b4db-4807-9def-3a1ad1f3e939", "indicator--8063b2f0-b8a0-4328-a387-edca4981a6d5", "indicator--c7957557-0bbc-4bdb-986e-04fcaf9a8dbe", "indicator--9769de05-e56f-4baa-a8fe-587bd5d87b59", "indicator--d6f4ed10-b990-4193-bde6-4f9341dee925", "indicator--fcf44d3c-af9e-4467-9de1-b3bbe5a077ee", "indicator--fe854068-0ce2-4abb-9857-7f132cec4d69", "indicator--a595bb74-3fce-486a-9454-29275ef17dd6", "indicator--0502f6f7-3c11-427c-82cb-20491159ad7c", "indicator--fbaa0edc-7cef-485c-a9b6-21fd0b2a5b07", "indicator--95d9d99e-58a1-4d80-bfc7-93b6be818f5b", "indicator--e108e71a-d694-439d-820f-619303e5a39e", "indicator--c1af0f30-8ea1-4092-94d0-e59ac8e4a046", "indicator--25fb8e6f-fa4e-45d1-8656-48ebed71006a", "indicator--5ab8fd32-73f7-4c20-9fcf-b1e71ea48330", "indicator--d3eb315f-08d3-480b-95db-1844636d2e54", "indicator--b0f53037-9b08-4325-a0d3-9614303e0757", "indicator--fdbccc25-f852-47e5-bf7b-ee448d0bec09", "indicator--beeb483e-ebaa-48fc-96ea-ab0accae52a6", "indicator--e0fabba6-2f6c-4a8d-aec7-bf1b724f492d", "indicator--cc891949-40f6-4360-a339-c60b8e52e5a4", "indicator--3d9a9658-ac0b-42aa-bf59-bffc15063eef", "indicator--69e8cca4-b59a-4e67-bc3f-2fb554a7ac02", "indicator--9cf81155-3a2a-4388-8b32-ef55d225c085", "indicator--b6bbce82-1b87-4eb8-8456-e4d26461c8fc", "indicator--309ca02d-66ab-43c8-b54e-30d9a823c983", "indicator--d66303b1-e52a-4424-956d-9ae57c67e477", "indicator--6c20ace2-6364-48d0-8240-fbdbdd798ea7", "indicator--73aada82-d489-492f-8a4f-6b2464e3799c", "indicator--9ac4e43d-f743-4cb0-954d-be8d01948aaa", "indicator--52f71723-ff65-48e4-aa48-08bb13cb03fd", "indicator--99741c72-ad56-4df9-90d9-c56f288e08ad", "indicator--e13942ee-d416-404e-b5d9-8a5be96bccaa", "indicator--f2cab2fd-eb5e-489b-9ec8-5a29f21bcf14", "indicator--438a1c6e-c3f9-4e28-9fb0-f3a1090769f3", "indicator--4f1ff694-2d4d-454e-81f6-9708eecbcb18", "indicator--c7e4f968-f5f8-46f1-89e7-058666eb975b", "indicator--72f8b761-ed3e-48cb-8b62-36224f170131", "indicator--48debc40-fa6d-483c-a2ed-f132b8d91ac5", "indicator--452b5773-2ba6-41c9-8a7f-aaff265fdd1c", "indicator--96e6265a-43fe-408b-8018-d86ea7e9dfe3", "indicator--90de3501-2a2f-40d8-bfdb-a784ab1e7cc0", "indicator--8f3d3992-0ce5-4edd-be04-99d9fa8d8539", "indicator--799607ee-69f8-480d-8c72-914b84a7c26f", "indicator--945816e2-2932-45f9-944a-1086af4ce838", "indicator--fcd49e3a-0dbd-41c2-a7be-c3abdab0be94", "indicator--6c00a6a8-76c2-432f-a47b-84ea9319ada1", "indicator--fc76e88f-18b8-40f9-8c98-261308b9d57d", "indicator--72a98b84-fe50-4e43-87df-61631602a72b", "indicator--c31c94be-0907-493c-8e2b-937dc7f3078f", "indicator--edb163c5-f448-4b04-9c7b-e7bd9be43196", "indicator--6dd78fdb-4207-4609-b271-ff867514636b", "indicator--7d7c6dee-989f-4c63-befb-00643dab3321", "indicator--556ffad1-ca68-41a6-8931-c1cf98d83304", "indicator--292dd877-55c5-4407-b19b-904557db4060", "indicator--1ed6814b-6631-4881-b93f-98c46331ab76", "indicator--81c18429-e6e8-4fe6-81c6-e3b5589c880d", "indicator--9835de71-fcc8-495a-a48c-dc97632880b7", "indicator--1cf302b6-0ce1-42d7-9534-6922d95fcb2a", "indicator--dc9825a3-2458-4d96-9ae9-a43e2da89d79", "indicator--1fd6d1c1-7618-4dd0-907e-9ee5c3f216f9", "indicator--fec873f9-1bc5-440f-927a-00e9652724e7", "indicator--94924be6-495f-4e34-83b0-74d0a7c7b615", "indicator--509ce2c6-0de7-45de-810d-a542d17f2b3f", "indicator--a2000848-6a81-4dd6-84c6-6aaa1e6eda92", "indicator--e046643e-187c-4bd4-ab45-3c731c38fa60", "indicator--76896f1e-05c9-4bbc-b239-db34067870f6", "indicator--12d862b2-f47b-4eca-96dc-0cc529e851ef", "indicator--3551c234-c305-483d-8db0-593e5ae10a5c", "indicator--d0cd9725-4fb0-464a-92ae-18417efb8a4c", "indicator--b636c10b-dbc4-49b5-854b-7cdc06477fb2", "indicator--5b515ef9-684f-418b-b42f-48119cfd19b1", "indicator--67b13717-4af2-4020-b222-c4d8acf9cc60", "indicator--54a55f7e-4c72-47ab-83e2-3d3f78f4b9d1", "indicator--ce190810-46ad-40ad-80e4-1e5db3bddb3f", "indicator--4e90814e-968a-4f21-b0b7-29fdd2f08577", "indicator--70b8cdaa-f52f-4aa2-8319-d31d92532c39", "indicator--40f2a3d0-c687-4c65-abb6-12964a6fb103", "indicator--2f73307a-9559-4de3-8047-f353adab79d5", "indicator--e250b609-bbbe-4a34-b0db-4ba67b7ff1f5", "indicator--42f2ee83-dd20-4feb-a92f-43ec1bc36925", "indicator--2f803737-40b5-43e6-b732-bf6b95dcce23", "indicator--0e64c18d-9ce8-4365-8211-6ba69478fa2f", "indicator--4c7308af-5630-485d-9597-5d8e96315851", "indicator--cfac703b-9982-41c2-b7f9-7d02b2330322", "indicator--c2f3ec79-3e86-408a-847b-14141d504694", "indicator--d15f3266-1def-4a5a-8c47-c90fc7f1aabb", "indicator--c5197e01-d48e-48b0-a372-e4a481329711", "indicator--f8537451-0659-4293-937f-2a7359a40e84", "indicator--4614a7db-aada-4057-b3d6-f0edfdcecce1", "indicator--e7c113ce-d561-4315-820f-b8fde882acb4", "indicator--50dd25a6-7a92-4775-a3c8-aa8b3205c825", "indicator--89696ae4-09e2-4e15-a578-23ba1e432f23", "indicator--70a53aa8-14b8-418f-9e54-448b6361e2ea", "indicator--e3d4e1cc-ab2b-4fee-9878-ed9dd649be61", "indicator--e91b5727-c88e-4eb9-abea-fe2793a1d0c0", "indicator--2d25033d-4e6b-4111-9c82-c8fc2bbf34ee", "indicator--7799118e-94fa-4c72-8c64-17e7fb0f9cb1", "indicator--5af2ca65-e63a-4e67-aa91-70c4c44206c8", "indicator--91abd7fb-313d-4527-840f-e5e36df0898a", "indicator--82146701-3d7d-4b3e-a11f-b26fafcb9be7", "indicator--45f87436-d3b2-4d8f-b56f-dcdc6bbae959", "indicator--c8a534da-cca7-4a29-8159-2217ab328626", "indicator--6205c7b3-36a5-413d-a651-ed2d2976e849", "indicator--d20f4cfb-4d35-485b-a626-951275c62f5a", "indicator--3226db3f-6d18-443a-9ba9-fa35f2d2ea66", "indicator--7077f7a8-6036-4d26-b090-2e1532ef5e87", "indicator--7a8bc50c-46ad-4bf1-81fb-9872589c6ea2", "indicator--11e74060-9da2-434a-9b3c-d547e32e4c2f", "indicator--2ff03aee-d671-415f-ae61-6424219a9bf6", "indicator--4a7fb139-550b-4ccd-98e2-2eacc63ffee6", "indicator--527973ee-a27c-4dbf-b319-cb66ce47d20d", "indicator--4cb0a39c-f1a3-4d2f-8e01-ff481440f345", "indicator--5238fd38-3970-4993-bb48-3931d22cc10f", "indicator--0bf024b7-219c-4bdc-b30c-e755f18465fe", "indicator--29a132c9-e048-4c7e-a3e4-0145e46000cc", "indicator--7b07f227-3e87-45a3-a6f6-722389e07e0f", "indicator--f30aedb4-a478-4fcb-bfae-3df1cd726ff1", "indicator--d1e26d7b-62a8-4878-9665-62e6bc534065", "indicator--af4ae71b-b3b6-4514-ad55-b95ffa03cce6", "indicator--0d0ed455-1eca-4fa7-b466-736235ac2d87", "indicator--66e903bf-0868-4f79-afc8-91e908b627aa", "indicator--c675a741-8a31-47a7-be52-de72ede3bfe6", "indicator--baa13efe-e8db-4581-9bb3-66132cde1455", "indicator--fc247393-e208-47ea-83e4-b88333e3e1b2", "indicator--39fdc86d-eb3e-46a6-98a8-5d7022b17ed6", "indicator--c6f4d866-864b-4909-a48e-45423a79072f", "indicator--1ae64886-3a65-4ec1-b9a1-cac2fa608b57", "indicator--5164374a-b2ef-4e29-86b1-ba703f012c57", "indicator--04fd1411-0524-47a3-b6ee-be8f9aaf682f", "indicator--09032c9a-104f-4089-9b98-96bf77dbf84e", "indicator--932074ba-a621-49fc-9d75-e95ae99c89c3", "indicator--1adf1527-3482-4dbb-9a25-26f43e19f841", "indicator--f06b3dee-4f09-4635-bc3a-0a16e75ee4e4", "indicator--4529a796-7d6b-43d3-af39-807b43f610c4", "indicator--c2f55782-9ebe-4f60-aba6-20c07f7d1cbc", "indicator--01068e3e-6096-4bf8-a021-defd2ec52f95", "indicator--27930cae-f728-40b1-b5f8-0118a7dffc39", "indicator--3dbeba1c-b3b7-48ad-b510-c3a8fca97719", "indicator--b91e7731-5846-4372-839b-ef2e9dc35419", "indicator--262023c6-b298-493d-b58c-a04353e1e836", "indicator--d1b05761-11b8-422e-9ea7-0de7b4d1aace", "indicator--122812c8-f1f1-40dc-a8e6-926851a011ee", "indicator--8d4899e9-66c9-4fa6-b971-f50cf433ee10", "indicator--3dfcc2c5-1b1f-44f7-9214-167106ad5332", "indicator--b48e3b90-f4e4-4abe-9d36-02913b310b3e", "indicator--855e66f7-56af-4a64-9808-c500b46529a4", "indicator--89d7ff50-d73c-4188-a5e1-30a5909be0ce", "indicator--9cff2ab6-50ef-4dbf-852d-a7cedf18ffdf", "indicator--c9b7d773-6fb0-44f9-8dce-59dbadb0e66c", "indicator--8bc2a81a-ba29-4a0f-8277-11d1d41cc1b8", "indicator--285c8150-8613-4a8e-afb1-53bab4363961", "indicator--5181f1c8-2e43-4768-8918-4fd5db97b3b7", "indicator--6aa57e72-3828-449f-84f9-977c2847f18c", "indicator--f2b9cd09-010f-436d-87cd-7e9f596bbbf6", "indicator--cef22c0d-2671-4354-84d1-bfeadf8bd2b3", "indicator--b72e4689-1d2b-4dfa-abd6-87e7d023e668", "indicator--e896fc9d-d038-4c98-b5d9-66f02b5f05eb", "indicator--618fdb69-556a-40c8-8d00-49d5c0bc06a8", "indicator--ca52bfcc-91bb-4431-af0b-d96e6aebe5ae", "indicator--452cd47e-23e2-432f-a774-78052cc1f23b", "indicator--1fc05c85-78a7-4d30-a7ed-713dc2eef39d", "indicator--42ecb782-a846-4377-a150-029ba39cf4a2", "indicator--6f81070c-bf02-49b4-9c74-1b50974a2da0", "indicator--68cd44c6-ae36-418b-8f8f-a562d8f7a186", "indicator--1c8e4ea8-1980-4239-8762-2324f18edb44", "indicator--1c0df525-9126-4801-a5b0-048b9b0ea56d", "indicator--caae04af-a5a1-465e-b831-84bd7527eec7", "indicator--93662a60-03cb-42e9-ac7b-437604d9eccd", "indicator--a9eae2d8-e6fe-460d-b2f2-6cf046e29caf", "indicator--84da3a65-f80d-49df-9108-75f238ed04dd", "indicator--84f5f065-bcc0-49d7-b634-e49ea8c5cb2f", "indicator--2d964656-c51a-4086-a7ed-7ce8861b830a", "indicator--8a360e0e-403c-4776-8101-968ed03a8b39", "indicator--e50b25c8-1560-42be-ad34-07d575b2a1f3", "indicator--554758b2-023e-441a-8922-19766ce834fd", "indicator--da358ce3-adff-43e9-a112-1604bb67a23e", "indicator--561d53e0-285a-49a7-9e2c-6cc6374bd629", "indicator--0100cce0-9166-4a70-b667-d097d6f7b0d7", "indicator--9230ab8f-657c-4a74-a455-9be907b719a9", "indicator--647b19a6-d7ad-4701-b55e-a8177d5c7bc4", "indicator--0144a46c-d4e0-46bf-beb8-2219726be70d", "indicator--2355f365-5141-4d2e-b59e-a76c456ecd89", "indicator--d7449a48-5ad5-4323-8064-6ac0ca9a4f36", "indicator--0ca4c93f-4901-4c93-b9fa-6112de886d0e", "indicator--60f864cb-2305-4376-b01c-a1f50573c105", "indicator--6c7be44d-d642-4946-80ab-7eb82c0af822", "indicator--df515d6b-a671-4e40-bb3b-8f65b58bfd78", "indicator--5fec401c-d048-48a5-a76e-31d22eed1c29", "indicator--713d2db0-59b2-4780-b571-7730886c896b", "indicator--69dfee59-ac87-4f1b-aa90-44d53ad80779", "indicator--83c14ad3-4668-4187-89b0-6f9661cefad4", "indicator--a34c19f7-104a-40f1-9f8c-b6ec180d8da5", "indicator--29b01ed8-a656-4433-a9aa-0d0805c88572", "indicator--639c4df6-805e-4b78-a5f9-c5fc75c9264d", "indicator--8e85dd7b-e3d6-4286-afdc-898ff1272145", "indicator--4af6adc4-a1a9-40f6-a02f-0130108696bc", "indicator--925fe0fe-3fa9-4494-91be-41094d77fc57", "indicator--85cb7aa0-147f-49e8-ab21-1932fe76f770", "indicator--251d8ad8-1be7-4e36-9fcc-721f0bde4c85", "indicator--883a2e86-4783-485b-b05e-ee9c5581471b", "indicator--9391e6a8-6c2b-4920-a56c-e3ac1d3e9212", "indicator--23734d48-8f97-4675-8124-3852af03d3cf", "indicator--e93d263c-9773-470c-8290-763c8e7b88c9", "indicator--0a4f33b4-d718-4028-a845-8acd3018b0d9", "indicator--f384356b-13d9-4239-8481-47b46b7b32e1", "indicator--f4036a2c-8628-495e-a045-ed3467ab7990", "indicator--b3a02eb3-8956-461d-be39-b865d1a88548", "indicator--c66aee6c-63cc-479b-b80a-3aad998aa330", "indicator--2c52d3b8-d669-4f3d-acc7-04c26f22e7ab", "indicator--9794e22d-4096-4243-8220-71d4b7f9d743", "indicator--be431019-5b50-4a8f-b5e1-49ba5ada18c8", "indicator--7b7a73ff-1923-447c-b47e-c04dd896aede", "indicator--3c5ff4b2-a847-407c-93ae-28ce9300ad4c", "indicator--3a0c54f1-a6e0-447e-b749-d8181b1aa3e4", "indicator--102a79a4-881a-4b98-a4e4-a36097d1874e", "indicator--5e78d595-d39f-4424-b5a9-79fb3c51f16d", "indicator--f5a478ae-e27e-4d93-9ec9-8ffa0141532d", "indicator--1869a03d-65aa-4a4e-a279-a619cd25dea3", "indicator--94d06305-af48-438d-8abd-4416284e6b44", "indicator--783d13e9-daa3-429d-92b1-17656183ca3f", "indicator--2c9ef4fb-4d76-4347-8830-4e5160f71727", "indicator--cba9d4c0-a82d-4fd5-a3ed-0d02c6b3bbdb", "indicator--0fdf1b7e-f687-4ea1-b539-4f2cda266208", "indicator--fb9b15fd-9974-4cb8-a5df-13decebe7ed2", "indicator--eaee1e86-5868-497c-82e9-4f782d720d83", "indicator--a32a1c59-95be-48eb-9b1c-711a2ce1d5d4", "indicator--e72f9935-4128-45db-b14e-a6ea6e3e35c5", "indicator--5893bc7f-90f5-47d1-b115-d5b7860816b5", "indicator--516c1864-37ab-42e8-a5e2-c1e77455fd95", "indicator--a9142c39-c529-44e6-8ac4-da1fa074abd3", "indicator--3095734b-7cef-48d7-84a6-353eaff455ff", "indicator--e60eac80-e518-42d4-b430-4a5c45763669", "indicator--f3102a2b-2f33-4e67-a4b4-46de8ab0b614", "indicator--3574a8c0-4353-4d27-a0cd-bb3cb5c14e98", "indicator--13e33dbd-b68d-4ac0-ba89-f23ed7d65b87", "indicator--56dff322-f5e1-4711-9482-b71962b5a258", "indicator--4c698d6e-a82a-401b-9282-d97e3cf94873", "indicator--de08c97b-6505-4437-a89b-c5f1033b686d", "indicator--11cbf733-6eb7-45e5-88b0-65e2c19be590", "indicator--9cfd8a0a-7582-429b-b0e6-2ea2654e9038", "indicator--e02a28bc-18ab-4001-a2de-4fcb8b6ea994", "indicator--7e80573d-716c-4fa3-a418-0e39cb9055d6", "indicator--49a8d46e-51d2-4086-ab78-776526745c12", "indicator--deac1b3b-e35c-4a68-bf2f-1354476996d2", "indicator--afc7202b-2e24-47b5-a703-52d25ea0c2ce", "indicator--84651812-0f81-4ba0-8b3e-c5b5f121fa06", "indicator--aa3d930a-e0c9-4353-a895-29feab161f7c", "indicator--fd636a95-e247-40d4-984b-5a91446f8831", "indicator--ca8511ac-c9e8-4737-a661-9976ed322ff6", "indicator--12fbf638-8acd-43ea-9f6e-e2816a6a2323", "indicator--5fc49fc5-8f63-4843-8261-751526ace104", "indicator--d0fb2b28-dc4a-4fc5-a7bb-c278a6aeb355", "indicator--3a396129-437c-43e1-9ba8-74349edb3a70", "indicator--22e14601-39a4-4c6a-8f8e-df6ac1ada278", "indicator--d2f23618-42d1-483c-95ed-8d71b30ce3fc", "indicator--8327c04a-b369-4d37-b7ec-aefd7317c07f", "indicator--51fae71f-54b9-43e8-beec-d0b50a6d8236", "indicator--f619fd81-1092-43f2-8a0b-5d04f46868b9", "indicator--7a8ca7e3-0ece-48ad-a808-e8a56f6181fc", "indicator--02c60660-6f74-43f9-889f-cb1dfdd0018f", "indicator--ab102ad7-3310-41d4-bde9-49ea2d6ac6ce", "indicator--73b568fa-8b6a-4402-98fb-91ed4df5a787", "indicator--0fadd907-6378-4858-8723-cd6f34711334", "indicator--c6ce408d-2729-4eb0-aab2-867ec5f2effa", "indicator--53b13554-8a45-4534-8876-029226ae005e", "indicator--ce3c1445-7009-4c6e-861e-8be7e35ccce8", "indicator--17095730-073c-4446-b38b-db6793e83836", "indicator--5063a90c-ef36-41d1-bdbd-caf3839c1f1a", "indicator--4998dfa7-9b20-47d2-91f0-50d1e676528c", "indicator--dae6bd03-d6df-4958-810e-ddc70b111cf1", "indicator--6bc544fc-5200-441a-95cd-708b6128a041", "indicator--cd35c053-7449-4626-be12-e03d966497fb", "indicator--8f7e439e-a45f-43e4-b607-3b0c6239b19c", "indicator--2975de48-fc05-435f-bfb9-a8343b8bc844", "indicator--b3be7ebd-b99d-4fcb-aca0-ba3b75c96a97", "indicator--09a5d3ad-da19-4fb7-9f88-d9f0a32f5ad4", "indicator--89c20d43-9f57-4ede-9454-a0e0e8e08308", "indicator--1860a302-91e4-4494-b449-25732a7b19bc", "indicator--68620935-294b-433e-b652-e9ae7168c928", "indicator--32e81af0-672e-46ed-8c0e-35bb246abeaf", "indicator--94779b87-5727-4c14-980d-681fea11009b", "indicator--2fbfea1a-558d-49d2-86a2-955e3ebe1a07", "indicator--af9c8d10-f823-4fb4-9023-ff99fd0b318e", "indicator--bf8ebb6c-4e4c-4ccf-b2de-b78057418624", "indicator--d1b45fa6-9869-4d7c-984f-95e2a85b6fff", "indicator--dbae226b-a14f-499a-83dd-59f44c52407e", "indicator--8e480f3a-d8ae-430d-966d-d69014689853", "indicator--d7083405-a036-432b-8952-31c6b67075f0", "indicator--12c43f9b-03a5-4484-a382-bc3a548310d2", "indicator--8ae21ad4-7b22-4db5-8ef4-26048085479a", "indicator--ecb4f1c1-da14-44b6-9edc-e6a0144d2b5a", "indicator--fff1dc09-de41-4799-87bd-022dba60abce", "indicator--dcdaf51e-994e-4717-8da8-ea9c9da5be7d", "indicator--63bb6267-4b3c-46b8-be5b-8fa2110ac188", "indicator--db1d7978-7fb2-4770-bf5a-5d25177fe75c", "indicator--1fe57138-30dd-421a-a2a9-069312eabe87", "indicator--f4b2db0c-72f1-41dd-ba4b-65a5af29284e", "indicator--f4e3df03-5a4c-4a0f-bf54-2e76ccfa782a", "indicator--1c380d40-2887-4480-81d6-cb71d87406e1", "indicator--6fef02c2-69af-4e42-94c1-2e1cf3902130", "indicator--72da05e8-62a0-4825-816a-4281403a5bf5", "indicator--d8e4c3f9-40e5-4077-82ec-ec170d52bf7d", "indicator--fec54ead-3c6b-4541-8e90-b3f3b9384965", "indicator--90441f41-6fec-4065-a1b2-6637f658ed22", "indicator--33bfeca1-c917-4f94-82c9-eefcb77eaf8f", "indicator--6661214d-fa89-4012-bd4e-c6bacabe15b7", "indicator--16da5e23-28c8-47d4-b743-121359cce58a", "indicator--05e54f73-8694-40de-b288-2706ffeabdb9", "indicator--cd992cff-1538-48d3-8aac-4096225e2b76", "indicator--3af26f1c-e481-4c53-a266-756608566fce", "indicator--579e6274-ab5b-4266-b7f3-13640e798607", "indicator--daaccc16-ef74-4872-867d-2f8b1d079b4c", "indicator--bcf41f15-1871-4dc2-b4f3-93c548a81062", "indicator--fcb26fd5-9911-4df0-b0bc-e0510e6b2367", "indicator--10f00c6c-00d7-46de-a25f-0f987762800b", "indicator--18e068b9-93c1-4f45-83bb-88e5c424206e", "indicator--697c9804-4fa6-4c5d-a68b-1f09addee52d", "indicator--9224759b-ebf4-49a0-9763-af7e52e81ee9", "indicator--4a3570a8-5246-4663-a101-fe5b13612159", "indicator--429205af-6f5b-4022-9d99-83b51c20ee8f", "indicator--3c977b59-ea2c-4745-8b35-09955402b73a", "indicator--3ac710fa-5d6e-4927-b078-04f444421715", "indicator--d6abf7db-b8f9-496d-9a35-d5cba0c2bb2f", "indicator--859752e2-c68b-49fa-a46e-6c9803db9899", "indicator--02a335d9-b91f-4ce6-a8cc-07ea12cb532a", "indicator--37887bed-a9e2-430d-bc14-40b01b684a66", "indicator--7ae3a87d-2876-4bd1-ac06-f6dc3dbf0465", "indicator--f49ccf40-3cae-4ca9-a1c0-86ae84c3d541", "indicator--80bc5893-f859-424f-8f7c-09b1f6a39561", "indicator--e6bcd96f-5937-4200-9bd4-1d02ae87e1ea", "indicator--3af18418-c00f-4035-91f1-0501f94cf3e1", "indicator--92d5ed16-a09d-4860-8db0-662660a8f3cb", "indicator--e6c18aee-56fe-48b7-ac38-f5755cb17ff1", "indicator--6f6d36d7-bbf3-49d6-bcfc-df770eddf2f4", "indicator--20373329-0611-488a-8a56-4e4c515f6e4e", "indicator--5c823f86-7840-48c2-9159-9543d75719cd", "indicator--9527c42d-23f3-4c18-8c22-178f6431e608", "indicator--831572ef-9b6d-454f-8619-d411f87f1363", "indicator--ad665c78-81de-491a-8cc8-4252e5aa3bc2", "indicator--efb133e5-0069-4ae2-bff0-a811dfc3ffb0", "indicator--d534eca4-3873-4452-b187-2ea05abf45c8", "indicator--837e1042-fa6d-459d-b69c-64319e947670", "indicator--15d83e97-ffdc-42a3-a026-ac1985377cc8", "indicator--777e1e6e-340f-4f14-a276-72ad241d59e1", "indicator--afd55e51-7285-4cdb-8f3b-461d084795f8", "indicator--9300ba62-96a8-4e03-88df-e60123983868", "indicator--943fb4a1-106a-41d3-8740-233544680fdb", "indicator--883bfee2-0150-4f64-9ffd-206aa53c283a", "indicator--ea8cbc10-40c1-4133-9454-a84320005f07", "indicator--9b95689d-1a5a-4116-ad7d-008c611b55a8", "indicator--867a6434-05c1-4343-9673-7c4cd14212e2", "indicator--2ee8d8aa-8acb-4a4a-aa09-c58a92ae4e32", "indicator--1ff1ad41-1288-4090-8ef5-c9e05b16c233", "indicator--f4f83659-d41c-4c0c-afaa-4dfb2825e284", "indicator--26312fe7-b9fb-41ff-8553-beb669c790f3", "indicator--e5100961-745c-4262-a3e0-182ce537280b", "indicator--3b24176a-3c1b-46f6-8439-6b81384c3d41", "indicator--f2c74ec2-312b-4203-a9b2-5aca7aca832d", "indicator--e75a90e1-ef37-4f9b-8689-4e5f9a7885d8", "indicator--ffffffb0-622f-4b1b-8a40-e637eb85e9d0", "indicator--111af0e4-8342-42b0-8926-2bfab79e1a0e", "indicator--64cf5cc9-652e-46d2-a057-a5297cd0c847", "indicator--d91b2922-d5bd-4631-b810-58ec84f84bae", "indicator--1b722c3a-bc72-4cdf-a8c5-18d2bec184d4", "indicator--996cac8b-1a0d-4ac0-8457-8fe9095fe09e", "indicator--276abac3-8e06-434e-949f-c78fb4f2fe53", "indicator--1a0920f8-bad1-4c58-854e-45bde0205166", "indicator--14c59385-1aed-46b5-b7e1-837a6032e6e6", "indicator--3b1b5749-9fe5-4847-b687-544366048d83", "indicator--bfbd5f25-a7e3-4c92-9eae-37484a6c047a", "indicator--de181790-f552-4768-ad9b-047261deb790", "indicator--e195afb5-19d3-42c5-9208-379b0a3804bd", "indicator--857a0424-f999-4f17-b736-bf2078fe39ac", "indicator--e5405086-39d5-4c9e-9769-2c230b6ec453", "indicator--b7894099-6831-4b64-9514-ffecd4711603", "indicator--e73715e8-1266-441b-b36f-396371a26cb1", "indicator--75cffd90-0965-4e03-9085-a776effc3f7b", "indicator--8ef8175d-e6d9-4ff0-ad91-f5871eb0ba90", "indicator--3be00cd1-d315-4ab3-b490-9887d657db48", "indicator--f07f2cbe-8a84-4181-8afb-1f6e79946cd9", "indicator--298cbdac-ec9c-4484-bad5-ff1bc6cf7644", "indicator--e8176a78-2c3e-4961-a151-9cb79f8acb2b", "indicator--e41c8692-33ee-48da-88d3-c791f6172579", "indicator--b8d50472-195d-432c-96b8-37a3b2f60f81", "indicator--7e3c992e-7a0d-4e48-a3fd-5da907b7cf77", "indicator--f205537d-4bd3-46a8-9cae-36cf227c17bc", "indicator--71ed4fd2-b0aa-41aa-8bc9-e09336e4fa29", "indicator--383c57e4-0a58-43a8-a842-9d0d8aadf57a", "indicator--358da921-6bf3-48f2-a34a-7df11d8d13bb", "indicator--31afbb4f-acdc-4927-9eb7-1e19447d8d79", "indicator--d4ae64bd-0715-44f2-a13f-aeb7eb851bff", "indicator--952a647e-34dc-4a16-a643-c3687a7b4507", "indicator--1553d2ac-8c9c-4687-8283-a1e751873b82", "indicator--72f6d10b-ecd7-46b0-a79c-4881faa63675", "indicator--d9f4dbd6-e49e-49c8-ad89-c9bb41367653", "indicator--baf06fba-aab7-4b46-9a3f-1520af28aa67", "indicator--45f855eb-3e8b-464f-b867-65b49f4374d2", "indicator--94eb2eaf-b7f1-49d9-af4b-23373b10f6f8", "indicator--ddfd8840-7749-4018-94e3-5a5767fa8c0a", "indicator--109d26e5-241c-4319-aa42-c1815ec33527", "indicator--9ace9c24-b718-4d3a-93f3-8dbcde68f586", "indicator--8a7f0b2c-db33-4356-965c-358604ab7588", "indicator--10952027-0c78-4464-9878-440d96d5253a", "indicator--e4772781-cc41-4c84-9e23-405b64df1801", "indicator--e0921623-829c-476e-b1fe-f4e76593bbee", "indicator--615f7195-c5e5-4d0e-9eb6-651457214fa2", "indicator--b71b505b-ea97-494c-b782-a9a68d45c2a9", "indicator--2cd3d063-688f-4200-84aa-1bdbf9357093", "indicator--8aba0c7a-e1a0-4683-90c4-c155ce141576", "indicator--2e64cb54-4831-43ac-9f96-1fc749360d63", "indicator--d1a42972-4176-4158-9128-dfe8d2de5842", "indicator--53a721cb-45b3-4d93-92fd-002c3dcdb727", "indicator--cc9bbedb-04b6-4362-b195-135056e81542", "indicator--38756eba-28d7-4fa3-8e15-17c8639e7040", "indicator--2f09a30a-045e-42d2-9a9f-59c63bb3eb3c", "indicator--f9482d75-26de-4ba3-bed9-9f7804e9e3ea", "indicator--01b8e568-58da-4b68-986e-4e3cad253c44", "indicator--572d0ffa-e9c4-4a53-b901-db4ad2560861", "indicator--8f84d3f8-3390-4366-a15b-278ed9c266e1", "indicator--f3657f39-d522-497c-85c0-19ae518e22f7", "indicator--9898bd71-f787-4142-ad80-aab37df7e52c", "indicator--b7be08ac-1b61-4a55-814d-59278f44dce3", "indicator--ff89e6e3-e045-4f08-bff6-6f0a395cec0a", "indicator--9d3e6ad1-5fb6-44bc-8632-2da4027fa37a", "indicator--ef284660-9590-4b2d-ab4f-f189e01ca6e7", "indicator--1107d6e6-ccc7-4edd-8d37-dca45fe15c74", "indicator--67dddb49-7795-42bb-9b7d-364ba2aa7132", "indicator--4336ea9d-1ff6-4018-861e-2f51f57f0394", "indicator--5702b9ef-5c23-47e2-b139-088b715b1a7a", "indicator--b01f29be-8a16-4c3d-a1f2-a37818f9ab81", "indicator--06bb75db-15ba-4341-85e5-69f4c5a343c4", "indicator--70eeb7ad-f05f-4e8a-9aa8-bc3251f47031", "indicator--355aa3e2-df1c-4175-8e5f-b193ff5fe5c4", "indicator--17c43b78-973b-4eaf-a51e-977b107ec293", "indicator--66ae47ed-9d1f-4d8d-b233-125111347fb9", "indicator--082eae04-62cb-485f-b90d-4e5e760d1616", "indicator--6c451ba3-b833-4719-984f-ab388a8200ec", "indicator--793b59a4-ed12-4d6c-8b34-0cf40dac4f2e", "indicator--71ee9384-0667-45e4-bc8b-b79c3954c79c", "indicator--ec1bf5c2-64bd-40cf-b336-a159d337d4a0", "indicator--281c1e4c-8773-4e5f-a2bc-803784f8f9d6", "indicator--94e0f4b7-3b36-46be-a64f-637cc7deb1e5", "indicator--257547ac-3bc6-4616-a5ea-d2cb6046f62a", "indicator--29ba048f-ae70-40fe-bb33-9bf5406aa294", "indicator--86d98c70-f5ea-486a-9f95-02d38d7e6421", "indicator--921f390d-66d6-4a39-8d02-b93db49f407b", "indicator--cb43394b-698d-44ed-9cf5-e77b506bb451", "indicator--57fadfe1-04ad-4102-9012-0f77ab6f0e42", "indicator--2f024ebd-433b-43b7-9b37-0093385e7cb3", "indicator--52f2545f-1e38-491b-93d4-0a10d227b952", "indicator--c1bcfd29-0d43-47e2-a28e-cc54be7b344d", "indicator--4b6a2ace-1569-4985-b09e-64025f803d03", "indicator--8d863689-e54b-480b-b601-c7b25f635d0c", "indicator--75e1ebdd-2dd1-4a94-a799-7cec7f99c53a", "indicator--2ee9b549-b236-4660-b6a6-a800f12fcfb6", "indicator--f804556a-ebc9-43c9-99c5-bcd25d8bc2ed", "indicator--5da716fe-9ae3-4a44-b4fe-774d05128b0a", "indicator--23dd5b5a-191f-4e8d-9551-d94b077f5c3e", "indicator--91379a1a-6973-476d-b914-d20cc2b0a32f", "indicator--bb79b8d3-acb6-4601-9076-9be057ab9fcf", "indicator--e879a0f8-59e8-459f-89e3-8ac4c7471c02", "indicator--933b6847-8c10-4dab-bb90-90373088c22c", "indicator--ec466cc5-6e2a-4bf3-b9f4-ee7c08115655", "indicator--dd680d78-a92b-4446-9198-07e9585f3154", "indicator--b505b1a8-91b0-4f3a-8326-70c354ed9813", "indicator--7b9ab532-b1f6-4cdd-a41e-f4cc330b95e2", "indicator--8c8b821b-8587-44a2-b022-e580e1ceeeda", "indicator--6b710762-7e03-415d-ba69-1d3429c86234", "indicator--41a3fdd6-2e01-4679-bf31-03b6678e90e7", "indicator--b3db79f9-5aae-4cd0-ac7b-670469ae4912", "indicator--442c6d60-105c-4174-9f63-3e615fbfcee9", "indicator--93cec8f7-6123-49b1-85ac-eda45ccf2786", "indicator--55ee5300-166b-4ce7-b388-ec0093e287ea", "indicator--b5994b2e-fa3b-4545-835d-35e41a2f567f", "indicator--a4b577cd-691e-4190-843c-c4d0d5257c7c", "indicator--62d52faf-5fd2-4c4a-818f-ae588168b2d0", "indicator--35b2f20c-e919-4fef-bdd2-d05f039aed1a", "indicator--a1698929-5f00-4d3a-b48b-bdf796c49a77", "indicator--3d0ebce7-4ca6-406c-b065-5cd947fe13f0", "indicator--5fe69472-2c58-4a6e-8815-eb1cbad3ab12", "indicator--76c1cffc-3609-42b0-9a06-ee9b5bafb249", "indicator--d5f5869d-5c56-4875-b122-a66c7c9df95b", "indicator--1be75cba-90bc-493a-b37b-f320b2f25001", "indicator--543b2139-7b6e-4e08-b611-1c72e7a1d6ed", "indicator--548e255a-58bb-41f1-b8e4-b3b7cb399f86", "indicator--8e473004-bec0-44ee-86aa-34f9748f2314", "indicator--5c22f26e-7e4e-4ff6-93b3-366c458dc2ef", "indicator--8c52eb7f-3157-48e7-bf6f-14661f410093", "indicator--b01d4301-2999-48b3-a495-4490fad44d8b", "indicator--b12aac67-3b66-4beb-b5ad-470388700b60", "indicator--b43d1b5c-690f-42c9-9e38-77550ae46fa3", "indicator--fcf2e559-3087-4434-8d10-f2551d4fbcf8", "indicator--cb61099e-cc13-4da0-878a-1dd758e00e7b", "indicator--f32774d8-3777-40b5-b050-42730a2284b5", "indicator--0445114c-0119-4cea-af78-dbb6ea1d187c", "indicator--c77e9325-bb20-4134-bf6a-a5b73e72b158", "indicator--228cdab9-5f9c-4904-809f-14339f10441e", "indicator--a805e9a7-4b4b-416b-be89-9e0535d086ae", "indicator--463fbfb3-c9d7-4218-b107-5060e853be92", "indicator--dbc9722c-1ea8-415a-9529-68b16934832c", "indicator--045cbd84-2080-4965-bd06-447a72cb07d4", "indicator--4c2b42c2-655e-40ca-8e88-f81b1c5056df", "indicator--a5b99100-04c6-4964-847c-d67c8f912c34", "indicator--8d4a744b-042a-4ac1-81b0-b4f75ca578a1", "indicator--25e82d78-64c3-41f8-bd5c-ce0321566cdd", "indicator--f973d22a-8486-48ef-8f6f-1a1705c7d234", "indicator--6ecd9212-1138-44f5-8503-8fae0391130c", "indicator--c5b94836-33a1-4ca9-a8d7-57a49b0c4fbb", "indicator--815083a9-2284-4d24-9214-6ff5ff18f932", "indicator--21fc8c84-a2af-4408-98ec-0f8d8efa5e24", "indicator--2ce384e2-4a86-4aa3-a2fe-d9e308d9b722", "indicator--3067c85c-bb52-4e1b-bafa-31f1530fa5f7", "indicator--c3e12361-a179-418c-a2b5-bf0ed6898b2d", "indicator--3a6a0cba-8042-4281-9b9b-1adc34358b40", "indicator--f075f5c8-1e6f-4722-bb67-1e01a1e57b47", "indicator--a8cf45f4-dc44-44e6-b86e-177457f83593", "indicator--b8832aba-c3d3-40af-9fe9-16ec0190925f", "indicator--d22703b3-8da2-40b9-a240-272c9b943af7", "indicator--40f511f5-deae-4889-bb2b-06ffd27e707e", "indicator--e4243a29-e264-48b2-a51d-f96eacbc2f03", "indicator--c4ee0de2-9cb1-41cd-89a0-ff1a8834d994", "indicator--913560a7-a8e2-4e6b-9b63-46f47a0ffdfe", "indicator--0d984bb4-aacb-4c79-965c-a1776e2e3f1e", "indicator--718e7d50-a1c9-43e2-b145-dd4f846a88df", "indicator--723a59bb-b1c0-4330-9d35-7a3fb08489be", "indicator--d29efe61-4b0b-4a16-bf9c-2edf3f00f777", "indicator--2945507b-5e43-449c-aec2-255e808b64ab", "indicator--0a5ddb77-6107-40cd-8166-d97ed15d2b12", "indicator--8ecb69be-7412-47ea-a620-3b8ae03cc94b", "indicator--22a273ab-4888-44c2-b464-650107d48adb", "indicator--f1bfc9b9-6f0b-4874-8737-97dd31327ed4", "indicator--f6537e28-e976-4a8f-bf62-fdc3b1d83b80", "indicator--943769e4-de91-40e1-96d7-52f30e08f4b4", "indicator--43cd45ce-5e05-44a7-bfa2-d6fb8cdf503d", "indicator--6f5b05fa-073e-46c6-9230-c9356d78cadc", "indicator--8238c722-9aa7-4307-8afb-26cd146c03bf", "indicator--88ba7483-0f65-43be-b3ee-9a428861c44f", "indicator--61d6659c-fc70-456d-92e7-b8c3adbe021a", "indicator--df6c40e6-6313-4d71-b579-80f2c409c861", "indicator--70b95208-36dc-409d-bd32-ce224a244b68", "indicator--accec3f6-e066-42bc-9513-0cca271868d9", "indicator--16dce54d-a03a-47d0-a995-142503cb9aac", "indicator--23913f8c-51df-440b-880a-68150914b1c7", "indicator--891e655e-049e-4da2-9c2d-d6bb28dee262", "indicator--fbab0982-0ae5-43eb-b82c-a29cb660d9d2", "indicator--9f38a199-7be8-4f77-8b53-da75f295a2e8", "indicator--aae5d4c1-941a-437a-a810-972c2bc7e2a5", "indicator--d4c92ac5-645b-4503-b401-1b2b03d04939", "indicator--8194998d-86f4-4670-9d54-c744ce7b423f", "indicator--53c0b7a7-8242-40c7-92b6-2dc32ab253d0", "indicator--9d63d79b-d236-45d7-8c48-930ef186823d", "indicator--717c165d-cafd-44f3-9e46-fcc528633968", "indicator--f4746815-cc5c-4b10-a12b-d4fc7278cb96", "indicator--6dfb948c-b92b-4f2b-89eb-6257d4fa0b60", "indicator--c49aea16-5430-4213-a3e1-d6f5f7060de9", "indicator--c0366bd9-7563-488f-b255-2a99db86edf1", "indicator--8fe6c281-3f17-4875-8dd9-a7424eb82eeb", "indicator--9fa9f4ea-0d93-49b9-bfe6-61ab4008f000", "indicator--b7492c04-a23b-4130-8b8c-77a79b67e152", "indicator--31836bdb-252e-4f4f-9deb-189c5b8864d4", "indicator--79453f1a-dcb1-4997-9ab1-75a107c95061", "indicator--35228e6d-0ad0-4713-abff-d374c4e94476", "indicator--086b57cf-1fb9-45ea-9a98-93ba3d3a9619", "indicator--abb51f33-0175-44ec-9b41-1b6207c88b56", "indicator--e190ffc5-6ecf-40d1-bd4e-d37ec7e86eac", "indicator--3dcdf44a-15ba-4918-873f-dd812aed4b50", "indicator--37451b1f-ed7c-49c0-90ac-69ada85fb1b3", "indicator--a719cd06-36df-4507-b131-628880e4db2d", "indicator--800dba3b-acb0-4809-b68b-0e5a72db9b7a", "indicator--0fedd6fb-46de-41a1-84fc-b8567e7c3ee2", "indicator--d2075d7e-49b9-4294-93ce-3123ff2ec0fb", "indicator--154ac418-9d24-44dc-bf96-e55d98a6f490", "indicator--d2ec90fe-2d2f-4cbb-bd6d-554f7180b531", "indicator--d0d18597-dc66-44cb-9801-3f67c7bebfd8", "indicator--a90c3cc7-582c-4f02-b4e8-a213e543db60", "indicator--2238371f-bbf5-4920-a9ab-c2614e06488b", "indicator--22648291-ebf3-4ca8-9225-ac2f85931672", "indicator--cc5e363f-2355-4ef7-9b90-fb1e76358065", "indicator--46faeb39-31a6-4773-957b-4a8aea062ad8", "indicator--befbad7c-84fd-4d3d-b6f4-953203b09865", "indicator--8ae2ac0f-3cbf-47d3-9d1a-0f2351f8de27", "indicator--c8d98415-bec0-4370-99ab-3129996bfa93", "indicator--f87c2e0f-5a8e-4a79-9d49-4d0c46a47980", "indicator--9eb00bcb-47ec-462e-b282-c34c2d0f7d29", "indicator--7324f813-0259-4e8f-b9a8-2e317ef1212e", "indicator--1a01fca4-1e25-4b64-a6da-664f8f9ced0a", "indicator--4a86b8e7-287c-4315-a349-9ca5542e3a73", "indicator--a8541a0f-35b7-467c-914b-fd1c2970f696", "indicator--d9f04978-9257-4a91-8163-252a85968dd5", "indicator--013a617f-eee5-4932-9786-bb583df964cb", "indicator--b52f8820-abf2-4f1f-88ff-4f23ae27ad57", "indicator--bd627057-6f3c-4be4-88e3-30e343ca7fd2", "indicator--eec6d7e9-0a7a-44b4-977a-200d582e2d44", "indicator--93eada8a-7aef-4503-b716-7d2a2e67214e", "indicator--4d73784a-6b1b-43fb-b794-076613fb2cba", "indicator--681abdd5-3e07-4717-9715-0086467b2526", "indicator--9a2ea27b-2e5e-4043-8423-0c98b3a6fd98", "indicator--c21afde1-ba1a-4af2-84f5-9fdc21beb686", "indicator--257b78c1-7f5c-4d51-b63a-65b61cdb6a27", "indicator--2e1e6ecd-aa01-4ef5-96f0-175f27a0048d", "indicator--020edb17-18b5-41ca-b7d8-89bb58e13b5f", "indicator--f2a30b3c-485b-4498-b571-987860068c1a", "indicator--a820779c-cbe9-4fbd-886b-a1e035c795df", "indicator--49b37a81-d9b4-4371-96fd-0740d03b8882", "indicator--34585773-13c8-4590-b13a-0de5bd690850", "indicator--3fdcc109-21d2-462d-8acf-6b19eef3853e", "indicator--0afe9e61-c828-4128-9a0f-1739637b7a11", "indicator--7b81ffe5-e187-4562-a4a4-ac4d688222a1", "indicator--4f978b23-3d56-4d36-b192-919428a7d8aa", "indicator--82bedf98-cf12-4865-9ff8-b50608e708e2", "indicator--88bef609-a0e8-4e37-9566-fb5c3c1e5b5e", "indicator--c407c7d7-0438-456d-846f-42f3711996c4", "indicator--8eacacc9-2361-4b65-a1b6-085807fb3cc3", "indicator--e1e1b7fc-1194-4d5b-a616-0ed24e5f88c5", "indicator--9f5c431f-1170-47a8-8ec9-98e17a7e7e72", "indicator--7d57aa59-16ab-4f41-83b3-4956dced8f51", "indicator--f2fe5eae-bd1f-4ec8-a59b-72fd92acc9a0", "indicator--4814dd28-1845-4c73-98bb-35f7ba963a7b", "indicator--aab87a8c-ca69-48f6-9a4b-a39f561f8483", "indicator--017fab42-3d17-4bbe-aab7-aec6869e26ac", "indicator--2d3ecc66-8bb7-4afe-8958-2d49e9d1b8cb", "indicator--4f0c6a9a-9fe8-4f60-91e1-a80fd206849f", "indicator--4a15c5e5-7b0e-410a-bd28-e98510139ecc", "indicator--de779a19-e5dc-484a-b5a6-7754a6251779", "indicator--982de547-c3fc-4d0c-b198-e089f7b4a383", "indicator--e110526a-c88f-4ccb-9a26-f981bbd7e760", "indicator--9a07c5ad-993c-4bf6-ab41-7869cf4f4cda", "indicator--d837263e-034e-442a-a513-4bd465c41da1", "indicator--a2510da7-9dba-4ba1-b524-0db3d8efc9bd", "indicator--1856f9fc-a2f9-462d-91e0-7e9c8dcfa29a", "indicator--caa21c74-3ee5-47b0-919b-1d4d57ff6183", "indicator--b77edc7b-6c25-4bd8-9a02-00216f5f5d9d", "indicator--4612e251-8ee4-4040-80fb-13b84d84aa11", "indicator--0e11a33f-74c0-4eb3-9917-62a3a6a1fa0f", "indicator--00e4e140-22f6-4f0b-bb66-d675ba62e266", "indicator--fc2232e7-2f8b-4e81-b7a9-fb02ecdd3930", "indicator--b8fced95-6d35-4ace-91e3-fcd030911029", "indicator--5e790310-cbfb-47b8-b2fd-008b543df816", "indicator--8eb04214-a54c-4814-8a3d-f18de78cd20b", "indicator--5f22a10c-0f7b-404c-8348-cc1ea5e39281", "indicator--82d55263-f616-48ff-a07b-ab6016f6b46d", "indicator--e141c1a4-d4ae-4c71-bf03-a1d971e581c9", "indicator--d36a4c43-7b95-495c-9e63-194c02d85250", "indicator--5761bf2d-0abd-4e2b-8fbc-8e29b5d52f23", "indicator--79aa5b1a-fc07-415d-a90f-bd74e1eb8ec8", "indicator--1cf735e8-c67d-4102-8cfe-c7ee6ece1c01", "indicator--9c7d9d4c-d1df-422b-9e1d-709f649b49b9", "indicator--28b2d664-026a-42f4-9b1e-b6b70b87276f", "indicator--a534743f-fb10-4aba-b646-9dd028dbc7d3", "indicator--7ea8e02d-4175-4577-a958-299954965073", "indicator--f2ef6832-8da7-4694-ad66-e6408ca4e2c3", "indicator--25a630cc-b839-4dcb-ba0b-c62b0868d41f", "indicator--78b63d4c-fb12-4326-97b1-5c9be80ea6d0", "indicator--ff77491e-3150-491f-82da-4daad93b6f15", "indicator--0d6390e5-4cdc-46c4-912b-ed0f8dc0775e", "indicator--4d673e15-ae42-4aee-bead-b5f6c34545df", "indicator--39d65f8d-c975-4d04-bb96-1b8bcc228cbe", "indicator--3dadab5d-b7ce-49ae-b4e4-436543751c0b", "indicator--320fe0f5-fd3b-4b7c-9d17-52072d0ea669", "indicator--dda980bc-5cc9-471b-a09c-dd6f63719dc7", "indicator--81b39fbc-e4f0-4755-9f58-a647fc2525ba", "indicator--fdd35fb7-2761-4737-b7ec-6d7128471ca6", "indicator--64ea1f18-a7cb-49ff-817a-d898da84cfd3", "indicator--3787c542-d267-4823-a91b-0ba6da8f8277", "indicator--88ce8df3-5853-4fe9-b52e-cd26f68a1d9e", "indicator--d51d75e8-0152-4fa1-bf2b-875a20c3df1a", "indicator--099a78e5-e5a4-4bb5-96e0-7f4ba0283649", "indicator--000ef5be-c97b-47d5-9c3a-7a6bb21f310d", "indicator--e3264674-80de-4f7a-a8f7-b83acf8f3e45", "indicator--a3a1793a-e498-4aec-9a90-151904458528", "indicator--47252f79-c8c3-4629-99c2-5f16396d8c20", "indicator--b4a50658-6448-4743-b955-76311b5f0c47", "indicator--8d5fbda7-c26f-4194-bae3-305ddf003ff6", "indicator--12ce2d3a-de0f-441e-a32d-114b6b61bf6e", "indicator--c7a1d57a-7595-454f-ae3f-be2fcbb42ac0", "indicator--02191660-6ce4-41e0-a130-73966a97bdb1", "indicator--29ef03b4-d280-4194-ae39-6e682b9c4cbe", "indicator--320ec4e2-c697-4cf1-9d48-4b1cb94d4e92", "indicator--28b61410-df67-40f4-a987-7dbd4d3feda8", "indicator--c17e98ce-e16e-4db3-b467-57fb12e1dd3e", "indicator--a57f4ed7-aa33-4f85-8c2f-86e9f242bbee", "indicator--4f9e757c-1050-42de-9f49-59200102ca94", "indicator--7f9ec212-f0bd-45de-bd5e-8cba361c49b8", "indicator--d82dbf54-dfd6-44c9-b28b-819634dddef5", "indicator--11cfeedb-aa25-4381-ad81-414e5f99ec86", "indicator--5f1e7418-8955-40af-adf7-231d6603b274", "indicator--c2a2e845-ebff-459e-8e02-de14dddf7041", "indicator--d36df59a-c825-4214-98be-60d692af7c7c", "indicator--3b5397d4-3fb3-4aaf-bfea-c40b480aa2aa", "indicator--382e378a-6d7f-4889-a72a-d714f936b7d6", "indicator--7725b126-b58d-4774-b97b-90e4228b2046", "indicator--116508a5-4e82-4840-a85f-53856f66403f", "indicator--9dc008e9-8225-46e9-a997-edb5da7d8eb4", "indicator--121e2c33-dbd1-4e85-a715-04ab8f529a4b", "indicator--3b080187-8df2-421a-b00a-6c9f9f29189d", "indicator--68a95be3-bf2b-4c13-b21c-78525e1760e8", "indicator--56274c6c-b3a8-4645-99a8-c69d5c6edfb2", "indicator--4f90b96d-dfd5-4f88-abaa-aa200fbcce24", "indicator--a7b6ed3f-e8b4-4a28-9473-32b6f5e4a4fc", "indicator--c52cbca5-9d20-4fe2-ad98-46c8697029fe", "indicator--8e3fb0b8-9ca4-4398-a7f1-4a959471c8a1", "indicator--48641cc2-4958-4ada-84e8-515fe29d76c5", "indicator--df6535c6-e074-40d3-b81f-4fefa9485ac3", "indicator--e8c2eb3c-6a6a-4975-959f-a1133b1fc6b4", "indicator--d414f84a-753d-4130-989e-d71553f4f3da", "indicator--b824768f-ee21-4356-bf80-23ce285f7d70", "indicator--521f2b02-ce8f-4c5a-b5e6-41901ce19511", "indicator--edbeca59-1a9c-405c-a3a3-02893e4911ab", "indicator--b06f3ed6-15f1-4093-8f48-1889a7e115bc", "indicator--73bfc3aa-add9-462d-af14-ab703ddeb92f", "indicator--a18bb599-7b7d-4e65-a75b-b761bbda4283", "indicator--31bdc2dd-72e9-4188-971f-820e92762948", "indicator--3737ca58-587c-4e71-92ae-30630ebe7aba", "indicator--1f2ecca3-75cb-4e8e-8768-ea0eff07b684", "indicator--dee69a87-b855-42f7-8df8-02fa8925fa59", "indicator--68d694ac-990e-4d3b-b7c8-280beb3d57f0", "indicator--3ddffb2f-ca84-40f1-a62d-044ecd307f4f", "indicator--662b7e32-247f-48f4-ab7d-41715c11406a", "indicator--a4a63dac-e7c1-49a4-984e-f259ebb619ad", "indicator--7d02b098-75fc-4aa4-84df-30e548e00c00", "indicator--7c41d091-3f6f-4a28-a681-f6f1310191bd", "indicator--efc5582d-4b3d-4982-ab14-b2f46a1289e1", "indicator--dc3771bd-6940-43e2-bb3a-47b4548ce78a", "indicator--72df214a-d1c8-4868-83c4-5fb5892a1f99", "indicator--26bb6202-b9a3-4bf0-a0fc-df6547c8c9f5", "indicator--0eb9b69d-6cbe-4940-bf4c-9aadc6598cc7", "indicator--55603853-3721-4ba9-9d83-10b2b2fe2a6d", "indicator--2b9992e1-8ab2-4da6-85f5-052c1c7d6d41", "indicator--dc7cb10a-6cc6-470a-b609-cb9c7a381381", "indicator--b55d1de8-d488-49da-b313-f014056ed80c", "indicator--fa4538b4-7b01-4a4e-8eaa-b2f05bfcfd99", "indicator--147f8587-577c-4321-8dc4-2af6a248092b", "indicator--aba94597-5736-4864-98b8-08553e57a1b9", "indicator--cff83e28-cf04-47d9-8f22-2679bb5a3437", "indicator--3ff64cbd-a18f-4deb-a09b-e2ee4cb0a6b5", "indicator--a63c3c88-ad1e-4578-af46-1cec19c2e036", "indicator--2607fb63-8d14-4559-beed-5bd88a22ac48", "indicator--1bde2e81-2cb2-4d0c-89de-6a5acab09260", "indicator--f238d562-a674-49df-a25b-ee085a80f0da", "indicator--5af45c2d-d639-4bfb-a3d5-bf42d41cfef4", "indicator--890c83a9-4635-4b12-9034-61a680703d54", "indicator--2498dbb0-da2b-4ddb-8a11-d9c677e9ccfc", "indicator--7e40e6ef-75ce-4f63-8ce5-8a9dba58550e", "indicator--f95f84cc-4a58-4d89-8d2f-3d8fc760c401", "indicator--e122fb23-3881-411d-bc5c-4d1f1d169bb8", "indicator--5c901603-0403-4d22-a0b5-c6c01fa1d26e", "indicator--a811f41a-c35c-4a75-b4fb-37bce0618791", "indicator--897aa650-6dd0-414b-80ae-f3a41862fea1", "indicator--2241f0f6-3666-498f-ad49-e9ffa46cbbd6", "indicator--54e1426d-3a2f-4511-a437-7ac54a7d3b99", "indicator--9083fe2f-4c9a-4ed5-a202-6816743a7f44", "indicator--c0234233-e982-4d26-8811-89d08fcadeb8", "indicator--730fe4e3-c4e9-4bc9-913a-df5339d71550", "indicator--028b2f40-8e69-4ad9-99a8-d3b1bb1c5e53", "indicator--a08de37e-4f03-450a-b3ef-c6b7fa1deab9", "indicator--e50f8fb6-57c8-49b6-8137-6c0daf9780a3", "indicator--46dbfe04-8099-4c2b-8eff-1ce88da92e40", "indicator--a02f6b3f-fa4d-41ff-9bef-5c850123625f", "indicator--7d12876f-7110-409f-86ea-724b7616af2b", "indicator--f79be5cd-e538-4a63-9100-d4b93d53b405", "indicator--e56adb77-1da7-4312-a5e3-f31d2b5f534d", "indicator--8b3ac612-8b5f-4d6f-82de-5d27d0bde790", "indicator--e94e22d2-9819-45ea-b971-4e32cc4c623d", "indicator--25e7029c-c052-4789-b36e-dba7604b8b4f", "indicator--304279ca-cf34-4db1-83a0-e4d5901da80d", "indicator--f41192a6-4135-4dcf-a6b8-0f0671c92fa0", "indicator--c9282c51-6eb8-471b-97f4-9cdf84c1b4ea", "indicator--bc628956-8e5f-4974-be72-d740de32373d", "indicator--ee2b6d2a-b69e-4e1d-9a38-4835570184a4", "indicator--91102d9a-5d21-4659-9c7b-fa5ede146ef7", "indicator--98ce6995-fceb-49ce-a66d-437ba75721ab", "indicator--3b2e7cfb-a6a8-45a3-bd92-2b2ec541cfb6", "indicator--c2592768-dde8-42c9-9a27-e30c64a08443", "indicator--feefaeb8-4405-4b27-8f22-d922ae10f07c", "indicator--c57cecb4-eb55-4b9c-9e7b-0b7cbfc170d4", "indicator--52730b53-7945-4401-9bf4-8dcc476d07bf", "indicator--fed0de10-cba8-4364-9d76-41f7344fffe8", "indicator--ca7a08f0-0dfa-4865-ac17-ffa44fbc89b1", "indicator--a19c22d3-d96c-4bbe-b4bc-f30c66402e28", "indicator--de6f9b57-1e6d-47d7-a676-b62c30e8d141", "indicator--830056db-0421-4cd7-a87a-6f33b304ad21", "indicator--f8906b94-081b-4685-89bd-959c6fd18220", "indicator--4bc794dc-cf8b-466b-9db6-f46c475b83f0", "indicator--ec98cca0-4280-42cd-b353-e402d3d5c045", "indicator--b270528e-5b94-4be7-a846-564ba8b221fa", "indicator--0df0bbc8-6578-46c4-bbf0-d7eb7b94c408", "indicator--8a5611dd-b99d-4ef2-a320-b27ebaf7aea6", "indicator--f6e2faa6-25a4-4d1b-9d50-aea5b0b9977f", "indicator--4ac9d8b4-610e-4304-a0da-537dcc4bc442", "indicator--1afe900e-6d5c-4084-9fa4-293e481b42ff", "indicator--17761108-90e2-4082-a910-d1db3ebb1d82", "indicator--fcf0c3fa-2482-47d3-9605-cf35cc6ac385", "indicator--bd1ed933-669e-4608-aa9f-17dd39288deb", "indicator--873a98e5-8d17-42b4-8ff1-92e9ee409ef1", "indicator--c5bb3ae6-2212-4915-80b6-2a339618ff66", "indicator--7f28be87-9373-4437-bbaf-8b3153059eeb", "indicator--872afeb0-375d-4dd6-a677-295299fd0e90", "indicator--5219209e-d72e-4a00-8f3d-72411818eef3", "indicator--da79a6eb-6da4-43ce-b9b6-11534153342c", "indicator--0d0a9719-7e4b-4891-aecf-b4ce7fa64028", "indicator--abca7c09-fa44-4578-b486-f96954d50478", "indicator--e863baf2-8238-4c28-9ef3-13e9c3c8df9e", "indicator--dbbcad3b-fcd6-40ca-b4bb-eff8efea30e2", "indicator--4ced7553-30d2-487e-87c0-985c77c07d3f", "indicator--246eb507-6356-4f6e-a5ad-55761ec8ff22", "indicator--b5775ec6-b8d8-409e-b939-e4dcd964cb26", "indicator--ae436daf-afb4-43d3-962d-a26898f35528", "indicator--78cf55b0-7a7e-43b2-953e-6b324c667a97", "indicator--955fe851-29b6-4844-afb6-f2f9c10869ef", "indicator--d331a735-f3f6-424b-bae7-19e54ede6773", "indicator--32edc989-c42f-4923-8ace-fc7f125db632", "indicator--7acb3d97-74fa-4999-93e0-73da4a3f42cd", "indicator--4add3037-bc73-4eb0-8f10-1fa6cd6eabe0", "indicator--de4352b5-771b-47fd-83f3-b93e43e898aa", "indicator--0d162b14-d89d-4ce1-9166-bc026da3242d", "indicator--890b562d-f990-4efd-921a-e79b574bfcf9", "indicator--780e66c6-b0b0-4d51-966e-98c3dc1b9c61", "indicator--2147cc9f-c764-4bf3-9acb-2ac07bd82a3f", "indicator--91fab45c-9eb3-4bd0-ae1a-a5bda95dd850", "indicator--23f249d7-5fc7-4079-bd00-b1d93225973e", "indicator--234d0674-35f0-4fc6-b3c0-917df04bcede", "indicator--5c6f426d-6632-4f80-a737-c22f37f173b9", "indicator--69a0557e-88bd-4871-a6de-41a8b1ee85dd", "indicator--d1df29a2-c602-4e3a-bf5a-909c4253257b", "indicator--33cc55f4-c1f8-4f03-ad23-b848c9610044", "indicator--ea37aaf1-56d1-4ff0-89e1-136ee9f77a7b", "indicator--b6bf99fa-91a5-4470-88c2-2da157f38346", "indicator--0ac30920-0af1-4a34-a8dd-f981b9885234", "indicator--d0110f26-a5e2-48b2-8871-64a8acb13298", "indicator--126eec7a-be7b-4fe5-aa4c-87573bed36ac", "indicator--42c9db1e-8c55-4410-81f6-caf994ae365f", "indicator--c2711ee4-3e0d-4758-872d-996c5e572a33", "indicator--d821b5ab-235d-4c61-8306-2f1626c0de03", "indicator--aef6f108-798c-49dc-83b0-5672072aec19", "indicator--25d7136c-68b0-49c1-b660-51d7bb28282e", "indicator--d5621fdb-b3b0-4db0-8e9f-0bd872d6eaa2", "indicator--b90ad03f-6c52-4442-8513-4acdc8b2a8b6", "indicator--26e6836e-53f0-41c1-89c0-0dcc0b7493b2", "indicator--4a10b8af-9d56-43c5-81ac-62b65908adf9", "indicator--250fa429-52e4-4b97-84e2-5c9a659dac66", "indicator--e50d8594-a639-4484-a41d-486d7747406d", "indicator--ac8ab27d-08b4-4144-b8f4-92bd8d9ff220", "indicator--dca6e73b-c286-427b-b6b1-aa082985216f", "indicator--f1adb9be-22b5-4047-ad6e-bb765b394591", "indicator--be0bb296-838b-461c-8a5c-53970c882c66", "indicator--6c4968be-c3f8-4f7f-b0aa-8aa4409f954c", "indicator--57cae9af-53a3-471e-a1f8-3dddea359a39", "indicator--a789e401-bbf9-4813-964c-eddd1bcb1733", "indicator--6309b646-b868-4870-af79-18b0881cae32", "indicator--2f319268-b8b2-4276-9b9a-e4ac7094ca30", "indicator--f41e23dc-b72e-4f14-911e-cefa40dd26de", "indicator--d6653b84-99ac-4a8b-81fc-06714dc26081", "indicator--cd7964a6-4b01-4d57-ba83-2aa5d696bc10", "indicator--887335f2-acad-4ef7-8175-955f4eb3570e", "indicator--d3912b6e-a917-44b7-b6f8-24e39bf812f1", "indicator--955e4add-5ba5-47f4-812f-7c693cd8c776", "indicator--0375913a-6f92-48e8-916e-b8e8725ed292", "indicator--6be343d1-cd51-44ad-baf8-b9d496f4a997", "indicator--87b6a8a1-ef9f-45e9-a31e-699ecb756432", "indicator--82fef238-24d3-47f0-b6af-d26c3e12329f", "indicator--2cf7ee08-a1a6-45c8-acce-34cec036caad", "indicator--ea791278-106e-4969-865f-3a394c24ac44", "indicator--f6affc7f-9677-4dae-8ec8-ded291c84a61", "indicator--2eb0e41b-65d5-44c2-b3f4-6b8540830444", "indicator--8b583524-c2c3-4131-923d-469dbd8464ad", "indicator--71a362ab-792a-49b5-b9f9-9e0604fc53e7", "indicator--613b60d0-431d-4c71-9921-0ab91ece0137", "indicator--3041efa5-5fd4-48f7-a73a-773cc522d185", "indicator--3eb65136-7155-412f-8022-e85948121326", "indicator--06323a01-f440-427e-bca7-190fa4eeaf49", "indicator--7ba39854-bbf1-4864-8ada-9621794a3bad", "indicator--cf8f5314-5870-47c8-a229-0a8ecb57f0d6", "indicator--66696e0c-1898-46cd-9bff-c8a8f04dd76f", "indicator--3da60a47-7f0f-4d48-bd5f-d514d89d1796", "indicator--86f01811-733e-4b2b-9181-531bbbae83bb", "indicator--d3c78a91-c7e6-4e8e-b0e3-269186965737", "indicator--ace64ff3-a85f-4831-86e5-035b5f664161", "indicator--3772fc8e-93d1-4f8f-8907-b8823ccf3d88", "indicator--5fbc8cc6-6f79-4165-acd8-2bec5c4c3a81", "indicator--830d932b-cd03-4b98-9e0d-75b5a202e366", "indicator--addb97f5-f60d-4fe4-8825-a4b8b651b69c", "indicator--b63015e7-1aba-48cf-9389-0e3c458e6ab9", "indicator--13b099f9-d481-4f26-8b7e-4b193f18186c", "indicator--1411fc5f-2632-438d-9ae2-f4ea31343152", "indicator--a38013fb-c63d-4c5c-b788-97954a692f38", "indicator--5b4e431a-41ac-47e9-900d-4ffd029242f8", "indicator--efa4c553-4104-44d5-87a0-2b988292f3cc", "indicator--e3174d12-4838-444d-a80a-8e768829244c", "indicator--2754a4f0-2fee-4124-aa55-807900e57c3a", "indicator--d73acd5c-8845-4a1f-8ebb-961109f672b1", "indicator--f22c3661-e277-4a3a-88d8-fd45fb92140d", "indicator--fbacee42-07f9-4e78-887a-a8bb77f0ec30", "indicator--2b692942-7a5a-47b7-9d52-d0dea6845b1c", "indicator--3446aa95-33eb-4de3-aa82-0f533847d279", "indicator--3c1e8b9f-b26f-4aed-8d96-d6fc5397d37e", "indicator--5e2821da-9db7-4060-a861-c5cf096e4a46", "indicator--a1ad8e3b-0598-473f-bc76-d23d573b9eee", "indicator--0e69c22e-01c6-4502-9b90-c67c566c34cd", "indicator--92078359-75d7-4673-b0c9-ff7ba146bef0", "indicator--d5c4383b-9c37-4a92-91fb-ebed701a7094", "indicator--05f62c65-a2f7-48f4-92a9-c4d0008842e3", "indicator--9a8a0006-ddc8-4479-aa87-88ef2d25a422", "indicator--dcc1f831-dbd7-4010-9aec-0310157a3790", "indicator--548da1e2-86ea-44fe-a0c2-c511384cd880", "indicator--5d6bfbf8-4383-4734-9b6f-b9e69c00ceb5", "indicator--b58c175e-bcc3-4d99-b9a2-346e99dc9d91", "indicator--21587ce9-dbcb-4f0b-877b-42b9da3eba45", "indicator--3054d7f7-0a21-4a3c-b53b-06450495f657", "indicator--52698226-4675-4345-bb1f-ec7f41a67e50", "indicator--850191a9-bad0-4ca5-9b11-7537a6e83fb3", "indicator--59d5405a-75fb-4480-a0f8-bd44f43efb6c", "indicator--4e463721-7189-45fa-b680-e6975ba74dd8", "indicator--09f2a61c-99e9-406a-9291-fba338cc9b03", "indicator--c696dc34-513b-40ad-95af-05a86ff4c5b3", "indicator--743c906a-2375-4f0f-bfa9-b43f985fe928", "indicator--26fbf50a-30ce-41ad-a494-daca06cd11ec", "indicator--a698d2df-f1fa-4cfd-86b8-59a5dd428c64", "indicator--6a35b4a4-e3c9-43a5-9673-63c4af84e30c", "indicator--797e076f-2ceb-42cc-86ef-0c058b59562b", "indicator--63d9b749-fd3c-48c8-9464-8172169296dc", "indicator--7f53c9c3-e5c0-49c4-96c4-3dae4a4d3a93", "indicator--7dd7a7c7-94f3-4ab1-80e6-24dd35fe585d", "indicator--d499c02a-27dc-41ac-8429-937fc7f65182", "indicator--443a02f7-63b5-4cd1-8f86-d067b1980b11", "indicator--c592093f-6646-4b53-a98d-42968b45afbf", "indicator--4e8dd352-e9c8-4b2b-bb53-1b2a802e4715", "indicator--478718dd-c020-4755-9243-ee13fc3cb74d", "indicator--aecc27e1-c4fd-47bd-b697-fdce94072ade", "indicator--4ac566c2-6d26-4c8e-a5b5-13fb989508c5", "indicator--9993b4d5-ee3b-40e6-8f3a-74c21b3371cb", "indicator--8647b14b-b6c9-4613-9777-d33261287ac9", "indicator--8b175f86-2994-4c89-b659-906b93fb16ce", "indicator--e3082974-06c0-4a40-866a-26f7d4138e5b", "indicator--14f07070-b786-47f3-aad9-54a732ac336c", "indicator--e7cad208-7960-49c7-9d13-2fd4f040e504", "indicator--09a24204-acbb-4877-a1e3-8b9fa419aaf7", "indicator--bead843e-db36-4e3c-b90b-eca90b11fe4a", "indicator--71015d64-54d6-4fb9-af32-ecc6f8f137ce", "indicator--b28c613a-7fc8-4f01-af74-553fe8ab8ac3", "indicator--21a1297e-dbb7-4ae9-881e-47acd7399cdb", "indicator--9f3685ba-b216-4847-ae09-6d7640805281", "indicator--f8d2147c-a427-4e31-8608-1a0e788ebcd2", "indicator--c2610c05-a7f7-4c01-9830-048494784225", "indicator--f1eb4d04-a043-446a-b020-14447536b588", "indicator--0fdf3a6a-8048-4cb2-99c1-907a9a90bfe8", "indicator--5660eff8-30a2-4824-8153-512e0419183f", "indicator--41bd15a6-67c8-49e9-a2d0-1f9a6f376f42", "indicator--d6a9304a-5fca-4de9-96e8-af24c78ac1c2", "indicator--7232d19d-8b9c-4f90-af6f-09dfb28c6d90", "indicator--057dae0b-02df-41ff-b0fa-c92fb02718b7", "indicator--4771713f-1d51-40cc-8572-72c184323f51", "indicator--8b2b70c6-76f7-439d-b11b-ede72f6cb8f2", "indicator--453d432c-7061-44dc-b7ce-53b66f934639", "indicator--b182d764-f2d0-4c9f-87c9-3b2b27714fb0", "indicator--7172a95d-8bb1-42c4-9393-a38ba88faa5e", "indicator--63b58ec9-6342-4a51-91b1-81e4a6923253", "indicator--a2b85c5f-97f4-4c8c-852b-581f6cb5252b", "indicator--76ad5b81-9257-46c5-b2b0-5c672927a4a1", "indicator--16fd3ced-fcff-4bf3-a470-7e2c356f8f0d", "indicator--1b3b970f-00c0-4d41-9ba8-8220adb7f45c", "indicator--76b3d4c2-50c9-4c11-a31d-39bd3b2a143b", "indicator--c7d062ae-a0ff-48fd-9b13-16b7ffcf6ffa", "indicator--5e66d8ae-ce33-4b6e-8a5d-dbb228373fbb", "indicator--f8e9aa35-6255-463d-9ba4-f54f4a020081", "indicator--e298ef43-2f67-442b-8a0d-cf3fd9138041", "indicator--d62a7678-71f2-4d2f-ba4c-b54e6b7ecf4c", "indicator--34d4a363-bc9b-4bfa-a648-1cb360caac90", "indicator--8c180f06-6713-4704-85a4-c017538522a2", "indicator--5f729071-547a-4f58-9bc0-23be92afc087", "indicator--a202198a-1c7a-436b-9a6f-6f2034706402", "indicator--41e0e687-fc58-46ef-b480-623644ffb7ca", "indicator--98924482-aafd-454a-ad95-8798d79bda67", "indicator--c1925d7f-9018-430c-9879-cf4a706e3dde", "indicator--b9b27f75-4983-4bd4-8e8a-427c30f56ed6", "indicator--96cb0822-84dd-4bee-82a2-2df201e45522", "indicator--9ca84f8b-dc98-4a0c-a38d-a03f8af1d41b", "indicator--5e5350c3-4aab-4b20-bd5a-281db08149f3", "indicator--afcbb118-6f48-4de6-b604-a346605d5254", "indicator--0fe926c2-bdc3-42ba-82fe-a716a8c3037b", "indicator--3ca6a3b7-6170-44c4-b51d-ba731a1b68d8", "indicator--6021db2e-2192-4076-aa3f-d59de25bd3c3", "indicator--d448b88f-c079-4db5-bf40-fe24a1312150", "indicator--5c52db6f-7b60-4aa3-a880-063975a34945", "indicator--2f973a36-c46b-40fc-afb4-5cb00917223e", "indicator--4b716d72-6898-4030-8c4d-83b06aa8727a", "indicator--eda53d10-ccf2-4690-921c-6aa4038dba86", "indicator--677fff56-faee-4eab-b1a5-856b7fa9482d", "indicator--49d305d7-77b5-4e30-98a9-41935fb35925", "indicator--cea78e26-3bb4-48c3-909e-3a178a7fcb9f", "indicator--207630fd-a06f-41c2-bf3c-097965a74a0b", "indicator--7ce35037-0ba9-418a-b853-a6bc06b56c9e", "indicator--61fd4168-1803-4353-aa42-a4de8df3962d", "indicator--f5f8c745-cc12-4b7d-92c7-5188d9b11ce6", "indicator--60dbdeae-3d8b-4a62-9119-d9588a5b2326", "indicator--e8713900-d40c-4e63-abb5-52401be2d3a8", "indicator--c51efc4e-9c89-446d-b2f9-59ed07ec98e9", "indicator--35f0932d-2c0e-40f0-9052-2cc13680289f", "indicator--fd90fe9d-72ec-499e-9350-c3af28751071", "indicator--2737a622-c73d-4549-88c0-305fd05c265a", "indicator--e58277c0-5b1e-47ec-a5dd-cf4a2041119b", "indicator--f1727a8a-d728-4452-86ce-38ae36bc91f0", "indicator--dfaa588c-ef6f-4542-b523-5b7e1305b229", "indicator--1ac20257-28cf-443e-a2a4-b3ee95d61b98", "indicator--aaaca504-3f29-4727-a384-7fee00c246ad", "indicator--dcb3062d-f812-4ab9-881e-1626f11a9b0a", "indicator--eb45a5b9-b23c-48f5-b724-b1f9eaf4f45d", "indicator--059078e0-caa9-4748-8f79-f3532abb8e94", "indicator--d1d2d1a6-fcb2-4364-be80-083d566c62f4", "indicator--87c86af6-fe1f-480d-a259-cc740fbd0841", "indicator--ba1af5a6-ef01-49ec-a4f7-8b2b597b00a5", "indicator--69d76e0f-e5c2-4516-ab98-f9470aceb802", "indicator--a3c5e988-326a-45d8-8469-5f01770ff906", "indicator--5a89f5c5-92bb-48b9-84b9-99c59b492045", "indicator--7daeda66-743f-41c1-af9e-496431926a27", "indicator--5840357f-94ce-4802-b4d0-6a8cbd9a76ca", "indicator--74636943-29d1-419f-bd84-663a433d0b4b", "indicator--4f0ab51a-3ca4-419d-95e9-c5c3eb872eee", "indicator--edfaab65-38f0-42d8-b6ac-8e21e2716eac", "indicator--6e152cad-b803-49f0-8237-309e6b68e6aa", "indicator--a398e488-1113-4459-adea-4dc65f8b59f8", "indicator--21aa1ac6-96e1-4f95-b172-7c697846b6ab", "indicator--28edf86b-8204-4a65-b1b1-e0bf45c0dc55", "indicator--02789eff-51d4-4c1c-a95a-69c97ad16610", "indicator--85a9ac68-44df-4cfe-be8d-f283c8c5fdce", "indicator--43566583-f2d1-401e-92cf-2d05a0f9fa3c", "indicator--32019495-41d3-40ea-b2bb-0b9d2e5b410d", "indicator--0dcb743e-1a8e-492e-9699-12831ea6eeaf", "indicator--64cab329-24eb-482d-92ac-e755ccdb6f4d", "indicator--7a2dd60a-759a-463e-a24c-771cba9a47de", "indicator--8489aed0-3342-4c5a-aba2-94875ec08cfd", "indicator--ee4a6451-576e-4287-ae7e-db9ead1f2724", "indicator--2e9f72b3-75a5-4c6d-ab78-30cb2c61206b", "indicator--82e5225c-b6bd-412f-bf67-748227f81de9", "indicator--798df3bf-80dd-449b-be0e-312c053175a0", "indicator--da6ac85a-c6a8-4571-8514-411152b9446b", "indicator--672d0ae7-7f01-474d-972c-1faa3e40534b", "indicator--d970a51f-60fb-4de1-8086-e2e3810fa8c6", "indicator--40e48ac6-cb92-48be-9ac2-c39dd23d675b", "indicator--25318b47-6249-4572-84ba-faab5ee9bc89", "indicator--8bfcdebe-410c-4fda-acbd-e9cab9738d4e", "indicator--f4731558-6767-4d0b-930c-32c77a179995", "indicator--db4bdc36-f439-4668-a33f-a4ec028d4161", "indicator--6c43fabb-20c7-434b-abf0-2bfce9cf7b83", "indicator--ef7f2abd-24eb-4d9e-bc57-1ff923a32116", "indicator--0eaf3c47-36c8-4d76-b4f5-b3130a8677f9", "indicator--78fa919a-189a-4cb1-9603-60bffdd2f6f2", "indicator--aef1151e-375e-4c90-a1e0-e3570d223ab4", "indicator--0d34806d-4334-4c10-b639-57fa7a584318", "indicator--777113f3-824e-427d-ab23-84752b50f6fa", "indicator--d9981f8b-a867-4276-95ad-2e4158269b8e", "indicator--f4f22807-66d5-4f8e-941b-92f0745fac9d", "indicator--236b8326-549d-4f1e-95c3-26ce0835e28d", "indicator--f2536874-a698-4606-89dd-560bba8cc1be", "indicator--59293f9e-91fc-49a5-b83b-3b10dd1e8730", "indicator--7972057c-8e8b-4783-ad32-e94545772f53", "indicator--3092845a-9c64-4737-ac76-8f0d5a0fa588", "indicator--1b2c6cf7-0d7e-496b-9335-5235794189dc", "indicator--23e587e8-ab67-48b4-8b73-6dfbbb7757cc", "indicator--7696e17e-6baf-4aa7-a70c-88861c1dc91a", "indicator--400f47fc-c09f-49ca-80b6-cae1e55168be", "indicator--9bb8a274-f5b3-468f-ae57-7ceebfa328e6", "indicator--a82b2cf2-a5de-4874-8a61-62efebbcd42f", "indicator--0456db42-72d9-4a98-85bf-8f597a22fa52", "indicator--4314abcd-c7e3-42dd-bc72-29d46238689c", "indicator--49ea3aef-4b45-45db-8a34-26bdba7fe0ba", "indicator--27a76289-46bd-4eda-a826-6e75d5a5075a", "indicator--ad52fea2-6b4c-4205-970e-4a703d021262", "indicator--d64926f3-ff28-4ae8-a395-c6b8d99d9766", "indicator--4d38c4bf-3aca-421f-8f76-cbd617fcbd8d", "indicator--5b454858-ae69-448f-b840-8e6d603f614b", "indicator--22d61d10-6803-4105-a5d6-129af03193ad", "indicator--f5e99c4a-bd8e-44b9-895e-d2932f6aa3d1", "indicator--8a10e90f-6734-45c1-8db1-e59a6bc19449", "indicator--424a6160-890c-4e6f-bffe-beb53f2ccef8", "indicator--6cb0dd59-3734-4eda-ae47-b4e6269a0ed8", "indicator--c57ac14c-0bb3-4a21-9b09-6fe5f055283f", "indicator--6d4d2316-a65d-4776-a33a-2d7349074a1f", "indicator--6bbf3498-7985-4b84-b6c7-63130a960018", "indicator--62f2c5ce-7209-4f23-8190-8fad171ab7e6", "indicator--b2be97f2-2e49-49f4-a72e-c01655874ff3", "indicator--2a33f388-ef3d-4218-b289-b99261f92030", "indicator--a7b7de17-6856-41ab-b2e9-3cc1410ab99f", "indicator--c34b9304-cee3-47a7-bde9-3f2570f17d98", "indicator--80e416e8-d486-4bed-9c8d-c314cdccbe49", "indicator--cb0f331e-8f71-4041-ab38-2fa9259be2f5", "indicator--2f2230eb-9db1-4954-a0d3-9dd41e1fb8dc", "indicator--5b0fa083-e2ce-4c7b-9c8d-c9c843a3a52e", "indicator--15be11b1-8591-4c64-b492-8fa49351680e", "indicator--58a7ac01-fdc9-452b-9062-f246019aad9b", "indicator--17889322-e817-4473-8d71-2c21858d633b", "indicator--73285e02-49fa-4d26-9573-8187687d2869", "indicator--50d8837b-6faa-4bf6-870a-8fd580c13888", "indicator--bea07f90-7c33-4908-859d-0f3cc7839b03", "indicator--fb662a76-4cd1-4fb4-be0e-4aebb69e3661", "indicator--4325dc7d-ae57-40d8-92c7-6c3b9f27ef25", "indicator--924dd072-c70f-4968-9465-7fd96fba3b9c", "indicator--25db0041-4af5-402b-ab42-35a14b4f0d9f", "indicator--26213d21-63df-494f-ad08-d98dab375e75", "indicator--1134c45a-4b99-48c8-a6fb-7101fdb96986", "indicator--91b252e6-9852-4f5a-ab3a-fc78e053bc18", "indicator--45ed5ccb-fb23-4e1e-8e89-32e228c681da", "indicator--60788765-05a1-4e2e-a3c7-2838347ec4ac", "indicator--4b4a40fe-3f1c-4a8d-bc19-fdded5337957", "indicator--5a845f30-13d8-409f-86c9-b1aee216f889", "indicator--1fae7898-1f38-4db9-9659-9175e715e696", "indicator--50ce96ef-9c26-49b3-bd96-447894955128", "indicator--54b3b2a8-743c-4862-a682-b1ffd159b250", "indicator--84a7a63c-f8ff-4d5c-a2fe-6b0d33ce2143", "indicator--cebe40ca-9e72-4941-bcfa-cb4bbce1cad9", "indicator--10f10f82-ed99-496e-a2a1-3261a1c00d28", "indicator--24f24615-49a6-4e58-998b-8e1d00258684", "indicator--57a8343c-ccb6-4fe8-8bb8-ffbffefe8d78", "indicator--8ca3b3f2-72ea-4f6c-8eba-191a7c9549bc", "indicator--e4e34449-e2d6-487f-8082-7e136d3d9173", "indicator--3ceaf70e-82ce-4697-bc92-bdded6bcad0f", "indicator--5f95cbef-b96a-4b4b-8125-c6c816f95ebf", "indicator--7733d574-324b-4605-9073-06ec6a0989f9", "indicator--78116a65-6214-40c2-8e80-8edc6976c8ad", "indicator--8179a255-ba02-4649-9628-2ee023b804f9", "indicator--f7792355-94d9-463f-8ae9-99eb1dded397", "indicator--35a225d6-c874-4e93-b309-04327f1ab668", "indicator--aab2a652-428c-42eb-a129-7aa91cd6a714", "indicator--4087a8fc-51eb-4792-a6fe-85a8fd1d4046", "indicator--af01edd6-339f-492c-8ceb-2aef77e4121f", "indicator--b6251f20-aecb-42e2-be07-79b0676a5214", "indicator--024f00f4-83b9-43db-b8d7-47041ef6aa07", "indicator--1743a530-0fb5-4699-8736-119fc3a6be2a", "indicator--84c726e6-fe88-4674-b65b-b2abd81d795a", "indicator--fc81e015-9d80-4b37-80dd-0651362c5d50", "indicator--76cdd68b-ba29-44b4-b839-4fb58e863bed", "indicator--65298526-f088-4a12-a377-9b4f8f2c6321", "indicator--1d09ff6a-6a80-4bdb-8e9f-2835843faef5", "indicator--febfe8a0-f5c5-4554-bb00-5a3c57919817", "indicator--0d281a31-0bcc-4044-be87-266947a6cfaa", "indicator--4177edfd-0dbb-4fb5-b51a-54dd9feb2fe2", "indicator--ce1a8800-d765-4271-9f74-2f64b4038bc8", "indicator--406641a1-dc1e-4033-a0d7-c5ffdac78e67", "indicator--3d3194a6-315d-4739-82ee-3e017e8823ec", "indicator--5ea7b4d8-23d3-4270-b87f-6a28defa1647", "indicator--76549c64-a981-4446-86cf-94bf0bc5ef65", "indicator--75c65c20-05a5-4c97-99ab-fcea763d45df", "indicator--029abca9-0031-4b90-b877-462f810f8bc9", "indicator--5a8183d9-f733-49fc-a94d-74d292119b34", "indicator--314d9db0-5602-45c5-9193-f3833a7950f9", "indicator--ee42cf82-5893-4ee5-982c-45bf3ac46ef2", "indicator--757acb51-af61-4552-8ea7-4a0ba0c48e5b", "indicator--4e239b07-92d0-40c1-9849-173f97a15f47", "indicator--952e5917-3fab-427b-bf6e-ce5166c4f141", "indicator--19f2e698-f4e7-4ab6-88eb-82aad7c850be", "indicator--6f1b50ee-5983-4504-b765-d801c90f51f8", "indicator--a2895c25-a0e9-411b-9823-2d38745464ec", "indicator--2d6f2dbb-b310-42b7-9ec9-8eccad6a46b9", "indicator--5b8c848f-c5d2-43fe-9f98-2d2b5aade7bc", "indicator--1bd2176b-345a-476d-8abc-7dceb871921e", "indicator--10c66418-2016-4a53-ae9e-a7500a341306", "indicator--48ed87d7-708d-45e0-afc0-43d2a79cb671", "indicator--432bcae1-97d8-4b88-807b-cb06d525f0e5", "indicator--78d4b118-157e-489e-980a-ce42997b0782", "indicator--944039eb-d5e8-414d-ac41-d83896bd4296", "indicator--506e5f5b-d197-449c-98d6-a1f971872e98", "indicator--2e3270cc-b9a6-424e-9a46-686ab65a4c2d", "indicator--40af5feb-ea06-4d73-be39-5ab9cb5303dd", "indicator--360011db-8f50-4907-b6a4-848bf6d75bce", "indicator--6e9c2dee-2eed-4517-b985-3e34094c0aa1", "indicator--72dc1738-b24c-46da-983c-f1beafaa194f", "indicator--d904b217-a590-42e1-8672-c040e56ed5be", "indicator--afe1c4ee-78c6-4915-8607-d2a91990ac7b", "indicator--93f638c3-2c93-499f-bf63-0268f65115ea", "indicator--a5ec15aa-6299-434a-bb64-0f2dbc242209", "indicator--9d4970a8-6106-400c-9148-b7db78c6b479", "indicator--23dd78ef-257f-4b36-85a2-6cd2b42e004d", "indicator--e06ebd80-da49-48d7-a87d-25366b8190f3", "indicator--57e14840-3bab-4447-b2cd-1d303428ee1f", "indicator--55931945-f012-49fa-b7d8-b1eeba0a5b37", "indicator--812fcb79-e9a0-42fe-b94c-f18ec75eff4a", "indicator--32ccc5e7-c9f9-4d16-b216-94d8ab7987b6", "indicator--a1ef9d1b-2c2c-47b0-b7c4-5f18a6e17835", "indicator--dc8cc048-df90-42f2-8d32-98e5f0281f69", "indicator--934d64f9-8361-45ba-afc0-0b86637e3063", "indicator--39154827-096b-451e-b518-563e916cf846", "indicator--cadad26b-164e-48f1-87ea-c272d1b3e947", "indicator--d4b30af8-322d-49f1-9b8d-dbac219dfa39", "indicator--36a286f6-2d2e-4835-bd0f-f983e3d41745", "indicator--cbaecacc-8775-4934-9c33-8310576b19ee", "indicator--98cb3949-e1dc-4a94-b19f-eb5f1e07c2a5", "indicator--439a787d-aa0f-42e2-a74d-97a53a43858c", "indicator--9f388627-e2c1-4385-83b0-1580ea929cb6", "indicator--c1ae6717-981e-4039-9f54-fe04bef974d9", "indicator--7c626e1a-d708-4683-9196-845bef9c5a37", "indicator--6996da36-e5f8-4368-b8d9-c454a7ecac74", "indicator--545459a8-eb93-428a-acf8-b05d431a6427", "indicator--5a5903ce-3b04-4632-8364-2ef773f973a2", "indicator--8c15a511-59a0-4fb7-9caa-f9633cd10c5e", "indicator--d2f4cca9-04be-4842-85cc-3457a198da86", "indicator--d71f5656-c921-4af6-881f-ef21fbb34147", "indicator--4fb7699b-fa8b-45a5-bf07-a47fe7186642", "indicator--1c7d0688-c0ef-47e6-9f96-2983a276abb5", "indicator--4010525a-16ae-41d7-a972-3f7c09892a3e", "indicator--d29e21c7-c6e4-4009-9548-8423c67d63c5", "indicator--21ba296a-ca55-4827-b6f1-78adc998002d", "indicator--feb6ea3b-0762-481a-95ca-9e50707f0cb9", "indicator--748729d8-1e09-4c35-81c1-63cd00b9051f", "indicator--1473a18e-857a-4976-81bb-ab5bf816247a", "indicator--2fbb4885-bab7-47dd-9b75-28d369ce89f9", "indicator--f648ac4f-e8b2-45e1-afea-427d44c3c495", "indicator--f53ff513-a241-4ce2-84c4-39eab77dfe93", "indicator--a15b9d22-0915-435a-aa75-4f045bab8c14", "indicator--27af2fef-460f-4e49-a8cc-a05df4b80fc4", "indicator--38f3670c-7c27-4b47-b963-f7fe35742024", "indicator--2f61e34c-f361-4095-9443-c703bf775ffe", "indicator--4a421523-6a2b-4d3e-905e-f48b253691cc", "indicator--106b8ca3-79fb-44d8-974d-2d75268ef1bd", "indicator--7844e20e-5465-48d0-b892-4a42d45d61e3", "indicator--64ab5410-ee9a-4b7a-b073-6f846d50f212", "indicator--a3f74f6c-ac3f-49fa-a908-7fb46924deca", "indicator--d71e8a36-cbb1-4304-a64a-8cfc0a0db939", "indicator--d3147d5f-dc99-444f-94cc-7a5f6103d1c5", "indicator--c6a71833-d524-4a9c-b752-79bb1d6b0d79", "indicator--e1348ca6-ab74-4126-a6f6-810123621b47", "indicator--cd558bd2-9591-4b3b-9e21-9854d3aeb29e", "indicator--c7958542-6fad-4556-840f-db5af58b435d", "indicator--d098c3e5-170b-4dc5-b80e-3a730af8f776", "indicator--7469a255-c11a-4a78-8be1-ea020412c6c7", "indicator--ff6d9083-cd93-4c4f-8c12-231d5f305760", "indicator--d2c4f118-5a69-48ea-8e4b-817dce4a06cf", "indicator--fa26130e-35f0-4114-9007-270756e227a2", "indicator--473c13b9-d0ce-4317-abbc-c075f71a0d4b", "indicator--f5757515-9d18-465a-a3c8-ad0f2b410f1a", "indicator--423a5cfd-4aac-4a4d-8ca1-518734b5b5d7", "indicator--2994c01a-046b-412c-9bbc-441e6f912b1f", "indicator--70e9b8bc-7c9e-4e51-97b9-fd5fcacd9219", "indicator--548dd450-1128-4ba6-875c-54674a210835", "indicator--9df9e342-0c6b-4f88-9311-5e322b8a4150", "indicator--f6612975-e782-4ac7-b37f-a1a9af734a58", "indicator--db8cfd13-287c-4563-9d98-5eb786402125", "indicator--a4a02c20-9437-4c23-8ace-e034ca6645ea", "indicator--53faad4b-4a63-4d62-bf3f-31c75306c843", "indicator--4ca7aecb-ddd3-4729-9096-2011c3cb090a", "indicator--c0d24b50-3a38-4be6-9661-3c886bf6e7f4", "indicator--a922a9b4-0537-46a9-a4fe-c0799beca08e", "indicator--b165400e-c560-457c-9c0e-2227ce1ec724", "indicator--9044f8a3-08b5-464c-8e9f-8292e593fd57", "indicator--f2cb2ba6-588f-48ad-a195-f7e354e9827d", "indicator--a078a9b4-92f0-4d0f-ac49-bff46f3e31c0", "indicator--cafb1a28-3f4e-456e-be61-22ab7ecc875e", "indicator--c290bf8d-c06e-4e6f-a4eb-e23df16f39a9", "indicator--a4fb3cb2-d152-47d6-b069-a06f38c471af", "indicator--130199e4-5b55-4dc5-87b9-d4262d310ba4", "indicator--caef2b3f-4c63-4f86-aea5-f6cfa0285349", "indicator--ac5eb825-3df9-48e7-b371-1bf9af028feb", "indicator--5b2d668c-5319-4d15-ba75-fee2c974e2bc", "indicator--1fdba91c-8fa2-40ea-8e8b-30b3182d6b62", "indicator--8b158f95-ffcb-4d92-9fc5-13af963f489c", "indicator--a31d60fa-e9ab-4dc9-ba29-78aaaea7e362", "indicator--6dbbd21f-882f-488d-9522-e3622334539e", "indicator--b939e969-32ae-4a16-9636-5e1dffd684e2", "indicator--79d6367a-74fa-433a-be70-b16d8e802a7c", "indicator--8b4b63ee-b391-4833-9d84-877469adf960", "indicator--1aa1884c-0326-4367-bf85-1d7a33448bd0", "indicator--c0c7c425-333e-42f7-b65c-6befb5324922", "indicator--6e73dbf1-5e1b-4f02-9c42-f24fcde498ee", "indicator--202d591c-126e-44ad-b001-fbfa795b886f", "indicator--84209a49-685d-4d78-85a4-60597f79be4e", "indicator--9dfadf09-72d8-460e-b107-cea9c6b597a5", "indicator--8854955b-cb1b-4bff-9998-1c3483086491", "indicator--f7484b51-6371-4360-ad96-848573b8b10d", "indicator--26c37022-3010-4560-91ca-46aa181c85a1", "indicator--5ff0f4f1-b7eb-46b3-b6bb-982bda317234", "indicator--4c3bac34-6a91-4c67-919e-0ecb1a281722", "indicator--f1605329-792b-4771-899e-6e6a5938b572", "indicator--9bfd84d6-1296-4738-99f6-42efde843ed6", "indicator--c2ac48e9-14f0-410b-bd7d-72558c7c13f2", "indicator--80a8925b-a9aa-451d-a408-6592c24b6894", "indicator--932bfe7b-691b-4437-94df-b4a5e8fd3eb6", "indicator--52cc42b8-9e1d-4857-8766-99809b1ee3c1", "indicator--89c8ab66-6935-4fa3-bbc3-0fc83f9dd655", "indicator--7e912521-78ce-42fe-abd0-2285490ddbf0", "indicator--a346c8ca-a377-49db-805c-cb2fb8006767", "indicator--aa5371bd-772c-4fec-a621-ae7ee8930a33", "indicator--025b5e87-66fc-47e0-b9bd-bea19a722ca9", "indicator--8d296570-4f54-48c5-83d5-d83caaafa5da", "indicator--6aae46c0-0742-4409-8361-d22febbf1a2c", "indicator--0c69acf0-a7a9-4a60-82aa-c58febf2c1e8", "indicator--ec9511d0-7907-443a-8b11-6c0c22116c4f", "indicator--9b28517e-1b3a-435f-a65a-b979ad4fbf20", "indicator--86cd6f21-6c59-4d62-97ea-66f343909545", "indicator--66e2b9ba-db51-4c14-94a2-e44f8bd849cf", "indicator--80c7dc0d-0737-4308-b22a-45f99ee12a0c", "indicator--d375b702-8cce-4e0e-a35e-3cc3093f9266", "indicator--698a2ebc-df7d-4a07-b954-110cbcf652a5", "indicator--f38d3956-bd67-4df4-9e38-599fbbcb2305", "indicator--6d3e146b-0749-4114-bfbd-22c2e6ec969c", "indicator--5b3ee049-b409-43f8-b146-72d63636ccb9", "indicator--4c8b76c5-f46b-4fd5-854a-67da2f8d9b2e", "indicator--8a1c863e-6a31-44e8-94d2-562c4c746b3e", "indicator--a807e9f9-9d3a-4771-bd80-cf0f7f697106", "indicator--845f5375-7aa8-4c85-856e-5b78e99c1558", "indicator--f6b6bf3f-38dc-4e5d-9042-b4d5d77b8f65", "indicator--121a46be-fc8f-41e5-90fa-2abccc8d16e7", "indicator--901d441d-81c6-4508-9ec2-c85ce0c26ed0", "indicator--480ff3d5-4da9-4844-be35-c6614d23ed62", "indicator--270ed843-7d8c-41c1-922c-ebc4d20ba741", "indicator--693ac64e-3ed1-4b83-be1c-5ac89cb6d41b", "indicator--d72cd008-ed77-45aa-a7d8-b8b959f57684", "indicator--ebad76d7-19b6-449c-90f7-a89e997c0f3a", "indicator--1ed649bb-a165-42af-8705-d98553c4eba8", "indicator--0f8ca5ab-b17b-49a7-a9b2-17f8e67b56e2", "indicator--b150e662-a2aa-4eda-bd82-465cd1fdd76d", "indicator--8c4cab96-7543-4b74-b68f-e05973053605", "indicator--88b14f99-74f2-44e5-87bb-1926ca800cdb", "indicator--c990dbfa-baa5-416b-8317-f3ce9ee8847d", "indicator--c9b8f63c-7096-4770-85c5-6919b2156bb8", "indicator--fa756962-ff59-402c-9016-3a65c803a00c", "indicator--7b5d0f13-5b75-4a30-bb70-9ae3a2adb8d5", "indicator--a4624a04-6e43-4708-86e7-2ee2c4137a0c", "indicator--6d1ed0bd-58ca-461a-af0e-6f2dde155def", "indicator--afea676b-19fb-499c-b417-52be35866344", "indicator--4a06b1b6-c3be-432e-8146-3fdc30f027ec", "indicator--f2d058b0-ba6a-453e-a5ad-76ad2e8020b6", "indicator--5ded35e3-1705-43d0-a265-a2705927f3c0", "indicator--1878f5ea-4a20-4db4-8de2-a007083fa867", "indicator--b2ddd1b1-1af8-42ff-b270-850f0cbe70cf", "indicator--8d58e067-4014-44af-9509-7fe196260392", "indicator--10fa5c01-b4c3-48c8-a691-1c16041bd7bb", "indicator--1c209836-41fe-445e-9f63-d377ae0aa2d9", "indicator--e02dd3d2-2e59-4b7d-809e-da732941af1a", "indicator--aba37e82-877d-44e5-b757-a2002f3a9bc2", "indicator--0ed2d8bc-3584-4a8c-bf2e-b4f6ddec897a", "indicator--e0f6b264-654c-4955-9be9-0d77028d8c82", "indicator--57cdd267-8619-4f6d-9899-d08c3ce0da92", "indicator--089b1352-67b0-4884-8c26-da1cbd132707", "indicator--7640797e-1e1c-406d-90ad-aba53db7f878", "indicator--418ddf60-788d-4ccf-878d-20a40831f3ba", "indicator--e3b9bc2d-0d8a-46a4-b088-3fea92e27e70", "indicator--5871f95d-0061-4122-88e4-58636ef1ae2c", "indicator--c4ee02f6-d3e8-42ab-8d17-b9fc1daa154b", "indicator--2761043f-e4a3-49c1-bf76-75e7eb497fb3", "indicator--494ce407-9277-4113-90bc-e30a0dfbb999", "indicator--ddcd22ef-0f30-4c46-9f1d-87fe3e7579db", "indicator--08be9857-386d-4a38-b4b3-afc94b84f46b", "indicator--751b9cdb-cf1b-4aac-9eef-184411035b9c", "indicator--c45503b8-9ef9-40f8-8186-a10e425c8497", "indicator--ff088852-6eea-43f7-87bd-eeb0d4a6c2ef", "indicator--f48b5ade-8a68-49c6-9558-7bd788cf7eb7", "indicator--d0e8a412-a48b-45ff-acc3-5ef4fdb10806", "indicator--ad156de6-7fd2-4ee6-9cdf-4911f048973b", "indicator--28c94349-2545-4fba-a6ca-f216dcc55881", "indicator--d624b08d-db2f-418a-a85f-bf587df8b3f6", "indicator--909255c8-9bf2-4fb5-a171-ea3fef93322c", "indicator--19da81d7-cf94-4bec-9929-2c8de78f12ea", "indicator--f63a553f-4b53-48bf-89f9-7a3fba39d0ff", "indicator--25000999-8603-443a-9a68-304b2caa7df8", "indicator--13b8a9ad-dc20-4fa6-9e99-d8f980acff57", "indicator--80180bfb-e664-4f29-b632-439fbe728fe8", "indicator--cc7a0d3c-84e0-4175-a65e-e24fba67058d", "indicator--28a59d76-3fd0-4890-8fef-4f485d7301d5", "indicator--1ee813c2-0612-41b5-bb9b-b340b7f62364", "indicator--2af6859e-7a11-4b46-a3b8-ab6a00aec86a", "indicator--9e500577-4dc4-4994-a15c-0164839eaf04", "indicator--997736e0-2e9d-4e94-8d4f-fb007464d7d7", "indicator--ebd11c9f-38fe-4e97-a91e-257a6a553b92", "indicator--033570a5-54c2-47ad-ac14-19ee5fdbfa6c", "indicator--cdfe5f7e-ad38-4ebe-bf68-23a49b0a2ce2", "indicator--6933376e-032d-4f39-a2f8-54ec61b085b4", "indicator--076fae41-11c5-4010-a210-066b256f105d", "indicator--ba6a833e-314b-4825-b8df-2571181b2ecd", "indicator--e98dd1b0-de5b-4257-9cab-489495b0860c", "indicator--8e96a3db-2ff1-45fc-8a7d-dfa1dfdc2718", "indicator--b05b02fc-a3e5-4061-898f-5f5a49a2e99f", "indicator--6cc7f02d-4baf-4fb8-9c67-2702ccea2d53", "indicator--68265b25-3035-4a01-992e-9f8b47c68977", "indicator--56a0a347-78c3-4725-a8a2-637f0dee3355", "indicator--94766238-dd45-4045-94ca-02f9af7c9df7", "indicator--2a645b2f-163b-4cbe-a9d5-7c9566b9c5f4", "indicator--33c0deb5-0a30-45b0-83c4-35ca61337a34", "indicator--5d9ebc54-07de-4dc8-9cf3-ec59146389a6", "indicator--c85e4e34-6673-4498-8ff4-9651c45d059e", "indicator--fef00a7a-29e1-4756-88c6-a4986ba2b992", "indicator--db7c7f32-9ec2-47ed-99ef-27ee21ee5c7b", "indicator--925bc6c2-e34d-4f05-815a-05b10d8efa0f", "indicator--61d0fb0b-324b-468c-971c-251e8cb5e911", "indicator--920ada72-0035-4178-b7ec-56b5a6c6f401", "indicator--9a5ff16b-423a-4735-92a0-0a0912821cbb", "indicator--58189fea-229e-4cda-a0ee-67e5991623fc", "indicator--7580a502-2e64-4f7a-90bd-429c74569a5b", "indicator--6c542166-9aa9-4f35-8052-81df06570157", "indicator--d9fa5609-3c23-4c1f-8440-092855f4a1d2", "indicator--ce6a2faa-63b4-43b3-b339-24bee6865e11", "indicator--8de196e9-5b53-4a6b-8da6-5e387d58be06", "indicator--a11472ee-6875-47f0-ad1b-47209a44b4f3", "indicator--e550b85e-8b5f-43dc-be29-b51a754c2aba", "indicator--1b94154a-657d-4dc5-b37a-82528a1f7fb9", "indicator--3426e251-8a26-4ab9-84fe-8845af03e85e", "indicator--9bff95b6-a7c2-4a46-be52-199ed01b0dca", "indicator--e88ebfe8-cf12-40f8-85de-450cb39091c5", "indicator--f11b3e95-5fd7-4e27-badb-679466bc65a0", "indicator--2e0c3bb4-1da4-40cb-a7f9-7da60201e7cc", "indicator--38642b91-25eb-49c0-af28-390cbf3b8599", "indicator--dde13d12-d7cd-4b23-a7d3-5043a6859847", "indicator--7c9d7302-25cf-4b4c-9730-dac13e107d09", "indicator--ec2d7d52-e8a0-48b9-a000-03547185f425", "indicator--12417722-ba66-487c-bc55-6af3ed1d2821", "indicator--6497c7e8-37fe-41b6-b5ab-6823d99d3737", "indicator--9ec86c96-6ac9-461d-be50-f5015279c41d", "indicator--d37d58a7-a076-4568-8385-fed9f670da5a", "indicator--f8200001-b80c-49f7-a042-87f0b76b6316", "indicator--c22bd15c-329e-4a21-95de-ec5780c831e3", "indicator--4b8ff3ca-2e9c-4d58-b951-437ad2b5aa91", "indicator--7266c316-0a1d-4df0-9d73-604eb3e15409", "indicator--df45d29d-85f3-4efc-afc6-03e92623b1b1", "indicator--4bfc5b1d-3684-487a-97d9-7d66ada63ed4", "indicator--636c85c3-a58d-4354-9074-814604f61ea4", "indicator--9a0c8ee6-5056-4ea8-938e-c8a5fdddc213", "indicator--cf33e5fe-6592-4466-89aa-8da028108978", "indicator--5bd99de8-51ef-4ad8-b857-6fde256e596d", "indicator--90f31a11-c260-4692-8f52-08c354189f68", "indicator--4a8e1ab7-25ff-4a68-a63b-a8b4f42d40ef", "indicator--d31461a7-e531-4e90-a0d3-d4f411c04e3f", "indicator--568bd958-35b8-4fc0-bfab-9bb53bd24342", "indicator--da1cd43d-53a8-4d20-b5e9-1a03d672580c", "indicator--ded2e6f0-4c8c-4532-a575-9a85415a011c", "indicator--5712927b-1b2e-4569-9f86-207f2f89555e", "indicator--b088834c-c6a2-43d2-af77-accd3711c538", "indicator--532299a8-4a75-43f6-a424-0c3cae1ce14a", "indicator--9c57c6d1-5be7-4ad9-baf5-00f7a99f7e92", "indicator--8763297f-4790-40eb-8c0f-1a8df94e560e", "indicator--35cb64a7-919f-49f7-95bb-724edcfbe1fb", "indicator--a12b0398-8a1a-4a48-a18e-0e45ab7519bf", "indicator--c330d15e-c092-4f9f-ba3f-b99043094f49", "indicator--accb1256-76de-4e12-95d6-b0e5ef13d9dd", "indicator--5d0c88be-dd71-4896-9909-042bc58ef720", "indicator--72d29b24-ed99-4391-8e1c-d744323c9e91", "indicator--5f991a94-2385-4e00-af2c-f69d9591389f", "indicator--26e7977e-0a88-4e66-afcf-238d8161cdc2", "indicator--ddf0112f-49a2-45cd-a970-31ecb41385b7", "indicator--88a1997b-e28a-4015-8fe3-713326341e13", "indicator--b0ffc041-0287-4c3c-966a-63708d898c79", "indicator--e39a0b27-ac0c-450c-a0ce-0e1badfcca1f", "indicator--876792b1-fd75-437d-8464-41d35ece4d6d", "indicator--11efeb92-cdf8-4fd2-baca-02086798b740", "indicator--74a34bc1-55bf-4033-8f65-753a9eb33e78", "indicator--954fdeee-9932-40ba-bfed-2e77c61c87e6", "indicator--242a9c97-0d4e-467f-8708-5c0fea7b679d", "indicator--7e1d0964-2621-478d-87c1-3b3b36762375", "indicator--ea3445f8-e9a1-4234-a183-2651649dd4ea", "indicator--b37d637b-c4fb-4f08-a597-80f97f9ba5d6", "indicator--fe4ca467-2fe6-4c94-aadf-e3689217b22f", "indicator--4207eb08-2e98-4cfd-ab71-c711f3fc6074", "indicator--3c67fa03-902b-48c2-8a55-1265d04f662d", "indicator--bf392121-fda7-4f2e-a05a-47e6f7cf755b", "indicator--60c5a02f-d8dc-44f5-a4ed-42f0026521ea", "indicator--661e6e4f-92bc-4258-8691-7874557023ff", "indicator--afeb684c-d5ab-4355-99ab-71246461de00", "indicator--53134e59-662c-429f-8747-2282547d4a20", "indicator--3291579b-e214-49a0-ad21-c68828f5f27d", "indicator--1a7858a3-fb1e-4736-8d93-16aec6b1317c", "indicator--6e1c21de-deb2-4b0b-85d7-a5fecd06de5c", "indicator--fb8409f9-618e-4b46-8156-df5fcd3516a9", "indicator--d67d2d55-2208-49a0-81cb-267f37e3a492", "indicator--8cb6c883-5dc4-445d-ac53-99eb4ff1ad77", "indicator--bdca8ec4-60db-42ae-b634-8d4abc273346", "indicator--043642b6-ba61-4845-898f-c5be138013ec", "indicator--2923b0dc-4a97-4d39-a362-381681aa36ed", "indicator--fe435ed3-9a74-4fdf-828d-c3aa6a3f4376", "indicator--9b1e9e30-71a3-484e-a78f-60f2b2c915d2", "indicator--a8fb61ee-4174-41ab-b3ef-e6d7aa819059", "indicator--decf61d2-cda9-43c0-9820-d75bbbf96168", "indicator--7737c5d9-e25d-49c8-960a-caf5d131af21", "indicator--327d9eb4-8884-43fd-bb92-f36fa6de1034", "indicator--158e783f-aeff-4ce5-a826-f3f217a4a594", "indicator--9ae9888f-ab8f-4fdd-81fa-34e7667ba26d", "indicator--61d16e3e-62b5-4c54-b68a-3c1b716ed525", "indicator--9a6b1409-5151-4a75-8037-a8cdbd720f0a", "indicator--831abaab-caec-43fe-85e5-96b914e099ca", "indicator--f862dd2f-c304-437d-8ee5-142b90e79e85", "indicator--6c5da335-dea0-4ea5-8ddc-72cbf640320a", "indicator--313655df-ea4a-4d52-97e1-811fdfbcfd03", "indicator--3e44864b-b8e3-4694-8217-c62979cb2f0a", "indicator--b12425a9-735d-457f-ba8b-03df2a478541", "indicator--67f53344-2de6-4d5e-8b95-d86c6c4b187e", "indicator--7e2987cf-7205-4439-b8b9-f2ed623b4773", "indicator--eeff538c-40cb-4786-91b5-241034697817", "indicator--d1d8a1a9-1f6d-47ef-a57b-bc5873c145c7", "indicator--39fffedc-4dd5-49f0-aa92-a6042352e94b", "indicator--add0f287-32e0-403b-82a1-9ef4909aa9f4", "indicator--f2c9ce29-ae1b-40af-b574-6195f2b1bdf2", "indicator--7817f129-d8cb-4d37-9a0a-3923a7599185", "indicator--971f52e7-3482-4d3a-a288-4f7bfc077dc5", "indicator--7448e187-3ae0-4c5a-8ac2-270631f2b8c9", "indicator--c74e7f06-b2aa-49e0-a400-44328e1a836a", "indicator--bcb18f67-1649-419e-9aa5-fac42485115c", "indicator--58f6f2e7-069d-491c-8a2e-6b88a737ed32", "indicator--3a8fa389-c7c2-4789-a15c-e4b124edf221", "indicator--fff24f75-e77a-406e-b694-bcee88e14e1c", "indicator--8922ff56-f955-44a5-b2aa-a577f030b4e3", "indicator--73244f8f-e83b-4aae-8ed8-95a64b4ca85d", "indicator--62f8bffc-97f2-45af-a6df-ad3b861b9e32", "indicator--7305909a-b840-490c-ad07-be4ca4e518e6", "indicator--f63ed021-e865-44c4-b6c6-1205a1e5f653", "indicator--c6590e00-064c-49e3-af7b-c1fcf24f1230", "indicator--43456a1e-8694-49ec-a2b5-894d05e16a6c", "indicator--f0313dcd-efa7-4496-ae7c-36583db03004", "indicator--8940f302-7aa0-4c96-bb30-1b95a4539075", "indicator--859ba54e-2cff-4e8f-bd3e-4e32e05df7de", "indicator--16354f9f-2ab7-4c69-b8bb-36db77f54244", "indicator--429ede44-bd95-44a7-b870-9c6bc9b85417", "indicator--66bf476b-8f74-47a0-9282-452f6709fc83", "indicator--7ecc25aa-dae8-4f85-a10a-855f2b50f165", "indicator--30800a79-defb-4fa6-ad42-aec4919fb301", "indicator--bfa3249a-3526-43d4-82b0-731b72cb3ab5", "indicator--697e454e-11bd-46b0-b652-d84c4024f298", "indicator--c30affeb-71e4-4f8f-91b0-8b16f8b84b8a", "indicator--bb8056ca-7c53-486e-b18c-f1654b24b77c", "indicator--4be0227f-f036-4ce3-84ef-6617eae228a2", "indicator--bc1d6ff4-017f-48b9-bb43-4408b571c772", "indicator--ece5cf7f-f703-43ae-887e-7ea9e8bd009d", "indicator--b937e8d5-0607-48f0-88fb-00cb01fc2907", "indicator--f1c3d66b-4089-40a5-9c02-f95863c21189", "indicator--60231cc3-e7fb-470a-96c9-7f4a6dd854fa", "indicator--c818bd39-22de-4aad-954c-1519958241c1", "indicator--48f8fd9c-7097-42ce-b7e9-4ac6c4954237", "indicator--8e0f8794-eb44-4916-a8dc-60d32e4f423c", "indicator--5f7f914e-5e2d-4d7a-8633-bf1ad28b0cc0", "indicator--bf42cf3b-60b3-4de9-adc4-d39581a946c8", "indicator--bfd50e32-22a5-4986-9652-8dd5f44cb400", "indicator--3b485cac-8784-4d9f-b872-f3f784fdbb10", "indicator--08269f01-c275-4b7c-9a82-540e5ca99ef7", "indicator--ae1b681c-9753-4e35-96ff-ef5fac533b2a", "indicator--388e0bc8-ff96-40e5-8d76-33568e9850fc", "indicator--018243ac-88c7-4cc9-a22d-b8e18a22567e", "indicator--eafa312e-0894-4709-8f0c-15b6ae533e6f", "indicator--252c1458-c676-4208-959a-00580cc50285", "indicator--48bebe48-2ee5-4910-87a3-662554e16325", "indicator--7251d480-ef6d-4d03-b115-4bc42f8fbfa0", "indicator--80c60fa7-1aa3-46db-b02e-07d631a7508c", "indicator--c21229d4-fe4c-4877-8232-150f463741df", "indicator--3639c92e-a750-4b4e-bb12-9aaf08973973", "indicator--6bceac4c-e75e-4a60-824b-d220fe47dbef", "indicator--c37c4c90-b2e4-4698-96a4-c9e2a994573b", "indicator--ba656387-8e80-4c3e-a7be-af12fc4d715e", "indicator--bfe41b8f-5d33-4692-8e82-874ddc5411f3", "indicator--3877e421-6fde-4cd8-aa89-584cacf93c97", "indicator--201de686-b29b-4d0e-acb8-0a3ac6212d37", "indicator--3319132d-1545-4afa-ab72-357cef1bee40", "indicator--ff5cc248-7596-41d0-97bd-0d6597c83a80", "indicator--8b4203c6-8578-4c8a-9f09-f3a9d0d11a40", "indicator--b6e6e7eb-89e9-4f88-99f2-6cbca2a43273", "indicator--3c73072e-1d8c-4b9b-b1a5-dcc76bc642ff", "indicator--7d2c0611-0e98-496b-9081-cd5a1695c797", "indicator--4d3d0623-0138-45dd-b82a-ed06907e9767", "indicator--8b85d6c0-b63a-419d-b609-710e2caf436e", "indicator--3bf6b64a-a584-4c7d-ac19-7a133455d37f", "indicator--2d12367c-72ff-4206-ad21-d92425255dc4", "indicator--fc6bddc4-0a12-41e2-9dd8-726c0fefdde3", "indicator--fa2a4047-0ea7-4e94-969e-959946e82c87", "indicator--f78d1746-b0f0-4f57-b4a0-1337cfe00957", "indicator--0f6bdd1a-9ac9-4b39-b9ee-57b7414a3b90", "indicator--095985bc-8ccb-4dc1-8f6f-6ee2f5bb7308", "indicator--a1017eb7-80c1-4148-bfe6-4d789e1cdbe1", "indicator--6e77fc5c-d5d6-4c50-a35c-f8f9b7d4b19b", "indicator--1c935629-bf7f-45dd-a9bf-c56eff5185ab", "indicator--1b63d95f-a6aa-4c85-99de-87c5060b3b29", "indicator--98f64631-b23d-491d-9f21-75f630fe52b9", "indicator--3a42d0f8-8ba0-4775-a462-36645d47b13a", "indicator--21e62169-1350-4fb5-822b-c6f6528b78f1", "indicator--a87e02c6-9fd4-4f60-9286-30f01e6b001c", "indicator--67826f1a-66e9-443a-8da1-da48ed6a56d3", "indicator--1e389e00-8ae2-495b-857e-12193fe07bbe", "indicator--f598252c-4c6a-4cd9-9c6c-18aa0ccd2bcd", "indicator--a8fd85c6-3bde-4664-94ed-3c57911cc030", "indicator--14c95c9f-8fea-4c76-894f-fe16982d97a9", "indicator--c4ff32c0-0411-4ef6-9b40-42cf0853f568", "indicator--8d2c04e1-6464-4525-9f98-d64d39b107aa", "indicator--00f2242c-73d3-420c-a104-ba6392989e6d", "indicator--9e99555a-6e08-477b-8373-8fce32693267", "indicator--3045ebde-ee6c-48f7-b872-9a3c5219314a", "indicator--e7d98cde-442d-47c8-8d58-4400e5d2d7cf", "indicator--380d6828-8a77-44d3-bcfb-8937b6479d09", "indicator--94667a4c-c6c4-4e9c-8cde-5d78c650994a", "indicator--9e715c22-973e-4b75-a91f-949282f02e0d", "indicator--39c31cbb-2b94-499d-85c0-7ca1b5ef62ca", "indicator--fd1591fe-163e-40f1-95dd-681022375ef5", "indicator--60109197-867a-464a-8d13-a6ec04104af3", "indicator--af5b95c2-7f4e-42ee-89b1-9918e46b8441", "indicator--a0c84141-3a06-4347-84dd-80cb89598618", "indicator--22092fda-c078-4d7e-b65b-4177cad0d045", "indicator--ba47cd0d-00a7-47f2-bb6d-0783a970a2b3", "indicator--f504468e-9d39-42ea-938c-1ecb3499021b", "indicator--0d688dc6-a852-4a00-86fa-7cbd5f816be8", "indicator--a55f9381-dc46-467e-a694-5f88b877ddd9", "indicator--170502bf-e348-47d6-9d28-270d0dbeaccc", "indicator--690507d2-5246-40b3-a45f-c85c6b2be7bc", "indicator--2a8b7d67-ef5c-46da-a35c-771f121e9901", "indicator--5d3937d9-b07d-4c41-adc0-1bc726d9454b", "indicator--c2503936-4fa4-46c2-8671-095baa09abb6", "indicator--00de385d-9110-4439-a0e0-07369d0db36e", "indicator--6a318b67-be25-470a-8eab-c9303ff71ad0", "indicator--4e4c243f-3737-497b-a8ad-7d5f20d791e4", "indicator--d258c754-ee95-4e03-9fe0-8d2af4016685", "indicator--9dec6ca7-07bb-48fb-8811-36a84232ffd9", "indicator--237558f3-b64e-4df8-80c5-c72541267ba3", "indicator--13b96346-2052-4959-855d-bc9f8890d510", "indicator--9dd58755-deac-4a27-8341-18aeeff93ba2", "indicator--14daf30b-3b44-458c-8a5d-2866f309432e", "indicator--05b0484f-9dbc-4aaa-8f2a-9e93508d0630", "indicator--49400996-2547-4b57-8a59-84959d2131d4", "indicator--5b872e0c-216a-443a-880a-88a14971b583", "indicator--f7627451-178b-433b-b3dd-bd98b2145a4a", "indicator--7b6ab424-efba-480d-b14a-75271501e125", "indicator--a78171ee-9b85-4b1f-8777-e039f8388b39", "indicator--f12c9f99-7a58-477a-a7cc-4b332564a955", "indicator--74c3874c-a500-4892-acf4-0ba5132ba7b8", "indicator--befcb9d0-42d2-46e2-90fc-e6775f308773", "indicator--42afb67a-c370-4aaf-a862-48bac25e0a75", "indicator--f38fa32e-2538-4bde-94cb-fad005ffe845", "indicator--4af67951-e04b-4e14-aad6-d5e03859ff4f", "indicator--444311b8-235e-4fd2-919a-874f2a843906", "indicator--e632d69b-3fc0-4ac2-9182-16849fc00553", "indicator--292f4793-fa20-4d8c-b53c-14716ba3ea78", "indicator--c23ff7da-7b85-44eb-b658-1d8c6ea4b493", "indicator--12493359-c5fc-4cfa-aa61-92705ea28d01", "indicator--dae87493-a5a4-4006-bdba-dd74d3366be4", "indicator--f7df6bfa-2a7e-4502-9718-43c374549bd4", "indicator--14dfdc4d-134e-4132-9449-403c1cc2db3b", "indicator--2c57af54-4a4e-4a66-83a7-dd15b9ff0564", "indicator--25bd22a1-4f05-42a4-b4e6-9786ccce00de", "indicator--71b3d254-e8b8-41dd-b703-25ce702d4093", "indicator--994917c7-d952-46a1-9426-3b786a229cc8", "indicator--e26975ac-2d20-4852-b5bb-a3ed7313e73d", "indicator--345c7395-46d5-4949-91ae-0e6f29d7a0ff", "indicator--da495964-7b7d-464d-84b9-bf955c4554b4", "indicator--48125117-98bb-4abc-9264-3ab88747535f", "indicator--1ab5a18e-9e73-410f-b7b9-02c6c22bd105", "indicator--0c9564bc-837a-4659-a635-155967681c28", "indicator--f7508928-1ce7-4dc1-be20-757be363a065", "indicator--0f11881b-46ba-4d68-8923-8a09e02ce38d", "indicator--a8f54352-d3c5-464f-a7a3-cd2d2f227f2a", "indicator--84539db0-45fd-4d5d-8c54-da9549f3d01f", "indicator--98acbd42-37ef-4cd6-8af4-7808483de355", "indicator--5532cd46-956a-49c9-aba2-93ab43ce3342", "indicator--e747ec18-4422-443b-9061-6a8132f51771", "indicator--bb74a062-228c-44a0-bec9-a31e27b0b0a6", "indicator--76bdfa02-c2d0-4ebe-b450-ee86d5ef0c8c", "indicator--4a3b84e3-d0b6-4aa3-9304-6721c0ac6cf9", "indicator--15ab77e0-d1ef-4757-997e-54724f525826", "indicator--d221d820-f818-442f-b7f3-0c1afca1dcc1", "indicator--b5b31a0b-0c51-4578-b7c4-055b00f9c9ef", "indicator--9ec5a762-236b-4725-85af-d55f69272198", "indicator--bdc29b3b-2e92-4534-8066-e24ce0d6b16c", "indicator--c1df2244-4e6a-47b0-b646-5f2ba790a633", "indicator--719ae503-2b42-434f-a3c3-83ffe38d6307", "indicator--a3011d73-6bc3-4064-9405-3311d89378c7", "indicator--5b182ca4-7013-458f-bc51-d6b81e45b245", "indicator--6de69975-cf39-4a1e-9b77-4d792118faf8", "indicator--0c1b1ee1-ee96-4d98-9ca8-d16c60a21fe4", "indicator--2e952bcc-d554-40b2-9940-eaba2aafcd24", "indicator--69c6d5ca-ca83-4d7b-8022-29ee7dce58ae", "indicator--c5c3241b-cda4-4b1f-82eb-edd9a9871ecb", "indicator--fcb36f1c-cd06-4151-9045-122ed068c59e", "indicator--5ce5db51-2852-4c8e-ab4c-181fb580a61c", "indicator--6876c226-d428-4d73-8f74-0d77d57e2f18", "indicator--95061385-17a1-4d09-b573-958ee1ae2405", "indicator--9fe8a465-6690-46bf-b61d-193ae9771477", "indicator--41123a19-5f14-480f-a008-6b689c347559", "indicator--16b66426-f5ad-49ae-9cd5-136c87218c55", "indicator--70e2f23a-69ce-4531-b16e-fb007f0256e2", "indicator--f5034977-31fc-458e-9c93-371491ebe80e", "indicator--56a6e647-10eb-4916-8cce-458306f23b8d", "indicator--a257d66a-a925-4f87-ae8d-1e3983831f2c", "indicator--c6e302af-1d5f-474c-99c6-d55a9f530fea", "indicator--91af744b-7357-4234-9f56-a9be03c5f79a", "indicator--d9d6c632-06bb-42c4-86f8-3401fb025372", "indicator--370cf872-5751-49d6-b605-2deea5706f00", "indicator--130c7025-376e-4503-8405-9d948b9d28a0", "indicator--8fd753c8-ea97-4d3d-acc5-03b54ddf7279", "indicator--c2224683-2887-4f93-a11f-5fabdfe6dee6", "indicator--4b20476e-8b37-445b-93ba-fe76b385c63a", "indicator--0581f5bc-2607-4c64-8ba2-a40ecbb57d76", "indicator--93447643-cb43-4c02-b7a8-de7888c770b7", "indicator--b5779219-8fbb-492f-a4cd-b30c703d9e6f", "indicator--81f73193-e025-4582-8c4f-fb50a30c6f2e", "indicator--83e8671e-b046-44da-8a90-ee5b7b024f02", "indicator--4729b2c7-8684-4e93-9a4b-ef3b68722df3", "indicator--b07bac9a-a707-40ca-8cd1-d8b8a7d72f0a", "indicator--504a8237-8e00-47e6-949a-001cb9612f34", "indicator--d6f8cf5e-c624-43f6-a1ff-6531e10a3592", "indicator--58a07b41-076c-47ac-b685-5fb8bbc0ebce", "indicator--b0083f48-d172-4a40-b949-2d71c0f5315a", "indicator--9cccbed8-181c-40c2-8e6f-28c92a5eba57", "indicator--f9a38f08-6e09-405b-9a5e-7250bdd6e57d", "indicator--9baf2875-7661-409f-a20c-7f3c25af9d58", "indicator--9c24de32-92d6-4616-8255-ad3b53a29a9d", "indicator--143c827c-0990-47ba-a0f1-f9729749ac51", "indicator--d221a537-6809-4e86-ab9c-fa10ef871f9c", "indicator--cc192de2-add2-4dda-9e28-d97c202b6210", "indicator--36ec80ec-8514-4775-a07d-07274332338e", "indicator--d1a57bb4-5f63-4d49-bf12-79cd14f54638", "indicator--f247d6c9-eff2-4184-8b16-08f8b1b9f9ce", "indicator--4d09916d-82ea-45df-b654-5ee2a6d9456a", "indicator--f17d3c25-627f-4be4-83f6-1e316e395953", "indicator--c40263ab-9223-43b9-8a92-0e8aed735e0a", "indicator--9826c1d3-d8d1-447f-b5b9-479b0f03193b", "indicator--f2a1506f-d9ad-4451-8d26-5eedb13312b8", "indicator--4238cc3b-1152-4a7b-bf20-593c35099fc8", "indicator--5586e797-aab5-4507-a347-096f2b4de296", "indicator--db700982-b3ac-4669-a931-275b3cc554f1", "indicator--f241898b-86c3-4e64-9c09-ece0511b3333", "indicator--d8a905f0-5f71-4539-889c-8e5f816b8743", "indicator--569991e6-91f4-490a-bd79-039550958b93", "indicator--027ada2b-866f-4de0-9506-4d0928c15ed0", "indicator--5c32a2ee-cea6-4b23-a32c-437a12c7af52", "indicator--003f4e7c-16f2-4422-a4c7-79affe1738ac", "indicator--afef2b85-0276-4c17-9f2c-a0ad26b52cd9", "indicator--3c5f45b6-248e-49c9-902b-0957c86d5481", "indicator--88a3e80d-5026-49dc-98ff-362ca0060cb0", "indicator--6ba349d9-7f3d-408a-8ab1-4d1c2d867665", "indicator--de749b7d-5b1f-4232-ad0c-e62df6336629", "indicator--12b5abc8-25b8-4002-9601-873c60d6852a", "indicator--a4995e4e-60bd-4ffe-a9a9-9c90abdadb1f", "indicator--e34864ae-e234-4062-b163-5fec2f309369", "indicator--75bfa7ce-fae7-4400-bc5d-9ebc022bba29", "indicator--dbc1b865-ee20-4fc1-99a4-f096864a81f2", "indicator--5f366daf-8ef9-4c7c-8da8-471a0c4b17c3", "indicator--81ecbfc2-c027-4b84-bcd2-5a41e6f2c91b", "indicator--cb94e0d7-550c-4ce6-b53c-c8ec8b2540ce", "indicator--8f29a828-cef7-48b1-a25c-7207e4d50453", "indicator--f8c26b50-058e-4415-a4ce-6b3d0e8c9e63", "indicator--659b2364-cd9f-43d5-88b1-2996d53277c4", "indicator--4c4472ba-86f5-4721-ae83-70a5378a1335", "indicator--eab086c7-57cc-44fd-a173-255c0a8f0a9c", "indicator--e8d81524-fa9e-4419-b8ee-26c0c54e7f55", "indicator--891438ad-8a61-4f99-9ac1-e81f7c8fc7b1", "indicator--67aeafc3-5c89-4230-88a9-d000bce8a30e", "indicator--684c1377-0da0-4020-a179-fe1910e50e27", "indicator--b55c9750-8ffa-4dd0-b34e-e05aa171b885", "indicator--1f3a452b-2847-4113-b3bc-6ebc502c6533", "indicator--2293e1ef-ba70-4c32-8768-e2c71dc911be", "indicator--2a79fed1-1dc6-47a9-ae42-65a49a5ce536", "indicator--5975d3c2-6d4b-4462-a014-aac2312d78b9", "indicator--47e0b6fa-858a-464a-8387-8dc142e6a43f", "indicator--98d3f161-c0cc-4d7c-992f-826cb83c2b2f", "indicator--19272d65-e617-4965-9aee-888e64388503", "indicator--2c804691-0084-467a-acff-c78569a3d977", "indicator--d34037b9-ad05-4660-8f21-5dedd61a7788", "indicator--c358c194-7079-491e-bbe7-fc708d9358d0", "indicator--f9112d97-eea2-4c92-bb0c-9384a3fc3840", "indicator--0f5f7f37-eb58-4ffb-a2fe-e9a45e098f40", "indicator--80ab7e66-a7d1-49d4-987f-12df959d63cd", "indicator--07e637c7-72bc-4efe-a790-e62a5b18fd46", "indicator--9e4c2c0b-2755-45da-a584-a8dbc940b5d7", "indicator--91571620-8eeb-41ed-af56-c46f46a58c78", "indicator--06f5d52a-606d-4525-9cb9-1dff35283153", "indicator--422c72e9-4991-4d03-ad3e-a99e81f01461", "indicator--0485721c-d988-4d14-b73b-63fb59b5b01d", "indicator--ad69d482-bff6-499c-bb66-2ab666572c13", "indicator--98256ba6-fa94-49aa-8ff5-f8ab70755a7a", "indicator--df1edd91-9017-42ad-86a3-b66f506b481c", "indicator--6d608cc6-1d14-4adb-a33e-41e15324625f", "indicator--c382321b-dca0-45d1-aabc-796b0606af32", "indicator--aacbb9ee-33b8-42a4-bfe3-61390d5a65e6", "indicator--fc22e108-8cdd-41e2-844a-244a6b8eb350", "indicator--2873d750-80e1-46e9-8811-6068d1a3d8b0", "indicator--a4f98744-3a47-46b9-be4a-50803bd7e466", "indicator--6e078b96-51d5-4b1c-b2e1-ef27aaf6f8b2", "indicator--2c616316-2f20-4784-8970-f5e43e597838", "indicator--f23a3449-b681-425e-9edd-885f889346ca", "indicator--a76865c3-d5e0-49b0-852d-266145471e91", "indicator--e6dcd2d7-1fcc-45f8-a6c4-6ca52ad3d7cf", "indicator--fc0af8c4-eb35-4e91-8d83-4f7c28b959c7", "indicator--2a86601a-ba80-4fa8-be1b-f953dc9f62e7", "indicator--266cd8c0-6dd6-4e93-8324-813b617b6a60", "indicator--881758f5-c865-4c58-989f-d3fa174a05d5", "indicator--1abdd935-c48d-4c62-ae9f-feb41ad63b35", "indicator--2cf32c49-0aa1-4e30-a8a0-2f1a4f9adef5", "indicator--98114f8b-018a-41c4-bb8d-31e3775b44cf", "indicator--44820fe3-43b7-487f-a404-e18d50902441", "indicator--2c2dcaa1-62a9-41ce-8425-f2c6b3b1f0aa", "indicator--792fc524-3162-4360-9e6d-27f03d58f1d2", "indicator--6a8ac064-0243-4b30-b2bd-f906653ee362", "indicator--782cca40-689e-4c0c-a220-1d7b1a8a87f1", "indicator--64b7fe25-42f1-4156-bf8f-f3b31c849c38", "indicator--6f7c2330-12bf-4cb8-a532-af430ae9c5a8", "indicator--9e31e347-c17a-4c3d-a687-2ab511a15534", "indicator--5ac7760b-af49-42cd-8aee-2dbd526dec1b", "indicator--fdc4297f-c3c5-4fba-bda2-5a77724d4616", "indicator--a6151c7b-4fa8-4d08-a066-47c0b469e2c1", "indicator--06f2a39b-b3c0-43c1-a5d3-e663d7266f1a", "indicator--8a7d69a5-ad54-481a-9cd0-6db3bf0fa6ec", "indicator--247726c4-8cfa-49be-8624-ab237e5dbc28", "indicator--81fd4ed7-0744-42ba-aaf6-3ad96890c117", "indicator--2822c558-aaa8-4b9a-ada3-19c9efa4d82b", "indicator--f31632ed-7688-44d6-aed6-457d68bbf200", "indicator--57dc749a-9da9-4375-91fa-519914065bdf", "indicator--4ee25de8-8d39-4e16-be22-dbe62f5c1766", "indicator--e4fd8597-3f67-4163-86af-b0e0f5f032b6", "indicator--f78c6ffc-f3cb-49ed-875d-a097b30e22fd", "indicator--4d2c94ed-fe2f-4f06-9186-685a2f241236", "indicator--bd299df1-6dfe-4f6c-b898-cc0596521654", "indicator--9a73c352-6d1d-41e7-a168-27b8dd320184", "indicator--c1461e28-6d9e-4e61-a846-a71a667a0c7f", "indicator--84c9e214-0d83-4cbf-a5ef-4628608923da", "indicator--d6c97e2b-f31c-4ef9-9bad-a638c59ccbf7", "indicator--4b982da3-afa1-4656-9d09-8d1d42c596c5", "indicator--3439f8e5-ea1d-41b4-89a2-bceb1a3b36c2", "indicator--732534a3-43bb-44ff-bddf-182fcfacd1bd", "indicator--d606b976-1893-491a-ac77-60d90a5df547", "indicator--80028592-ad52-48af-8530-82d5a8878f62", "indicator--0d39ecb9-d92d-4636-9715-2ebfc2cee841", "indicator--94540ee3-c641-4cd4-8091-e4b0be6bd1ef", "indicator--e9e55268-b067-46b6-aa7f-68cba3cd076f", "indicator--f196e65d-e54a-450d-84f3-93770723a293", "indicator--231b31d8-d2bd-49b3-bdba-af596f6b0918", "indicator--4f42cee2-a0da-429f-bed5-d04b221a1c30", "indicator--23add5f4-c868-4f3c-b371-8df99a546c24", "indicator--e6cc637d-6f5a-4d11-b365-43e126bb4064", "indicator--cb9464f8-228a-4dc7-8aa2-08bb3c2f3b59", "indicator--d2322a7a-66da-4200-9193-5bcceb5a6799", "indicator--f633c277-f8df-40b6-8d3e-db51e2364e8d", "indicator--d735d3d7-f648-4d57-8d37-009b56e4adca", "indicator--c18e5a33-279d-4d70-86cc-6113f8dfe314", "indicator--79b92ef7-d8d5-4084-a2d3-81cd907a6d2f", "indicator--568f5622-a158-4406-a076-1c657784b93e", "indicator--d9a3f0c6-55c7-491b-8f39-b5be2ff8eee3", "indicator--0adcef31-0f62-47b6-8508-2d36a14301a2", "indicator--0eb21777-1bfc-4a47-b68f-8b9e7a4c873c", "indicator--3ce3ab02-1e32-4f9b-92ac-b3f4da6e9d1a", "indicator--bf863b60-9f80-4f8e-be1c-86104aa9aadc", "indicator--8713dda2-d411-48a9-aae8-6a976e89a18b", "indicator--b970311e-81b3-4229-9537-316f2e37b3f3", "indicator--562572a0-792e-4fb4-baaa-da2f4e58828f", "indicator--0bf82eb4-0cfc-4a74-9e22-14fe854f54a5", "indicator--52541cfa-fa35-4697-a073-18484b651af1", "indicator--d54a7230-5d68-4566-8f55-38c122b847dc", "indicator--ad51a5a7-7bd5-4c41-bab7-6d72749a8f8d", "indicator--0351e9ab-a2aa-4bae-bc11-2181de7506b5", "indicator--2f609747-3570-4f25-9337-6174f7039446", "indicator--632a526f-ca7c-4a2a-bbe7-d0debe93f11f", "indicator--d10554e7-9cfc-4bb1-b79e-617f1ba1fd87", "indicator--2c42a8c4-4682-43c9-b5b8-57005f564436", "indicator--147a4596-8b0d-4754-b354-098b9baf6c87", "indicator--b0b6d8d4-4a75-4c74-bde5-5c79ee4c1a45", "indicator--24cce55a-8c4e-4f04-bbbd-04d05e96d007", "indicator--f2808eb4-b0fe-412b-bf91-d0095d772bdf", "indicator--e01a7896-0b53-43f6-a4a7-a8aa46f26c72", "indicator--47466e71-37b3-4d56-9658-411da485da13", "indicator--1d3ef8ef-59d1-4faa-b932-51ae3a5b4d98", "indicator--3ddd5392-1b35-4fd4-a68f-831a4be8ef4b", "indicator--9304d933-ef20-4ae3-84d7-e7fd2fe8b439", "indicator--32710132-4a0f-49d2-b72c-1ec0091348f4", "indicator--6eeccf7a-fec7-4dd6-864c-2a7e7b79ceec", "indicator--e9880500-85ff-41f7-a6f2-a3bb6d15fbe6", "indicator--1c97485a-1fa3-431e-b30b-b70bfba7660d", "indicator--4bb92b4b-6253-4551-9c18-fb13ff8b2c3d", "indicator--523249db-7cb9-4d41-a578-a4497e880937", "indicator--4ca30a44-ee3f-495f-9fb9-a340f3b30e2a", "indicator--d42aa532-f5ec-4c33-b0c3-08f78bbbb011", "indicator--08c9bf36-f3fa-4480-85f5-2c7e21992ad2", "indicator--f52638ac-2bed-4be1-a0f2-023c8d651ac7", "indicator--434f1630-1e24-4ee8-833d-bc9714e4ee77", "indicator--0b6c1115-c9be-4ef7-83f5-6802904a2963", "indicator--f27bee01-a654-488c-a751-e139e206be96", "indicator--ef2614fb-a25c-4e77-b831-117ebcc05e26", "indicator--af443640-4e32-4b52-a843-60c1dcebd7e3", "indicator--d9214bd9-ca0d-4b87-9ffa-5f115bda2b9d", "indicator--3999b7df-f716-4bf2-b91d-0bf2bcf48cda", "indicator--1e27488d-a946-4d0d-b547-d8d39d38588f", "indicator--498abc87-dc88-4cb1-bf47-97d6df0f4641", "indicator--671ca8dd-9074-4707-b949-ee02ebd75de7", "indicator--d7f32007-d6d2-4e7c-8067-dc3012eb51db", "indicator--1a13b72d-8614-429b-9a09-1a6185ea16ce", "indicator--edcfc014-d362-4af8-a15f-e89a4483825b", "indicator--27f9d1b3-cf0d-4b4e-9e10-2309bc7c8571", "indicator--bdcdb317-7faa-49b1-ad56-dbd7da27bbe4", "indicator--87fe031f-155a-4221-9f53-2bfb59b13d38", "indicator--c38a729e-4006-413a-8ace-26f846d89b45", "indicator--3044a22b-cf00-4dad-9172-0a6dd866d318", "indicator--ab5f7437-2e11-4ccf-8036-8c6e191b6d03", "indicator--72c3f7f5-e745-4d18-afee-897774d30920", "indicator--ce742f65-1d0f-4502-b288-cc7ca02c689d", "indicator--cc7a4950-a387-4a7a-ba3a-1b4925e8c618", "indicator--380965c1-1a66-4fe4-a57b-cad69cbc15d5", "indicator--dbc11dce-6fb6-4245-bf21-88e057403518", "indicator--8221cd78-4c56-47a0-8932-736ad943163f", "indicator--58f95714-7ece-4111-b957-b31e0a8a787e", "indicator--224ee389-412b-400f-ae74-90208dc0f812", "indicator--72d1f167-19a1-4cfb-8404-a341b2b17400", "indicator--65a48cf6-dd1d-42a3-8419-85310ea9a8c7", "indicator--882b3b4e-69d2-48f8-81da-6f61ac2de5f9", "indicator--1d4289dc-ef13-4f61-ba6c-af60bee53f83", "indicator--a09670bc-06ff-4936-82d2-92c4ad65dd3c", "indicator--abeb4ff5-4600-4db8-b2c7-d8464a3984b3", "indicator--4f240bf6-360d-4a54-b784-1501f77c2307", "indicator--65060d53-8e58-49e1-a500-10ea48c8c171", "indicator--be2d95c1-d04e-4659-b6ae-609b18aae5a9", "indicator--815d07bd-6884-4daa-b07a-6a7eda6680d4", "indicator--c68536c3-b211-4531-bbde-07e78b80e4f7", "indicator--5cf418fd-2585-487a-86ab-5727c16d687d", "indicator--975dfd9c-dd84-4e20-ac32-27c857e19372", "indicator--1dedd45f-ad56-48b5-91e5-c34ae4aba21f", "indicator--1bef0f6c-c385-4721-8cdb-d473744e78de", "indicator--f2e8802d-a9d0-425b-bac4-8ebb21546ec0", "indicator--34811642-ec83-43bf-8df8-a6e558666b06", "indicator--2df46b25-492a-417e-9a5a-40becb9b3793", "indicator--327ca543-4758-4324-b2f0-8fffc2d7e6ec", "indicator--88c16294-c150-4285-a49a-411f84429772", "indicator--ba3934e5-5e03-40a2-997e-bf8ba9c2c778", "indicator--d00e9bc4-1069-48ea-bfcd-10a4e62fa213", "indicator--e116cdb1-d15e-448b-b180-e5fbc88718ea", "indicator--6a2b4c34-9796-438a-be07-471a9115e784", "indicator--65723ba3-3eac-47ea-8a5e-f968f05d8029", "indicator--7d55436b-9fc6-480a-9a11-bb175205299d", "indicator--385360c3-6393-425c-b842-bc42b4f6f3f6", "indicator--fed6ff58-4e0a-4165-a9fa-c59cdea5cc8e", "indicator--d23eab18-878c-4e46-a200-8a40a1d77cb0", "indicator--2f7ae4a1-f5b6-4952-b17f-566646fabc60", "indicator--99a33f19-232b-4ad0-a027-b7f80fc6b5d5", "indicator--e88c8e93-22eb-4eeb-9597-c494dedb1b2c", "indicator--5d2819cf-804b-4186-acc8-e24930ee7057", "indicator--fd978db8-74a7-4ebb-bbec-aedb8bfed3e4", "indicator--808b4316-b017-469b-b2ab-5b44ecb0c65b", "indicator--c6f38d64-398a-4e93-9d29-5098197a4376", "indicator--60ffeef3-95f2-4144-903a-9c4e0f6362cf", "indicator--a8658f33-2078-48eb-b906-2596bf4a5180", "indicator--7c1ef4eb-ade2-4174-83eb-54da3fafd26c", "indicator--c9cc30cd-fa7a-4fa3-9411-e87b06dc2fdd", "indicator--1c4568a8-08c9-4e64-8c0f-d82da638edf6", "indicator--fed33626-4faa-40f9-8e6a-62399b8c1748", "indicator--83e79e52-99f8-49ed-9d7f-8ef8723922db", "indicator--d76ab7e6-6fbd-4275-ae7f-48b27ae56cd2", "indicator--1b84132b-c2c5-4159-aafe-bb7b3e6683a1", "indicator--b8e51c74-9f54-464b-8fc0-15eae458c956", "indicator--58594534-ca17-45a4-b062-df51773bd706", "indicator--305f6071-ebad-4c8e-8ea1-42a3ee46b538", "indicator--32880a67-c308-4b37-b644-56c2f9a0101f", "indicator--7b845e8f-58d0-4d03-9ddc-45b8feadc233", "indicator--5a173d01-3a29-43b3-b7ee-36e2a66bae6a", "indicator--fea8a0f2-d1f7-49aa-8498-0efa0c8f3d63", "indicator--0d688055-4c1a-4ac5-9c11-cde254dfc25c", "indicator--b79136ec-5b24-4295-91da-c69ae9797fd7", "indicator--ac71077e-1a98-413e-baa0-492e6f9ca58c", "indicator--3fdc92b2-cce8-4b7d-96cf-10bd5134c59b", "indicator--29457054-5028-4870-949f-d0e5a699244e", "indicator--2d457414-db89-4a35-864d-87d34ec0f691", "indicator--4f597d5b-2435-47ed-beee-9ed09b0c96ad", "indicator--5daef880-8d47-4107-8754-8fa7f0d85611", "indicator--2a89791c-e076-4f13-91b3-869d8eb24c85", "indicator--af5b6315-a58d-4f1d-8017-82d24f11b127", "indicator--2cd63d01-e709-4dff-baf0-dee4813653e7", "indicator--b021774f-cab2-4fdd-a950-37af5a851aeb", "indicator--bc8b73d4-619c-43d9-8d3d-a7742b3fb45c", "indicator--24cd5e7c-7b88-4ca3-9bde-b97d6664d5af", "indicator--71e59f30-1cd3-4c81-92b0-f70bea7308a8", "indicator--65ea804e-b9f6-4e1c-bcd4-aa71a3cac2b1", "indicator--2b4fc7c8-f339-4cd4-82a4-39b05ed66d5b", "indicator--4b37b68f-544b-41c7-a94a-42e5416b2a7e", "indicator--f83fbbb6-e2d7-4f01-ac97-7f21131d684d", "indicator--3fa3fe5e-0194-4462-8068-363cdede5c29", "indicator--56f8fda8-9e0c-416e-8d08-dbd1758ac965", "indicator--01d38e78-8270-4a82-8bde-2777d6ed4fc1", "indicator--479f1d39-5f5d-47ba-85d2-70ea3c9231a4", "indicator--31fd0faa-5e44-4fde-96a0-e57fd0474a72", "indicator--7e7a2cea-d61e-44e1-a9c6-7bc02389b63e", "indicator--a229b5d1-72ad-4970-81c3-5e848ebb067c", "indicator--c604b9f9-5775-407c-a69c-0f5b99cb81f1", "indicator--7612b206-32ba-488e-9347-0b596591e901", "indicator--324419f2-a062-4ba7-bbaf-4b683ac709c9", "indicator--ccbbdee4-0ddf-439d-a226-82c28949f932", "indicator--7c4f5c54-a356-4bf5-ab3f-ed0a92a3fbbc", "indicator--188b9e1f-d6b0-4ea6-9979-8828fb85ac52", "indicator--db586dc1-d66a-4694-b705-fb1f4387a7ee", "indicator--83232912-aabb-45c7-a5cd-a246887abff5", "indicator--bbe7deec-f0ea-4e6d-a4fa-4be89d09ea41", "indicator--66c5ffe2-00ee-4ca6-a088-d2a2d6404a2d", "indicator--cf4bae3b-c701-4b6f-8385-ab0f848f6eac", "indicator--2a6450a2-bc6d-4d23-867c-858d068ef0e8", "indicator--d1537031-3163-449e-b431-1c92f9e4b99b", "indicator--7c3e90dd-058e-4ea7-989e-b32038fa5d83", "indicator--f5998a76-f591-48a5-8d66-24ccd2002806", "indicator--7eb7d233-cc51-40b3-b694-a497a094b349", "indicator--6313e624-dd35-4ea1-aa01-9ed09d2940b9", "indicator--ff14228b-ad21-448b-8745-d85340a3e3c8", "indicator--90289216-0458-4061-8d1d-1615b6297601", "indicator--c297aa44-e43c-4c86-885a-c4f7dc3ac1b4", "indicator--7b80320c-93a4-49a1-a9e5-328a9cdd49f5", "indicator--4155b3c7-71cb-48d9-8944-cf737b01070c", "indicator--3dde0dea-f162-40d1-9dd2-ff7f8e6a4f35", "indicator--498bbdfe-5053-4978-a81e-d47b90895ef4", "indicator--bfa72578-1a9e-4b56-a634-2d6e0ca36fb6", "indicator--9a00309a-3079-4dc0-9a1e-6f63e624f57c", "indicator--4e1d5f37-b406-4644-b3a8-5d6df75eaa20", "indicator--f2a60784-342b-45e6-9a40-f0ef42d92349", "indicator--c48945d1-febb-4b74-a4d9-4c9d812425db", "indicator--1e5c6547-a3f1-4457-bad4-6b83d4f4018a", "indicator--2fffd90e-2cbf-4bce-8e55-e8c892ab0cfd", "indicator--808e6f66-02ca-4256-9f03-3a354a4e81b5", "indicator--8b192d75-97ce-45e5-b376-79b435f460b9", "indicator--8c86b99c-2c05-4098-ae0f-1258777fe4f0", "indicator--337b9e7a-b171-4110-8b67-59c341bf889d", "indicator--e8ad538d-0984-4126-8c0d-96cad0c24222", "indicator--fed7e772-ef27-4974-baeb-9ad0f6705ad9", "indicator--2e72c35f-d9b7-47e4-a8ed-d15a7b73ca53", "indicator--586a1160-8195-4da7-b26f-143e43f32c82", "indicator--f3699880-1e08-4d6f-92e0-2ea7294f2c51", "indicator--73b2d969-603d-43f6-92f0-91e1192f98ba", "indicator--b19d1b26-1a41-410f-a9d5-2bb3fc5918ed", "indicator--2a0d5210-8586-4899-be4b-9449ce1d5d2c", "indicator--a5698599-657c-4f20-975b-8d0c741356d5", "indicator--254c5b9b-8552-43a4-9e17-ad396676e1f2", "indicator--949c293f-09a3-4655-ab43-0b47882afd71", "indicator--a333d8f2-1e74-450a-8eb3-c39a434b2f41", "indicator--26c7a241-3de2-4232-8eec-a9d751111e25", "indicator--029bd47d-ee9e-47a9-a969-d94053bb0426", "indicator--fef5d1e4-1750-44c9-9972-7e9cf3ca19cd", "indicator--f841be37-dccc-43f2-a317-a12ad7e2c032", "indicator--daf46624-a2b6-42cc-aa06-738b28fa0775", "indicator--583c31f0-582f-40c4-904c-4ea55ab8249d", "indicator--a040ffa2-cf5b-4f80-9b55-c6e7d6470f6e", "indicator--dee8aff4-0ead-4738-a5c1-a48807cbebb6", "indicator--1128a678-4bbc-4e9c-9187-118f1b84083d", "indicator--cbfd6fdb-c2dc-4acc-8b7e-c00d05674cee", "indicator--531735e4-2da2-455a-9d4b-bc3bdeb2b3e2", "indicator--c0a84323-e96a-490d-80ce-48c75a0952d7", "indicator--9d0ff190-9d20-46e6-8b35-758b2421df5d", "indicator--f8b0fa4b-a58f-4bee-94f1-5ccfdfd1ceea", "indicator--006afc49-2518-4eac-a335-a8e4b8fd8eef", "indicator--fac483d1-6266-447c-89ba-63e9d8e3b733", "indicator--cf4d4f75-7fb7-42d1-be84-f5198b7ad292", "indicator--aad0e843-6ab6-4abb-8169-3eb10b8ef6f4", "indicator--52effdc1-97ef-4c9e-94aa-263eb608f78d", "indicator--423e4ee3-0caf-4606-a63e-a1983e6ecb74", "indicator--8b5dbf66-7e22-4364-8f6e-5fce331137e9", "indicator--0b670541-98b8-415a-912f-0a67ca48c7b5", "indicator--a1f76b77-8ec5-410c-b1cc-84620f60c17d", "indicator--a959da97-29ae-4502-9b1d-e1ecaa9141ae", "indicator--19484b77-763e-49d9-a441-5305b49fc3ae", "indicator--8612a381-1711-45af-a0d1-e4be210d15c1", "indicator--3aca2f7e-6bec-49de-b4fa-b168cfe149be", "indicator--3699189e-8273-4cb9-abd0-00e880ba0a47", "indicator--cc0acbe2-e524-4137-be0a-300533807541", "indicator--aa102436-b9e5-495e-8197-a3ded2b79f05", "indicator--635f25f4-6505-45b3-ac0f-f82c4ca48f1f", "indicator--a11c47fd-5208-4ab3-aaa6-f909fae1e0ab", "indicator--5e550be3-4f4c-42db-a669-df80124b7ca7", "indicator--8a223eec-652f-4ae0-81e6-e448f41edb28", "indicator--aab9c28d-235e-4c13-8c9e-e0164845e219", "indicator--1e76f09c-f96a-496e-bfbd-aa0dd59fdffa", "indicator--8ebbf7ab-54db-425f-ad75-3c2ee740cd90", "indicator--509274e8-99fa-41f7-8494-488293b2ce6c", "indicator--e29aadd9-74e2-4ff6-8c8a-0a3913aa61af", "indicator--47aa7186-3425-473b-bea4-3715bdf56c91", "indicator--36b24924-b15c-4643-a275-34f84c9ff1ed", "indicator--4fa82153-7054-4b87-a9b3-1f4f31e72b42", "indicator--58da03f7-57a7-43c9-b34f-b8cebc288aa2", "indicator--b1b379ac-1013-4de1-a11c-b679d29ac194", "indicator--87d1f7a7-660e-4f77-868a-2a2cc8c8e680", "indicator--c95119ff-9263-4ad2-a4ec-01e58de5d713", "indicator--82d3a7db-1e34-4e7d-a407-c16ff78e086a", "indicator--0f9940ea-1f0f-47f2-b0a8-a95d195af158", "indicator--055626fa-031d-4167-9738-777e760b4775", "indicator--fb1c56bf-fae8-4eea-99a0-fb680d21eb36", "indicator--74cfa9f0-3f28-4d11-96b6-f06732cdbbb0", "indicator--0fd0d2bb-39e3-45cb-b0a6-89262840b6c4", "indicator--4650a880-48ab-4bab-9108-ea1343987a58", "indicator--ee095420-8368-498f-b9b0-0d56ec7d80f0", "indicator--9fbf8292-77e4-46d7-a0bb-ae947a15d694", "indicator--7551c152-5543-462f-97bb-a61fa647c6eb", "indicator--32dab301-e586-4e79-aff3-0daf691f5100", "indicator--b5b2f853-17b0-411f-9fd1-829d27ec7947", "indicator--b632eee9-e92c-4083-9f7f-6192b4e69e5c", "indicator--568c05b3-3e71-4d57-b6be-bb4560ec07f5", "indicator--bf99b03e-3096-4d93-b28b-4ecb8723cdc5", "indicator--e8ec0824-9165-416c-96a8-b56dfbbff57b", "indicator--458468c5-d89e-4f97-97b4-2f6af34f942c", "indicator--ddec98de-d112-442d-91da-c984687473dd", "indicator--66b2eaa2-900a-4f49-9b83-0a0d6654daaa", "indicator--30987ec4-c516-42f2-af1c-4a9655588146", "indicator--dc018e68-c08d-4dfe-bb9e-a6666b1e8ff5", "indicator--33ec6d87-ae7b-4c41-bacf-948f6b8f0bfb", "indicator--6d40c8db-6c7f-4740-bfa2-ff05e8e8739b", "indicator--579dd95b-c57f-4208-92e3-2bd085878fe5", "indicator--8361a0c5-5f61-409d-8651-a4755b6725ef", "indicator--a05df950-5853-4c21-a1c5-e788d824af95", "indicator--0f27c284-5e91-452b-a29c-ba5609fc8192", "indicator--28c3ef2b-3c65-4bb8-a7c8-9fbe78bf13b2", "indicator--16b02fb0-c4cd-4580-8b3d-bd186296df34", "indicator--c4462678-4c87-47c2-a0e6-ecfd6a93937b", "indicator--ccc10690-b785-481a-8ff3-033e75905fcd", "indicator--b92494d9-9010-43dd-9d84-6ec2448aa0a2", "indicator--d88ffde0-0bea-4b83-bb04-b78327e97840", "indicator--733480ad-5790-4bc8-944e-137844d681fb", "indicator--4de42e10-752c-47fa-bdd9-aca93f5fddff", "indicator--c30f515a-4cc2-423d-816d-82ba45790afd", "indicator--dcbcd3f9-f9da-4284-a37f-f42d20e4d857", "indicator--0e133626-9b66-483d-bf53-fe3842090b0f", "indicator--90b85b09-c76f-4d86-80d9-14ed8b9260a5", "indicator--b9ec4e5a-a906-45b1-9aff-b759f936252a", "indicator--32b276a2-a825-4850-99a0-aea73cb93b1e", "indicator--84acbe4f-57be-4729-a2c7-7adc0a8ee184", "indicator--2f05eb7e-ec8d-46df-a22d-b206fd455136", "indicator--df0ba202-0014-485d-b1ea-78f7b80b3155", "indicator--f5577803-70c5-4af3-bca7-2a4ca104dfae", "indicator--1999d40e-4bf7-46f3-9d7a-a7c86dadcb98", "indicator--32f7ab85-8118-4b7d-b25b-39764870e59d", "indicator--533fb6dd-157e-47c7-86e0-d55dbbc4001e", "indicator--7ee4cf5d-4a4a-4361-b037-26c8530d88bb", "indicator--6ec13221-b80e-443f-a8e6-99628503267b", "indicator--11bb2e50-7e67-4520-8c5a-da1c49acb3e1", "indicator--2504b0e8-24d2-4d47-a2ad-c4926e0ad0bb", "indicator--d65b18b5-5a7c-43f1-9668-c376a62457bd", "indicator--5c6ecfe0-af81-42d9-a41a-fc11aa67673a", "indicator--bbdb8bd0-c869-4c19-bb82-60b02f5eeb71", "indicator--d844b53a-420b-4a2a-9ac8-5c8f8136a216", "indicator--e5b930c1-0c0a-41b7-ab8a-2310c5241333", "indicator--b7eeb264-0619-45f5-ae32-c6e42ff2264e", "indicator--552db74d-740d-49fb-a206-101f20d4ae7d", "indicator--975cef25-9874-4016-ad6c-6208b81c3fd7", "indicator--dcaa5545-22d4-4f46-b73c-268d3df67f74", "indicator--b5de8315-2475-4b03-8018-ff1f6513be4c", "indicator--20e5a5e7-4020-4df2-babc-23a5ca4dcb9e", "indicator--23b9c783-8490-4a2b-9ce3-6ef8631bb524", "indicator--0778df50-df9a-4e00-afbb-66d9ac24ec64", "indicator--a843a3b7-53d9-4a21-a280-8145561ebf17", "indicator--7f93ae7f-b7c0-4ff2-b08e-74d81585f949", "indicator--e25bd967-d2a4-4ce6-8575-fb334088d3a9", "indicator--c8d87da1-c923-417a-b482-378ccc175984", "indicator--48577cc4-a781-47fa-b004-806f8c4f45bb", "indicator--dbc892d7-8d2e-4ff2-830c-9e90b9bf18a6", "indicator--2de737cb-d560-46a5-ab59-77b8a732826c", "indicator--1aaad37f-2661-4489-835f-8b22c1f2a7c0", "indicator--606ba8f2-7cf7-4b20-91b2-c0522b62d616", "indicator--3eee47c2-7ee9-4ea9-8618-9e2a1e6d9ee0", "indicator--4b079549-c9eb-4472-841d-c91e078de201", "indicator--493f1cf2-f8db-495c-a151-cb4aee582dca", "indicator--afad7c3a-36f9-4cf5-bb5a-0b33889af14e", "indicator--9a140076-6706-4703-9105-8333857fe65d", "indicator--37bc3f38-9793-4235-8f52-d346c16daadf", "indicator--97d5e286-148a-4f6a-8137-3b5385cbac0d", "indicator--93017c62-915f-4a14-b5bc-c8ef582ab3d6", "indicator--afe3020d-575d-423f-ad11-71dc19dc9896", "indicator--fc6edb00-9f04-4704-9761-f2f2804338d3", "indicator--05f82244-f34c-4335-9da8-d275e808ac2c", "indicator--21bc326d-581b-4588-8d5f-039949c0aad6", "indicator--db33a914-427c-4740-8aa0-686cccb504f1", "indicator--0ee23b04-45b4-4426-b92e-a3436b98d071", "indicator--5e0bb671-7bd2-4fc6-a539-bca0784fb396", "indicator--b8bf4af9-e98d-4ff8-a540-f6497d9f5e7e", "indicator--388edf85-b6c1-4e9f-9e68-3116328775ea", "indicator--91b33a85-80b0-4691-a19a-034f0585c27e", "indicator--e52c93f7-3ce6-4b68-b169-2b8d1b1eecf8", "indicator--5e119f18-181d-45e8-9aa1-2a0d8bac1544", "indicator--ac0949ad-9894-46ca-8893-c9ccd77f9f51", "indicator--fa6b2683-66a4-4f9d-94be-c723e0226122", "indicator--f88ea1ad-75a4-4abf-90b0-7c2257f1c5d1", "indicator--6e17a772-1f5a-49e0-9544-187c0c1101ff", "indicator--b0ef718d-01e1-4d98-8adc-6b89463f711f", "indicator--9a2b8257-a905-4c10-8784-ce5cbf1eb23f", "indicator--c99eb8d3-4582-45c0-8daf-4cc6eb64651d", "indicator--605f0ddb-5d0c-4286-9de7-db390892d372", "indicator--bda28364-f8ca-4758-8dc8-0a6823c4b8a7", "indicator--7cf5f88e-ab6a-4ea0-8ec4-c37c4caf60b9", "indicator--5ec2d71b-4450-45bf-bcaa-24dc6ccba9d1", "indicator--2baaf07a-fb3f-486e-8a8e-c28542f29fa7", "indicator--2239a5b6-9d3b-449b-826e-269725e2ce8d", "indicator--0a7d026a-b075-4c95-be65-2fc7c139010f", "indicator--167ae579-73a2-4243-b6f9-6ce48ad03bf8", "indicator--d17e1972-4689-46d4-9c12-b10885137561", "indicator--751d8bf8-395a-47c9-9ba9-9e241d82c4b6", "indicator--cd948ed2-df9a-4af1-807b-0c323475953e", "indicator--ed900508-9ee0-4fd8-82d0-37bf0b59c450", "indicator--1f8aef66-6f90-4f52-a9a8-b03486915756", "indicator--995c7c21-45eb-4266-977a-c861cba98fe6", "indicator--0f91b82a-beaa-4bbd-b90c-129322541403", "indicator--dbd669cd-2bc8-47fb-8552-0bcde10f2441", "indicator--b590596f-d6c0-4607-ae25-6c847559c729", "indicator--c03c36a7-b450-4159-8152-7fc3ecdba435", "indicator--cb9e525e-a5e2-4539-b180-36ecd56e9fa8", "indicator--34d4eed1-09a4-45f9-9a9d-66c33769353e", "indicator--3d56a72c-52e6-4a84-8e39-6750d0413b1e", "indicator--d6014016-a349-47f5-9af6-7f772c48dba0", "indicator--466ae4c0-408c-46bf-9b97-9ea439bfb01e", "indicator--fa8786ce-ccf9-4c0c-99c6-9bf94bb9f2d3", "indicator--bb74756a-3d5e-4c39-8a71-d7251529d746", "indicator--3341717a-dbf5-43e4-b417-32e8d10c4d08", "indicator--0138472b-d698-4ef3-b305-77d5155e17a5", "indicator--661c08a7-40e3-42bd-b85d-d8efcb2ee23c", "indicator--c905cc93-0a01-405c-b489-e25057cb1d97", "indicator--e652be76-3213-4890-9c29-e023a9f65d36", "indicator--9b011f85-33a4-438f-8654-e4711654a9f9", "indicator--a9d89010-02d7-4b65-b2e1-fad9b0f2835a", "indicator--09608750-a165-4025-847a-91d3a0bd2809", "indicator--f05f9202-60b3-4a61-8c0c-cde2c38c9c05", "indicator--e1d31cc0-6a04-433f-8217-7da165290a50", "indicator--9eed917d-6d8b-411c-84ad-05faad0b752d", "indicator--13d74fbc-0bfd-4065-846d-08f6c0cf0082", "indicator--2454c989-d485-4bcc-84eb-001e9bbdd8af", "indicator--e3c6db92-c82b-4530-9410-c78e0e6e14df", "indicator--daf2d1b8-8df6-4c51-96e1-57f9526b6af2", "indicator--59ec82ef-83f4-4a91-b394-bf77f1f34e29", "indicator--e9637ea9-ec62-44d4-9ca4-b9564d09acde", "indicator--34c5cd39-8b7f-4860-b960-7bbd4e326ca8", "indicator--141cc365-000f-45bc-b7fa-3a70489a522f", "indicator--fbd9d390-db18-4bb5-b862-ddc72c6a123e", "indicator--a83128c4-67ad-4888-b472-22f49707ac3f", "indicator--82cb79ad-a7af-4f90-bcd3-fd8c960db351", "indicator--b73d2950-b0b8-4b58-8925-dae388986506", "indicator--75d8f9e6-6497-4dc7-97f9-818b416d7f0d", "indicator--2f151184-2f3a-4fd1-af0d-998ecfd10290", "indicator--bfb42391-94d0-4c27-b998-b6906b0d1589", "indicator--88e872ed-6e15-4f3c-8f7b-590af2aecc9d", "indicator--b37cd35a-4c97-4a95-a6ce-98b83f787b7f", "indicator--b84d291d-7471-492c-a655-c573ddfb5d5c", "indicator--136261f7-bdd9-4c08-af35-3e3706ec3ed1", "indicator--70aadb21-47b1-4991-9d4e-b5c099e6de7a", "indicator--3bf5fabc-c23c-4aba-adb4-2fc9f42ad6d3", "indicator--a276ab06-a73a-4f26-a4a3-2874db8b9674", "indicator--f781fdad-c5c3-427a-9753-c8bd6893544a", "indicator--1bb5501a-f870-4005-9630-737052b51ad8", "indicator--aaec26f0-3dff-4c18-94e6-0657841e0118", "indicator--41b6e9f5-a533-4a14-b049-3bf53aa67661", "indicator--07e2b1b5-f9d2-4979-aa1b-09330eaa19a4", "indicator--9951cfa1-fd86-435b-a213-822b419e7568", "indicator--2088c4ed-7994-481b-8712-7bcb9927b4a3", "indicator--de9e11c4-a058-40a3-b045-90e0ba349ec0", "indicator--452a3ccf-b10a-4280-84d8-ff5844731a98", "indicator--9b6e27a9-7ab1-4396-8a9b-f6e9993cf035", "indicator--503803ce-086e-487c-a119-31cce5c2b7a3", "indicator--9b85ee52-13b1-43e3-8c00-b36d21558654", "indicator--f604dd05-f756-4f7d-a511-75ddf6cc0073", "indicator--d2933241-62a8-405c-b6ab-48192619f562", "indicator--43c7863e-105b-4b1c-afc9-618ef91db7d8", "indicator--eff98208-6fdd-439f-94cc-8c84d69ebbf5", "indicator--3b831a76-bf3d-4b10-9821-78b9cf17c2af", "indicator--a12be849-8a28-47f5-a349-2d217d57558f", "indicator--89f1122c-f5ce-4b5c-9427-e46ce1a93bfb", "indicator--fc06b1b5-4f13-48a9-99b1-b4919d9ece30", "indicator--b083229a-adc7-4ca8-bc25-54052634e2f9", "indicator--018669ac-f1b7-4c87-b3c0-ce4475214294", "indicator--b8924e60-0293-42a4-86eb-bee28d7df759", "indicator--39f497f0-6fc4-4529-a6c9-f0a633bd0100", "indicator--517d0791-111e-4ef6-9a08-253fb70ed30e", "indicator--5470e8b0-eb07-470e-a06c-e8ea7acf3b3c", "indicator--74b1a0c0-43d6-4b3a-839e-991930228a62", "indicator--2da21316-182f-4194-8c39-31f16752cf46", "indicator--d285eadd-0942-4a8b-b163-ae62c175b6ce", "indicator--5257ef77-d92b-42a3-8ef6-ba882115796f", "indicator--42367186-9364-4b70-a6b8-745f8dc81e37", "indicator--3e3805fe-c2c8-479e-83f5-3108c0174d80", "indicator--7d0a9e20-cbee-4ae8-b81f-4f9556bbe2d2", "indicator--4c59b786-429a-45d5-bf76-0c197d92f26f", "indicator--9a0b373b-c3d9-4ed1-b523-725f038b9381", "indicator--1f53c9a6-de29-4c41-93f4-3e46cef59e0b", "indicator--1cbf63db-16cb-4443-8809-86fe70094301", "indicator--01230b46-469e-4d7f-bac2-6f909da8e302", "indicator--677ccf95-b42d-4260-8504-9ffc958d22c6", "indicator--a52c56ab-66cf-435c-a7c8-74d230c40f27", "indicator--58e8297f-5b91-4e6d-9eda-9a194aaa6568", "indicator--88d1a693-0b9a-4054-81eb-2e06abd85544", "indicator--04833951-6d4f-474f-960c-8f5976bfd28d", "indicator--ab751c41-125f-4d63-8058-088bc397add5", "indicator--54ee7c55-729c-4736-8c25-65c0247194ff", "indicator--0765e415-2c5e-451f-aaed-252484868c47", "indicator--aa9021c3-1bb8-4a33-beaa-50842c637430", "indicator--a79d07ac-381a-415b-aecb-5a59404a1777", "indicator--a9c0da91-355d-49ca-8125-c4c4142cca38", "indicator--c6aeb780-6cea-4d1b-ab08-ae9d642f12c1", "indicator--36360682-48b3-4d79-bcd5-988cb0b33881", "indicator--23bf8434-7b32-401e-b71f-0c84595998a9", "indicator--9a0295ea-9ab2-4120-a08a-8adb509eea26", "indicator--9199f773-6bc7-4f37-ba7a-9b653ae03d83", "indicator--68ae1c2e-bc8e-4911-aac7-a6c8ad88f8d7", "indicator--211bf4e7-225a-4f40-a63e-f6fabebe127d", "indicator--0309fbc0-d204-438b-8f20-c5558b13b561", "indicator--f9aad5a0-b7d7-4b91-9fdd-20f74289fd1a", "indicator--95d4b227-3c16-4b60-8826-9830de1c6548", "indicator--843d5645-0fa4-43af-8b46-ededfc7ed69b", "indicator--a835f717-b726-4011-82f4-0c97a13d86a7", "indicator--f4166eba-7dc7-4572-88c0-6a307be4c79e", "indicator--4c5db706-f2ad-47f4-80e1-ed941910ae7f", "indicator--0e9d0661-9214-4050-9610-1f80c160e544", "indicator--9f7aa347-7f38-477a-b612-2c95270a497b", "indicator--df76a354-29be-4db8-894d-f62208f841b8", "indicator--b1c97443-3a41-40d8-b948-a54538214ffa", "indicator--0ac2df8c-e147-487e-8cbe-92f6464565fc", "indicator--db30dd34-3a1a-4e95-84c0-43472456bf2a", "indicator--e0c56fd3-7002-42bb-8df2-9ad4f624aa48", "indicator--c6d00666-1478-4930-9f45-a2820dce4b48", "indicator--a480672a-aaf9-43ca-9981-e4a0c7de7cdf", "indicator--e7b108d5-8fe2-432c-9e2e-872cc3b7a1e1", "indicator--8fd6acc7-b974-4907-931e-540952c2f669", "indicator--0ce89f0c-e9ea-41a6-8ff0-eca14d8a9b6c", "indicator--9b8ea496-f9b7-42b8-9be0-d6a8cc6779d2", "indicator--34b073c6-4e5c-465e-9fdb-7f0af407821b", "indicator--632b6f3d-405d-42f6-bad5-754931e3c5d9", "indicator--8dd24fd9-8529-4fbc-84d1-ef499ddf749f", "indicator--af3261c7-0a7c-4cfd-b486-66103d871d40", "indicator--1e822a2d-ff2f-47d2-9ca3-2ac7398cb52c", "indicator--e9e6b823-4ba5-4fd0-92d6-d6e152d9fac8", "indicator--3ebc9e4b-e63a-4a2a-b060-a3d1a81bf323", "indicator--abbf5c79-ed96-41a1-bb67-18f41ba08571", "indicator--7a73c70f-9173-420f-83e3-5a950848275e", "indicator--f3ea97e9-0136-489d-9335-e007e1fb4f19", "indicator--fb94dee6-7e4f-4141-9c69-2940dd239c45", "indicator--e80709a9-1e27-4911-8afd-b966e9801ead", "indicator--a0cd5699-5a0c-4fc3-99ed-047693f14342", "indicator--3e79903f-e3a7-4297-b272-261ee9d1f255", "indicator--4deef254-1fe2-4ac0-b265-17bf2a147b6e", "indicator--8d631a86-2dbc-4ade-8002-6568f4b89417", "indicator--848ec805-aeab-43c3-a82f-a0797daa9189", "indicator--6d67f169-e117-4d47-a50c-bda72f2be9c9", "indicator--02e817a3-5f09-4108-ae02-0aa583bd3569", "indicator--847db4d2-b1b5-4c6f-8fd8-238022ce96e0", "indicator--bc9bd632-2348-4a05-83fb-90869277f1ab", "indicator--f272efd0-5c2e-4ba4-a984-1a8be1f41a00", "indicator--1281d9ea-62b0-45db-9724-b7b431f35feb", "indicator--9647afe8-abeb-4334-9161-b20039c031ad", "indicator--d1c0abd6-fa1a-4da4-bc25-d796d053639f", "indicator--17952e28-3a58-49b5-80ac-267a7eda2475", "indicator--0c5549c2-63ef-453b-9fb4-caef0481934c", "indicator--c1e8142f-258f-4a80-a2c7-34760dbb346a", "indicator--1e1702b6-9d06-4572-95e3-9f72e84849c1", "indicator--dff23f14-7a4a-4f53-91c0-6de10751d22d", "indicator--61d631c6-f123-43d4-b426-a2ded8ac6086", "indicator--63456dbe-a35b-4b2a-a455-f0507d627692", "indicator--4b6ecd67-a64e-4b60-b1d6-72e4d6a925f3", "indicator--c325771e-8250-49b6-a058-e60a38282c1d", "indicator--282a553a-c9dc-4843-9af7-d39a0a990ce1", "indicator--a293cd5f-2d4d-4718-ba26-1f16c6a531e4", "indicator--79cab962-0037-4858-990e-68828dc9eb35", "indicator--a7ee2c12-794f-418e-b342-7c53aae8ad7e", "indicator--bd1bebae-1271-4757-a8e3-eeef6bb7d970", "indicator--23aa33c2-7ace-4c8c-9c1d-eece1067f6f0", "indicator--9b7c9068-b647-4ecc-b2c4-3c73a4d78447", "indicator--96d20686-756b-4891-84f4-c1f99dc29bdd", "indicator--2554d4b8-cbaf-47a4-afbf-a7ecc1961b80", "indicator--0ad8358a-a061-4ae9-b9db-95ee50f6f5ff", "indicator--a41e6dea-711b-4d5d-a0b7-f49430315d75", "indicator--21b89402-b7be-40be-88d3-0d1c9c4730fb", "indicator--503fc6b9-e825-49b3-a764-28ffdaff61be", "indicator--d79057af-3342-45c1-8c6b-0a4b0a406a14", "indicator--ae703516-b08f-46e0-ac09-eb0e000be3aa", "indicator--09193767-beaa-42f7-8bd8-f2d0bcb1075f", "indicator--435a60e2-2741-42a1-9b52-6e54cd03278b", "indicator--0a739c97-96ea-4976-8f98-e4b0b5b5b0e5", "indicator--4b8c4f15-dece-424d-8811-887e34b8fd6a", "indicator--a8af54b0-8104-419c-8f5f-67283c55b6ba", "indicator--e9f990e2-a39d-453b-9f0f-e18164f34f1f", "indicator--02f0aa08-6128-4fd9-91a1-ea43501a691a", "indicator--43fd3583-4aca-4143-b121-5c0bb12e380b", "indicator--5d1e575d-aa3e-4238-954b-4f43f6401c16", "indicator--8df0c1cb-6349-4311-a74d-df1a4c8c44c2", "indicator--e3c15fb4-3218-4aaa-86f5-19a27e2633dd", "indicator--66106b7b-b083-4537-b215-bdbef50ed2e8", "indicator--244f0375-e239-473e-a56f-92216d1e7cdf", "indicator--e5ca7181-f79b-4940-8edd-57c1de313be1", "indicator--3c2e9f71-8fca-4037-acc8-a4b488639f95", "indicator--e2b6feda-d0f7-48a4-aa0c-22d20fa74aff", "indicator--2f5f55ab-de5b-4398-8e39-2d4fec22f7be", "indicator--95217dc2-f82e-4874-8db3-3972231c7ce9", "indicator--1a5ee1fe-f3b4-4324-8ebf-cd309ce9189c", "indicator--14de205e-6076-430a-b061-5b30c4b8b43e", "indicator--a3f0ce20-f341-4f81-a9ba-4cac8a9e5179", "indicator--15902fd7-7e5b-4acc-af35-8adf40be318c", "indicator--63f1b404-108b-4402-8e03-e3693a554676", "indicator--5c41562c-4d79-42cb-b7a7-70dda6fcdb9e", "indicator--8cdd84f6-8667-4a72-9e32-c1f66b9ebbd7", "indicator--aaee838c-93d3-41e2-842b-69e374e2cc56", "indicator--4dcf3baf-0ec7-4043-b001-abdf329426cf", "indicator--979199bf-b38e-4a9f-994f-ad610b6f50c3", "indicator--4b8844b0-4d06-4ba6-9a20-d29e680df433", "indicator--0d582132-5a70-4f37-92d5-e42e8113785a", "indicator--4e68941b-9cb8-4f1d-b227-2716658d748e", "indicator--e432460f-54e5-49ce-9d84-b13ed3645c4a", "indicator--cca98e35-92c2-4590-90bb-f0da700ce331", "indicator--a828e128-65bf-4829-a0ac-6c75e196e485", "indicator--7df508a2-0d92-47f5-8e70-fa1f86bc339a", "indicator--350eee5c-579b-418e-981b-4f2e7a739bd2", "indicator--b8322c3c-2b31-4ca6-8ba1-4c9833800379", "indicator--ec5c42f0-10bc-402a-b8a3-262f8f5a7e2c", "indicator--702e609e-06ff-4ba0-9bf6-785727004068", "indicator--8b10842d-bc00-4fc4-a462-3fd0166d8c86", "indicator--d86b1252-8933-4ed8-9eb2-878a91807c8d", "indicator--51d2bbc0-b1bf-4661-b05d-270021e91147", "indicator--1bbab749-5d76-49e3-b2cf-fe419461f0f9", "indicator--e63c63da-fbdd-4b1d-9279-00901fce81b3", "indicator--dd89fc0f-90ae-44c5-82bb-f489fe84111c", "indicator--0b565b92-44f3-4d6e-8656-5b8de12a014f", "indicator--5123f509-24c9-4955-8008-3c5c64128cff", "indicator--8e97ef98-2754-4e0c-b111-231e99a9cd0b", "indicator--e7aec355-1fe3-493a-b84c-c14bba948a2d", "indicator--644119d9-eb46-4b53-a669-ece120b89d00", "indicator--003d1f08-f9ff-4365-b9ed-dbf5950183e1", "indicator--3974866f-71f8-44d4-addd-4f3ceecfa906", "indicator--dd68d0fa-aca6-41b5-87b8-5ce40b9dff1a", "indicator--11b2b283-9fd7-4168-9038-3aa8a4d2f325", "indicator--bea56773-8656-4954-84eb-5235fae814a8", "indicator--6c6c9eb9-f287-41bf-9d6d-825f436e0879", "indicator--9ded1315-888b-4639-9d69-920001d2930e", "indicator--cb4225d8-eef0-458e-82ae-8542c3d849d6", "indicator--5782b348-ebc8-4b2e-ae40-dac4c18dc923", "indicator--bac6ec2b-54ea-432b-828f-5913301d19ff", "indicator--1485aa8d-eaac-45ea-aa44-d9a1cf4bb8c0", "indicator--db216ccd-ec58-40ec-85b4-1b91f36dcf8d", "indicator--266520f8-c802-455e-8564-7818ea72a81f", "indicator--7a87e23f-c1b6-42b5-bb35-33c66c744b32", "indicator--459558bd-490c-402e-a10f-c342bda2011e", "indicator--87913fed-b915-41d3-b519-91842228750f", "indicator--6613777d-fc51-4082-b07d-67c647030ca5", "indicator--655f10c3-f559-4ec4-a1b5-388dc0eba258", "indicator--913cc0d8-9524-4eb6-979e-10e5917ced85", "indicator--1e375df8-c337-4cab-935c-b196f0a2e021", "indicator--6d085c88-6370-45c0-9af8-49285ebb9a53", "indicator--4d3c09f9-f992-41ae-932a-0ec5b0928f69", "indicator--a1e692e4-cc6f-465f-8931-f1eb6b918ec4", "indicator--8f284ace-3cdf-4360-897c-116b2f0deb53", "indicator--6ff9e575-a753-4ff5-a258-ea1088ea6dca", "indicator--2051c6ed-2fe1-4fb0-8314-b6c2fc523fe7", "indicator--90c1f4f6-0969-4cf8-9a79-7c9061065dd6", "indicator--7d39b538-bb57-4ae2-9823-f3a526506e68", "indicator--66bc5dac-fc75-40ff-9240-897ff68e3528", "indicator--00ddacd7-8ad5-490a-9e36-0c548fab975f", "indicator--3e1a2152-43ae-484b-8054-22ceba8e2f79", "indicator--dfa071b3-c112-4aef-8863-8898d2d3a4c5", "indicator--73bc0a83-1a3b-4bcb-a314-6ff5b0569163", "indicator--d28c80bf-13f4-46fc-830d-bd4050a1295d", "indicator--4cd5531a-c71f-49bc-bec2-17c028792dd6", "indicator--6c693919-808a-4e0c-ad09-41e2c324075a", "indicator--b0e09006-95d9-4ae7-9e51-75e27844c5dd", "indicator--6cfb9d6e-4e1a-4b5d-ba59-1a81f09fcee8", "indicator--282e9f9d-d37b-4e12-a02d-d887d18ac150", "indicator--ff3d2290-8075-42b8-aa7c-345c112ca1fc", "indicator--cf87c589-c1a7-41f2-b0d3-df1046b0b782", "indicator--5d7f0da4-be20-447f-b793-135812c81bef", "indicator--6090e8b3-4600-47c2-9c39-a4d8cc2460bd", "indicator--7dbc1909-ca90-4595-aa89-8833f3636fd6", "indicator--376ee223-eb3b-4b2a-ac3c-7e44bc39359e", "indicator--136e467b-d1a4-4c5a-bfbe-545ee667c676", "indicator--d74dabbc-5567-4dfb-b8cc-642b143779d2", "indicator--b78ef0c0-53c9-4a60-a7ca-130698bad1cb", "indicator--bf6a6790-7e0c-45f7-ad59-a525475a493a", "indicator--c84f7e82-6917-4780-94c0-5a3417011ca9", "indicator--a757a620-8472-408f-a26c-9f5fda1ea9f0", "indicator--013727fa-3244-4b37-8090-c41123b8d24d", "indicator--b8ee7e2b-2311-4f78-a3f0-4efb427761ee", "indicator--b730d23e-2050-4d59-aa26-da64c73db968", "indicator--33fb598b-ebf7-4546-ab81-a28d7b3ef182", "indicator--8a7e06f3-1f40-4827-acf7-f6deb428cb57", "indicator--3b0a0ccb-701c-41c6-aa7c-65d3e7a4c2e3", "indicator--ddc01a5c-0af8-4301-b9e2-6601bc6c49ca", "indicator--abb58b69-ceda-4c77-89aa-88e64108abd4", "indicator--789e8975-2e2a-4882-a543-002c2300d8bf", "indicator--fdf7d9b6-2a77-4045-b328-8f98ff01326d", "indicator--ef7e5ede-d56b-4c9f-b0e0-0fb2be9ff87f", "indicator--b0e6bca4-4895-46b6-ba14-c65bd2031d2c", "indicator--ad97573f-e0c4-42b7-afe2-19f11f25d154", "indicator--e8531ed2-a8c5-4897-bf62-c99efc64e511", "indicator--e2894274-01d1-473d-9e7b-fa14d54e8772", "indicator--3ce8f896-dbae-46cb-a7a4-4a5549f9fbb6", "indicator--d6b363a0-8a4f-41c3-9615-984a24aab61a", "indicator--7078ab03-6827-4270-81d0-65204d4eb4f6", "indicator--cbe17326-1136-4d5e-856f-fa94b9e89d32", "indicator--6198c08b-3cf0-4ceb-a7c6-fbc56881a1d9", "indicator--1cf0c999-a690-4101-8de1-0a4ee37f8b2e", "indicator--5b92504a-d418-4c3f-b8ef-27eddf7cc477", "indicator--13b0dee1-088c-48ad-bae9-2b31e78b6bfa", "indicator--0cfb7654-2a30-4017-b9f6-86e94e5a87ab", "indicator--77943f0d-76bb-4d1e-9630-9177e3f86f34", "indicator--10bf2fcb-865e-4856-86e6-b8e767eb4081", "indicator--436a8911-4a5e-41d7-8eb6-973400421010", "indicator--1248d754-b19f-4d36-b052-7b5846a3ae56", "indicator--d23128dd-c938-4f5c-bc9d-8b02a4fde332", "indicator--ba69f61f-e536-44d4-93aa-c42c186e6ea1", "indicator--934da038-991e-417a-860e-87686e194ebf", "indicator--9f267257-1f51-43b1-9a9b-b0e14c232bb0", "indicator--d8a66d1a-b3d8-488f-9da2-96c2ba984d13", "indicator--92c082e0-b72a-4c80-ac0a-3219ff0743ed", "indicator--dd2ed6bc-d498-45ed-95a8-7614d285578e", "indicator--f1b877fe-3a81-40e1-abf2-8ca7736af872", "indicator--41cc2450-b7b5-4f3b-ad8d-fda666a17046", "indicator--d90227d1-cf54-4421-8828-5764767096ef", "indicator--3f66ed41-989f-4ce1-a7b1-6669a9cf374b", "indicator--59ad97a4-43fa-486e-b54c-6068283ffdff", "indicator--daff971f-fe1c-4c34-acda-d75d6889ec25", "indicator--569e52c6-2c65-4289-a8cd-d6eefe2911ea", "indicator--ba5d805e-f51a-4825-a4ba-48cf6048fc4e", "indicator--4314a88a-aead-446e-be8b-3e73412554c4", "indicator--bd6d5a80-b496-428c-a366-74ebc623341c", "indicator--c7df1f29-e904-4877-90ee-03fef915004b", "indicator--8bbd740a-058b-46af-8fa9-a578f59828ef", "indicator--0821fe57-08f3-4e48-a42d-e082474f649e", "indicator--8844181a-b7fa-4bb9-8af8-251ab91da70c", "indicator--c355e052-462e-42c9-932e-261e08816ddf", "indicator--5d6975e3-f1bd-4a97-b21d-0935f656086b", "indicator--2ab8223e-a579-4b7f-829c-abbe472c9acc", "indicator--073a8009-c3e1-47a4-ba5b-13d12d2911d9", "indicator--df0f1a20-b156-4b2f-b648-3a0d0b837872", "indicator--ce2f9b68-2db6-4091-a244-6c2ebad89bf7", "indicator--9e73d452-05c9-4e8e-ba3a-b8b348468516", "indicator--060a540c-28b3-422d-b49c-cb21363e752f", "indicator--4a70b489-19f3-4de8-a8d6-42dacc2b08d8", "indicator--edcece8c-6318-449f-9d67-e20efec72c83", "indicator--bc5de6e1-3203-46a4-a704-8b90fa682795", "indicator--95ae7b0f-0be0-4c9c-97c6-da6e10ed9608", "indicator--0f76c1cf-ac24-4d4f-860a-4f1ce18f927b", "indicator--9ad83c34-ceba-460f-be4d-dc9a62f3eddd", "indicator--8b1043e6-fe98-4634-b0e9-074de59053fe", "indicator--34ed5106-f771-4885-9ec0-14b71a5f4adb", "indicator--60afc5b7-e162-4110-acbd-357e96a46639", "indicator--46d770b4-e0d7-44c2-abac-66824894bc9a", "indicator--21df31a0-dd7e-4662-b9c9-0b7f3107803f", "indicator--a8a59b90-2551-4785-9268-8d6bc8ff2298", "indicator--96b2d9a6-247e-4a90-b4b6-ab36a6152cb9", "indicator--b9e5bb77-6cd4-4297-8bda-dbbe35d99f11", "indicator--15d95e1f-e338-4f45-badc-e68a2b43b994", "indicator--d08d4f4d-875d-4851-8da9-e40f96fcec9c", "indicator--52b78fce-ef1e-4e3c-b5eb-925c10e69fc4", "indicator--baba8d76-2729-42aa-8829-af5993525279", "indicator--fbaeeb32-c3ad-4260-80a3-42ec726319a7", "indicator--646fb855-c555-40fc-b8b2-fdfa70aa52f0", "indicator--6fd63ef9-8fcb-4e00-80c2-edfb5fffdd7b", "indicator--c0fa366e-30cd-4c76-ba4e-8b8cd5fadd5b", "indicator--4e64dd3b-957b-4f87-989e-e00d9040c10c", "indicator--3c6f4a17-6f02-4b63-8f14-26031ba8a3e7", "indicator--88c61fa3-ee88-4cca-ba75-27e7c31eca3c", "indicator--4b7cb886-1d63-4196-8aa6-ccd240e9e6a8", "indicator--2882d90a-4b6d-469a-b210-6f97be93ee5a", "indicator--4e485422-6f04-4941-8837-a96216b15c20", "indicator--a2e9ffca-d12b-4dc1-8814-d31c800f2049", "indicator--169651de-5505-46cf-a199-ce6c37730dcb", "indicator--92f3434d-0e3f-4953-8c83-179c8e688288", "indicator--c01f363a-c0e5-48cb-9825-c6a4aaf488cc", "indicator--55b65ad2-8597-4d60-9133-e8bae83b34be", "indicator--7425025c-1a29-49eb-b280-431898fd99d5", "indicator--63b9389b-e9ce-4db8-b598-be16a1e88b6a", "indicator--7828b7cb-a0fb-42ac-be7d-cd28966f8890", "indicator--61e9c5a1-1ee4-46e2-bf6e-f58f596b4bcb", "indicator--46a6ab0c-eead-47bf-971e-4a2668b3b8e2", "indicator--aabd0296-2ca1-4e75-97cc-18208bca0a7d", "indicator--88a29f8f-f2b5-4b3c-8083-2ebddc8c3679", "indicator--bab6ffe9-a1f8-49e5-bc4c-1bc44ea18dbb", "indicator--1c8e79eb-8eca-4662-b9aa-13e58f170fb9", "indicator--f7443b51-5f2b-4872-981d-0241102e075c", "indicator--f02417b0-f3a8-4285-9f4b-cee4c4677407", "indicator--1d44f4ba-fe2c-4aff-99a5-8bef41060a07", "indicator--1c82320f-b739-4880-805b-a1bdc548fb57", "indicator--fa30bdf3-0e36-4b07-9b70-ab8f5d5d18e0", "indicator--bc545a74-f0ae-4be7-9579-bf376d822df6", "indicator--6af7d20b-32a3-4b9b-92b8-8fb6ffbda7e1", "indicator--3781fff5-5b58-47d0-93e4-636353f17d08", "indicator--0eb9acc8-47d0-435d-8608-f7bdfc06a622", "indicator--0033b6bd-4baf-4571-8ade-96f8b182b51c", "indicator--c2d7149d-c031-4ac1-ae52-d0b2e3b7e53e", "indicator--d617acad-9056-4047-b40b-924610ee478e", "indicator--76768cd6-3331-4ef3-8165-4f23ce242ac8", "indicator--cc942331-7c91-4ebd-87f5-0c9e9b629e75", "indicator--6bf6eacd-ff6b-435d-90d6-6fec437b3fe8", "indicator--5bebd90b-594d-484b-b4a4-0afe71a270ce", "indicator--b9635094-98a0-40b8-bed7-98f9c9b32dfe", "indicator--38c69725-e34d-458f-b25b-198587a3fe9c", "indicator--cae4e66b-14b7-487e-b5e4-f718b1ab21a3", "indicator--d44bea74-6e66-4c1b-b54d-33ed599143ed", "indicator--385c1cad-6148-42c0-b067-643746475aa4", "indicator--41ca22ce-99d3-441e-b0d5-cf507ca8b3f5", "indicator--2ba5d0a0-22cb-43b2-b972-fede5a9a1cf3", "indicator--4e3a605f-dbea-4a5b-8f2b-b753f9709030", "indicator--9e419991-a8a8-4369-af24-7d0dc8739221", "indicator--ac0141b3-ccba-441b-ac94-795a2927a7fc", "indicator--b487f518-8386-4cd6-b431-54f24548c305", "indicator--511568b8-49e9-4263-8387-f9d557e1aef5", "indicator--c0763a5a-370a-4200-a863-9a03a2fbb29f", "indicator--0a232f0a-7a14-49bf-80cd-ca4cdf0b1710", "indicator--fc7e1d8f-924f-4443-acbb-5bfc23652823", "indicator--5816404e-50d7-4b15-b5f4-7b58264671a7", "indicator--9b32beb7-866c-457f-809b-08c3da8c6580", "indicator--0ff8d473-b665-4a2e-97c9-9f0f6c1a2892", "indicator--bae63d34-125a-4216-8566-82d7f341e41d", "indicator--5961ff96-9349-4945-9105-167b05a089a0", "indicator--d82bc0c5-1f93-49e2-9ef9-f7dcad4866b4", "indicator--b7040468-d3a6-4935-a22c-bb885a8f0f77", "indicator--3e96b82f-1a7e-40fc-bd51-dd331770c4a6", "indicator--ec473702-7c40-4745-9df7-a72a84114788", "indicator--63bdf209-b771-4e1c-98cb-7ea4897a9e38", "indicator--4f17e1d8-a387-42b8-a648-3dbc4003b248", "indicator--ed386c2d-4924-4aab-a2a5-d3c2ef3787ed", "indicator--b767f7b4-885f-4b47-be46-942e747fce4c", "indicator--20166dac-7d11-4699-a770-443318edcc8d", "indicator--0d611419-5340-4e59-b8b5-a28b6ab4998e", "indicator--d0fdeeed-a266-4440-95ef-6ce814bc5846", "indicator--c77b3a4d-fe41-4480-83ff-42096905019e", "indicator--abb55160-ad8f-4a70-907a-18feab48436f", "indicator--b206971b-0797-4748-b177-71029e4b2fc9", "indicator--35827935-7ee6-4595-9ed6-e6b2b5d2545e", "indicator--9b152839-4a47-48f3-ad0f-6220a618284d", "indicator--78a093c8-2be5-4e44-b42a-54e309247151", "indicator--51d8cb62-2d9d-4940-b290-3b091d7ddb34", "indicator--ae1d103d-778f-4256-8e24-bdc4813856cb", "indicator--b42a87c2-9a2f-4bc9-8d4e-a61a30512978", "indicator--fc070dfc-9dcd-4a56-80fe-02e9f5b40cde", "indicator--77e73897-258f-4873-84b2-6086e0c8f381", "indicator--4102ed49-41e2-454f-8165-1b644d056ee0", "indicator--ee51d1a5-5c44-4ea0-a8c8-ac3f8b0c3afd", "indicator--278e23fb-46ee-4fe8-8dc4-8b96f60d7a8a", "indicator--564d33b2-d359-41eb-bf07-36b90c42ece0", "indicator--3bcd833d-e1f2-4d40-a113-0dd69a8870c5", "indicator--4f5af8a9-5d86-4542-91f9-e892cfd7d686", "indicator--87753649-6e16-4c1c-8b17-d885bbff103c", "indicator--18d03d69-e8e6-4936-9176-990ab4e51503", "indicator--5f155fb6-5ed6-4ad6-8219-05ec84780a4b", "indicator--8b9873dd-da88-4816-a890-dc75e88ec9df", "indicator--2686e491-2565-4a3a-8b35-a7cdb37b3570", "indicator--f159ae58-06ed-41c2-b4a7-3760f6ae6089", "indicator--7f63521c-7b87-4be6-a0f3-72114cdcf1c1", "indicator--e10b0e5d-71c9-400a-9bb0-64d3df566094", "indicator--443a20da-d87f-4a37-bc5d-387e0eb40c5c", "indicator--edaaa5db-5ca6-4798-81e9-f17c3d2e70ca", "indicator--50512f4f-0657-49d1-a390-d33b4e117bfe", "indicator--86fcfe57-1f6e-415d-8f21-f057491a18d7", "indicator--6a7a77f1-fd76-493c-8973-e26a830c5d8e", "indicator--f6a7895c-ecaf-4ac8-904d-1c6f6be8f590", "indicator--3a8e9687-1c7a-4259-88d6-5afff4761a9e", "indicator--7ac3d986-e09c-4e00-9307-fed165696f8c", "indicator--d3b93bd9-d1bb-44dd-8d90-2ca39f4790b9", "indicator--c211ce1b-dc32-4d36-bf0f-8af06f9ccb73", "indicator--8e3db73a-e52f-4634-bb25-627dba731857", "indicator--89145dcd-be39-4658-933a-fbbad8f552ea", "indicator--53387b4d-ee04-4587-a645-ad2a413ca181", "indicator--3dbd6501-2c65-45a3-b584-41234d950c8b", "indicator--4484579f-cd25-4c02-ac9f-72f7eb556112", "indicator--b1ff9c7c-5b51-43ac-81ef-92cf7267d81b", "indicator--98488b87-46bc-4879-825b-c426c8704d7b", "indicator--6c25f577-4d3d-4a4b-a3d7-48c11c3962d0", "indicator--0956d386-fa91-43ce-ac1d-1e00b7ffa0aa", "indicator--c36af35d-b11a-45d8-99a7-8752b801649d", "indicator--c89d219c-8ac4-4ca6-9d8a-f6af892cb66b", "indicator--233a745c-4ee8-4eab-8a0b-d299c3557acf", "indicator--e2536ba4-e91e-406c-a14e-1f1f2b294a52", "indicator--30ed6e72-6ab8-442a-bcb2-ce463c97eeff", "indicator--796cbe55-fc24-4717-9bde-929c1749c135", "indicator--bf11eb8d-207c-4208-a35e-4b75808e127d", "indicator--0de1d0af-dad0-422f-a9f6-ba9bc0a8436e", "indicator--3398b241-9ff0-4580-a2b3-1fa4a026763f", "indicator--c5d35d15-d729-4d6f-9935-ef1cf58b2042", "indicator--bedfb922-63f6-4c2f-b5d6-a66f1dd7ae08", "indicator--5ab15f07-22c7-4a01-ae27-e78561d65eeb", "indicator--334b44b9-b97c-40f6-850a-eb1ca88d7e46", "indicator--31fa08f8-ca50-4ad3-8b01-e0a4061a6ab6", "indicator--76f48190-1c2f-4c44-8144-1cc420761a92", "indicator--e3845f16-4f5c-4c40-b13a-6342cf1a91ec", "indicator--4691412b-bc38-4ff9-914c-851fae6528ed", "indicator--58e4b3d4-07a7-4512-b670-6631de5aa9e9", "indicator--9b692f76-9336-44bc-8af1-0e7e949ad640", "indicator--75845293-e6f4-4cb6-812c-d75cd5fc58c2", "indicator--0c4d4623-e0e4-4385-ac50-88e8fc1e499a", "indicator--f58a7a83-74be-4851-80f7-d31297a0c3f9", "indicator--9640981a-cf4b-49c8-b4b7-ef39aade9814", "indicator--bc261343-0d39-4961-92d9-3b6bdf8f3d5e", "indicator--43aa7221-86ad-43db-aff6-8b5f6368e5e0", "indicator--b6c044ba-6596-4de2-98b2-baf428e2c852", "indicator--49543622-c696-4532-9f48-8b67efa58081", "indicator--3d809364-b86d-4a3c-a0cb-4a5d27c0f330", "indicator--2e5678c5-ef9a-4516-848c-949ef72130e9", "indicator--4a4b9f85-cea5-4031-99e7-b26ade3e45c1", "indicator--4b58ccdf-0877-4cb0-9745-843f8d7e049f", "indicator--f4848aa1-d12e-4073-ad94-bee58ca8054b", "indicator--764ee4f9-bff2-406e-9036-4c9cb9efcfc9", "indicator--633c062a-7b56-4b2e-bb77-0a192d172dfb", "indicator--1c80f165-55a5-431d-a06d-5b38cdb6aaee", "indicator--ddc7759a-bc55-4f0a-857d-f5aa85076cf0", "indicator--48a91143-bb31-4aa0-9ff6-0527855254ec", "indicator--369b9d7f-6a30-40b9-ac10-374d94538a10", "indicator--1b8c8a19-b773-4d85-832f-bd55a5c20994", "indicator--d8f75dd0-bd74-48f5-a472-480673be16f4", "indicator--4ac4dfc7-5307-4b06-aab5-b6ee0c17f2c5", "indicator--a1bc1130-6e34-4c12-8848-757a61c865b3", "indicator--ece8ba47-4415-48b8-8062-a5ddc561ae19", "indicator--bf5e0f8c-f432-4170-9086-ed7f84f98885", "indicator--3ddc3e03-8d70-4fd5-85c3-1d69a3856404", "indicator--f2174ef4-e9bf-4f66-855d-e20c4f54f885", "indicator--e79d2504-cf1b-4bbb-8df3-6c7b86dcd9d3", "indicator--04e1f114-665f-4070-9807-7c7fb4955ae8", "indicator--138b858c-01bf-47d6-9567-dcb23d8f8d22", "indicator--88d07d24-25d6-4cc5-80ac-bbfb2b93e728", "indicator--7917cc14-66bd-4fb0-bb57-a7c1f8af9b3f", "indicator--802e2cc9-0130-4776-a2fd-fab1de596182", "indicator--341cb6ce-c521-498b-9b4e-ea2587d066e2", "indicator--89de6152-ff56-446c-a203-51b6ec4899d7", "indicator--f067b638-3736-4772-a0ec-371c1930f652", "indicator--68074da1-b9fb-43eb-8a9e-02c1186a1421", "indicator--cbba2343-ccb0-4836-8305-162497a81418", "indicator--533d8fe3-f3ed-4a26-b683-5df360d29c1e", "indicator--e8592524-1d3a-4e78-a025-87d65223bcbd", "indicator--e21c2431-6b32-479f-8976-eaec18493280", "indicator--b6a17332-74ff-4170-be51-7181a7c62771", "indicator--e08481a3-df0c-4846-a1ed-6979ded8af7e", "indicator--fd39f25c-9543-4efd-89ae-aefbe9de0e5c", "indicator--04194893-842f-4e17-9d1c-8e46f0cedc50", "indicator--bab3f490-0367-4e02-83e1-da4aac0901fb", "indicator--8f21b375-612f-4dce-a976-c117c9d95a8d", "indicator--1fbc0ca7-b695-42e2-898f-c07d0c50fcaf", "indicator--8bc3f2f1-9cf4-4fdc-af94-cc760e333bcd", "indicator--7a190052-6667-4315-bd2a-97eb8d12bdd4", "indicator--349f6491-d204-449d-a18f-d18a8af29137", "indicator--2709331c-4242-402e-97c2-4edf7ec200e6", "indicator--7d47cba2-61d7-4e8e-af77-36702dca9850", "indicator--bddf3a20-14db-49dc-bc95-1821f1d313a2", "indicator--fbc06098-dfe1-4c3e-807c-7b60a7158fbe", "indicator--6560f637-8035-4dd4-9869-59eca4b6e89a", "indicator--dd374e12-ee48-4145-b037-699fba190cfe", "indicator--d7b630ea-6180-403a-9c86-f24f305d8867", "indicator--50fcfb04-8203-4a39-8d25-7efdea7c980a", "indicator--99c00087-6c39-4726-b359-60f9b1d4b363", "indicator--a46db685-d53e-43e6-a0d5-b928b2745896", "indicator--60e742ee-40d1-44cb-a074-49b7118d06b4", "indicator--3ad7ebff-d8fb-4a15-a964-53db8e559566", "indicator--1e36955a-0410-48fa-8a8a-91fe38205515", "indicator--2e4a94bc-d594-441c-af23-50dffbe202f2", "indicator--ab149a84-7bb5-40fc-ada3-d14d876c3d40", "indicator--447fa3f5-2f22-44d8-94bd-0cc16a4b7b8f", "indicator--74bc3905-6e81-468d-920c-3f3e930bfe16", "indicator--18499223-9c15-4eac-abe8-d7cac5613883", "indicator--08dc3569-a449-47f7-9935-004588ec040b", "indicator--bd7d183d-6ffb-466d-bf15-757ff191f9fa", "indicator--45fd9eaa-77b1-4e9f-b10b-b3c744c74db2", "indicator--af9c42f9-cb6d-4b7c-be32-d0e551625f99", "indicator--40df320f-7452-43c3-8c47-d3a03a484b05", "indicator--ed04581d-2532-47a9-8258-6d77c6b1db15", "indicator--e995bc8d-135b-4fce-bb5e-732abe805626", "indicator--861fa279-f0ba-47cd-a097-19af8d2f2d37", "indicator--34989ff1-a7fb-40ef-96fe-bdc49f332087", "indicator--06bfe816-0f13-450b-ba29-598268a4c6cd", "indicator--3cf45465-3417-46a3-a5a9-00bbe632d11c", "indicator--0b862cc0-23f3-40ef-9b92-8232bbaa901a", "indicator--2f70714f-8b24-433a-b4a6-4b8d07a2827c", "indicator--3ff83676-28f5-4243-9cde-842e3970ebb0", "indicator--900bc0a2-7796-43ce-9e48-58e43636f117", "indicator--5277e765-265e-46a4-9176-7478d7307eb3", "indicator--27daff32-2b0a-44a3-934d-d3449d5ce295", "indicator--19970328-635f-4c2f-87e6-252bdc94c3b2", "indicator--bc2d7fa3-fb54-4672-b0d7-d36573e4984a", "indicator--3613e92c-716e-4e68-8cf2-856cd0ee703c", "indicator--0170fcd3-5def-479e-a9be-cad020faa78c", "indicator--78ebf80b-415c-4566-8f59-5cc8a30fa4c7", "indicator--73caf9ea-e30e-4072-8471-1a42550bd0ba", "indicator--d96289de-d731-43d3-9328-adc92347dbc5", "indicator--9c7d4f6d-fb9d-4156-ba21-ab64a18fc26d", "indicator--72875598-bf63-4c09-8b3a-b9b96679e084", "indicator--6fe5d8b2-8b93-427e-909b-cae1d65d49c5", "indicator--0712d119-9c1f-401b-b6d9-f35aa9e9e329", "indicator--968f4b47-15cc-4cca-b0c0-4f42afaa6db7", "indicator--601da801-6541-4bdb-b866-527fa8507ebd", "indicator--b51815a8-b9f6-4339-a58f-9975aca7ada8", "indicator--50035ffe-9591-4597-8d09-12fd982f5343", "indicator--520e6b5c-7bc7-4ecb-a77b-f8cc0177835f", "indicator--dfa61cdc-fe0d-472c-9ff3-6d0768020c2d", "indicator--b6e84227-9635-46eb-9363-d1ef6fc82edd", "indicator--aaab53b2-8543-42cd-b5d5-87e777131d7d", "indicator--d6300c59-158a-4ba1-8343-11741f91515f", "indicator--9b839ef9-7e5c-4ab3-a4ce-57df7f02351a", "indicator--749f1e98-f89e-4ba8-b42d-f57591eb71c9", "indicator--44705bf8-3805-496f-9afd-087548682df4", "indicator--21403348-f35b-4043-9064-36de28d8df74", "indicator--4d9064dc-c7d1-4c3e-8ca4-3716ec22a359", "indicator--7cad375a-4704-43ed-9e89-518bb6034113", "indicator--c200c465-f3f0-4c2b-8df5-2c81173fc4de", "indicator--b5f3cc26-bee6-499e-961c-86f1791ced30", "indicator--9ee43d4f-c5ac-468b-8d8b-888c0511a64f", "indicator--7ee1acd3-57a3-4378-88b9-769dab10d4ed", "indicator--e765c080-9391-48c3-b0d5-65a077cfe841", "indicator--1dcf79e4-599b-43ef-a780-bd2ab5484ad8", "indicator--873c65ed-abf6-44c6-b41f-bed66fcfd1b6", "indicator--84b5cc92-248c-434d-b515-c901910fe4c6", "indicator--051644f3-2b7e-4065-9a00-2cf7cb8be1b9", "indicator--feb2bb26-6772-473e-a71d-e3a4e08eedc1", "indicator--1b8d82ce-1854-44a9-9ee8-98414f39040b", "indicator--788385c2-f652-4324-8784-19ae790a5825", "indicator--64710ccf-644b-4ccd-9dca-c6fd070b0a1c", "indicator--4673ebd6-8bd8-4375-8545-b39cb8a86a3e", "indicator--31aa7f2d-6024-444c-aa4c-d9b86e34f974", "indicator--b9f9f537-9dab-4e48-a399-f700508711c9", "indicator--2955934b-9a77-4e3a-ad9f-44b0723186e3", "indicator--33528d25-fcfc-429e-9dd2-205997c18a58", "indicator--0446c93c-e445-49f2-bbf2-5d8d408afc5c", "indicator--4d5a942b-5d72-4182-a944-b179382b9775", "indicator--aa3cf804-cc7f-47ce-b5b9-4942953b489b", "indicator--00172425-9273-4f55-8ff1-791a8ba4ac35", "indicator--ea2c934b-5377-4263-8dc2-e0b90838eef4", "indicator--78bba20a-787d-4227-96cf-6a2c5feff0cc", "indicator--b046251d-52d1-4caa-9b9a-c12bb12dfc11", "indicator--827694af-beff-4bf9-8f5c-2fe4aeda5693", "indicator--f25c91e4-844f-4f08-8b18-599474b1e168", "indicator--ed271f96-f621-4ba8-9125-58393d3e906a", "indicator--c74f6f3b-b2cc-43a4-9535-fdf46e096d87", "indicator--d7353e2a-d129-4755-bbae-3201b5d914cb", "indicator--7a90464b-19e4-4fb7-8b76-814ae830d685", "indicator--8b5bb486-aa0a-4729-8ab2-218430bae522", "indicator--00728114-6084-445a-8696-8c0a2d1d2807", "indicator--262794fb-f546-4230-a3c9-a51c6fd704a1", "indicator--366ead00-7791-4d3a-95b5-8ea0400269b6", "indicator--db87f3cc-947e-4d8d-af6e-f00c164ea71c", "indicator--fe0d6de9-8881-4344-9d7f-2a8419feaeeb", "indicator--cdf7a104-8068-4f75-af57-86e558ed12f8", "indicator--88010487-0609-48c6-9f62-57d83133141e", "indicator--d0677f65-aa0b-4e98-beff-1c72f5967254", "indicator--1f7cf6e3-1333-460b-b305-de0766ce914f", "indicator--df1ea2ca-c17e-4750-868c-5b8025dad023", "indicator--4d393962-f948-4096-8860-f8dea408e020", "indicator--00425783-5d6b-4bf8-a51d-12d4296801f5", "indicator--5f253b34-30fb-469c-a0a9-513f5b1527db", "indicator--37306dd0-d440-4c79-a0c7-a1220bdc9e76", "indicator--6be805a9-55ae-44ec-b187-08e2a5671d8b", "indicator--2a2bd6b6-5080-42b4-b603-ff79734c2359", "indicator--af929cfd-2a0f-4fb3-ab81-0911db899a76", "indicator--c30c5044-4f9c-4841-8578-b098a7cc0464", "indicator--837c3135-4aa0-4801-82d5-f6333ffbaff1", "indicator--9d8ba021-a5ce-41ee-8eac-75e2a155cda3", "indicator--cfd8eb88-5b4c-48c2-b391-e867a1874ccc", "indicator--79278299-cf37-4c30-b448-df36bf7386a2", "indicator--95c74fa7-fbe1-4da1-9455-008a5c9b5c77", "indicator--5546ae1a-081b-4c6a-9915-ac4448c23606", "indicator--66474823-7597-46b0-b4f9-35904745b758", "indicator--c3ce60e7-6616-4642-97cc-47213c299e35", "indicator--c42f8c7f-9e2b-4914-965f-2c409e20655e", "indicator--c9c3058b-bf14-4498-a0c6-aa607441f5fb", "indicator--80f5e4b4-d950-46d7-9df6-e2835dcca6cd", "indicator--dc1cf4a4-7b72-4056-a5dd-4d5efe48b6b4", "indicator--3593cb2e-1447-444b-9bc9-b456f5818621", "indicator--6c194a82-2cc6-4396-bad5-d1f2decf825d", "indicator--ee6b02e4-1176-4fa3-9f5c-98a97502f4b1", "indicator--68bcf184-4c0c-4a8e-ac12-f052f9913adc", "indicator--1ff07c66-a379-416d-80b6-beb9a31d1f86", "indicator--55f6b359-719d-4c31-a91e-17437211ea25", "indicator--afe4a956-a31c-4c5c-9d40-ecae991f07bb", "indicator--a81ad13c-2623-43a9-8e68-c732a067623f", "indicator--592a5db8-0780-47c0-8025-3859c46b9423", "indicator--83f51169-df2e-4d4d-807e-2641f66b1364", "indicator--6a00c0b0-b0b1-4aac-b755-5b012bf00d37", "indicator--93f08172-a595-42ea-954f-88351436ba25", "indicator--2bed311a-a41f-44f0-95f3-3857d86c73b4", "indicator--4ee94671-2034-430a-9f19-d6835cb706cf", "indicator--94f42dd3-50ea-43de-b5b7-f934d1c78e1a", "indicator--4398a9b7-3049-495b-b01c-d81ce18ce708", "indicator--7b10e6d0-b303-4e5a-b6aa-825c41de8843", "indicator--4a257dcd-ba7a-4537-b256-39bc9b4deb33", "indicator--c3727a7e-19ef-40a6-af8f-4a5e3b5875af", "indicator--1a2ec3d6-7398-49ea-8ec2-da0e6a9929ad", "indicator--9d9d859e-150f-4e19-a44d-023435143372", "indicator--da6df83f-3c9b-428a-9e63-de0f29c3f5a5", "indicator--60823c37-387d-4799-950e-018861f66dfe", "indicator--4f6466af-4c0f-4cb3-befa-ec9b5e0b8ad9", "indicator--3e5b70f3-2598-4716-a9da-005deba1b391", "indicator--12976ebd-c344-46ca-9b80-d94fc9cc7423", "indicator--e51b3288-216a-42da-bbc2-29c88cc09609", "indicator--11c463d2-43e6-477a-a18b-e2d5b9e3efc5", "indicator--ec9019ea-2c4d-4922-8bec-9dd88900377b", "indicator--db1a74b8-bc0e-4e4a-b21e-2ce30496fdc4", "indicator--213dc546-e823-4046-8452-4cf8ccd20bd1", "indicator--e1f3d1a4-5e49-4cc9-b38a-b0d318164b0a", "indicator--f233be28-31cd-48cc-a521-38a059eaefbc", "indicator--dbfb82dc-98ed-4d1f-a7d4-93c5fd6ecc1b", "indicator--2beff7dc-a581-4071-ac1e-b3b03b1e2412", "indicator--5185e75c-cb35-4a01-b795-39d14e9650e1", "indicator--d6b3be26-ebac-4420-8172-84e65b729d8c", "indicator--41752bb1-522e-4095-abc9-a49b5d5a878a", "indicator--bcdf354a-d990-4e0c-a6a7-bfee88966315", "indicator--2c8267fa-3c38-4c44-af88-45cf3ae28cc7", "indicator--5b13eb61-0830-4b9a-9c00-00ae2cfb0b50", "indicator--9f4996f0-a9f2-4124-8d1a-0a7d46781dd9", "indicator--b6aa15fa-20bb-49d5-9df5-15b495a937ba", "relationship--21d34b0e-e15c-4fa4-8f66-b8b67c1d78dc", "indicator--568f8ed4-522c-4d8c-9233-3537eee06873", "indicator--944be0ea-62d5-462e-b42e-fb6499ee9337", "indicator--f92d10e6-c1b7-40c0-bda1-49e6dd1a509e", "indicator--af218c71-99ff-429f-889a-2f371c8d8257", "indicator--753f6000-4b3f-46ed-98a3-401000983121", "indicator--e60a03ef-a41a-409f-90c1-ad73d693567f", "indicator--007cb26d-6bfb-4fb2-b3cd-a315197f4ea2", "indicator--19c16593-9fb1-49dd-82ae-4c77f38d0b8b", "indicator--7f517872-462d-41db-b35c-8925128399a1", "indicator--fd3c8770-0c71-4442-b4a2-696e97bd2f10", "indicator--bb18a229-3ca7-4575-a89c-abaccffb6550", "indicator--009772ca-3696-4db3-92f9-41d926789abc", "indicator--5f67e8e9-558b-4863-b091-9f53b960fd8f", "indicator--1eb6bb43-f66e-49fa-8aa0-6b711bc4dc89", "indicator--27544ec8-573c-4d3d-9510-3a1e283f3c44", "indicator--6a5c06a3-86db-419a-b158-874ec9dc1f25", "indicator--77cd59b2-5d33-46cf-809a-7d8fb7802818", "indicator--e6a26e5a-a048-4414-9a61-8b5be4fc9c74", "indicator--1f46ea55-5de3-47b5-bd33-be5269621ff0", "indicator--ba7fa5a6-a704-474d-af1c-f7d5aea8abe4", "indicator--cabcf98b-a46e-4ab7-9380-42adc7204121", "indicator--aa7eeaae-55c5-4cb4-827a-735a9492c9f2", "indicator--5ecdb59e-af87-4239-a10b-af57f408d1ae", "indicator--a5004e8a-7535-46b4-a7dd-3d5847e06be4", "indicator--ca85677e-d12e-44ce-ae22-c42de78f850e", "indicator--b9af6ede-6011-444a-830c-507b87ec6edf", "indicator--3142473c-0db3-4cea-ace2-e3b838e0e8cf", "indicator--4f6e29b4-d64b-4112-84b4-a8f076a1182b", "indicator--faad6a4c-73ef-475c-a2b4-b069283b4a80", "indicator--5200992e-32c3-4830-9847-2045d97b697e", "indicator--e270a4b1-f4e7-486f-98c1-b7c67399c171", "indicator--b021619e-de07-40b0-8826-01ed54036568", "indicator--62492db9-b971-4716-84e6-332d483a2ebd", "indicator--ff5aeb7f-1a50-4cc1-80e1-7beb298e8f6f", "indicator--f9e6891c-9ff9-43ac-80ec-06e48e658eba", "indicator--2c0141c1-324e-44f9-b4bf-02b496daa479", "indicator--1c1795ff-ba31-4fdd-97d3-fd8a1a5415da", "indicator--44af3140-b237-4863-8d9e-5782830e79a6", "indicator--f4100484-e33d-4255-8906-4791a0b189a3", "indicator--38af8ef5-a580-4aa1-8d3b-601cce60cae7", "indicator--50c26ec9-5426-4663-8d13-9b5fbf7289d4", "indicator--09bb267a-4b12-4536-966d-f6d55fc32845", "indicator--6f5f60fc-966f-47f7-b7c9-454cd554468a", "indicator--7874992d-1705-4e32-af05-34d608c5f0a6", "indicator--d4c78e93-40a1-40f4-8e1c-fafdcbc186d8", "indicator--eb28dc7e-4595-4625-96b0-813a9cf84abb", "indicator--4fb21f0f-a3ee-4f0c-86eb-b386a20225bf", "indicator--0ab6af4b-4991-4b23-86f8-215fc9da97d2", "indicator--efdb043b-109e-4b60-a10a-10d572853e71", "indicator--67d3a224-b890-4338-8809-cf8a8ff7b65c", "indicator--03284073-8c49-4a25-a76b-67215eff64f0", "indicator--2066385d-ead4-4dc8-8acf-e21b6aee2338", "indicator--2744c7a7-90d8-4e48-b0a2-69fdd51dadfd", "indicator--5c51ecd5-c6d6-4e1a-aebb-dde122315476", "indicator--fbf3c051-1c08-4d24-81cb-a4a39d82220b", "indicator--429e61e4-6fe4-468b-b535-bbc57c3733c3", "indicator--0634fc23-4190-41f5-bd63-614f8aa38354", "indicator--b06908f3-e466-4e90-8faf-a44efcd7a101", "indicator--710ebea0-822c-4b08-b03d-ee6de5de35cf", "indicator--3800cf40-7bd7-45fd-b1bc-c670cfa3e846", "indicator--2a5cfd86-5f79-435e-a5f7-1611c2940ffb", "indicator--21ec22b4-c54f-407e-bcea-a9ae3ceeeef8", "indicator--37c8a834-dd8d-4749-881c-b312177582fc", "indicator--44527f5c-066a-4d70-a556-d9562403fe81", "indicator--37c03273-64cc-4d3d-bf97-53711ff4b2bd", "indicator--2497ddf6-54e9-4609-977d-941d7541d42d", "indicator--084bc153-07c5-44ae-bc89-246eb8ece6c9", "indicator--4691502e-636f-4206-9757-d4cf93106535", "indicator--f4b06f23-53c2-4f80-989b-172d6e873787", "indicator--18319ff9-c7d4-414f-8c13-eac8e7c89cf4", "indicator--4a7033a3-f5f4-423c-ab52-4987051c6ce5", "indicator--790ee18c-4afd-43f3-85ed-06d51a89cf32", "indicator--38eb4695-3bf2-43bb-8eb1-28b9ec7f3bbc", "indicator--c5964fd2-c4ff-4176-ae30-653c65c861dc", "indicator--ce8f6a7d-cd31-4198-8516-3423180a0aa0", "indicator--ee37e7ea-6df8-4f9e-84f0-4f937ed2fb4b", "indicator--b365a912-d7f1-4a3e-89cf-d44ee1ed3d69", "indicator--c67bdb47-bbf5-4a6f-9cb6-ab51f91a7acf", "indicator--a445249f-586a-4dbf-9a61-bbf91b410c78", "indicator--7d985ecd-db92-4dd8-bc5e-823be2374d16", "indicator--6cf102eb-67d4-400a-8435-06448ac2afb6", "indicator--e8609906-dce6-4fb0-8f15-4925ada1e321", "indicator--bf393fef-25b9-4004-8d54-11ed6dafaa74", "indicator--77bca2d5-ea65-42cd-a9e4-3c5231139118", "indicator--9aa66a55-a52f-40bd-9c1c-9145cbf782e1", "indicator--721d2ec3-ab6d-4ea9-846e-4d2a4794df29", "indicator--5487fe48-6e17-4adc-ad72-80088d3c33ad", "indicator--e3c695a4-7895-4d36-90b2-72a36635f15c", "indicator--ec2d3d3c-1b19-41df-ae8f-a60073b1896f", "indicator--70a19aae-535a-458c-82ed-e84255c3860d", "indicator--099cca12-103e-40d8-8d58-8f86cf7a4ff8", "indicator--e1b88959-49c0-4d97-ac96-dcf72d33ad91", "indicator--4aea36b3-9df5-46d6-873e-b7deb5e29ce0", "indicator--b5fdd604-ceaf-495a-a7e6-59c4fe2307e0", "indicator--46bb946e-e04b-4df6-b74c-b17fc5f408fe", "indicator--013e2b97-e166-4e20-b11b-c2f1533c2403", "indicator--8e1e8b88-06f5-466e-ba1f-ceb1f8d34b33", "indicator--6bef7589-d530-4606-b4d9-b640f3acf64f", "indicator--aaa18323-fa7b-4b82-91cd-2fa26e6da486", "indicator--67928fb0-9d06-4eca-980b-23a3f7e4d586", "indicator--f9870559-779d-41fd-877b-cd311ec54b2b", "indicator--7340cba3-ece1-4565-adad-e140d0f4bbd9", "indicator--4224323c-68b9-41b2-8102-cbbeb38dd179", "indicator--143a606a-af11-48c3-895a-70533cc9dbf2", "indicator--1022873f-4260-4618-b882-7e63ef08ca60", "indicator--34d8239e-6db5-4c9b-86a1-876c3fc3b3cd", "indicator--6f9cf4ba-1843-4b54-b7e3-9ab51cde4dcc", "indicator--6e78fa75-3453-475f-9fd9-c007c3e72875", "indicator--5abc58bd-26ef-47e8-aaa9-cfde3e0ea917", "indicator--fcb71a28-dc6d-4820-9fbc-3e7de0b579a1", "indicator--7872d894-4efb-48d2-a5d1-59a180435b09", "indicator--f598cd16-b621-4cdf-bc5e-80e12aba0d84", "indicator--70f81444-bf51-4733-9771-ad2889f300e3", "indicator--17e4b107-7998-4e27-ad1d-6d51ebc00508", "indicator--c9f92f6e-c82c-4ac9-8d26-e96def37de9f", "indicator--8385345e-0c6a-46ee-9e1e-59df9267451c", "indicator--4b59f46d-0630-4402-b31e-2d3794221f53", "indicator--d90d3b87-b8f0-4b19-9249-0d2986196d33", "indicator--58f00468-b435-4e77-b473-dc1da25a3a6e", "indicator--9909972c-77d7-44a7-8639-53d49e3ca06e", "indicator--50d82700-49d2-4c5c-9018-2cb0c29cc998", "indicator--f06dbe01-7eff-4b77-ae6d-e8d4862d17d7", "indicator--218de6d1-3fad-4307-b7db-7c0d93a21ccc", "indicator--2a812021-1ead-4873-8b01-31e7a9e4190f", "indicator--a1f068fa-631e-43c2-afd4-c6b925dbede6", "indicator--76757ea5-d9a2-471a-b76a-ae04b22f38a8", "indicator--b01dbd01-e6e8-484c-8709-72eafa67cfc9", "indicator--5ac0dbd3-f8bc-47cb-abdb-782518d1dfae", "indicator--80475175-3404-4d77-8d3d-5e962b5b9141", "indicator--5fbd7ff8-4536-4541-badc-a96709279ea3", "indicator--c728e164-6711-4802-9999-1de7bc8f9891", "indicator--788f3a39-c3b2-4c6e-8acf-1a48118c33ad", "indicator--d935b965-e4f7-4a3c-b71b-7345bf2d5883", "indicator--a302e8bd-0648-4469-b1ff-5a19202d642e", "indicator--1779a610-b9e2-4a35-a36b-484910564296", "indicator--6af0e3eb-acf8-4f0e-ae2e-8df55252ab7b", "indicator--696800f2-8a81-4ea2-8338-0afd25c74512", "indicator--1848d92e-5452-4227-8bfb-68b6c3fea0ae", "indicator--2697b574-0ff8-42ef-8062-553f83f64e22", "indicator--d3f23c71-25ad-4e08-bd39-df890a217775", "indicator--3a12239b-8536-486c-92d0-188ff523d279", "indicator--7e6b837e-d4ea-44fc-8785-0abe17652937", "indicator--ed2c2c71-a963-4138-aa63-d9472f362af5", "indicator--8c164fcc-7bc6-4399-920d-51025a668447", "indicator--11feb8bc-50d9-44d6-9f0d-951022b9f775", "indicator--ba1db8ea-821f-4559-bdb0-488e91d6aa9a", "indicator--48d9f02c-e6e6-4aa1-8d4b-f687e30511d7", "indicator--c2c36a95-70bc-4eb1-96b8-3f00eb1682dc", "indicator--0711f351-214f-4619-8c21-604698616fcf", "indicator--d02cfd6b-04db-4b0c-8384-2c7d52cdbce3", "indicator--35a3e845-59fa-4fa8-bffb-f024da07f135", "indicator--ca4f67de-2f46-4930-8443-be8805cfaacc", "indicator--9e3040f1-8142-468f-b399-ee10b6aa4675", "indicator--e7150e84-7e0c-4cdc-bab3-6ee85e375a6b", "indicator--b3f3f695-ca90-47ca-a23d-e2680818ea97", "indicator--b351e50f-77bd-4d79-a173-72718393e323", "indicator--14d0d2ad-d15b-43d6-bcae-7a5fca1febbe", "indicator--bc066f7a-d249-4342-bf67-7f181ac8a5be", "indicator--f2682262-07ec-46d2-97f7-8ce1a6b80b2e", "indicator--cdefb872-a68b-4409-8e1e-a430e3e1bd92", "indicator--bf835676-5b87-4095-b74d-c47d8c8383c1", "indicator--bb871128-6ecc-45a8-96bd-e59e37d73667", "indicator--9d3e6745-f377-4cd0-8a42-1fb5e58e3d26", "indicator--95c0ba05-c6fc-45e0-b6d5-4269304995ab", "indicator--3f5bb419-e8f9-41cf-919d-9655eb90a947", "indicator--29dde7dd-1244-4dac-8386-4a650148b944", "indicator--d09267f2-3227-47d2-9af1-21e3ff52efd2", "indicator--a3aa26c4-64d3-4ca3-ae0d-dd9367a07934", "indicator--f491d0af-8b83-4752-bd54-221357d9bb4f", "indicator--a6c57c2e-14d2-460d-9c73-850622b307fa", "indicator--0e1cc5a1-ba9a-4b43-a1f4-eaaafa7b70ea", "indicator--b22d0740-0eb7-4369-b9dc-2427a680d062", "indicator--5523f345-846e-4333-b85b-532a9b7a64d3", "indicator--8ff88eff-a313-4fae-aa95-8d8435e5a95e", "indicator--166433c5-8c1d-413c-aa05-fae906a6c7f3", "indicator--edac9999-b52a-4a8e-b27e-93f922bd905a", "indicator--0ddbccd8-fd93-4bfc-9ed9-7ebb8efe052d", "indicator--8aa2bf09-1954-4649-85ef-2f9f4bcad15a", "indicator--ea48d438-22eb-41e9-925d-7e9ada0f7286", "indicator--f2f98bbf-e49d-4928-81da-0b0db3e71a15", "indicator--48327789-7907-4eba-8a9c-9577c71e8e94", "indicator--9ba74d06-b774-4a0a-a6b8-e24ea853b94d", "indicator--6a1fa106-802c-4182-872d-43375d0755d1", "indicator--6f1d6029-ca16-4951-88ef-f0c12acbf3bb", "indicator--9ba7db54-d0a7-40df-bfc9-0337e5b65347", "indicator--0dc9ec14-38a8-4b5b-bc13-a2e63afe9b57", "indicator--04b6fb20-7646-4d69-8c68-75a862afadb9", "indicator--b6d486cd-6b5b-44b8-98fb-e9921ae6fe6b", "indicator--aabb87cf-b3b1-44e2-969b-33cd06e20a27", "indicator--13f1c91c-79b9-48cd-b46b-da98a2cc9824", "indicator--9aa0351e-a5b6-4e8b-9da1-7b1d302edcf3", "indicator--050b7fcf-0e9b-41f4-80ee-3eaae80f06d3", "indicator--7972a91f-c62b-4c72-b3ad-04da04701ffb", "indicator--4690f0d9-4462-4897-9d63-d1de29dbd66c", "indicator--0ad0c2ae-667f-424c-8409-c628f41243c1", "indicator--d08f4ce6-e569-41c6-86eb-bee029769bc7", "indicator--9a69146a-0ba4-47ff-b2f0-a183e952e066", "indicator--abab0ec5-7b7c-470e-80a0-2ba6dc66a4da", "indicator--358f503a-2bc2-406c-bea0-72438106fcdc", "indicator--7eb3eccf-870f-4def-a594-6b2cac27f60f", "indicator--2b5d1d71-aefe-4302-b656-b779f144a8da", "indicator--3d582e24-ed57-464c-8a8a-f52aa3b4312a", "indicator--2a145306-4e1f-4d77-9713-56310bcd428e", "indicator--b637f6f4-ea58-4165-85fe-b23f50abec5b", "indicator--d1c6bb01-660e-42bc-9c79-fbcae45ca8d4", "indicator--d418c0d9-98b5-46ac-b3ef-0d06880fcaa6", "indicator--eb74ab9e-febd-4ab4-a6e2-aae56b5f7aaf", "indicator--82ae76e5-cadd-42a7-9b53-c38d69bb4145", "indicator--0af30bc6-41db-4613-a312-49fea0f4e3c5", "indicator--ff3f5dda-9d04-4e6a-ba32-0111047ab64e", "indicator--2e499221-330d-4700-8bdd-a6ab16ab4353", "indicator--7ea92d23-eb78-45f1-a542-9a447e330fa1", "indicator--02fa46af-5ad6-42fc-b1c9-e1cf41ba1fc5", "indicator--07359642-f0e3-4771-aafc-702498a5643d", "indicator--906a10c4-d8b9-48a4-a3cc-3b13c868c99c", "indicator--c4eb7d0d-5caa-424b-84a9-41e5b9eae946", "indicator--c4b2d592-b668-4975-8461-90385107897e", "indicator--9ce9ae9c-7ddf-4566-ace2-9cbb46dbfc45", "indicator--56e2fdef-9d36-43be-8341-2911176a07b6", "indicator--e9fefc46-6187-4a78-91a4-8d784273911b", "indicator--310cb432-3904-4a2d-9a09-3218a3e29122", "indicator--b000411d-680c-4c4e-8907-ab4a7f3e876d", "indicator--0d37d8f9-2926-4450-b1d6-3cd057d923c7", "indicator--c477c9fd-526b-42c6-93dc-2bf13063903e", "indicator--4a14a877-ac91-48cb-acc6-b11e09c2d460", "indicator--eb296a4b-4510-49a7-8767-144912e1074f", "indicator--f23929b1-f463-423b-8b2a-b3e023f546fe", "indicator--316be0e0-1b3b-4dc6-abd4-28ea36138294", "indicator--39d04ea0-98c6-4527-b669-8fe7b38abf44", "indicator--48e1a2d9-cfd6-4b7a-83a0-851d1bc9ebd9", "indicator--548be442-e456-49a1-be1c-2f99f8826814", "indicator--8cacb901-67a7-485b-9088-38cd38039e8b", "indicator--92ae20e4-2547-4164-8872-f4b8024c1a66", "indicator--fdaa176d-f3e9-4e22-a466-b60b9e7c3f6d", "indicator--fcbd4fb2-fe29-4bcf-9dad-e649003e8a98", "indicator--5fbf8fce-ff7b-4081-a3ee-23529f2e37f3", "indicator--3ec0d06d-40ef-41d2-b0a8-ca522f9a232a", "indicator--2f92433c-3950-4d7b-87fc-90b654d12f70", "indicator--aaf97bb8-382a-4b72-b84e-fae97ec87e6a", "indicator--6dcf6395-eb92-45c3-883f-c794fe2c3906", "indicator--52cdd4d8-bf30-4296-8db4-8428eb72f2cc", "indicator--a3f83650-bf34-4a27-b974-b1ef6c8da192", "indicator--923e16dc-9d72-4f3f-93fb-ed620cf7207b", "indicator--399a9093-38dd-4ef2-bfb7-e6f8c1f41963", "indicator--2f855550-5550-4b0c-9edb-1b1c455358b8", "indicator--f74f2344-7d02-4592-ad52-1ce9d87f8bd8", "indicator--0237a115-3e20-4561-a35d-5a88e46a4286", "indicator--bddfd7a7-8809-4d9b-9701-aa018e6c665e", "indicator--d9228b8a-e567-49bd-8a7e-38b84d8da95d", "indicator--7db7c9d9-8265-420a-9b19-aed422f57701", "indicator--662374de-33dd-48fc-9dfa-eb5206103e1d", "indicator--9d09b51d-bae3-4fc7-9766-7ead38bf3cf1", "indicator--89c04fe9-860a-4641-9973-d4a5c66a8ade", "indicator--9ab03af4-f711-4f71-b52e-22a878c875d0", "indicator--d8755e21-3f10-4842-ae14-4af2a879989f", "indicator--ea131c66-761c-442f-9077-4a1c622c5765", "indicator--29b6aee0-63de-4f7f-8798-08fcdec9dad7", "indicator--f8c8f361-4de6-472c-abda-bca42d837b54", "indicator--ec363c51-6af1-4b91-8ba0-41d33b4c1433", "indicator--80dfa6c8-b0e1-4e3e-9b63-60b03b1699c2", "indicator--ff13fdd3-adb5-472c-8096-e320aff5aaa2", "indicator--b7dbfaf0-fdcd-463a-a14f-2914f50a2443", "indicator--54ce4c8d-801f-458d-a099-46cb1ec02769", "indicator--364610eb-6d9c-4eb3-b8a0-11bc6d5950f3", "indicator--b407e4c3-a2ee-44c3-b508-f8729fc2173d", "indicator--3d351c99-b1e4-48f1-9d61-227f0218816d", "indicator--0d8a07ce-2ce3-4868-8551-bbea924a6612", "indicator--e8b28c67-91df-4072-ab55-54f5ad4d4aa9", "indicator--923593f0-abbd-44bc-9327-8e1ff0fc343d", "indicator--61d16a8f-3709-4e34-a277-5fa3206ffaf4", "indicator--e0d0ffa8-adf8-42bc-86f9-093553304f68", "indicator--8aa74e94-9c0c-4d36-b1c1-f43c7a6c5579", "indicator--af10f953-d2a3-40da-8d1e-9f2551dabc75", "indicator--1cc5345d-df79-4a8f-b151-6b527b60c78f", "indicator--04f556cf-78e9-4626-b42f-e25c4cdf2895", "indicator--bb0b0385-4cfc-4053-9ee4-1cbbd9c760d7", "indicator--7b7892f9-bd1d-4a58-91c2-eea829da5986", "indicator--274f230e-9bd0-4986-8215-1852c35e2373", "indicator--1fc3bfe6-2006-47b5-bb3a-a2358fc31b8a", "indicator--425d34a6-f0bf-4372-bbae-3911652550e8", "indicator--95178f4c-2f35-4df8-bd5f-bafbe17dfd0e", "indicator--078fa6b5-3cd0-4524-982a-5cfe1ed1a34a", "indicator--3efda06e-58eb-417a-b180-373f400bc084", "indicator--3e909ca4-47f0-47e2-a0a3-525b680bd4f6", "indicator--3857965e-b01d-438f-8750-68ecabf603c0", "indicator--1bcbc99c-e6ee-40fe-833d-2c3930475cd4", "indicator--302dd496-cc5e-47f0-8563-fab62b64eecb", "indicator--80bacd5c-e44e-48c3-a5f8-68df667dc9ad", "indicator--512ac408-027d-429a-96eb-4826e4fdf72a", "indicator--3efc7ae7-5c53-48fa-a708-43121c39ca4b", "indicator--f2c701bd-14cf-4cd9-b20a-6d0cfb5804bf", "indicator--7d292764-c3fc-4922-a334-6d400ea01044", "indicator--4d56f4cf-069e-4572-bd36-32cdfc2bd46c", "indicator--353ab8d4-0bff-4a4f-8145-89b8c9032948", "indicator--a7b2ec7e-81e4-4c44-a966-26685aa6d40d", "indicator--52bb13fc-a33a-43af-b3f5-3c8a56fbe95a", "indicator--46c6d161-aa7d-461f-abdf-2ae16f1c892a", "indicator--4f07dbc6-e7f9-431c-85d9-4ca4c0478540", "indicator--0729dfee-e830-4a5a-9f6b-db90220401e7", "indicator--ca35d1ac-409b-4ef2-965b-aeb09e3952c9", "indicator--1a94b75b-78aa-4937-b91d-5091ce398299", "indicator--c20269f6-fd2c-4bfa-90d3-84547e54094c", "indicator--bbdbd0f3-ffa6-4018-aa9e-caa7cab02ba0", "indicator--356998e4-3959-4a69-85f5-542cdeac9a6e", "indicator--b421f7c1-09bc-4274-829d-48d73704bffa", "indicator--731170f3-4dbd-463a-b120-f3271c12e227", "indicator--4bda5d9f-ca4c-4b76-af65-771c969f13c3", "indicator--82178c43-bcc6-4aab-b89f-8f2b6c56dd24", "indicator--8214d3d2-916e-4e17-a798-d4ad7dc79deb", "indicator--42e93c18-a491-4555-9d43-6110882cbff0", "indicator--b73ba6b0-f3ed-4651-8c40-7f6ab8759913", "indicator--735ef9b5-0fb9-4d31-829c-47169f41a953", "indicator--c38bb633-38c7-40f8-b981-9380afde9bd0", "indicator--48e126b5-f6bc-4cbe-975c-4f2ee65e0483", "indicator--6ecaeed9-9f62-48b5-bc86-5554a63fa465", "indicator--952f7491-672d-4fad-ab14-de2b52362219", "indicator--d24c1bce-a2d5-4481-b871-04e7a2bd0f36", "indicator--3a62e33f-2d8a-4cc6-9fc5-2daa5b11de98", "indicator--907912df-7d6e-482d-99fa-9b9bfa13a1f2", "indicator--1cd7f451-17d8-42a5-b224-4e6e4d90f617", "indicator--6016eeb9-8d58-44e8-9ef1-d8123e64d65c", "indicator--185a40ba-3d1a-49d9-9804-f1521b51e4b3", "indicator--662b330b-18d9-474a-b413-c4974ebccef2", "indicator--a552777c-83fb-4aae-90f0-6c9fe81744e3", "indicator--4ff066e7-c761-43a6-9cb8-d317cb39ed5b", "indicator--6b56cabb-c650-404a-86a8-c3ef3cbe4b3c", "indicator--f3dc0550-eb1c-432e-8269-9a78310ef1f7", "indicator--fd3f9117-84f5-4e6b-83f7-ccb0395a5594", "indicator--c9184842-992d-46bf-9fa7-ae978953d23a", "indicator--4c2ebc2b-affa-457d-a62b-97c28e055f89", "indicator--0a11c7d1-d589-48ce-b287-e8cdc9383410", "indicator--998a27b9-1f3d-4518-be4b-b4d551f6ed70", "indicator--a6e7e235-ae70-430e-9675-36674777d6e6", "indicator--ebc5d244-4709-4ca7-bef9-683d9eb78b28", "indicator--a86fe81c-8290-41f8-975a-d514f5fc0c8f", "indicator--1e2132b9-9447-43d2-a630-b82bec6d888d", "indicator--78bf3788-bb6b-49d7-8d00-6e802c643193", "indicator--4069a469-9cdc-41c9-9e92-ea135595c26c", "indicator--74e4a5e8-a0b9-4f29-b787-e31383b769f7", "indicator--030c91e3-9e66-4417-bf4d-146880a7555b", "indicator--99878823-e26b-4686-8f5a-a70adb3e3097", "indicator--61620faf-4f39-4f75-8540-b8b569a351de", "indicator--208b4f45-4454-4790-919f-4cd5875d2fd9", "indicator--a4eaa1a6-31da-45dc-898a-f3dda629135a", "indicator--c9552259-b37a-41c9-8e75-4427f80ce1aa", "indicator--0776b6c2-d80e-40bd-8602-68931d3e9002", "indicator--10171224-5a99-4420-aa2f-eecd355bfe06", "indicator--c8320b96-97f6-4d92-95a4-d93af9dbdbf5", "indicator--27e76602-a4be-4c10-89f6-8700387fcc7e", "indicator--5da68372-3e21-4cd9-8bb5-7dfc9f63c0de", "indicator--11d95fd0-2fd8-4ed7-b6f4-a0ba094a2c09", "indicator--85b9a514-8e43-4c47-806a-c097dc4d3b19", "indicator--4be96c25-7df8-4f48-a45b-9ebc942d5d80", "indicator--f4086e76-9ebd-4620-9eea-b3ab24f628e5", "indicator--d0ed9b19-0d90-4fc1-a67d-dd6806a5d429", "indicator--4d01331b-4d46-4f39-8ea0-43c79e7ac3c7", "indicator--0972dc81-b5d9-4c6a-94a3-f9a9b19fabf3", "indicator--70a1639c-6006-4ec7-a516-1e8c8dd053f8", "indicator--d08c2a5f-a086-4760-a3d2-c447d20bc93f", "indicator--3cad4710-1f53-4b2f-81f9-d52e2df1e77f", "indicator--86cf3322-845b-453e-96f7-17d674f5e52f", "indicator--acd8a6cb-e574-4d89-85c9-166563c1a219", "indicator--f75ff3ca-a8a8-4f73-a230-33326db95798", "indicator--22a4e143-535d-489f-8d4c-2eaa7c03df25", "indicator--20b6f80a-ca57-4cb8-9711-06cd5c0bc9e9", "indicator--ea02183e-2657-4571-adb6-79425dc0cd82", "indicator--2e4612a9-7e78-47ce-99e1-f376b368c1ed", "indicator--b05e1656-ae62-42d2-9cf7-512d52b0e007", "indicator--80ea191d-671d-499a-8174-d0dfc93909e4", "indicator--5303e781-9a77-4aa2-aa1f-dcb8a30fc72b", "indicator--9debbcce-3162-4d49-8816-be08ed6875fa", "indicator--ded1c9ee-4336-4672-a3cb-d4697ba7b84d", "indicator--99ece780-a06c-4396-b5ff-372995c4062a", "indicator--52c15061-8d42-4a3b-9d23-a4c81bd83901", "indicator--0902dec9-7de3-4455-b92f-7074cdd672c8", "indicator--d9e36be9-7460-4b04-a539-08127c268032", "indicator--50817e95-609c-48c4-99f6-640461f5040b", "indicator--a865a28f-1655-4169-9035-0c8ea73ade55", "indicator--631c7909-1ce1-4cd8-9576-22f466ca8837", "indicator--ca96c0a3-f230-42cb-bbb0-9ae85da916b0", "indicator--20930f5f-0d1b-43fd-ba91-7d07d30d3f43", "indicator--d2b01eb6-983f-436d-8d17-12e825ce6cee", "indicator--15c3d4fe-3ade-4573-992f-485cafe38650", "indicator--430975a8-d5bb-414d-8af0-4fc94246a793", "indicator--4f0c3197-e076-46af-a3a1-70e78bc7fc0d", "indicator--b7ecd049-d4c6-4693-a1a2-adab6c833547", "indicator--1fc861e3-1257-4327-95f8-11230365e917", "indicator--06c4e29f-4d5e-4713-b04c-d75c5a1bc2c5", "indicator--b1337f52-e1df-4a86-922a-f8530e6559b4", "indicator--ca2f46b8-d313-432b-a528-672477ff250f", "indicator--4e4aef6d-f292-43ed-a4b6-76f5a589c0e9", "indicator--f9d0f827-cf94-4eca-987c-b49977685086", "indicator--e6c68767-73d3-48e0-9e3e-9b3e979f38cc", "indicator--00a3fb3a-0714-41a0-aa64-2873f1fdaed9", "indicator--b7a447a2-23a5-483b-8cc6-44416cf95499", "indicator--7ac47021-9947-47e7-a685-08346fe5cac8", "indicator--9b95fe27-e7df-4887-a252-53dcfec8dcb5", "indicator--92bb147a-0d96-4dae-b349-c8a252215a15", "indicator--b3eb771d-b3dc-4b54-92d8-c444058ef76d", "indicator--ae6aef8d-721f-46b0-b1f5-1aea906a9c9e", "indicator--80493bd3-28e8-4910-9439-de8363bb3c83", "indicator--55a6f27d-4ccc-48dd-bf88-211ba9b6ee22", "indicator--d574f81f-7c8c-407e-a854-a2cf9720464a", "indicator--ae855b00-45fe-43f5-b01d-cd0ef6633f80", "indicator--9f597771-561c-4d5e-96e0-72db019f51f0", "indicator--7f984e5e-6fc1-41c2-9c1a-d58ae3f7696b", "indicator--9bf9ac8a-a534-4679-9862-4d0062048160", "indicator--c091c765-dcb4-4c50-a783-32f9af2d4751", "indicator--bac9d143-1466-453d-8e22-1e6c3270ccde", "indicator--220e158d-dd46-4d0d-b0aa-51f0c81f11fc", "indicator--c2a25b0a-fd4c-448d-8294-4faf1e3cf9ad", "indicator--50f83dd5-d7a5-4742-80a2-418f3de87aff", "indicator--9be714bd-21b6-453a-aeba-79eb4fc79260", "indicator--6b341c48-8730-4f18-8013-834e247a6345", "indicator--46a43c4b-bd3d-4057-8636-36c0c9a76eca", "indicator--0e5f075e-4273-455f-8852-08a2fc1a10b6", "indicator--833b5fe5-9286-4d62-8e87-0c6ae058b0ce", "indicator--35bd0fd8-106a-4498-b5cc-54bd8d1aef98", "indicator--f81d2303-f51a-4ad5-bd7c-45b5c98406bb", "indicator--10704984-0e4e-4180-9d3b-7923b91e96d4", "indicator--c2f3edc2-6fac-400a-879b-dad6cf059c00", "indicator--ddfa90d1-bb4f-4f5a-9cc5-c23df687b54d", "indicator--49faaf80-56a9-4884-92a9-de7f0c5609b1", "indicator--396b19e2-c840-4212-be67-7495c98f98bf", "indicator--6ddfa917-bdc0-40d9-bbaf-4ffa02c6ea6d", "indicator--f76a78bf-b5b6-4705-b3db-297669a40975", "indicator--cf9f16b4-a41c-4781-b5b0-12e39f883c42", "indicator--3c198a6c-540c-4e44-852c-053a8aea7783", "indicator--f70a3510-af30-4990-9bec-44b1eddf1b90", "indicator--c65620e3-9cce-46a0-a053-a83154c15b2b", "indicator--ca1e39a6-8a75-4b7c-bee2-29bab3bc8da2", "indicator--8ca88103-a75c-42ab-b5c8-6c63cd4a0e04", "indicator--f6cca1b3-6007-4d18-a162-fec37d196bc5", "indicator--89f2bd29-b7ab-48f4-b14c-329bbbee3177", "indicator--1f026e3b-6b35-4b46-afac-7e807f17e1c7", "indicator--999020f5-f460-4ef1-8fc3-0aa8c9284f42", "indicator--0dd108a6-a63b-4555-b619-25e927535379", "indicator--687d5275-8d99-4bdc-9da8-8a609a12caad", "indicator--f8b22560-283a-4cf3-bfb3-b9bbe17991af", "indicator--911cceef-8593-438d-86c1-fa171b816dbe", "indicator--e123179d-9cdd-4e57-b0e5-5b6633814fba", "indicator--5eff89d7-d5c2-4c27-b5d6-bae55fcdb1af", "indicator--13e6bd83-92e5-409f-bc70-6820644b47b8", "indicator--dbef71df-b2b2-4b68-b7f9-695f1a63698c", "indicator--a54a2255-f120-4a41-8470-3094a2d20276", "indicator--6ed5b03a-0934-4358-bd52-58daad1baedf", "indicator--e20aa50c-2836-418f-99db-b3afa67ab837", "indicator--1e4c09b6-45d1-448a-9223-87668afc3577", "indicator--3b63b8df-e971-4bd4-8bf1-40f0b9b7fd5d", "indicator--08674a5b-49fc-4806-8f3b-0e35cacbcd1a", "indicator--92928fe8-3bf0-4885-8c8d-c4462f538297", "indicator--0267baab-a18e-4dec-89fc-4b0e2ded66f8", "indicator--1ca532bf-4d0f-4a7a-8eaf-4e52a8423af1", "indicator--74354cfc-a76e-49dd-90bc-89b7f8796072", "indicator--debd4fd0-686e-45d1-adda-dfbd301edb47", "indicator--cfbaf0d8-f452-4180-b0de-6771efbfd565", "indicator--00f89f6f-b9a7-4d09-85d5-1ae3330f957b", "indicator--74bc7c20-3e30-4c7c-98db-a2440353db1c", "indicator--581b8caf-0bf2-4842-af48-c1818fafcc8f", "indicator--2517d03d-e3a4-45be-82e7-3f54ddbb2643", "indicator--7d5f6857-6100-477e-adc8-c4a7d238ed10", "indicator--ea553a02-5a81-4b17-807d-e20c459c9cc2", "indicator--2a3495ea-2c2b-4e43-8dc6-8cc9780b3459", "indicator--8bc4b29a-aad2-40c0-90ea-58f557191ebc", "indicator--e46657f1-ab7d-4868-a674-29e106a1ffe1", "indicator--27ee63c1-a67d-4ee5-9465-e5ecee7ddf69", "indicator--1fb76526-7eab-4499-b380-0af7be5db824", "indicator--6f7c1af4-ec04-4281-aa98-2f4266cdcdf4", "indicator--936aa24d-5eea-42c5-97d4-426abd70fbd9", "indicator--936b23d3-a198-4679-8315-9eb1e7776b37", "indicator--fc2d4a50-e415-41f6-b8e8-c2217869ed5d", "indicator--4cd93506-7eac-44b7-8972-fdcd897e9a1a", "indicator--c733ff50-a65b-4ba8-a2a4-19a892546067", "indicator--3c325175-0c81-4e5d-a471-d08b5847407b", "indicator--2c3e8314-38e0-4601-96fc-44d953d673ee", "indicator--7269c375-4c0a-4243-95e1-fb1471e18ad1", "indicator--87207eaa-2762-4e02-841d-1698a50b9ae6", "indicator--4bd9d4d0-dd5e-4dc5-9bb2-3eb175578622", "indicator--1b07e55c-c742-4640-8ace-e5f17956025a", "indicator--a88cab27-17cc-4b3c-96a0-7680978e2a9d", "indicator--8dd53ff3-75a3-4070-bc3f-4037fd6fc3de", "indicator--b8393a1b-a8cb-4e47-b704-7ffdc129284b", "indicator--bb16a498-bf97-49e4-8e6f-87c99470da03", "indicator--56666e1c-a755-4d45-bfd1-9f8e2283250b", "indicator--e9c82173-6533-4387-84a2-19f74a65d2a5", "indicator--9cb9e29e-1671-4562-8760-2f8825da7f96", "indicator--6513911e-958d-4deb-98e9-5c26512f4484", "indicator--72592a2b-9e3e-4521-844b-9cbdb2e987aa", "indicator--4789c8b8-f49b-4db6-84e2-26a513bbb474", "indicator--f9e2ff64-173f-4226-b196-69bdad1d8351", "indicator--315e85a0-a2a0-49a9-86ad-b5c9c3a6fbd9", "indicator--bcfb04d4-19ed-4881-a82e-8dd2a20050bc", "indicator--2f4f8a40-cf0c-4fc1-9251-549eb789f844", "indicator--548cbcf4-7757-48f9-a275-a925cc12ff6e", "indicator--8771d335-db51-4bdb-9ef6-dcf9717fe9e2", "indicator--70def91e-ed41-44e1-acfe-b7ae1209ad7d", "indicator--379e5b1c-4bb1-4c26-a40c-8bc80c4712c0", "indicator--445c055e-4cf1-4489-b082-0843607bc85b", "indicator--24687867-954d-403a-8792-d5f1958fe234", "indicator--0f55dbc6-edc7-4173-9e4c-850f5e98d00a", "indicator--d428c009-3557-4b11-9c03-a2a522d158fa", "indicator--2b615149-b037-47bb-bd16-8bc4d6003d5d", "indicator--c7ec91b4-c53b-4684-b6d8-ffe7f68c75b4", "indicator--17ac2639-f9c0-4264-b564-f9a10ed9b247", "indicator--1189a92d-f96c-4af0-9d21-64bbb0ae220b", "indicator--1f90c3b4-8a0b-4d34-b044-a2861a44e54f", "indicator--d737fb15-651a-423a-b10a-b9acbaf19fcd", "indicator--526e9898-04bf-4fa5-a954-b2fe632a1b24", "indicator--09f60576-aebc-4c84-802f-6592308e7ff3", "indicator--7a2d9d92-8d35-461c-85f8-5b9c5a1610dd", "indicator--39519b5c-d2ed-4a22-9e4c-63456cf3bef4", "indicator--bcd32a77-8bcf-4d5b-8e06-254b5f20b8df", "indicator--637d7b9e-64b0-4d47-97da-924e672d4f61", "indicator--c6639a3e-7749-41a2-a2a2-d2529447e81e", "indicator--add3d6bc-9540-49db-a089-b8a8ea103949", "indicator--5a651a2e-3765-4ffe-bd89-754e482e0c67", "indicator--139ca0ed-b324-4c62-b911-06b2f2c1a6a6", "indicator--d12e8567-0bcf-408b-95d4-c3c4ed80e13e", "indicator--6b29c995-8982-4eac-bb06-ebcc135a3adc", "indicator--289e0048-e7b4-4e93-8bcb-c441e275d23e", "indicator--c5d02023-09d3-4535-9e8d-6706d04d96d6", "indicator--25e90c74-35ca-4675-8374-997df5217220", "indicator--721911d1-6d3f-471c-ac60-21b3fdbe3966", "indicator--096adaf4-339c-47b7-8ea4-cadc85925072", "indicator--fdbef6c3-6ccf-4947-b9c1-47a17a96e769", "indicator--591499cf-26cd-4b0c-901c-0fb463fa14a5", "indicator--9966ed1f-a20d-4407-a474-3e64087ed0fe", "indicator--c999fbbf-379e-4eb2-960b-262f0921bbd1", "indicator--423f25e1-8710-4c7a-a4d9-5d316e0396ae", "indicator--cf43a2ae-a693-4643-8060-02b8b5a626fd", "indicator--7013234d-63f2-4a8c-9ade-7856e4acbd2f", "indicator--6622cad7-6b75-4b45-868a-92f1b052e090", "indicator--9fcecb26-dec4-45cd-9d38-5e11ae06f163", "indicator--e1fa6f50-97f4-4959-abc6-5a360d28d98b", "indicator--2644ddb7-38a2-446f-b984-9596a9114850", "indicator--96b7c713-9c8f-40fc-9982-eb7b71395c3a", "indicator--01838f4a-cd35-4ecc-8403-a410881ce3da", "indicator--6da60f0d-0edc-44b7-8cb5-858420b77bab", "indicator--58480db8-f079-4561-be45-1e9345c7c336", "indicator--eac00772-020d-4932-858f-64a9ef6f527e", "indicator--ea7326db-f565-4958-90fb-1671abe85e83", "indicator--b453d367-7fb8-471d-bce8-209d7cc5fc9c", "indicator--31130405-4d9f-4faa-b1be-8b1b3c219a22", "indicator--6749a6c1-e425-4b19-8c1c-de3688b32c14", "indicator--d9d66a6c-f33d-4b93-8976-f633e0f61a1c", "indicator--734d62ce-524d-41dd-a88c-a888e5fd1a08", "indicator--483eadf3-b736-4631-84e6-af9f7c62d558", "indicator--9441f6fc-b2c0-47e8-9f71-c473f8fab13d", "indicator--5ec000e4-85ee-4fc0-8090-fa1782d8ce25", "indicator--dd067334-fff6-41c4-ab9f-03f2bc74d986", "indicator--390d7bf9-4d14-4b30-a822-b76e8e09e719", "indicator--7f0962b9-69e7-4664-98c3-1dc51330cd8c", "indicator--c816ecca-e311-4a59-9bb0-e38a7271cb5d", "indicator--25f118be-2e67-4f17-b9f3-1dd32c38137b", "indicator--54511b22-3155-424a-918a-0530dcacf9e6", "indicator--9feb67e0-92ab-4a28-97e1-b20971fe4828", "indicator--9f9fb976-6cfe-49b3-abcb-8db48c4777ea", "indicator--2df19553-140e-4dd8-baba-86e17ab7d1d4", "indicator--89f71abf-cf47-4369-9af0-94b00c94900d", "indicator--caf3becb-a475-4ce4-add1-03248af50e7a", "indicator--50277521-9d95-4dfc-ad36-c0f4f96a6896", "indicator--02393351-c281-420f-ab2c-f92e1e656e51", "indicator--432d59f2-69fe-4289-a388-24ef99d4b994", "indicator--1509f819-71f5-4f1b-b4e9-ba691d29cf3d", "indicator--4e9aa5b9-bc21-4ba4-8c5a-0d84c3327c74", "indicator--49cd158f-9010-4a07-a519-1591547a672e", "indicator--23bf30f9-4c71-465e-93ee-4d002d0fc01b", "indicator--de4bf84d-8d48-453f-b0ba-a224195bba60", "indicator--c59e3fd1-523d-49d1-ab07-3aef034ae0be", "indicator--44734dd3-7466-49e9-af13-2a2d30496313", "indicator--5ba658bf-8ae7-401a-b2bd-93b15888a342", "indicator--75acfbdf-0f50-4f0d-bced-d621077acb8f", "indicator--020a7f58-549b-4d42-a7ca-c4292f6fc23f", "indicator--c1bede57-ec9b-4cb4-babf-57e6866be8cb", "indicator--48a0cb73-1203-47ea-823e-3bcd7233a2c8", "indicator--516d0ee3-c866-4e2c-b8df-3bbc24344862", "indicator--67e5262c-4c07-421e-b7b3-5714d6bbac75", "indicator--12e1886c-ebac-4a4f-89c9-8a332d9e1f1a", "indicator--3ada51a5-564a-4d28-bb93-cd1d7c509a39", "indicator--f398f30e-4f53-46bb-8b69-12bf892ac954", "indicator--20c12c6c-9d48-47d8-b65a-e255a7f42e53", "indicator--fc5ba395-bae5-4a31-a7fd-2087c643af44", "indicator--4a6e784c-1a50-4f1d-9c7c-bcdf40aed0a9", "indicator--7e5ccc6b-9839-4c3f-9044-a5f8f970d464", "indicator--ea845bc7-1d95-4961-9ad0-6ee7b594b13e", "indicator--2add4767-ad8a-4637-850d-1aac50e411ec", "indicator--74aedabb-5176-4a5f-acd1-adb5d651c739", "indicator--5d384921-97cb-4088-8aa5-7d4cfd021ead", "indicator--e061ef79-7a41-4a4a-b386-112533711ed0", "indicator--640b3842-905d-4db9-be31-2641f52ef2fa", "indicator--c5ac7d44-51d7-4fd0-a628-bee6bb9cc0f3", "indicator--fc7c9c73-b76c-467a-83ed-df4320ce702b", "indicator--925b2e56-6bc4-44af-9a1c-c085ebee7c9f", "indicator--e57a1541-436e-42d1-9591-5b99b848e45a", "indicator--da6e3022-61a7-4490-b1a4-cd61b07acbd8", "indicator--cfe263db-a7ce-4ba4-85d8-a94186b30bc8", "indicator--371cc435-f8e5-4ceb-8efa-937f81989d05", "indicator--4165247b-8a94-44f0-a652-aa2fb573d484", "indicator--53056762-d40f-4f11-901a-f14c00e60ccc", "indicator--9e5375bb-001a-421f-b8f1-02d37467270a", "indicator--a813c68c-cef7-4e9b-aa17-70240ceab13a", "indicator--f5fd7545-089f-4ae4-9184-0fd082af5571", "indicator--a9fdf941-f4f2-40dc-b336-be78bd2cbafd", "indicator--21c9e4bd-658f-48f0-a040-94f43d7cc1d3", "indicator--54b9ffca-a3ba-49fc-b926-bbee1c3b1a58", "indicator--355825ce-e216-4c8f-9238-3eb6e7cdbe9d", "indicator--a82211a9-366a-4928-a397-33267105ec4b", "indicator--4807bbdb-1b98-4ba2-99fa-d1003b2df045", "indicator--44cf5480-fc23-4969-9264-0a846747add8", "indicator--fc3155df-fe5b-40e0-9842-11de8e7c691c", "indicator--0f07125c-bf75-4d95-aca1-12433f97fa8b", "indicator--25e9b8e3-7dcf-4cbc-a428-3ed2fe5cb8f5", "indicator--74919384-2e2f-481c-82b6-158f41f13964", "indicator--1cceb017-c4da-4c10-8d19-a9243c36a1e2", "indicator--76b30545-7389-4f28-b325-626d5a3736c8", "indicator--ea96652b-6811-43ed-82a7-33fc66fe7ee1", "indicator--50a9690a-0348-4b01-9fb8-7759653dc0bf", "indicator--7ce24f26-22e6-4adf-9df9-79edb2e864ea", "indicator--c8e63018-4617-40bc-b0a6-54d7c645ec2e", "indicator--61269360-88a1-4f0c-b6e3-3d13cb4ae316", "indicator--76e4fb43-874d-4a6d-b26a-ad264221507a", "indicator--5ca25adb-f5c4-4439-b94d-3532f3d6c466", "indicator--a1eb7eeb-b646-4508-b972-c86a19990813", "indicator--578fba36-2090-4281-b762-0e381ab6cb74", "indicator--797c090d-a821-4f4b-847b-7a3e93ab2b7c", "indicator--8988c024-a03a-4e3b-a311-924ed7f95251", "indicator--0d4df54e-087e-443c-b08c-378d5ea1e03d", "indicator--021361c0-052b-402a-97ad-0e4883a169ac", "indicator--788ac662-1ec0-4e0b-b204-73fded1df2db", "indicator--97a651ee-6e63-4913-91ab-fe64500fe1d6", "indicator--a0387bd2-5507-4726-83e6-14bd679fe533", "indicator--5f576123-fe96-4cd5-ad6b-bb908d7e36df", "indicator--663ab76b-bde6-4203-9a9b-614ae9b968f7", "indicator--6433ea5c-de71-4184-94f0-ea6190d2ef56", "indicator--76991ae9-caf6-42bb-a1e0-19799cb1a855", "indicator--1c37f7f7-de14-4ed8-8430-22f98af9953c", "indicator--9ec09d80-3a0e-4de9-9412-7cd816e9412e", "indicator--f8c449a3-d953-4e2d-96bc-754100b9869c", "indicator--229e0fdc-a922-418a-8977-e100041b9334", "indicator--89db78ec-460b-4cf9-a5cb-f2d5101e6f97", "indicator--daf2b546-1fa3-4f70-b2c9-b1b58d23c058", "indicator--4f3757f5-a5cc-446f-9d06-cd2b1eb63621", "indicator--25210b73-6fe6-4aa2-ae51-d9a5824f5bb1", "indicator--42b646ac-e805-428d-9013-3d6443d3f391", "indicator--b1bc8919-ef26-428c-b12a-479688b426e4", "indicator--243e35ce-915b-4d54-84de-e350ee8926b4", "indicator--0b648ea7-1437-4420-8075-6f5c78f4a2ae", "indicator--473734b7-d9e0-4c6c-90d3-6fa9a1bdf57b", "indicator--e678c3de-fb38-47c5-8d1c-b0eb83393217", "indicator--5a8b487a-8a55-4232-9f2c-41f1b167ba11", "indicator--d09f5837-4491-420f-9148-ed6a76fbbceb", "indicator--c5df4fcb-ca1b-4c4f-aba0-9acb1f504752", "indicator--28960408-1d1b-4948-a860-7c2b1fc6958d", "indicator--48967888-bc5e-4059-a927-405fa1d94da1", "indicator--eacaa09b-8635-4910-8618-19e43221c5b9", "indicator--0ca15164-1b0b-4d4a-90ba-0b3ff0569150", "indicator--4c2c0769-1747-4abf-874e-abb6a0a89310", "indicator--03ba28de-a839-4c30-9c69-60324c32fc33", "indicator--c270b7a7-783a-4501-9f95-2f227b7a1a6f", "indicator--3d7f3e92-ab47-40f9-9456-e7f56aec8d33", "indicator--c05cd0cf-45f4-40b4-8433-34f790d6dfe0", "indicator--a08c7b4d-bfcd-46fa-9525-563a98cbb563", "indicator--16f09b0f-0d74-49c7-8070-f3f11f4acfdb", "indicator--c104d1fd-1645-4832-90af-b727592896b1", "indicator--d087b090-7902-4f76-a581-7310826f7bd6", "indicator--bc534205-db83-47c6-8198-1e68ccf7d474", "indicator--b140e4c9-9e34-47e2-bbbf-f013edf10b22", "indicator--b3adcf20-971c-4406-a7ce-3074d2f248bf", "indicator--22b2482b-eb11-46a1-b289-da76f67ba7f0", "indicator--08c84028-e436-4adb-a19e-0088f4511cd0", "indicator--5998fcb7-a15a-4fd4-b8c8-744f07dde97e", "indicator--4d630e09-d163-4195-a59f-317ac0c08961", "indicator--97734b74-f1ad-4cbd-95d0-3eb815d0bda4", "indicator--bde82ab3-8f80-4a45-8e4a-c5652a90b890", "indicator--df3457ad-042b-4669-8a21-dbe34cc580de", "indicator--abfe2b99-95f8-4c2b-bde2-cd3fc15b5f60", "indicator--f569105b-2ffd-4eaa-a39c-a4aff30218b8", "indicator--ad0c8c87-5c14-4f52-96de-a3761833353b", "indicator--f876fa6c-0a6b-4e4c-965a-bbeee2d37693", "indicator--1715666f-27ba-4598-b93d-a5f1fb5f1d99", "indicator--d1d667a9-a33e-4b9d-be88-c3ccb72d6629", "indicator--83de4e43-3bf9-4cb0-beee-1fa4ad3a6f24", "indicator--893399de-e25b-4132-8444-44393ae8a133", "indicator--aa986822-f078-4e37-9271-e8136c6b1867", "indicator--f8b3e030-db15-473e-ae7f-62d3bf1103a0", "indicator--838e5b86-9dfb-40ea-bdeb-d80fe8643053", "indicator--8c0eda21-8734-4172-8562-e46db459f7a3", "indicator--a4d3ff34-ff46-4222-aff6-f8067405187f", "indicator--f4c28191-22b4-49ea-9b41-2e595704f209", "indicator--6e8ff57a-2070-4759-890e-497fb0ce7e2c", "indicator--61ee059b-06a6-4cdf-bed1-67bcba130344", "indicator--e0b1b966-e737-42e9-a79e-f7eedf3a6155", "indicator--6729d661-5029-4aa2-97d3-9d00575445f5", "indicator--4e4a7c45-2f48-46f4-87ef-2e911fd981cf", "indicator--6be5daf7-7b10-4545-92f5-76f1bb4ab676", "indicator--b1b36389-2f9d-4cc3-9634-786b25be9b59", "indicator--21ddbac2-8488-45b1-acd8-22435a576d3e", "indicator--c48b0e1f-a73e-4310-a9d2-32e19edb8047", "indicator--b803cce1-e5dd-4043-8636-5207df8ffc64", "indicator--1cf70c9c-afe4-4b87-8ada-4577fc2a7913", "indicator--5d3b2412-b3bd-4eec-87e6-c6f0590d8c43", "indicator--033d8485-f097-47af-bd2c-60e103de5154", "indicator--e95adc5d-1a13-46d7-9893-432fd6cd7010", "indicator--d0190b20-4550-49b4-9fa1-6f7c27886279", "indicator--88dd5ba4-1510-4928-b03e-d303a83e1ae5", "indicator--a9711c35-d5b0-408e-aebf-7a17f5473cf7", "indicator--238c380c-b7eb-4783-8a51-13e24f077209", "indicator--21d12ddd-ff00-48f8-b239-09b8ae7eb25f", "indicator--064a13fb-a431-46b7-858b-6732931fe5aa", "indicator--e000deec-af4f-4e75-9f01-b91665982230", "indicator--070a664b-7b36-448b-bd27-23611ee356c8", "indicator--21296485-a891-4fe3-aedd-836a00516985", "indicator--d8ae50a5-d6aa-42b2-ac0c-22f92ddcafeb", "indicator--a6f90f82-af55-449c-87cc-651b0c48aebe", "indicator--e2fba1fe-791c-41cf-8625-aaf5c57ad33f", "indicator--fff0428f-dac1-4dd2-b155-58a7fc86849c", "indicator--31108527-3f4d-4396-8795-0f1eafabc58a", "indicator--42e13b2f-af19-4bf8-bf1a-8f305e2d4a34", "indicator--b75cc3a4-a616-423f-8815-16fb969b20cc", "indicator--060d4639-6ecc-460e-9134-4b40428baf2a", "indicator--923632a8-bf2c-4c0d-a922-2a7a8ac2c0b7", "indicator--a88c43fd-33cd-4cc1-82d2-0003d16eae22", "indicator--2103b33c-1446-44e6-8090-6e29ce2aeeb1", "indicator--3ca4a0b9-12b7-454e-ae35-10f5f5e6ae47", "indicator--496f48fd-b040-4796-aeec-cd6ccf8e1835", "indicator--52a6f5d1-9b51-4611-8ce7-f076eb4d528b", "indicator--795aa123-0398-48a7-98e2-eafda5495190", "indicator--380ab61e-201b-4fd1-b533-22a0e98a18d3", "indicator--7d57b59e-a6d0-44c2-b3be-bd1a9aaabff7", "indicator--dcedbcce-e9c3-4dc3-9bb4-1f9af0558e5d", "indicator--cd9d86ac-a93f-4733-b963-499d3b47dd6a", "indicator--9b912354-c54b-44a2-9631-a77d1e19dff2", "indicator--fc0622c6-b5c4-4542-8b8b-345b0067ac5e", "indicator--d8b80c72-5e8f-4a6a-8226-20fb9c3a2588", "indicator--482e6ebd-4a1b-4975-8f29-01a2eed4b687", "indicator--10030aa8-71d9-42fc-9a41-0f105aa95c66", "indicator--e5446b80-5a29-4061-961c-da5c3b9f7a03", "indicator--eadcfde0-3938-424c-83ab-b80a8262e741", "indicator--3b6f306f-5ef8-4563-8060-c6d5b3abb4e8", "indicator--57f3253e-330f-4a17-afc1-8af43e0dd97b", "indicator--3a4da6c8-1a5b-4fa0-9b6d-7fb6aa7d9aad", "indicator--a255e4e0-82b7-45cd-846a-edcf2ea66451", "indicator--25338606-7cd7-4d69-99d1-f98d367bde6a", "indicator--5529f090-31b5-4cac-ab85-4d9f3167370a", "indicator--56a55ebe-eec3-4783-b5cc-883e0025b019", "indicator--f6f6f79d-6c49-4d1a-9ae4-0f267d81f4e3", "indicator--b3e08dd3-8b11-41c4-b02d-1821fe147e7c", "indicator--b569e088-c6de-40a8-8d28-f8e091e7d574", "indicator--de0309fc-a46f-4d42-93e1-dea7583540a8", "indicator--20411340-cb13-4cc8-8378-ffe5d533b111", "indicator--1093e2f9-7319-499d-b42c-2c99bd39ba7b", "indicator--fc7c6038-71c0-42b7-b987-3a2e91fb7c1b", "indicator--ce545fec-e061-4a8d-82cd-d9af273536d6", "indicator--55cfe052-11b1-493f-a11a-4e6bf0d3cdfc", "indicator--2026d2ac-d03e-44f8-bb54-aa485a6eec25", "indicator--f39ff852-b8d9-4b73-b9c1-d1b9793e7596", "indicator--360914e4-021a-459a-b3ae-081bab0f1088", "indicator--a61b0b33-324a-4869-96bb-ef3e33d422af", "indicator--aace6d83-8317-4404-83db-dc04f84d4096", "indicator--24f19e59-2473-46a0-a5b1-bcadd58da2aa", "indicator--ebdab4b4-94f4-4699-96ed-f18a24de67d5", "indicator--e971143e-7cfe-41fa-972c-3c9f71db47d4", "indicator--c1e6a5f0-962b-42c8-93a7-798ac43ac5ae", "indicator--dbe0865c-cb44-4936-98db-6dcaf3eee9bb", "indicator--9c33856d-ba6a-4f83-a343-5540329563ce", "indicator--af000d9a-23ed-42f1-955e-2f496edab01e", "indicator--6ec4dbfd-67fe-4cb0-8052-16251f41413f", "indicator--982b7032-909e-4af4-a35e-393d2fd3b36f", "indicator--a76edee1-3326-4d07-aa74-e80c28d200f2", "indicator--420b8fd7-6843-4623-a581-773cc21e01d0", "indicator--a7cc1851-e685-4b55-bdff-4d235e780454", "indicator--c1e9ba7a-fd46-4da0-af7e-908ecb489f05", "indicator--d01d61c5-1cc3-4a2c-bd6a-1783773290e2", "indicator--edc77f01-ade5-44e3-a1c8-6ed5ba323a80", "indicator--5938c81d-f5d8-4b8c-aa90-a640d38f0701", "indicator--cf68cccf-ee9e-4431-bdde-9102459a2431", "indicator--5a805363-0468-47e3-b052-3ec22037686c", "indicator--e5d9e3d4-7998-4fb9-bf95-c700378a03d9", "indicator--7d26ebf6-6d0d-474c-a103-0fc088ed9fb4", "indicator--c93711ac-89e6-4d69-868c-8143a7197a89", "indicator--5f0d2ff2-d52c-4097-949b-2ef810beae8b", "indicator--d90ac00a-a871-4261-899b-8118703c2514", "indicator--f5ffc5c5-dbc1-46f4-bb2e-98d8306bf958", "indicator--e5feeec0-2607-42a2-ac4b-b0f74b248607", "indicator--afba1323-c315-4afd-b12a-c8c20ecb3292", "indicator--a85ea7ca-6836-4ccc-8eef-e37aba74dc44", "indicator--66ce67d9-c5d4-4922-a177-c3ac2baf4da9", "indicator--4e6cd84b-6ea0-40af-a449-13cc6a8389ae", "indicator--d83dc949-3f8f-4a99-b95e-79718b6bef2b", "indicator--2f578fc1-7438-430a-9a01-c5992daf7976", "indicator--b436b8d6-e3ce-4ff8-9284-19b405177833", "indicator--8c02532c-8743-4739-b552-3003950ad56f", "indicator--e63bb1d3-fe8f-4e97-b283-049b533de3cd", "indicator--3693bf1c-b766-4c47-96bc-5cff00b283fe", "indicator--807f15b5-4237-427f-9663-d2f93f83d01a", "indicator--650da863-2dd7-4226-b42e-00c5b7596374", "indicator--8f27c962-86ec-41da-bb4b-db6dc94ab5e7", "indicator--f6e3b05d-f380-4d53-93a7-b8aa8b46643d", "indicator--bab585b4-9645-45c9-8a82-fdb8677a54f5", "indicator--cad062c0-b345-4e73-8afc-acf5c488bc2f", "indicator--eae168e7-1af7-4237-955b-f5c0446ad6f7", "indicator--e341607b-eab5-4044-b9ac-807a67e61fb2", "indicator--d707b76d-0949-4bb7-aaca-d1609b348e0b", "indicator--26edb818-4b2a-4a95-b1e3-d8675019a550", "indicator--0834fe89-50a9-4aaa-bc9a-fbaed5aa992e", "indicator--a9e25131-caba-4fe7-b4f8-9e9baebd1364", "indicator--c0d8a6d6-94aa-4802-afb9-cd7d21ae8c0e", "indicator--cce581c7-647e-4cf3-9ddd-9a1ba3d1d14c", "indicator--e610cf33-8ae1-4af0-81f4-6c1b1bc5145d", "indicator--0cfcc7e1-4e08-46e4-8cc6-c7e76d7b0d93", "indicator--b0557e75-4d97-40aa-937e-3c100d884211", "indicator--cf0fcdbd-1ee3-4d1b-b19b-49bdf5ad3614", "indicator--7c8db46c-862e-4469-97ae-474ea1762c85", "indicator--2ecad960-6aa8-4ba9-a67c-6ac88295aa98", "indicator--e1e96291-2a61-4405-8a70-ca7d75d3111d", "indicator--e5675bfb-b807-4377-9a61-052e00cb0669", "indicator--6f5bbf88-4463-48a0-bcbd-25b4353d7522", "indicator--0e558df3-1e86-4f87-bcd9-65aa1634e79d", "indicator--5c5cae34-c4d4-4d68-bdd9-a9ed809f7668", "indicator--b39ec2cb-e0ee-41cb-b84e-fdb8c41ad810", "indicator--a4be92b5-fa3f-4f05-83fa-85e5e6a4312b", "indicator--02f2d9d9-4e01-4d8a-b284-5b8278d08365", "indicator--437f999c-f35b-417b-9348-ea941ecd4470", "indicator--10822bf2-b8c0-4c2d-9386-5126d78b6f36", "indicator--67b47c15-a730-4e9d-981c-9de342d9cb05", "indicator--586eacf2-4b67-4bef-aa4c-5218f3d55bda", "indicator--668790dc-993b-4bd6-a1ef-99e0bbf41d60", "indicator--e99b98bc-492e-447f-9cf9-7e88b59e0cd6", "indicator--a4d5b690-eece-4159-868a-cc7b7cc57c4c", "indicator--e0837f89-47b7-413a-954c-14b31b682cb0", "indicator--83d4a132-ccad-4391-9eab-5103b7455148", "indicator--dcb5ea43-7873-4495-a62d-44249e266913", "indicator--679a7de8-4f00-4433-9f0f-0624caad967b", "indicator--c5fb3371-c85b-45e2-8a17-a527a80af23b", "indicator--69e22b66-53ca-468f-813b-b32446558f0c", "indicator--2df9337a-736b-44d3-921f-fb2e3d803c1a", "indicator--04af948c-840c-4f73-a404-7181b72c9b07", "indicator--7a23a29e-23c1-4445-ada9-cd4868f3253e", "indicator--293b76ba-709e-4f91-bf94-d8f137dc8a9d", "indicator--5a1ebda3-81a5-4637-8173-c18a738dcaf2", "indicator--1291b0f3-1e6e-4c7d-8583-90ea044ab851", "indicator--1803813e-6724-42bd-999d-4c101359c3ef", "indicator--23c0c0bd-2ffc-482b-ab25-caa545305dd4", "indicator--4b792d27-5f29-429e-8ecd-67f3881ac426", "indicator--056ec279-cd0d-4883-94e5-9ccad9f0639d", "indicator--5d5ed97b-971a-4876-912e-05c5bdfdb8b2", "indicator--f38bea08-88f7-4701-b450-d7ac37e33e3d", "indicator--0ea10a82-06a7-487b-809a-64c8547f9f02", "indicator--cb31307f-a75c-4ded-b250-c447b5da608f", "indicator--199b1b17-6509-477b-9288-4ceaafd28909", "indicator--046d861f-badf-4fea-83d8-5506a5796b74", "indicator--d80d3819-a636-48ae-b701-bb043698242e", "indicator--bc33e0d9-209e-41a3-8f9a-ef7d46c080c7", "indicator--d49180fc-4385-4adc-8790-9ebaec850193", "indicator--2854ecb1-fb25-40c4-bad9-869cab0c65f7", "indicator--ea662542-6557-4529-8cda-5a83c6bada8c", "indicator--98a0e465-792b-414f-9eba-830c30ec0fac", "indicator--b9cde2eb-4ed1-42ac-b5b1-20d555b3f34c", "indicator--ba5c904d-655a-4380-b4bd-42ac814226a2", "indicator--43fde476-7727-45ef-9749-dda769a9b8df", "indicator--262625b8-0c87-4e8e-8fe0-6385cb5eabd4", "indicator--b449b9eb-0fe8-40df-94c3-014e212c5f44", "indicator--1944df6d-1852-40a0-861e-a9130a4f44fc", "indicator--e5c86d9a-8c55-43a9-bc06-a3202dc5aef1", "indicator--95a19fab-d717-478a-aab6-b0e7878d5894", "indicator--3f3e1e78-fe57-4a77-865d-e7492904c091", "indicator--e022548a-c596-4373-aca8-0cfe49b266e2", "indicator--de1ff759-7a40-4c1b-9623-0e6dbf667059", "indicator--4018ba60-1796-4b1c-a61f-1788bbe7c8bf", "indicator--b847ee79-f5b4-4ee3-8fab-38c184e30f77", "indicator--df2be93d-af9b-4808-b08b-a85427b2c607", "indicator--9c0fb838-4a3a-4125-8ccb-145644ad27c2", "indicator--2f6ea99f-835c-4dc2-8594-c7b35d718666", "indicator--66d38040-448d-4325-a2eb-e13ded238ed1", "indicator--48cfca25-ca28-44f3-8de3-6bc42f37789b", "indicator--79cf84f3-9e19-485a-aa03-48916c474ba7", "indicator--5bd718d1-a322-4591-b009-0852088819ff", "indicator--0f7430ab-a81e-4341-be2f-a09d7a7c034e", "indicator--69cd9837-dab2-4fcb-b3fb-751e685aafc9", "indicator--7184cb16-f5de-4419-a3b0-25fac42b93c9", "indicator--709d412d-66d4-47fc-bd07-829478d9885f", "indicator--94e43057-dbec-4efe-96b6-62fba08751ee", "indicator--a7e6d948-762c-4d64-a926-7b1e1c2cee9b", "indicator--532b3851-48bd-4e9f-ac11-dc8dda0956a6", "indicator--c06bf734-1e7f-4886-8cce-c15c2ff13067", "indicator--77a1daad-a6ec-4162-8f2b-ec3d41a9451a", "indicator--f55bc80b-89d8-4225-ba6f-ae956de76699", "indicator--50119d15-b1ba-4111-9008-e658f98a9d7e", "indicator--9347d88c-8496-48bd-8223-800b6bd718e3", "indicator--58e38855-0439-4e9b-9d09-15fe863e6a88", "indicator--ca651be4-a4f3-46cb-9702-08bbe4842949", "indicator--a803f411-b76f-47f6-9515-2c75bc081e6f", "indicator--6c002be1-2c83-43cc-8d68-8f370ab11dc2", "indicator--b6e7ddee-7068-40f4-94e7-d8e1e348616a", "indicator--6c73b4f9-a20f-4bfc-b0bd-c197c488c08b", "indicator--9679bc19-e91d-4a43-91c1-ca83432a3734", "indicator--68ecc5a0-7c3c-4941-9774-382fbe59a8a9", "indicator--b595d4fb-0e3c-479f-a270-2e41f17113de", "indicator--e6ade861-f536-4030-be8e-bd56d6d33b37", "indicator--bc2f6b09-117b-4309-8ff9-c23a85872aea", "indicator--2a3297d3-c445-4ef4-b707-c11cc403027e", "indicator--e510c05f-2c59-4685-8cbe-e3b9a3195672", "indicator--c2051705-00cf-4682-9996-79b45e0bf42d", "indicator--84861616-bf45-41d8-a0f5-e436f61bf4f5", "indicator--dab495ea-fd91-45ca-abed-274aa72da04c", "indicator--75698cb2-4fb0-4af0-a82b-a84f8d19bd58", "indicator--3c40a181-287f-449f-8923-ead8efbe6e56", "indicator--406d79f0-f51b-4f46-a0d6-61ead3ed2c53", "indicator--5771c167-47cf-417b-a24b-b553ce29c685", "indicator--aae17558-e250-485c-bf25-b68360398b8e", "indicator--758f1c4b-d600-4e44-a7f6-f70b91d653b1", "indicator--27d77410-d365-4b83-b2d3-44ada15c78fe", "indicator--9b06b819-d252-40c4-8642-4091f81329a6", "indicator--3084f76e-dfa1-45ae-a9e2-dd94377da6b1", "indicator--62d93114-8d47-4a11-884c-9b0c88478e14", "indicator--4dc1d44d-c7b1-4821-a01d-4b0336e13970", "indicator--de7a92c3-4a3f-4603-a980-579c7e2c0b95", "indicator--bc83980d-eafc-4186-8d68-86090ef370c3", "indicator--78c2b400-ac51-41da-91b0-825b325fff40", "indicator--37bbd772-f408-4de6-a801-54b77ff1d067", "indicator--73dc0ed1-ec4c-44ad-9743-228979fdd43b", "indicator--f476f591-dfe9-4fd6-99e2-3ae94c5e390b", "indicator--d70d71fb-1143-41bf-a27b-a67fe18be73f", "indicator--84facfd4-6f4c-4bb8-862d-abfd0a1299ea", "indicator--ace96a6f-15f1-4e6b-b25b-02de5904bbfe", "indicator--e3f50ac6-1505-4a73-b621-831b757d4e8d", "indicator--c3da6c41-89eb-4460-bf87-2e41230d7341", "indicator--9e0ee8b4-a096-4932-95af-9b357968a152", "indicator--52f68b84-bce2-455e-8b84-4ac3439532b4", "indicator--39fb7f1a-7972-4af9-82ea-5a98044e9b6f", "indicator--6bc6bbe1-795d-4c77-ae90-c57e9d08735d", "indicator--439dee9d-a0d1-4007-b083-2c4f3ba94322", "indicator--9745fd25-a593-4fd8-bf52-e7951dd15bd8", "indicator--36474b74-bd79-4d1b-a5ee-2c5b50e136f4", "indicator--a45ed5cc-fe66-4943-9565-fb18f8552259", "indicator--ad37742e-2fce-41e4-b7e8-6f476ebda7ac", "indicator--e229d513-206a-4841-af34-6c63f9dcad64", "indicator--9f10a290-b5d3-4ca5-bfee-0065846faa05", "indicator--9c4a3ccd-9794-4998-b11a-b9b85083aa1b", "indicator--7e944709-377c-47b0-bd9d-e83a0aff5813", "indicator--eaeef63f-2178-4d22-be98-2b41a2288f05", "indicator--f0f4525f-49a1-49a1-a403-f026df5ff478", "indicator--f435d56e-efe6-4a2e-822d-fce8e840bcb4", "indicator--5d4533b3-d5e3-4767-a4b6-08cb3f843f66", "indicator--196c9857-0923-48e4-ae89-fa2d61e5db73", "indicator--260e8dd0-b1ea-4254-a424-7fc2ad3de117", "indicator--b7e23861-cbd4-47f7-a323-f1111f3d4a6e", "indicator--3f06712d-9cb7-4b5a-a91a-326f8725ee65", "indicator--12ab8c7a-bdc0-43ac-90e1-304319aa53f3", "indicator--2bb111d1-f54f-4742-b8e0-d2c7926ac1ba", "indicator--574c8122-5fc2-440a-b112-89c2758a8c03", "indicator--754c22b4-d9c4-42df-8584-e7d008e554b4", "indicator--25691884-25b8-49ea-9f1c-8d7209e56344", "indicator--d37d3861-fe6a-4af1-b39d-41280145d333", "indicator--0ccdaf3f-4a00-4b02-85c3-af336611a2d8", "indicator--077ae754-1cd7-42a2-9d51-eb261a550147", "indicator--b3954e96-fbf7-4e7d-8e8a-0289a0234fa8", "indicator--b06fc5fe-68bb-4ca6-af67-651cd5717897", "indicator--9ce92c0f-b3bf-4549-8c92-4d6634f3a478", "indicator--48e182f9-6bbe-4919-a6b7-f1f3a29dc60e", "indicator--a96604ef-0690-4a59-a53b-0368fb44aabb", "indicator--7ec9312f-6d50-447d-8f96-ba7b6d413553", "indicator--ffd8bdfe-49cb-4c73-993c-98804f8997f5", "indicator--8ace69aa-0f16-4123-8ea9-d668e28744aa", "indicator--e5bc50fe-ba3f-4b7d-b140-71664f898264", "indicator--dda86333-107f-41dd-b06f-4aad0aff5717", "indicator--9da14683-4101-4631-b667-605fd19f82fe", "indicator--8d81278a-c9d8-48f8-8e5b-5f8b40105add", "indicator--7379fb97-5137-4189-884e-b01c1f8cf20f", "indicator--4f733077-c01e-4129-962d-dd3cdaec8016", "indicator--486efbd4-7449-4b47-b40e-b4699fd41aa2", "indicator--0c357d98-5487-48b0-80a0-4da92176a30b", "indicator--cc9f75d7-c860-4703-b89a-bc31e686b58e", "indicator--1e50aa6f-833a-42d6-802b-5335a2a24671", "indicator--1ae78ee8-a1cb-47fe-955c-9701e9465b31", "indicator--d5c46b84-f2e4-4c7a-abd3-3518d2182de9", "indicator--9998aa74-c1c4-452a-a9b6-dd4ca4556471", "indicator--86828033-4083-46ff-989e-14711d0c6dac", "indicator--ee78b798-e363-4e76-beae-8e35fcef6d9e", "indicator--eb409ed9-4535-4c72-9a1b-a387337541d8", "indicator--791e06d3-3ccc-4157-a2c3-dbd898fbed8f", "indicator--4abb8263-c715-4c78-a3ad-61e7b75013ce", "indicator--7419e28a-31af-4080-86a5-ccf85ec11438", "indicator--9d412f40-435b-4597-84a2-00f1c1084ded", "indicator--64d99778-fa48-45ec-911c-c7227e2e22c4", "indicator--58242b5b-2a13-4d8a-9d83-10f0a6d2f1da", "indicator--2c923965-a68d-4427-94c5-0722cdbbd7e9", "indicator--4a42dab1-d5da-4abb-bff8-036f87ca47f6", "indicator--47a65923-f2f7-4869-8c98-980dff0cd891", "indicator--bc298b32-4ad2-4de2-ba5a-d0b9933fbd2b", "indicator--461f9c2f-d754-4f64-b3d1-165edb70d56b", "indicator--569d3782-8c1f-448c-8e37-00406f941a34", "indicator--29d0c0be-4b62-48ae-b2b0-dbd6f10515cd", "indicator--1acccd38-3400-4304-874c-0aa7ffa76c5c", "indicator--d4b482af-c153-4290-946d-7cf1934642fd", "indicator--56140ee4-6131-4b5b-bcb1-722acd90d563", "indicator--eb146de2-b853-4fee-a469-6e8a684f972e", "indicator--3f6b8a59-53f4-49da-b1ef-af9ebd308272", "indicator--9d3a61eb-30c8-485a-991f-94f8eebd0897", "indicator--4bd2ccb4-e354-4263-ad70-51989b5a87cf", "indicator--5b17685b-12b7-4773-90b6-4f919e227ff8", "indicator--2fc6e0c9-92e8-4409-93c5-a52ced01b0bf", "indicator--82420f6b-4f6e-4f69-9fd0-7dcd6bb07035", "indicator--1a4e5b50-7078-4290-9871-b21129f9f9cf", "indicator--216480d2-b3b4-4414-b8a8-0714bf67151e", "indicator--1d77623b-432c-4a87-b45e-5823ed9bcfd4", "indicator--f7b8dce0-a9e1-4dd8-8979-647ea1bc78dc", "indicator--cd5b57eb-c59f-431b-8a18-7c27c6c377a0", "indicator--acc06994-c873-4e0c-9809-3b8fe2ea2c64", "indicator--04389da1-6d1b-4767-9ba8-b9ea0aa302a5", "indicator--5d448706-7c6c-454b-bf47-6d34ff844276", "indicator--a7b2655d-6d4d-4c73-a634-76d4bb30913b", "indicator--42bad009-bfa1-481d-ab32-7e6164303d46", "indicator--96910b64-45c7-4a87-863a-693cdfc42c19", "indicator--d07d9b69-3eeb-4cd2-acd5-8e04a4d7a8d0", "indicator--0dabba36-667a-43a7-b397-4b1bb9993008", "indicator--662a9d94-1565-4cf6-b79a-04ae1b6e7f09", "indicator--4cfb3f86-10ea-4d7e-90c2-8fd9dc74d128", "indicator--ae1688e4-0f1a-47b5-9306-5b7795f1780d", "indicator--877b847e-7650-4936-8fe0-d9342a37c2ed", "indicator--3ad7e1da-023f-4cdd-91e8-57879488c18d", "indicator--683d850e-67ea-4ac5-b2a9-b8772062c9f1", "indicator--35e19683-0bc5-49a4-a41c-f90c5c966f78", "indicator--a7e42eeb-9896-414e-8381-9c18ad5311f4", "indicator--26a5f327-0b2e-4627-a84f-8bd5f5cb1c69", "indicator--4594c72c-d48c-4e47-8c82-48ef4d21a024", "indicator--df408516-28fd-417f-9c3e-80467615718b", "indicator--c8e2adc5-64f9-4870-91b7-268cec7be3ac", "indicator--13f542cd-ddc4-466b-95cf-eb7117383cb0", "indicator--36b6b05e-e7e6-4959-b40c-92c20823e24c", "indicator--6fa199ec-7b7a-413f-ad2d-e5118ea23abf", "indicator--f6adc02f-0db4-481e-9af0-5d990cf463ce", "indicator--45c2bf52-c532-4096-a6d2-2ac33b31f45a", "indicator--8c19c52c-029c-4cdf-bf5a-3651c7ecc9f5", "indicator--ab58eeb3-ce2d-4d88-92f4-59f1783b3b3f", "indicator--93c2e075-2cf8-4664-84f7-e178c366def7", "indicator--28bc0d22-a937-4237-aac8-9fdd5aa1a5f7", "indicator--ec5b40e3-fe6e-4f56-af46-cc3d5ee00757", "indicator--b2162445-d4f4-4b4f-a975-35d5060d39f2", "indicator--5ce478a4-102e-4818-b544-2578fb5ad55e", "indicator--5f8a8d43-bfbd-41dc-b48f-83a4b6412955", "indicator--58df593f-cbf6-4ee8-b139-6374152405c5", "indicator--2f352628-20c4-40cb-bf3d-dea67cf7fbef", "indicator--c3b76682-d0bc-4c55-90b1-cdbbf7e60f8a", "indicator--5d4d8d68-b18c-41b5-a29e-ee5124a10c0e", "indicator--6a85c18b-1632-44b7-8357-a936e90a564e", "indicator--d814f8a4-af9d-4033-901f-f9ac8bf83d99", "indicator--d6c43ab3-006a-4027-b16d-1dd9aaacc36d", "indicator--fd1e5624-beee-4c38-a3fe-3c6b1612da87", "indicator--9ea55af9-9bde-47d5-8dcf-78a9e84d5283", "indicator--3a7ad274-112c-4bf6-b21e-9b65d5406174", "indicator--da6c5f06-2d97-40df-9668-03c562e81b7e", "indicator--f81fab40-aeb6-4f04-98d0-8728e58505cc", "indicator--3a231492-75d4-432f-9ee9-94c6b8ff4085", "indicator--7b46163b-84ac-4568-9ee1-07d199cf918d", "indicator--324b22e0-ede1-479d-a0dd-e470dcdfc683", "indicator--1692cd81-68fc-40ee-8d51-25fb502fde35", "indicator--3345de13-cf6b-4188-a24a-a6726c564f7d", "indicator--33060efc-7d43-4549-9464-88799ea5500b", "indicator--fd4e3309-cc20-4d11-89ae-0cdd00e9bd57", "indicator--019fbfcb-74c0-475a-8a6e-be009c331cdf", "indicator--2f5d361e-5600-43fd-b89d-94d54230ae2e", "indicator--a00a7f24-feb4-4e5f-8965-198e4a1bf1ef", "indicator--d9634f35-dbb5-46e1-8cf6-60eb52cc410a", "indicator--96e54d4f-9ded-44ab-8309-68ad3bc67741", "indicator--c2c55035-aa8d-40b7-ac88-7b07aa5b7736", "indicator--7e48649e-7094-4b1e-a4e3-be629eba9768", "indicator--2eee962e-605e-4a7d-ac49-d7af02d8996d", "indicator--c529ad42-f0ae-4fb3-9387-2fdba2486fc2", "indicator--6e4cef2e-c7dc-4ba9-a2fc-f516cf735f72", "indicator--1628dd8f-0f76-4881-bb71-40f256c55368", "indicator--69786c24-5c4c-44e9-be79-6583843f6f03", "indicator--920dd974-4f67-420c-bff8-72fd935729b5", "indicator--fc2474de-535e-495f-ab37-dfab2b864d13", "indicator--5070397a-1afd-43d4-b6f4-fe97f6498237", "indicator--dcec90f9-2862-4fe3-ad42-e9c47c222ca9", "indicator--eca5dde4-7ae5-4658-b664-4241ccde15d3", "indicator--ede833d3-ae44-47e0-a016-d99fa96de01a", "indicator--05c6e50e-f276-4302-93c7-8ba1c7af076e", "indicator--2701e3d2-d4c2-4b05-be0a-76a3a2aef61f", "indicator--e3498116-d3a1-4c10-bb42-e722da418844", "indicator--1955fe49-d612-4178-938a-895a63daf2a3", "indicator--9ca2e0b6-05b1-42f1-a23d-260473b20350", "indicator--f54890ab-d99f-4231-85a5-c85c2174727f", "indicator--7a744651-df16-4462-bede-c43ce6b9588c", "indicator--b7445963-bd5b-4acd-8828-023d63917d04", "indicator--f3d5288d-ed3e-4d6e-a8ad-1f2b66a08cae", "indicator--e6ea85b6-29c3-4168-a5d1-cc27bf925d3d", "indicator--da675818-5063-446c-aa43-3bd56c975896", "indicator--45fab5e7-cdad-4343-80b3-271cde8b753b", "indicator--58ee8ff2-5f66-47e3-a9c8-efd43446890d", "indicator--d6dbacfc-612b-4868-8cd5-7cf0b39296ec", "indicator--52b3e921-fbc0-43eb-8820-91177d5e6469", "indicator--69b3c1b2-ebe3-4208-9b74-eabf54b47c15", "indicator--6b7e5b11-311e-45b7-abe6-6d54f3ac56d4", "indicator--dca67981-9011-49ce-b000-3f906a1966fd", "indicator--0047addc-0547-4412-b67a-9444ee0f5926", "indicator--4fdb7826-2987-4578-a402-926043c3db8a", "indicator--d510fddd-3117-40b4-962e-718e785230bc", "indicator--0187f67b-0a1d-4039-9608-2ef2c14da7c2", "indicator--4d51fb45-3d23-44d5-85c9-ffeb191c84ce", "indicator--d3c887be-0cdf-4fdc-9c71-4ee19291ad60", "indicator--2d3a13ed-f3e6-4956-aeeb-c8a2b1c46c98", "indicator--b3f8015b-e79d-49e0-a766-a8f479963c1c", "indicator--d28e6489-72f1-4086-baa5-c4d3dbbcc78f", "indicator--de8cc6c5-364b-45cd-bd06-5e4b392931f1", "indicator--e105a54a-cb09-4a41-a2c8-b51a442a125b", "indicator--b94289cb-79cd-4d29-973c-1ff984d4791d", "indicator--6e0c3482-f691-49eb-a7e2-1a02f717717d", "indicator--aeeb602b-4959-4938-82f5-38ca3c13b3b0", "indicator--3aaa7021-bdd1-4dd5-8724-c0dba04a9614", "indicator--4e989003-5abb-4eb2-b35b-8af6bac3659a", "indicator--a2908f14-d20c-4660-83c9-059616e0912f", "indicator--faa07fdf-211a-4d0e-8883-ffaa558cc11b", "indicator--c1b48e03-3d27-4416-af18-50ab511f0920", "indicator--f5b3736d-9dd7-492c-9aee-1b52af10c91d", "indicator--306f6b52-6818-4617-9548-57fcd4dc5caa", "indicator--e5e7c86a-201d-4743-843a-4d06e1f5a9e1", "indicator--bbf5506e-a68c-4f82-b4cf-27cff3eea409", "indicator--87a05d3c-3270-4b1c-9cac-2de1791841aa", "indicator--7bf9b32a-d5d3-4835-866e-e8d19faf5437", "indicator--43d54050-2592-4f13-ab9c-10fbaef33483", "indicator--ed3524c0-e903-45d6-967c-47277a5d6c73", "indicator--7c0be0c4-2563-4323-9228-58fdc3875a5d", "indicator--db04b3b4-d07c-4c61-ae11-eec634df65f1", "indicator--068f9053-0bc0-4866-a6fc-b805fdd22ad8", "indicator--0a7073c6-1fbf-4e7b-8953-c9a6fdee2c30", "indicator--441c6654-8253-4dc5-a08f-57325e0651f3", "indicator--179888a1-7dc6-4e46-b276-cbc90a9b1be2", "indicator--11d8bb1e-197e-4593-b511-1488f6815a8a", "indicator--dc870097-36f0-46f6-8db3-b3f88461e08c", "indicator--cc97e2f6-a4fc-4757-abf3-bc254c4c05e0", "indicator--b0504ec8-3ec9-4a71-bfd4-ea4890aabd04", "indicator--511849e5-df0e-4754-8512-0cc875690ea2", "indicator--2818e17d-faae-4a96-b24c-3394ed54d8d2", "indicator--bf76848e-50c1-4f38-a6c0-e0e82915622b", "indicator--d3156879-fbe7-495e-aaa2-1568260c95bb", "indicator--cdcebcb4-d8c0-4ea9-9b63-36536e6843c0", "indicator--cde47506-cb99-4790-b738-8513281dbd22", "indicator--87135d85-f795-4b4f-ba21-531f18c204d4", "indicator--e6bf9a84-4143-431d-a5db-3f8e1df59b18", "indicator--a0e81e45-b87e-4679-9fc7-8aab2a762161", "indicator--ab31d5ce-4942-4fc4-8231-909e8273fa84", "indicator--3a3906c0-f4fb-48d5-88cb-7fc4b4bfb21e", "indicator--98e941f4-6f34-4910-8460-fd7d8a6d2e25", "indicator--efdfc38a-260d-4416-a443-57e5ca5dc5be", "indicator--efa4bdc3-064e-4d62-bc3a-17c08b9de186", "indicator--1becf4a0-ffaf-42dd-8453-4f030d309049", "indicator--b628fd00-4f72-4c5b-8d8c-8a6ae120f606", "indicator--8ca765b7-b3fa-44bf-9390-3531e03a769f", "indicator--9d969ca9-9e04-4acc-97f6-634f2ef96366", "indicator--e4c6dc18-5642-4aa5-903c-27d508023abd", "indicator--8b26ab3d-c6bc-4c12-b8a5-e34e3527012e", "indicator--534a0633-f5b1-4172-9ddc-7fdb653ac3d7", "indicator--3cb28e64-96bf-4a0b-b537-abfbd549afb3", "indicator--dd492d07-b0a6-4251-aa22-fecae5fa5fca", "indicator--697d6afc-f263-4d04-9955-20aecc4454c9", "indicator--86b5afa9-2d8d-43bb-81b2-e5c7a000b3bd", "indicator--192d2e3d-b779-48db-a0b1-3752788bbe70", "indicator--921a7a96-1590-465a-95c6-68ca3a9ad9e8", "indicator--6b70552c-65ad-4958-b9ce-bf8f45c438a4", "indicator--19ad78e4-d70e-4c18-901f-f2fbf36c5757", "indicator--675b05c7-1fb9-4edf-83fb-d24193cbe933", "indicator--ca08b831-bae7-4f23-8a97-a2953e9b5ef9", "indicator--6f7ca4f8-04bf-4265-815c-f17a02abdf0b", "indicator--36f75ee9-0a2c-49b8-85ca-11b7fca423b3", "indicator--546f309a-3e6e-4230-999a-4fbfb922daa8", "indicator--09b2b2dc-8238-4e06-96b3-cfb837192749", "indicator--49e64603-2a8c-458c-ae97-ac6669fb9112", "indicator--2e27c422-2ee3-49c0-b712-4dec90eb43d5", "indicator--b0dcbe6d-ba39-459b-9eca-73f7691862d1", "indicator--9d4719fb-5b91-417a-8e39-6758c29bd532", "indicator--dea03ab3-ef76-41ab-b4d5-fa700547a775", "indicator--3f24a9d4-85ad-464e-a152-d300717dc14b", "indicator--83f7d353-4e0f-45f4-a130-dc9245c866ff", "indicator--958a8143-a183-4be1-b19f-a784962a3e44", "indicator--bf4720a0-7357-458b-aed5-cec14a2f0202", "indicator--29e4a8f0-8841-479c-867e-8ec0a85b4315", "indicator--eab2c5a9-056a-4df8-b972-9e95d35b7da0", "indicator--71e54db6-e69f-4890-ad04-b7779879af9f", "indicator--8554c248-5419-4b54-b1a9-f56d1039f2dd", "indicator--50653886-34e4-4ecf-a0d2-5e79bff731b4", "indicator--1810aafe-df4e-4bfe-be5b-6bef1d11f39d", "indicator--6ca7006e-7902-4ff7-892b-27921ec0871c", "indicator--b32830c2-ca94-4c94-854d-114bc066df09", "indicator--5a1c8ebc-bba0-4857-acef-b81eb2fba312", "indicator--6a9b64f1-ddcf-49f1-a4f1-cf5551d48ea1", "indicator--9e66b797-c3e0-47bf-8493-7dedc2b1426a", "indicator--85b26481-02f9-4bf1-ac37-e8ffdd3505c4", "indicator--40780051-3cca-4ecf-99c3-657437e30fbb", "indicator--160ccf43-2871-4f16-9ae1-d43e5998eccf", "indicator--7f36de1f-6eaa-4503-9fbe-20ef033e189a", "indicator--b3fdf95a-e929-49bb-850c-163e13f9ddb6", "indicator--1a8fad23-6ce2-47c9-8951-b35fa7132a6e", "indicator--498a80d5-40fa-4385-859d-0e508d3337ff", "indicator--4700bf2f-cb0e-4481-9e6e-83e76a6ab5aa", "indicator--f30d7e06-3b7b-4b9f-9086-900d219fd676", "indicator--cc1ca3a2-ca07-4285-9bc5-00e69c4478f2", "indicator--a0653ed1-0b77-48ba-9f58-f02587a610fb", "indicator--be935850-bcec-4e83-b291-d781bd98758a", "indicator--09718174-d54e-4f3f-9684-93d2152e03c0", "indicator--c859ce7e-c3f6-49cd-b9aa-2667ebed149f", "indicator--a809f0c2-d37b-4d77-bb24-7d58aeb5fb6f", "indicator--2968c793-ef68-4449-beff-3981bd85c8eb", "indicator--7376b12a-945c-4a75-87b1-e0d926cecb7b", "indicator--dc503a07-1529-416f-ac9c-2388492aee8b", "indicator--86f9d5d4-3164-4c4e-a0c9-44685275cf64", "indicator--1b4c3090-3827-488e-93b7-d418f29823f2", "indicator--68b05b6c-9d1c-4399-afbb-a2176a4999cd", "indicator--d67771ed-56b8-48a4-b047-a173751ef83d", "indicator--d675efa2-3509-4667-968a-5776a0cab582", "indicator--eedda0d8-befe-4e5a-80ad-9aa2bb056a3d", "indicator--7fc80cf6-03eb-4768-8bd2-422383d8d55f", "indicator--0d0a2b6e-9393-4a0b-9cca-5346f100be61", "indicator--c284c289-986f-4522-a398-498319bd0cad", "indicator--2ce19428-d8d0-450d-9822-3b08e36124c9", "indicator--7ee318c8-dae5-459d-8a60-044a65f13f4c", "indicator--6b6577b5-8153-49e8-8cdd-c6ac03fa9768", "indicator--c6bd343e-e0bd-4e76-83be-3f9749a5932b", "indicator--2488db59-0f3a-4345-9e7e-a0d58156a174", "indicator--dc1cc61f-dcbf-41ea-951d-46e21121bdc4", "indicator--661681e8-7076-431f-8624-8025db147c13", "indicator--ee2bed0d-9177-44c6-865d-476f6678bbfc", "indicator--0f4d4049-71da-461f-98b3-766f49e8415a", "indicator--0189be12-0df7-4386-94d0-e209ca68b43b", "indicator--e769e048-90ae-4f55-a941-5167efdd7b65", "indicator--1745976d-ebf3-4c74-ab9e-e78b3f4d9992", "indicator--859f6cac-efd0-4d37-9ca7-55cbd5bdb164", "indicator--ecf07a3e-f186-406d-aecc-b03ec34c7c4a", "indicator--6d944e06-dd28-4426-b359-411acb40ed0f", "indicator--a6cb31b3-0024-4405-8f34-3049426bfadb", "indicator--718ad2ea-7947-4f97-a05a-51874a59af22", "indicator--49ee1faa-b52f-45ae-9477-a758da41fcf5", "indicator--d2ef71cb-66c8-45b1-80a8-3e17f97210a0", "indicator--f0323432-2eff-4184-894d-f9909ffc3cf6", "indicator--4ffeda6d-dec0-4e52-8f5e-28e453e5a86d", "indicator--02ba8ff4-3e44-4134-9292-cfa3470d363a", "indicator--53a73735-ca39-4b21-8cba-8ee7dde8c34c", "indicator--69b36752-c91b-4667-a273-036b6eddf8a5", "indicator--499a5fea-5a3d-46a3-8576-4c646ef0084c", "indicator--ff7dc008-0c4c-4898-8239-69e6b9fff1dd", "indicator--57ec6807-82b8-41a3-a555-43a7a20d48cd", "indicator--9028ebdf-ff78-4b1f-8dd7-571405a482d4", "indicator--c31de2fb-92f2-409d-82b3-abd4c93feba5", "indicator--ed828471-93e4-48d4-ad57-bc23b7c9471d", "indicator--388f99b0-8303-40d4-aed2-7d6238644735", "indicator--17718fb0-3d89-457d-bb19-c131162ebc81", "indicator--aa1a1f99-bf76-4256-8310-d043d74ce33b", "indicator--d012a6b0-ce7c-4988-ad7b-8278f7f90ab4", "indicator--d27d3846-27e8-4671-9887-2dd2ef31f741", "indicator--effc3fff-fb45-4d4f-8197-21c14283d11c", "indicator--90fd5da4-0382-49f0-9964-7c59f561a98c", "indicator--e0f8c022-58ec-4f8c-9174-972cd35807d1", "indicator--b7497986-349c-414f-bdef-85c31be2a140", "indicator--93dcaecb-d9ea-48c7-8b1b-4722846037d6", "indicator--8193d4e3-bfc7-4d33-b9b7-22f2c2a43951", "indicator--35b79ff6-8305-4081-acc3-07c83c806b8e", "indicator--f3080f5a-31f3-48ff-ab7b-8d6ce37ad9f2", "indicator--0d2137b3-bb49-4ce6-af26-7c23d8671d1c", "indicator--1016c3c2-c77a-4009-89b5-4a8354db0b16", "indicator--3db854c0-c462-479a-b9d2-6e8dcfff55ee", "indicator--a433bae0-e48b-4fe2-bdad-299a17956edb", "indicator--f7a47503-9519-4b55-a5c9-8ad6066f87b0", "indicator--be81b103-7018-4d69-b98c-f28c346f1a78", "indicator--b0313a0f-39a9-4ae6-80a3-2e3837a9ad57", "indicator--a3a4dd85-cc1a-4079-9d93-6e6c81dce08b", "indicator--0eeea238-0308-44b8-a12b-a9c618d1a4c0", "indicator--5d152714-5318-4406-ab04-1579a8d0b15a", "indicator--026b829a-ed2b-4068-9a2c-5a36c333a3ef", "indicator--82844461-b0fe-4915-a7fa-ee19a6d875ba", "indicator--3125e3fb-6c04-470d-8930-82ac79d52877", "indicator--10876e90-fb18-40a3-b962-c314308d76b3", "indicator--7865a7be-d63f-46bf-bf46-0bdac69a0d72", "indicator--b6405401-551a-4141-bde1-225bba3ed0ba", "indicator--fb314d28-3ac0-423c-8a65-6cb9ca934116", "indicator--d7d65bb3-98f0-4d84-8910-57a64a828de2", "indicator--6030cef9-06f8-4921-860f-fb2949cac952", "indicator--d1ac9137-a903-49a8-b95c-7690c3895626", "indicator--1613b704-889d-4e4b-851a-5c18f5a1d33c", "indicator--cf922f36-684a-48b1-b016-b11d0872a725", "indicator--aa236828-c9ec-44f3-a7fe-10cdf9ef6ca5", "indicator--3a899736-fd98-4233-b1fb-d3add087c915", "indicator--e05b128b-7adb-4d85-a1d2-cd0af459ab23", "indicator--db1e77f5-a031-42b4-92fc-b4a031d22523", "indicator--c1db16c1-2e60-49aa-af44-c0e3a73a0f1a", "indicator--21b96f1a-1f0c-46f6-8a5a-3c81b67703b2", "indicator--56a8959f-ed6f-4ea5-b7e1-02edd3e986fd", "indicator--5507ca81-fd1f-4615-8d68-40ce6013d411", "indicator--8874efcb-b300-485e-b636-3c3b314b72fe", "indicator--d2200417-9200-4798-847e-ee016375149e", "indicator--bef5bbb7-e1e9-47d0-b765-e7b83acf7072", "indicator--48cf30e2-8f68-402c-ad21-c469ff5013d8", "indicator--273b507b-b865-45d1-a0c5-591af6e77e2c", "indicator--e8b0174c-c173-4ca8-8f0d-9ca7e29e665f", "indicator--a916fd7a-087c-477e-a73a-8cf53734463c", "indicator--449521ed-0fae-4de8-bcbd-467ebf442be0", "indicator--f5ac1a43-7552-4c39-8353-58fc74a6c0f7", "indicator--e05a9f17-cc85-4ac3-a7ba-ab580c0bbf25", "indicator--82d9b9af-59c6-45ac-bea2-27e9a0bfeeae", "indicator--e2552245-baea-45c8-a261-e3169094dc06", "indicator--a78ee78a-8793-4616-84ae-8ef78c86bbce", "indicator--59a30bf1-41e5-447e-b02a-0fb73468a437", "indicator--9499b39d-8f40-44bb-906c-4f9462b53dbb", "indicator--447ddc09-3c03-4d3c-b581-c349389fc355", "indicator--66369b7a-3a03-4ee3-b8e7-b85e6e825ae7", "indicator--7d22308f-d711-4509-a167-15cc503bd066", "indicator--d4187e7c-2695-46e5-8bfa-577f98061c79", "indicator--9094a0d9-8f14-4daa-bf55-2c7367e6f8b7", "indicator--de3e80df-1d71-41cd-960d-bd35d49ba14c", "indicator--45ceeb4d-2e42-44cb-8c3e-8d258705c2c4", "indicator--62a584c9-f6dc-4c31-ab91-6fce402635cc", "indicator--9ea006e6-62e4-427d-8560-cfab20500042", "indicator--0f8354c8-133a-47b4-bade-b646a789af93", "indicator--f1b00d03-d5a4-404f-9ff7-c645f6a74333", "indicator--6e25dec6-4c71-43a1-9bfb-769a89f32fda", "indicator--1c0e410f-7b42-499e-80ec-97da0dc31ef3", "indicator--f9e2836f-f272-4641-aeb9-fc9d60975f4c", "indicator--ec9a5acb-357a-4973-a7a0-70118068e077", "indicator--0756f042-cea4-4662-b6a8-cddbc95efc90", "indicator--9e305baa-ce34-4de0-8c34-1008983672e9", "indicator--377875fe-bda3-43f3-927a-161e946667a0", "indicator--5d00ed19-be38-426b-84e5-95a8eb4460ff", "indicator--3a163367-9bed-4bb4-b645-0eaf8fb3eeb4", "indicator--4e3a63c9-26fc-4119-97b5-749208ac6277", "indicator--3b38e36e-95cb-4715-9f05-4e886f5f7d21", "indicator--83aadc5e-093f-495f-830b-9d2d2ecec00c", "indicator--c0e0a60e-2da3-4dd8-acc5-9865024976dd", "indicator--c1b40cf4-966d-411f-a7f1-de61390734ed", "indicator--15eb8b53-d08c-4e41-86fc-e84b0fa3c5c9", "indicator--c8350531-d25e-44b7-b137-88d978ad7028", "indicator--c24f83f9-fe4f-4a67-9dc8-d001c05ecf3e", "indicator--97284004-fa87-4025-bb30-8d5cb81c15f3", "indicator--757c28e2-afd5-4e6d-a138-d0eaca5be151", "indicator--a26f24a1-dece-4cd0-ac19-dedf747cf3f8", "indicator--961d7ed2-71aa-41d8-aa46-3cabf1aa1dbb", "indicator--b4535c39-0aa2-4c81-a92b-3e49d49d7c15", "indicator--d767b59f-3065-42a4-b779-d565f41c0f1a", "indicator--e2a8083a-4b06-44f4-816e-0680c5ee1704", "indicator--d4063e63-4927-4b51-864c-17a760d345d6", "indicator--56814650-0b79-4810-a492-7b24d31f9b68", "indicator--77fb6dc3-da36-44d0-9d67-74a0990b01b4", "indicator--0c9cc4df-c049-444e-b02a-7bd30bf50bb9", "indicator--28f01d82-474e-4493-805c-912637bb60da", "indicator--59e6bb9d-67a1-4afb-814a-1bb8918e76f6", "indicator--c5814bfd-5c5c-4697-9219-e3744ade2e10", "indicator--e6d718da-776b-4602-b9a7-2b147f4f62a9", "indicator--f78e7536-658a-448e-94a7-d8caef4f575c", "indicator--5bf806bb-df1c-40cc-bf9f-cc8f232ba98b", "indicator--14a87cc6-b747-42c0-a9ee-5ea6ef1de268", "indicator--5f770137-6704-48c8-bea6-17503939d282", "indicator--d1ef3c14-43d5-4e62-b080-3bd7f21f268e", "indicator--8ac97f35-3cce-4bf2-b1f5-647ffa707c78", "indicator--c2655e72-6d89-4983-8698-29a6a890a94f", "indicator--25ce0066-5d6a-47b2-b874-125ebc14cea6", "indicator--0fbb46f7-a2db-434e-9307-0694c59dff64", "indicator--8481a7d6-cdf5-4fde-9cbe-f06ba988cb6c", "indicator--a06bbb24-4a10-4592-a9eb-6c382dc48353", "indicator--e102de95-0dbd-42d5-a895-80ec9b355cf7", "indicator--af7a4fe9-98c0-4171-9dbd-031fc5b5ca05", "indicator--9ef430d4-89bf-4ab1-a8b6-b90cb39bcb3a", "indicator--e57961cf-ce0e-4c81-b0dc-dced13c1d539", "indicator--871e0b3f-5b6f-404f-9d19-df911a69a197", "indicator--57a18a55-70de-4c66-9556-87149016dca4", "indicator--9db4eb46-2a73-4f58-b38a-b2c469039638", "indicator--95b1cff2-de43-4fc5-8857-6a70be4176b8", "indicator--1cb1c6f2-6993-4973-9684-489915e99747", "indicator--fa030371-8eb3-4290-82a9-734c5f161b23", "indicator--c12f7ac3-9666-4f40-a69a-bc8827e91693", "indicator--a1fc590f-cdc4-4b71-b917-0b0998d4f702", "indicator--7b89a207-74cd-449b-8b04-eb2f1e04d859", "indicator--4195b60f-816c-483d-a5a2-4c104d990c2c", "indicator--2c368f6a-86b8-4aa1-9e37-c4279e552fc3", "indicator--7c8a9418-ad2d-43db-923d-95bccbbeaaeb", "indicator--86bba98d-0b6a-42f3-901f-1c6947f06f93", "indicator--a5859273-e8e0-4ea3-8a29-3879102e29fa", "indicator--0a2fd315-c44a-4c0e-99bc-3689da1ba3b4", "indicator--cd2be426-46ae-44b8-a219-a364bbe54a1c", "indicator--3deb2b24-7920-40ef-9406-3ae70a8d2f5d", "indicator--bde2dd70-0b41-4eeb-99bf-7e8c1f5494f2", "indicator--c5fc2b37-74bd-4f8b-8874-df0f7b1a5424", "indicator--eeb3e377-0136-4527-ba33-4195e8c52b19", "indicator--71e8bb96-827f-453c-8a11-12de6a0a6540", "indicator--e4c453b3-aa6c-4871-883d-5ce0a13c51c7", "indicator--e07d4ccd-2449-45bf-a7a7-cb2d72398a97", "indicator--8507260c-e8cc-4bef-bbb9-8d02f345483f", "indicator--71c116e0-1ae1-40b3-b547-4c2daeb7bbcb", "indicator--9c5f78b9-906a-4b88-b99e-58eada4de283", "indicator--8bd00e1d-1ae5-423b-8bbc-678a204cc727", "indicator--d832676a-c210-44cb-8aab-e75846d5a6ff", "indicator--6b648e0d-3b85-44eb-b98d-b7708e0e199c", "indicator--769d6812-a1ce-4e58-8dcb-4d5e152723db", "indicator--09f53217-ce67-43bc-8bdc-69ff2726e878", "indicator--4fa4b59e-c91f-4e74-b378-69a539bbe5f0", "indicator--2857ae59-a629-4982-9053-1e6331e0787f", "indicator--e5b28580-a8e5-42ae-a31f-d617e60f93b4", "indicator--21b51435-2054-4f95-9cbe-f43133d2d6b0", "indicator--c6ba83f4-a493-4d5a-ac63-dbd342ce9ec0", "indicator--4e1f3568-5909-457b-8700-ee6797c64e4f", "indicator--3574ead6-008b-4a7f-95be-9223930c5a70", "indicator--dd8f8a14-ef43-4f57-a0f8-903da2e32a69", "indicator--4e5025c2-0a02-41e3-b8d1-c4440828b90b", "indicator--e19f9bba-d144-42ec-9c55-250fd66f5a56", "indicator--ac1da833-004e-4a54-ac8c-f2e4d52d4c2a", "indicator--ec03f7a3-c5c4-48d3-af1e-c3d6c45c5e0b", "indicator--08e0bd33-a655-478d-af26-ef032c7f46f7", "indicator--693ef3ea-46f9-4dd9-880d-4cf072b97cb5", "indicator--f3dcfe8d-aa64-438d-9c2d-ae7d6881c114", "indicator--f951f288-21f4-4622-ab7e-620eb4662b45", "indicator--8c5c84da-93eb-4dcf-8112-40464e71f0c5", "indicator--b39faaaf-ef0f-4c94-a58a-e622c86841ab", "indicator--4abff08d-91de-4300-9868-61113885e0ca", "indicator--42b4bc37-26ec-4dd5-9522-6637cfe1beee", "indicator--11b805a7-ae71-4a83-a3b4-4e48f0e74b94", "indicator--9259efb2-fb4a-414e-98b8-91170ef441de", "indicator--25d72224-250f-4024-9f07-75428a686c48", "indicator--7bbef068-59e9-4f3f-9d71-70a0127a949e", "indicator--7e3b625a-1253-4649-a6fa-7b12d303c02d", "indicator--76c7e749-015b-4b31-8471-524cab4a0e69", "indicator--c164433f-2412-4722-8d37-39ee0ada2573", "indicator--f92da37e-9b31-47b0-aa36-1aa7ccd841bb", "indicator--d7110388-ab21-4b6b-8dbe-490ef8d563c7", "indicator--011f7c49-a768-4efb-96c7-9e89260e4ef8", "indicator--1342bff5-06fb-4d3d-8e5d-49e133170206", "indicator--5ff55ae0-9b91-49cb-a61c-7dca02c9340e", "indicator--8b75fb57-bbfc-4e4c-82c6-5fc0186e6c5a", "indicator--9ae23344-5a6d-4dd8-b484-ef53a6c6534a", "indicator--f0978ba1-de8b-4770-b99c-3e1c211b4910", "indicator--7f2f4ea8-a0f3-4a78-aa16-9b8851ef0a17", "indicator--20748b75-3c31-429d-84e3-926137093500", "indicator--be334b1f-7067-4c07-8083-e2a38f224f36", "indicator--4453e3a6-4bb9-4cff-bd14-48611bbbcaa9", "indicator--7bc2e788-4fcd-4970-81d0-f5df79b6628b", "indicator--456ea0fb-38b8-417a-b6ca-b62a2666a127", "indicator--ffbc1df2-f3a9-4fa8-b978-ed15510f705e", "indicator--a39ca46b-6a94-4799-8c5f-5439c85db34c", "indicator--e7e35c1b-8c31-4da4-8341-3f1d98610df2", "indicator--b617d329-4cfc-42bb-b79c-d0637e8c75ce", "indicator--4d512c4c-9d95-43ab-9fc4-f335aa94e8bf", "indicator--e82c7fbf-7316-42d9-b7c3-a344953c5e61", "indicator--7fd13576-f5fb-4fa0-86ad-9e1259ab1b05", "indicator--0e1cc2c6-b97f-4c0b-8510-7c36dbaabd08", "indicator--410d1359-d4f7-4611-aac0-4a5760c390bf", "indicator--af2ed60b-8d66-4056-b896-a35fcb9f5148", "indicator--94fb00ff-cd52-42b4-b611-def6e0932c3b", "indicator--1c0ea89a-8c05-47f9-a07e-4c28d609b9cc", "indicator--8418ae57-46dd-4dea-9d65-bcefac61e356", "indicator--bc7a293c-90ff-4fde-9238-1d06364b9efc", "indicator--b20618a2-6feb-44c8-872d-c2269d077127", "indicator--ef63ba16-a6c7-4671-8c4e-82f81f79d8c5", "indicator--3d2f01aa-2b7f-4c07-b15f-e8ac213933d5", "indicator--d0b152c2-681d-46e2-b54c-9d7f20202eb5", "indicator--2408bb6f-2646-40fd-b4c2-8a3cb053544a", "indicator--820fb19d-19bf-405c-a921-53bb11eb4895", "indicator--25aaea35-7980-4d0a-8ecd-1bda3e1bf79b", "indicator--b913b8dd-c0b8-4e85-b97d-191740e14952", "indicator--9444bdc2-97e8-4fc6-acab-32ed41729614", "indicator--9f86751b-9cad-4e01-8cd6-64ba97198782", "indicator--a5513300-48ad-45e1-9fe6-1ba83fbc25a7", "indicator--9d9feb56-0296-459e-b569-1fac1ddaa5f6", "indicator--51647547-cc29-45ed-bef8-956870961035", "indicator--53e1a57b-7877-460d-9538-e3e880f36aca", "indicator--37fba19b-8505-40f3-afc2-e1c8b555531a", "indicator--aa5a2b51-dadb-4bdf-b45b-114203db0722", "indicator--c8e45c45-f198-4121-8bf6-854106770fab", "indicator--3c84aa7a-3f39-4db4-acce-7b03d4aace64", "indicator--b1c08d1f-b23a-4164-90a7-3219f3d651d7", "indicator--868ce47a-f147-494d-ab85-f2991563f7d6", "indicator--0a596702-5dfa-4afd-b151-f2303bce665d", "indicator--73a64394-eaf1-4c44-943f-e77416a08dee", "indicator--12222302-389d-4616-80d2-688f397c29d1", "indicator--b74284bd-b4a7-419f-b488-12bea20afb12", "indicator--3e69cb29-59a3-4d19-8235-2e9180fc136b", "indicator--10f20e96-c228-47b9-ace3-dc06f3925662", "indicator--f9afa6b8-e1e1-4ab6-ab43-b501f29ebcce", "indicator--f891f108-a194-4ec3-812d-fe9f87fba283", "indicator--45505856-f8de-4354-adeb-a900544683a2", "indicator--1adb4b30-4109-4ad9-bc72-c3861a22ce4a", "indicator--17539207-18c0-4efd-a930-ee3c4ae60695", "indicator--a5bbb023-8ff9-4842-bd19-b779770a8615", "indicator--5c195a08-3a55-4301-8bcf-363b65682085", "indicator--73ee6758-ffa6-4e54-990b-108807a5f6ea", "indicator--ff0341b4-42a1-4c4f-9131-27d41ec64bb5", "indicator--0764189b-87ab-41c2-bf9b-acbacf68de9d", "indicator--92a0a476-2e40-41ad-a2d1-9a48f111e247", "indicator--75a7653b-9bad-46d9-a5c2-30d7028204db", "indicator--5d41fa7e-cec8-4e06-a493-0d9aece55af9", "indicator--82e5379f-929e-4df9-885a-e6f9d192813f", "indicator--dddbdecb-4f91-4f1b-99be-e8eddd8afdb0", "indicator--87b9f82e-6308-4457-8db0-9855dd5f4203", "indicator--a3c94d1e-d5bc-4365-9edc-ebe5edd6fa10", "indicator--da464555-4529-4a33-9c11-c0f191441731", "indicator--7a7ea5a5-706f-40c5-b0a9-bd8611ed05f6", "indicator--cc61950c-c7e6-4c40-b2ce-fa85185b1a32", "indicator--4df0745d-9527-4892-9c5b-83e6ac283e73", "indicator--135f6d82-e0a6-45be-95c9-35eae2835da5", "indicator--d6398454-6846-4adf-a0cb-b4901242c9a3", "indicator--fdee836a-97f1-46c0-8d43-a109a72ced0a", "indicator--4162a758-1960-4500-ad18-7dedab8e3d35", "indicator--a8979516-b372-43bd-8ff1-e0f4bb944fea", "indicator--8c4821cc-e777-41b7-bb99-1407d326a28d", "indicator--4fd34767-482a-4eec-b1f1-f90046e066fc", "indicator--2538b184-efd6-4892-96de-4bbe0442df9f", "indicator--105f46b3-b3b1-41ac-8f54-26ff1df01871", "indicator--8e983b67-ce42-4324-8772-62017ec624df", "indicator--f5c405d8-0dac-47ea-9ff4-14a2fd7c4f40", "indicator--469b3fd7-1041-4f11-83d9-f68e0869e2fa", "indicator--c92aa74c-6d62-4112-b67a-a2ff90f315cf", "indicator--8f09c352-8540-4982-b902-3f8e0361168b", "indicator--0943ad34-6cea-44a0-a096-37d6bf652471", "indicator--ba252ecb-7867-4379-8d01-3644a3548f75", "indicator--21379404-ffa7-4933-983d-f5f7e3c2faea", "indicator--a331c108-0786-4287-86ab-92f588366953", "indicator--3fee0db5-1fd5-400c-8e08-8ea9f321fba9", "indicator--20008fda-151c-4839-9bd7-e6ee9819133f", "indicator--97f8dba7-99a9-47eb-9a91-98b6838c1862", "indicator--fc32ff68-9fd4-4984-8424-f239c0ce3463", "indicator--97229615-cfee-4768-ab18-731893bb9656", "indicator--b62d10c6-feda-406b-a603-1d7df36dafac", "indicator--47f0f9da-4ba2-41b6-a9e9-67d92f36818d", "indicator--e2c43ef3-b684-4128-b156-ae1e8aec370a", "indicator--cdca559b-40e0-4061-b97c-1cf15e523eef", "indicator--ada93438-605d-4aed-ad06-7fc9cf5b940e", "indicator--d00aa1a4-7945-4b9f-9eb2-88e8035cbe0e", "indicator--58c4116b-fabd-45ae-96ac-a8b4926a43a0", "indicator--a9cea1fd-85ae-445f-9dcc-287096200328", "indicator--c2f70648-c876-4e88-b8a2-d3e20694852b", "indicator--f9b912b9-852e-4265-a8a3-39b26b964873", "indicator--fe5d6de3-f4e0-4b46-abed-57571499bca4", "indicator--731a876e-71c3-4c08-a678-ef971131f134", "indicator--0b9fd0b9-ebb6-4cba-afe1-5aaeb36ae945", "indicator--7919d5cd-a34c-478c-9b06-48197ed34068", "indicator--786de24c-a8c2-4d77-87a5-4497a4125ceb", "indicator--bedc05d9-f4cf-4351-9dc6-3717976045ec", "indicator--73916ada-5a75-42fd-b803-e0c9fcb0ec5a", "indicator--8ef7c8a0-09e1-4e71-bafa-45a8c16977ea", "indicator--3d5243de-b44d-4bb2-9ce8-a37cd5b1282d", "indicator--cd797f2a-09b4-4726-b3e0-183fc199033a", "indicator--1ec829e1-aa97-4f46-9062-12ec7e459297", "indicator--65a4ac8e-9f85-4220-97d1-b7d82da25745", "indicator--150c4b6c-df80-437f-9d2c-21f1180dfea4", "indicator--16345386-0463-48b6-b209-8094a93dc765", "indicator--f7e1db00-6955-43ef-ad04-517890eb68b0", "indicator--78de5d86-cd8c-4b8b-a6ea-49fc88df322f", "indicator--0d07f8ee-5c90-49e2-9203-dd6253d2f0d2", "indicator--c02a9c90-e5dc-403d-93cb-cbb5329ae7a8", "indicator--3ab16853-0dc6-4e1b-94ed-f6a2bc2fcc2e", "indicator--02ab3736-6158-4087-b495-6f72acd5e23d", "indicator--177c8045-97d4-4bdf-8309-b7ae1e8cab94", "indicator--fe6745ed-17a4-441f-872d-514fb41e09d3", "indicator--b69ca266-7b26-48f2-8629-a31a9db63144", "indicator--25e4bd9f-0037-4142-95e3-1ed26f7bc3c4", "indicator--13f8990d-f789-4729-9167-b6ff14b8a683", "indicator--be23eea9-8db6-43c7-b17b-1c81059b3acb", "indicator--9746ee87-ff28-4f60-b008-977eaa5bb916", "indicator--471c4e83-9196-4d2f-a04a-9af1f5b28cf8", "indicator--1f931d71-ecdd-4b75-927c-f10af999a1ae", "indicator--4136c550-3677-4249-803b-244c7c5eb852", "indicator--22ca5470-760e-48f1-986d-326859c9fcd5", "indicator--7b66f6b8-402f-436b-8de0-15f1071e0110", "indicator--78e835cd-2f86-4b15-b27c-688fff284b1b", "indicator--9e65ae36-562b-4312-865b-4bff12d60bef", "indicator--72cd8a4a-aacd-47ad-9f99-135b0a601606", "indicator--d179e3f2-677b-41e7-a1b3-517d7db85f11", "indicator--c5375163-e750-42b3-aae3-b84b271c122b", "indicator--87407ec1-3595-459b-95de-3c1783172464", "indicator--1538d3a8-a4b4-4180-a2c3-4b5796d32bd4", "relationship--7cbe1744-251d-4282-8f67-8c12c2412bdf", "indicator--be9185b9-be42-4ccc-acce-cc861488b69d", "indicator--c268035d-51f6-46dd-88ac-b389b6269098", "indicator--bc093d4f-7a06-4f1e-bdb2-aa556748ea1d", "indicator--e74c279c-37e3-469b-a922-4619058e8f11", "indicator--03dce61c-9eaf-4e1f-a026-bb35d0b225b8", "indicator--15874436-aada-4bdf-8665-8414beb26e6d", "indicator--16a05bcd-68a1-4ce6-8297-5e29531aa874", "indicator--0d355ad8-b30b-4527-90a0-1b62b04a1aa7", "indicator--cf5b5590-a5b4-414b-b981-67d21e8825f8", "indicator--d0d59e41-686b-407a-86db-3f8e152be1fc", "indicator--5d9f2573-521b-4fcb-8f48-54ec4579a939", "indicator--bba157d0-715c-4da7-9003-c237401033ce", "indicator--85e6a165-1e0b-422d-bd2d-bfd5d88d10f3", "indicator--caefac22-0711-4a00-aaab-9b6e12665285", "indicator--eb9131f1-af54-40ce-851e-b9a9d8ca5b39", "indicator--c07f1ed1-c182-4b07-ac37-563407a7a06b", "indicator--913e0075-42b3-45fc-a2b5-92a74bcccd2b", "indicator--1de695a3-29e6-48a7-9c6a-faa201c926a7", "indicator--1e343c08-e99b-4419-aaac-8c38d17cc082", "indicator--d1010df6-5b6e-4a7c-8a4c-0611419e0d22", "indicator--d784bed4-6bbb-4452-8d4c-8df3102aaedf", "indicator--ad174f13-9770-4444-bc96-ff7fdf61d19f", "indicator--76b81f60-dbc7-4478-8826-73776420bfe8", "indicator--20929ee6-c0ec-4ab6-95e1-327b88f4e913", "indicator--010d211a-1f45-4c30-827b-b94028fb2e4c", "indicator--014af5a7-5871-4c02-a385-b89ccd4c99b0", "indicator--f1b48052-bcbc-41a7-9ea9-ea7066a0a1c2", "indicator--c41fbb97-b120-4ce3-920b-56bc339d9c7b", "indicator--cb8e303f-a3c1-4eb0-baf4-42c06230d252", "indicator--0cba5e66-c7c8-456b-a90c-2e07a105260b", "indicator--ab2884dc-8061-493a-a9f7-5581c08a27f6", "indicator--bf896b0a-59e1-4c88-918a-5951b108f96f", "indicator--29f6c0de-a980-4940-962d-4e3ce5c65c27", "indicator--54ab0417-26d9-4231-b2f0-0e420ed593e5", "indicator--961c5343-d373-4581-bf16-38f1c4459865", "indicator--ca256775-fa69-4aaa-ac3b-bd8e11575eae", "indicator--0d92ce80-c82f-46bc-b102-921d81deb6a0", "indicator--b55b845f-2a4c-4e2b-9e98-52d772222a3a", "indicator--5b25312c-a1f4-4a4a-9509-fb6ca6db79d3", "indicator--5f3955b6-f4c4-4118-9040-b581a598c309", "indicator--8a744037-70a1-46e0-8257-6ffcba4b7916", "indicator--85c9ffbe-e403-4b20-821e-8e0593dd28ce", "indicator--38a688fb-b8c1-4bd7-9191-e8a8e9d926ed", "indicator--7054744d-c8a1-4101-b868-d274be55aec0", "indicator--19338671-8e94-427f-9eec-36d766597fbe", "indicator--a6638bf4-4526-44f5-9c6b-b04346178b6c", "indicator--3edb7a38-4a45-4126-a530-8f648e641d66", "indicator--f06dd707-18b1-4076-b668-fe3735544bd5", "indicator--3977452e-2923-49e4-951f-f3c86a0e23b5", "indicator--81dec528-2ebb-40cf-8185-acb74ad933d1", "indicator--051d928a-5600-4572-b7b6-8e08a32ecd99", "indicator--36c5e803-775d-4a33-920e-423f7e9f2bce", "indicator--e373ba59-83bc-45f1-a11b-69a137eebd48", "indicator--ec35d47d-0b39-4d6a-a56c-aa20b4670f92", "indicator--5e0e8abc-d3d5-4b60-b439-76f315265404", "indicator--203649c5-2b79-4b94-bff0-ce00bc5435d7", "indicator--634d8ec6-1615-43fa-8c6b-7fa97c2d4e24", "indicator--02978d9e-f808-48f5-9dc7-15fd4be73492", "indicator--78794ec6-1fdd-4031-9d59-6ae5b2ac3143", "indicator--78696990-4092-43a1-bd58-5fb27cbf4e10", "indicator--78e02df1-43e2-4003-af27-bcda68682f5e", "indicator--052f37ee-afd3-42c9-8365-8c2722d25713", "indicator--2df6fb28-7461-4aef-8a14-33361c2307e3", "indicator--059a6b58-d02a-4079-a867-cdaa55e73a10", "indicator--72cd0547-85be-4a24-a286-7cf851e6821a", "indicator--8129e0f3-cbd2-4def-9633-348b7292be8b", "indicator--3ba8fca1-8788-4549-bf72-d0ce97be4813", "indicator--d2510a63-e6cc-401c-9672-5b36541904d2", "indicator--18d5b02c-379a-4879-a26b-5d849eb88278", "indicator--2cf4bf36-a48b-4509-909a-3c50dcf01624", "indicator--99b33cfa-e901-4e12-ac52-501193ab7941", "indicator--0f4ec456-3306-4d97-9d13-d50a7760b86f", "indicator--98e550de-43b0-4217-a32d-057021bc87e7", "indicator--bc201297-7f41-405c-b043-c154dc18971b", "indicator--27d7baec-9cb2-485f-b1ed-0deb235f65fe", "indicator--66fcbdd5-b8c8-472d-82d5-ea6561f9c41f", "indicator--cf4c262b-5c46-4946-8923-06fece7611d1", "indicator--480b4261-1ea9-4a33-92d6-2137d6f5ba50", "indicator--a5743944-3a8f-40be-ae57-45d2b489f3c2", "indicator--60c03240-073e-4a90-a097-eb6b4f4b076f", "indicator--4be1da20-e83d-4679-8abf-a4790f8fc07e", "indicator--262a81eb-492e-43ae-9f7d-72e0d5a9c856", "indicator--0d3fd319-74ce-4b67-9608-304ef745aa0a", "indicator--54138574-24fb-4e5f-a932-70e9557f0a48", "indicator--f2e41135-a26e-49a4-a0c2-847550b0c56b", "indicator--2964f748-e3d0-435b-99fe-eb89c7505edf", "indicator--648bf750-8523-456f-ab21-bfa43581160e", "indicator--4caf3ec9-e755-4a0d-9dbd-3d10e320baec", "indicator--30f7a1dd-e717-4cb2-ade8-a77bd62657e1", "indicator--2ce8325c-5da7-4bf1-8be3-e7f6a8ca54e8", "indicator--fa68f252-d390-4046-bbab-f8d0d9d31e92", "indicator--e1d31c14-a9a5-4b82-98b7-3d7cbfeb187f", "indicator--f6901695-d567-4809-930d-9ee3574d6573", "indicator--99a455ef-f1ca-4164-9e46-2bf0a074a155", "indicator--fd71d5c5-33ac-46e8-9f5e-621af1e5e2cd", "indicator--1f74290d-8177-4c69-a954-a5e1eecd8b91", "indicator--d66f50c3-41a5-4b90-899e-c1847cda6c8e", "indicator--44351e39-bd20-41a5-8dfd-62ce67ce273f", "indicator--7c4229dc-2b83-4be2-a748-1b40885dfac9", "indicator--fa76331b-0e51-4173-a326-3c50da12811c", "indicator--9b65db6d-0f71-42fc-a9a4-41fab15e840b", "indicator--372138cc-da4b-4d2a-a10d-f8ac05d9add7", "indicator--0d057b77-b810-4eab-8a22-72c8188eeb53", "indicator--8a86b970-39ec-46dd-a06f-169ad1759790", "indicator--f04c61e0-8417-41aa-b390-6827011c51f4", "indicator--a1baf453-1dcc-491e-a491-02db2d74fcdb", "indicator--10cdb916-0dd9-416d-82c6-ec8e021a4e1e", "indicator--57193965-9602-4a31-8d41-14e00b7cca3a", "indicator--26350822-27bc-4137-a09e-959f7cee4382", "indicator--8132efdd-f4e8-4606-bf9a-2706d369acd3", "indicator--2478847a-c09f-43f4-b3d8-f087ff5f1e08", "indicator--b742aeb2-f739-4ac1-9f42-cabb75c04f2f", "indicator--c7e64bd2-570d-4f5a-937f-767c0da77dc1", "indicator--ed64e8dc-5919-4ac3-acd2-40b323674a6e", "indicator--6ed0ec44-161c-4b63-b004-f35a7e677861", "indicator--19f434b3-e4f6-4026-baca-0578b1b94f27", "indicator--fc495a66-1bec-413b-96eb-d891677861c2", "indicator--c1f49fa0-bb23-4f3b-a8e4-32d50d4bb438", "indicator--fc25f550-750d-4246-a082-d0d0f3d0d6f0", "indicator--07c6412b-c7fd-4214-b6b8-a8c1c2043641", "indicator--66d4045b-06ab-484d-89cb-f5666c331e03", "indicator--d11df16d-2c79-43af-b041-7c7982e8b18b", "indicator--1b436190-d0a2-4c0c-b907-ff2fbee72a02", "indicator--d090a9f6-0714-4073-855f-2ab20d38eb88", "indicator--07a561f9-822f-4788-b7a9-9e2dbecd51d3", "indicator--e39d2c7b-daf3-445f-8e74-7d32d91c4523", "indicator--bf09ec0a-bb12-4dc3-b874-1c410464a528", "indicator--ee75086a-ffb7-4d03-bcd4-bc11be48ae9c", "indicator--780f98b0-60b6-41ad-8d53-5caaa1687be6", "indicator--7912d0cd-a1e3-4ac9-808b-dcdc9c71e0fd", "indicator--d940767b-c51f-4a0e-bf51-ed04136b1167", "indicator--0206c3af-c5a3-44d4-8f68-2714b6c6a22e", "indicator--baa30623-cbf1-4628-9f93-d20532fdcda1", "indicator--054356aa-d8f0-4742-947e-b12ffeefc0db", "indicator--76796890-7f09-4b15-872c-df2daeb03982", "indicator--7d8b819f-56bf-48ac-9a6a-e28f77907d3e", "indicator--01995df7-bb1e-4b49-acb1-84791091e45c", "indicator--9de97844-09fc-4339-82a4-816aa8d4de4b", "indicator--8b0845cc-7a7d-4123-b9ca-65399c1e9432", "indicator--b69b6a9a-b748-4216-8e57-befe6c89ca0e", "indicator--97afdcb8-58c4-4533-884c-a270043f12c4", "indicator--957d4a58-fb75-40f4-ab80-1b856fc8fb9d", "indicator--0650c60e-ea2f-4e8f-ad28-8e861da46aef", "indicator--7084974f-b97d-4d01-8837-790598bf0bb1", "indicator--dce83885-5c2c-4880-8d6d-712b9c827eb1", "indicator--ada54597-e1c6-4594-93c5-66902368bd0e", "indicator--8e0a7da2-ee7b-4592-ab29-d1d843465fbf", "indicator--dac7311d-b560-431a-84b9-ffaa50d31736", "indicator--f8f4edf1-5403-4192-87a8-043fdf2e2bde", "indicator--b75db60f-199f-4143-ac3d-5d9f1afeb5ac", "indicator--39dd51b2-00bf-419a-9ac7-a1033a15ad30", "indicator--34509212-5444-4e6e-88b5-e38d4f927b57", "indicator--47ba7b8e-cf4f-4157-a319-ff349b92523c", "indicator--6312fc79-cf4d-408b-bb21-069f9ea846da", "indicator--2ad37bb8-c896-41c3-8828-5e9ff2785243", "indicator--8659f419-c110-432d-bb64-f0abd76ebd47", "indicator--14439996-3ba0-4336-aa61-be4d708be2c4", "indicator--2df57cce-4442-40ed-af0c-5ede3156c637", "indicator--c7f4315d-0242-4449-935c-dcb8e50610fb", "indicator--4e2d2de7-9e27-4619-8702-295404e856ff", "indicator--d748c0f5-32fd-4e80-8079-afc1e83131bf", "indicator--fec2d6c0-9476-4089-b87e-fccb86130d8f", "indicator--6ac0c028-4156-4134-bcea-760be26c91f3", "indicator--d001ca15-4524-4884-b38c-67460a89deef", "indicator--f384237f-eaa2-449c-aa87-c2d1241ae807", "indicator--d5b673cf-ee8d-4c6f-8ff9-b29cd58cae46", "indicator--23b588ac-8c95-46f5-86fa-8648958ec23e", "indicator--3dc76b9e-edf3-4337-b2b5-9fade3efd326", "indicator--a21bc6d3-92f4-4f2a-b8b1-9b965d7fd8b6", "indicator--179b488f-1fd0-44c6-acf2-c9094b4793e8", "indicator--c23c8844-9ba2-4d9a-ab1f-478581877b1e", "indicator--77d0315f-aa67-4e2f-83c7-c63076f20e87", "indicator--e8e194b7-ca88-4ef3-b528-d7db66a54d64", "indicator--e0ec6ef8-ecb9-4f7a-b4f4-c0a51029ff59", "indicator--2a2f2255-30c6-47ba-a8f0-f203753f5c11", "indicator--0953d72c-b764-4843-89ad-f26c9bfff630", "indicator--b5f61b2e-b0c7-4e34-9d27-31bc1726468b", "indicator--d7dbee06-3431-437f-a56c-f15b2725c355", "indicator--60677083-cea9-48c9-951b-03cae5c38b4e", "indicator--d0297d8a-1ed6-403f-bc0a-6fa7a6ebc88b", "indicator--dcb2938f-1aa8-433e-a407-3a52e825e151", "indicator--1c648dc7-73f4-4dc3-9f08-85a68e5bc32c", "indicator--5ac73341-3a07-4d5c-9e51-bb77bd8d475e", "indicator--195a0cb5-6fdb-4a1b-89e9-b7edaae4581a", "indicator--8f03e64b-0da3-4432-b734-6711dd9d1b0d", "indicator--c84a0158-4f4b-44a3-9041-baabca3caed2", "indicator--d8b805af-7bc6-4b19-9850-183ed91d23ea", "indicator--a6c32140-3e4a-4a5e-b068-2632cd5f0c9c", "indicator--c0c80893-a5e5-4ae7-82aa-9e5a5539a70d", "indicator--9cd5f9be-53d5-4635-8895-09ea4542a7cc", "indicator--55339dce-75ad-4abd-993b-7c36fdb2e285", "indicator--e7ea59dd-b7d0-429e-a295-88c7f037b501", "indicator--9a414638-dcbe-4523-930a-0761eb17f20e", "indicator--9f338c12-7879-4e48-998f-036db9d54b39", "indicator--846a78ae-176c-4096-bf41-18eb8aab3a9c", "indicator--e8a5bb21-6ae6-490c-97ac-3f55b104baf6", "indicator--f55b924d-ad3c-4e1b-ba86-c35a3f847f15", "indicator--01dd5a2c-a6af-4b74-b9b0-2fff774304fc", "indicator--b31a6016-c7cb-4c65-9208-7a25d0632ed7", "indicator--b26daa55-36c2-488f-9fd4-99c20d4ebc7e", "indicator--cd86335f-c621-4d98-9f88-ec05e099ac93", "indicator--11c7d57f-8fbe-47e5-a006-147abaa16453", "indicator--b9a572ea-3e04-4300-be6a-8edd0213730d", "indicator--58245ce6-3f84-4f2e-ac2f-0be31234465a", "indicator--b1a68f88-26a7-469d-bbf6-c588de1cf16b", "indicator--e6056b40-f399-44ed-89bc-cc8aac87223b", "indicator--fd15bfc6-3ec0-4c04-be88-368394d3cbd1", "indicator--06e38c1e-ec68-4390-84f7-d0b59dbd8325", "indicator--30065d88-6121-4055-9085-6eb3b65099e0", "indicator--a202c97e-e2b1-445c-b52b-d712335a6411", "indicator--b1548054-fa6d-4a14-aab4-a83ded5c8b30", "relationship--620a1d08-041e-4c43-87ea-329baa626e62", "indicator--e1a611c9-7b57-4fd3-ba6d-532ed6b95926", "indicator--21e2edd5-209c-467f-b645-ad90d80460e3", "indicator--a3667984-fb15-4cee-9c28-8a8c032eca9b", "indicator--dfce54df-fa3d-4264-9cec-c612875b084e", "indicator--7fce2843-d603-4735-99af-90821308568d", "indicator--37d554db-e5fa-4508-8a2b-9cca3a80db2a", "indicator--dc49c47f-d5f9-4af9-937a-c3b684877276", "indicator--bb3cba1b-53ed-49e0-8fcf-f87cbe701622", "indicator--8a205d14-413c-4a81-8a38-7b1910466063", "indicator--7cc1f772-0623-4d63-b0ac-22bf886d0234", "indicator--aa893355-981c-4293-b8ef-401c4f875f42", "indicator--1581cf2e-137d-464f-85a1-bd8b9d98b4ec", "indicator--5060cab6-3ab1-4931-bbed-3ac86ac60aba", "indicator--ffea90c5-3b73-4c3b-aae1-d578eff4a762", "indicator--6d2073de-cde4-4aaf-a95f-081c9a952fec", "indicator--0a360344-57a5-43ae-b083-611f80f25c13", "indicator--1a214e89-3988-4de7-b892-eb015d55c865", "indicator--3b2d77ea-bfdd-4892-8706-12285018e6ec", "indicator--6c58d4bd-8495-451d-9209-919b4908fe93", "indicator--ab0c3f24-8389-48ef-bd5c-2dc7dd42b618", "indicator--2362ed82-3e83-4b43-a8d3-7ca69755ed76", "indicator--f32f1985-55fa-4464-900e-13c88ff553ee", "indicator--a2820acd-7e68-4a62-8e91-6abfd89f16a0", "indicator--ec7ed4df-bfdd-4fe1-aeca-279e159d6544", "indicator--9c90e1e9-9503-443b-9279-3d10d0cac286", "indicator--4231c75b-7a8e-494c-93d4-93bce080caf1", "indicator--cfcda254-f008-4da5-900b-48c6674f443c", "indicator--bfc7eefd-38c1-4571-a35b-b593bcf17cd9", "indicator--7ec2d9b2-960f-4f3e-839c-745e0797b6cd", "indicator--eb2ed212-c297-4e80-b47c-3c45ed79b619", "indicator--460b622b-0f11-40d3-b99f-e4a1e264eee6", "indicator--11faa91a-4fc5-4eec-b595-67ea3fad7b98", "indicator--d64fd5ed-77aa-4023-acde-0b121f7be9fb", "indicator--2f1e341c-e3c2-49fc-8e2c-9d0a53f70239", "indicator--2ecdba41-4d78-4a9e-8d52-7a3a5c3e0212", "indicator--8cfa9dd2-3279-4f40-83e2-572bb0443e8d", "indicator--c7953d65-d8b9-45b6-a35d-3156872feb66", "indicator--dbf0701a-4465-4068-ad29-120c7e512408", "indicator--f32eb966-5aa5-48ba-84df-7c141f75d174", "indicator--2ea5d727-1241-4d36-b673-c19bda39e615", "indicator--ddd77bba-72ec-4d3c-b8aa-c07fa0b68db9", "indicator--82bc678b-fe93-43e4-a99b-fe7d58169418", "indicator--71e275ad-4492-4661-a7b9-14ad794e39d8", "indicator--087da470-251e-4710-898a-5a00b3dac6dd", "indicator--15dd0519-f757-4e36-86a8-971688baf5b0", "indicator--0f906627-b979-49b6-a821-9cd0157edc70", "indicator--417c7729-9ef2-4665-9685-3ad152c9d0db", "indicator--786275a2-517b-470f-984f-d12702aab91d", "indicator--61b1e7f1-b063-4611-81e6-cdb24f91ff05", "indicator--c32df4d4-580e-47a7-b8dd-026d960fb0a1", "indicator--db0f1e2b-1c7a-4be9-ad2d-6832d532bcf5", "indicator--7d420182-e9ee-4af2-8a9f-4c4c223ab6ee", "indicator--3a3f5034-75e2-401f-bd73-d3a6dfd78f82", "indicator--ce4468ca-ddea-4f27-8815-7c495df43257", "indicator--2eff2a33-a1c9-48f9-8224-7090b69f87ef", "indicator--9064f581-f64e-44a4-a658-8f4030b1530f", "indicator--a95cae88-1716-4f14-aa33-6e76f2fbb5ef", "indicator--1e89e528-dc62-4e8e-a99f-b3f166b9684a", "indicator--7a23594b-8689-4891-8fc0-4c1b30b124c4", "indicator--d9cf487b-610e-4d8d-89e9-c5e9196cb575", "indicator--20f8a58c-4400-428b-b5ca-5fbfbf84266f", "indicator--8ea50ee4-fa40-4662-8e8b-d8ecb37c0a37", "indicator--aace1b78-2803-4320-85e7-44cdb00931bd", "indicator--5cd9ba36-77df-4f9b-994c-c0f662a419b7", "indicator--c459fad1-7e1a-4767-8e65-1c56b8d5759f", "indicator--06a579f2-0709-40db-9346-67dbd7ea723c", "indicator--7372eacf-1a22-47b1-9a89-5c50acd701a5", "indicator--2466acc7-0bfd-409f-98d6-e90aabbafdea", "indicator--fef85139-c680-4e31-8eaf-9ca1d2234975", "indicator--6452ae80-c891-46ab-85ed-eb278bf42910", "indicator--9f7777ef-6080-4a26-b3bd-947bb39f7e11", "indicator--3a91e766-245d-447e-a204-265248430eec", "indicator--73868c0f-f4c3-4ec3-a49b-a829494786ad", "indicator--44454c83-67d1-4664-abd5-6522b1e682fe", "indicator--fbc861ec-83d2-423b-a4f3-7ffa3ade15ce", "indicator--d6813e67-1c69-427d-98d9-d82bbe26aa98", "indicator--d5eb8cc8-fea5-4d0b-b313-112378b35208", "indicator--d70400fb-e1b9-4e34-83ca-452e215f3216", "indicator--02b8d391-cc7b-4ef8-a532-fc8541dd5b4f", "indicator--393582c9-cdcc-4bfa-85dc-66f91a75f12b", "indicator--c2ccccb0-eaae-44c8-b96d-87983ad80055", "indicator--767cc543-7f71-4ac7-a388-09c535d8b240", "indicator--90d1852f-e55a-4a63-87a7-fd39de9f7f12", "indicator--aa570604-7547-48bd-8b76-e1513c1683ce", "indicator--93425cff-35c8-4d75-9d43-4bccd47373f4", "indicator--a31d1d1a-77e6-4dc9-ab96-a544ef7a7880", "indicator--d6f737b9-5874-4c33-a0db-d2d0cc812a14", "indicator--16e03244-4773-402f-8dfd-6b05f99e7e92", "indicator--8dd435bf-e821-4b84-8d71-e5812315f847", "indicator--b2b04b59-4961-4186-a279-9801695b0ced", "indicator--ffd20cf8-f589-46db-a6d8-7ab486ffe20f", "indicator--d7fee53b-7608-4ff3-b69f-dafb6df0e64d", "indicator--490956b2-5a19-4204-ad30-e8e7e772488b", "indicator--d8a777be-be83-4764-8122-424ec757947d", "indicator--fe936a8b-9ac7-4a61-b58a-6b83f3233315", "indicator--7c5d105a-ad0b-4807-ab4a-39dadfad7b12", "indicator--2c6ed8bf-e460-486f-9d26-f11dfb6857bc", "indicator--4e1e826f-9fee-4273-84d8-5f1a48ec2bb5", "indicator--1fbb1e57-6937-4019-a3b1-1f8a9d127534", "indicator--57b7737e-cab7-41f8-8257-4410c2a30906", "indicator--6a64fed2-573e-42e8-8c47-24ec7e5fe47e", "indicator--dafea083-8c85-484d-a015-513aad6b1231", "indicator--05cbd5cc-01a8-4a64-aa8c-6fb61aba60d1", "indicator--89f14f63-928f-4ac4-b3c9-acccec1af13b", "indicator--d087880f-ed39-4c40-90bd-ee6919e27321", "indicator--1fc715be-a2c2-4877-b658-b873b72eee98", "indicator--e88820da-f13b-462c-aeb7-9463b1edf6ed", "indicator--b65e83aa-e5c4-4e34-96cb-6658cbddb2bb", "indicator--03abbca8-c5e6-41c9-b516-87a0f3ee4434", "indicator--764e3e47-120f-45a6-b386-ba4157bac9b8", "indicator--7653f4d5-414a-48f0-95c9-67c6ecb6e0ef", "indicator--680e72d4-7b2b-4dc1-820f-722793fb0aff", "indicator--dad577f3-2410-413c-9cb1-fd6443222ceb", "indicator--40bc7fe0-d2fb-4bbf-8b9f-5499aeca6f8c", "indicator--d01834a6-a111-4bdc-a06b-dcd03a8fd96a", "indicator--e9af6998-b6ee-46b1-8565-890fd7a35cac", "indicator--2afc9264-ea91-4ca8-9bb5-1261e2e3bbb3", "indicator--981cd2ce-81da-4c5e-b49d-af28db4b93a1", "indicator--5e0ba8c6-842c-42f7-a30c-3041537bf1af", "indicator--28ed8d0c-10a0-45bc-8ab6-792a4e75ca9b", "indicator--f0f257a2-9e31-4e22-bae5-c5675cc1eef0", "indicator--2d9dc550-5cc1-4484-bf2d-959b8020973c", "indicator--9af72942-1f88-42d8-81ca-9263b234595b", "indicator--4bcc42cb-086a-4ee5-a82a-0bcf98c58419", "indicator--fae1d667-ef62-44ef-94fd-d6a4fa14da3f", "indicator--200f9141-5855-4590-ac33-8633ccc71e14", "indicator--a5bed2a3-3dd8-429c-9db7-670b09dfa762", "indicator--74c05c08-5a2c-4bbb-b447-9cc9631e46f2", "indicator--b6b0f1b8-f9e4-4e13-b41c-89a48e976d0a", "indicator--0bebdf76-7d5c-4c1c-8a4e-d530a8ac8994", "indicator--8a8759a0-3d66-4579-bb11-34e82534f900", "indicator--92322824-d0da-478a-9966-79225e8998c4", "indicator--171309ea-ec13-4402-b6ed-3c41ab11dfbb", "indicator--f8ce4e54-c732-4dde-8721-d253228a8ae8", "indicator--ed0fdb80-c806-4335-aacb-6b29cd2b001c", "indicator--b77da48c-c41c-4410-8f84-2822f439d2b7", "indicator--11b1cb13-f044-42b0-b425-959d3cd1e0f7", "indicator--0028aea5-a4ba-44b9-aa8f-f741ac45b8f3", "indicator--f97a7eca-cbc7-465f-840b-8f1fad305363", "indicator--87942bda-04cc-458d-a4b0-980380885064", "indicator--0b6e5c76-4269-440a-bc03-7b26c9c8bb70", "indicator--ca03daab-a5bd-4a34-847c-32ce59bbb387", "indicator--94764874-ecc5-4560-b64f-f8ca3efdd438", "indicator--868b5fe5-25fc-4e60-94d8-195c74c7d0a7", "indicator--066f12d6-23a1-42aa-80b5-fb0535609ae5", "indicator--11a476cd-a63b-4fa2-ad87-f8fa963ffd66", "indicator--63efb31c-34b6-4e5c-95f0-4b4dc2e81c73", "indicator--1def01f2-87f0-454c-902d-327450bb450e", "indicator--6c9ac2aa-4c0a-4c44-b7ed-185a4d377e0b", "indicator--8b8fa957-5414-4fb3-84dd-77c8f61ec048", "indicator--9b6848a2-79f5-49bf-a400-89a3cc0aba65", "indicator--9a64c022-1fa7-4d36-92c4-754ccb0fba68", "indicator--19a47c15-11d4-436c-889c-14d96c3e9d40", "indicator--3cba2d51-755d-4d8f-8e61-2599e4cd24c7", "indicator--bb636095-4f23-4563-9e3e-8d24ab41efa9", "indicator--ef160cbb-c0af-4470-8688-45784895adc9", "indicator--a73c80e4-d5dd-426c-b99d-3faa8225bfce", "indicator--ad3e821a-9f45-4f58-b5ae-c93ee4c3edba", "indicator--3fc2f859-cf84-4bd4-b621-3e2a7256912f", "indicator--9751fa0e-a40b-4284-b997-8ad2ccf513ba", "indicator--8b3b7a2d-9162-47eb-9344-75f610f2b21a", "indicator--2946a8de-e269-4fd7-9a5b-115e046510c0", "indicator--eff01120-caac-486d-89d1-81d13dc25d12", "indicator--74cb6c1a-2100-41ae-a6fb-af4de77fa124", "indicator--b1da978d-e33a-4b9f-8fb8-7c278982c321", "indicator--def2f398-c579-4273-853c-e945aad23e50", "indicator--25a07553-11fe-4075-87e4-d5f15265a110", "indicator--cff1e269-f45b-4fd0-924b-5f0949989ce6", "indicator--e04aec4e-d4e9-4a11-a132-cb797e3258f6", "indicator--ad6ae000-0cf1-4612-b9a0-5cc3f5d2f1fc", "indicator--b7b09c46-3a7e-438b-b6ce-f307b6281f33", "indicator--18e57531-32e8-4c5f-9a18-0a06dfc4215f", "indicator--28acbe0d-6108-48d3-b889-2e3a9bf81e96", "indicator--5eaea48c-a6bf-43a5-a0ac-2df9057d363c", "indicator--c61a78e7-a276-41cb-ae3f-72f3b01660dc", "indicator--f70088ee-8ec5-4f2a-98d8-4d4ef3975533", "indicator--9b259496-8353-425e-95c7-8cbc5287e9f8", "indicator--7892d456-28e8-4245-950b-271b7932aa17", "indicator--36cd1818-86cd-45a5-b2e3-4dced201d8bf", "indicator--31a38c0b-ff1f-4acf-89a4-6a43987aa7f8", "indicator--22fead3b-8f2a-4cf8-aac4-641270852601", "indicator--f0d709ec-ca1a-417c-98c6-2a38d06e2a76", "indicator--75c2c50f-4217-46fc-8744-97529c8e902d", "indicator--cd5a10b9-3798-49e4-9891-94a7b6c8495d", "indicator--019cd3fa-b87c-4d19-b7ff-8f31519089a2", "indicator--a2e9b9e8-7de7-4391-908c-e88bc74083dc", "indicator--1efc0a1f-9cae-42b4-b909-c5c63e449bee", "indicator--587d04c0-8168-44b8-a405-1567b66e9509", "indicator--b44b35ba-2e4d-4971-8bea-3ffe62d1fe60", "indicator--19294452-ae0e-456e-b7a2-a3916770486e", "indicator--b113116d-b2b1-4fb2-874f-de1a3faadc15", "indicator--92d4306b-38bd-4cb9-9f90-c4d91593e87f", "indicator--55302464-14c6-4940-9817-47b48ffc7261", "indicator--2a1c421f-38d8-4b41-b6f8-8090693820d2", "indicator--84cb923e-f1d6-4d22-80d5-8cb9afd93f15", "indicator--2269a92f-c6bb-44ed-86ed-03a44e7a059e", "indicator--6e471e49-a8b8-496f-b830-0f242cf3e820", "indicator--fda439a3-113a-4a1b-a1cf-69f6de0addbc", "indicator--746f6f0a-fbb5-48f9-be89-5a4a29ee4806", "indicator--ffe5fea0-0b49-460f-a566-944dbda8bd6d", "indicator--3edd00bc-c8f0-42c9-bc0c-494abaf6419e", "indicator--dbb1ed5c-fd97-48c4-8e50-5ec8e7bf6144", "indicator--11ae5124-3c77-4741-b9f7-41846cbd0794", "indicator--3944b63e-6de4-4a17-88e9-0b3d95149b34", "indicator--b058c201-213e-40f2-9d06-d84340b599f3", "indicator--3ac4be61-098a-4bb2-b5d2-eb9788cea827", "indicator--13908696-9fca-4930-8e57-65582061aa52", "indicator--ccd87c63-7eef-4be4-b488-1dc17d41969d", "indicator--100b3a94-2b9b-4683-8a6c-f92ccaa0c507", "indicator--51de9d38-b3ce-400b-b86d-1d6074c07b27", "indicator--dc89db94-9104-4bf2-b7e2-67bee34b6995", "indicator--30addc5f-f171-4fec-9f40-296b0ec51d90", "indicator--2049903a-8fc3-4ad9-aea9-6c5f47c4e3c6", "indicator--fac939fb-3027-4994-af50-3dbe81350f18", "indicator--359a9bfd-b52e-4979-ba04-b64302435446", "indicator--851cf464-4765-4e16-93ab-ce515f1cc8b3", "indicator--26c7c1e8-e9df-4678-aea3-21bed77bc3b8", "indicator--47f5c6b3-7acc-4c94-9a00-5d4ed070ecab", "indicator--9b7d6daa-ee92-4593-835c-0b34962a7333", "indicator--f4f34b29-ba67-4052-97c5-9354e447c341", "indicator--39ffabad-6d35-454b-b534-45a0607ab95c", "indicator--0e6170f3-fdd5-4e32-9c09-c83c8a15c739", "indicator--8b1c9f1e-e6c1-42d3-9eb2-cbb530a94602", "indicator--bbbfd604-bc08-4ac0-b20d-3b17da49a9bf", "indicator--f4ac7f01-f1ca-4b7c-bcec-eb2af1272d88", "indicator--962544c8-b2c6-4a9b-94e6-6b3ee69965b4", "indicator--f1b03ec7-ba32-4d1c-b175-45386ed5a040", "indicator--17c55fc6-9a89-4e94-bdfb-4e9a5e2945ef", "indicator--bf0a0380-0a4a-4617-938f-29b6f71738cd", "indicator--f6a711ce-27c3-43aa-a532-d8e239cfdb03", "indicator--17157e5e-1a13-498c-8d61-7f55c98d55ec", "indicator--12885583-798f-49d8-bfb0-02294720206e", "indicator--55da7574-64e5-4d34-aa01-8c3b0ac736f6", "indicator--b09580c8-7a65-474d-b3ba-c2d5dd67d07f", "indicator--3a538f27-9a4e-4dec-aa86-430ca7711f49", "indicator--8cd0f50c-5b13-4349-b295-77c01ddf1669", "indicator--6754f2f4-408b-4fa4-9a09-24f9ef1929b1", "indicator--015dbd9f-3a1a-4a4b-85a7-66292f56cdc2", "indicator--f26f410f-13d9-493e-a149-a13a41828167", "indicator--c98d1b1a-f9b6-4cb4-a29b-4a68e2ffa722", "indicator--3d6c33d0-78c3-4008-a364-6f59cb1fb091", "indicator--a0c19915-5383-4518-b8da-edd2cdac23dd", "indicator--34aabb08-9351-45bf-81fc-a849c02c3fc7", "indicator--9a3f35b2-d456-4d34-96f4-7eea4ed7a95f", "indicator--dd8578f0-4d5a-4327-af25-ab116b118d09", "indicator--b851e356-0cf3-492a-becf-b030e1eb0823", "indicator--c891aa86-aacd-46cf-9782-bf11d693b40a", "indicator--649da84d-46ad-44aa-bddf-6e7dc9c34a54", "indicator--e970d413-a1fb-4d02-9ddc-415d558a896b", "indicator--7fa758a8-78ed-4dc1-9849-80c2e6878341", "indicator--965e0aea-4121-4d1d-a4b5-719e370f2890", "indicator--073374fa-90d1-4e31-87af-fa6c08f91fb3", "indicator--919eb422-9aad-4756-bb42-60c1a4d584a1", "indicator--a69a02c7-4836-4d58-bf9c-d4f871c21c94", "indicator--26d26dc6-f2dc-4754-95d3-80d0c44295ad", "indicator--0d41759e-9dc2-4766-9a1a-046ad60a70b7", "indicator--f0b1ab96-36a7-4592-ab51-1053c04a4f9a", "indicator--554c2eaa-5f5a-4ec9-a70f-69f2dcc9cf81", "indicator--43b4c823-a3d1-48a4-80c3-2d5d2693de72", "indicator--98b24e35-9ead-4da5-a01b-df95d26bda82", "indicator--c003c025-295c-44a6-8e9f-cfd374194bf5", "indicator--74d786fa-604b-47d2-9049-24417b9a7e0e", "indicator--d4a467cb-1c73-47b1-924b-e3b473389f2f", "indicator--8358b830-fd43-46f5-a387-27ce641898ab", "indicator--54c4884f-1d6a-49eb-8429-b21515df92e9", "indicator--030b6d2f-1d66-43da-b087-5db5d05fcb51", "indicator--8f157014-5229-4f34-bb4a-1ea567d94d09", "indicator--1ce13016-6e0e-4cdb-b026-c1c7ab20dbf4", "indicator--b962677b-ae04-46a9-ba82-76cd5395f0c5", "indicator--69508d51-19e7-4a51-a269-7a007fac9a4a", "indicator--71e114ff-620b-4e8f-9a9f-36c190f3e4b2", "indicator--973f1a98-ae4d-4fa6-b36f-045e24b93b92", "indicator--45bce1e6-2d37-4c2e-bfd0-9b89ff3373f4", "indicator--37be4e84-b6f7-4806-a0ba-1b7718b362b6", "indicator--159672e3-06cb-49b5-b4d4-c28ae7b2c103", "indicator--31a8240f-f7a1-498d-a65b-e20752d48039", "indicator--af274cc0-832d-44b4-8781-4d5992302083", "indicator--670f6614-4508-48df-a38f-0f3ceffe7423", "indicator--ebe5bc73-4694-419a-8ef4-24d2c05c2713", "indicator--8b93764a-98ec-4f25-b47d-1fa8ad8e0dae", "indicator--35934ee0-52de-45b5-951e-714c30fa70c7", "indicator--6bd39ab8-4070-4a9a-a344-5083c887eb83", "indicator--f62cd12b-69c7-4da9-a0d8-ad0b70effb3c", "indicator--98244d55-5770-4f18-9e76-91b837962b83", "indicator--b9debc42-10b5-432e-87a9-50efcec8144c", "indicator--4eea2c35-cf21-4539-9b69-8cf2cc627042", "indicator--31f03b3f-af39-4e47-8a90-acd1715c8641", "indicator--890df18d-bc27-45f3-8e15-088020b95e16", "indicator--a62cf8a3-5e9d-4fef-bca6-396f30cfae51", "indicator--dec02087-1966-4ffc-a9e6-c147077105a6", "indicator--6cfcd341-3026-4c9b-bbe6-658c66f227aa", "indicator--4f1300d2-c0eb-4387-8e15-bc0c71c2f25a", "indicator--bda89919-6a29-45a6-8112-2919c99592d3", "indicator--797b4e4d-f424-4e69-8a73-ff2c27ad2187", "indicator--e31d16ec-af02-4520-97fe-a3ababdbe378", "indicator--ab614e27-acfd-4793-9588-a04f87375f1e", "indicator--cf37e205-9ec5-46e6-aaf4-8c75d3240add", "indicator--a479b8ba-3516-4c60-b814-804c95f8ac84", "indicator--be87a28b-ef2e-44b2-a3f9-17e8e9e17768", "indicator--ef74eb1c-738a-4955-ab94-9b177d91dce9", "indicator--2d76c892-f0ef-4775-9d05-ab8ab35140cf", "indicator--57c48b57-d53e-44fa-82ec-a1a47d4e916b", "indicator--f634f2f9-0662-498b-8cc1-273cfa43ee35", "indicator--6a197f50-b572-4e0b-8607-88deb82b169f", "indicator--8b619903-a5af-4ede-ad44-9b4ef9032463", "indicator--d925e305-c48e-4763-89b5-85adb2f45b8a", "indicator--90a74c6b-6fd0-4c22-9662-d95617b27a4b", "indicator--108b034a-0f00-476e-b49f-4cffadd8b05b", "indicator--5c800230-d97e-4c6a-a9ef-a3f14d87fb2e", "indicator--796d3c0e-3192-4868-a624-b5949b73a3e2", "indicator--bb7d0890-4b4c-4971-b734-d10c526fc60d", "indicator--e9debf63-63a6-48d7-8985-740d41f1b64a", "indicator--c0166a02-33ee-4019-9c1b-546c931a14d0", "indicator--27476028-d42a-4ea3-ba18-ca0806dd0d36", "indicator--0db85b52-c52f-4321-97f0-c3531296c095", "indicator--1c76e377-516b-4f61-815e-ce2e9786d789", "indicator--2fae3093-4026-4228-bde0-aa94adbd1042", "indicator--f0411616-77e3-4c27-b7d1-d1f0d1ea4301", "indicator--ee1f2f05-75c5-4554-b601-5b19b1c995bc", "indicator--5faedd63-6b75-4126-b3db-7e8324daf89e", "indicator--007cd5a0-3be7-4c95-a16b-e8f4b2b8497a", "indicator--1014bec8-c9ae-4743-865e-fd232d357e63", "indicator--e39ee871-37e0-4667-935f-8bcc37bb6c33", "indicator--c1fc45e1-3891-4828-b7fd-1fe6c844a66b", "indicator--4467059f-fb1a-4322-908e-87169ed0a010", "indicator--19add7c4-25d9-43d2-b20e-8b9de7d1b3cf", "indicator--1d9799d0-b7b9-4077-9a19-425bf1025de9", "indicator--eaaa5590-2f31-4eeb-8073-aa7e34c1db7b", "indicator--b70e3705-199f-4642-b0e0-80a5494d99ec", "indicator--e5d3f63e-e0cf-488a-9953-0b65678c5be8", "indicator--25765016-392a-45cb-97bd-ff717e68133d", "indicator--89467593-316a-49e3-9241-76e7b08f3ff5", "indicator--e3841956-69e1-4f9e-b52e-2281061861b5", "indicator--494ac264-1bfb-4e76-a095-46d03cada9cf", "indicator--b3302eb2-539b-411d-81c9-2bbe19cbf37e", "indicator--9ac4b45f-2ec0-48d4-aebb-84338a5cda26", "indicator--db49d6f3-8acd-4097-bde6-4ea88bf64ffa", "indicator--fa076a11-e032-4820-b26b-caefe0f0ec75", "indicator--f8e1ccfb-a6c0-4a08-9c73-be3c58883437", "indicator--0f55bcae-e90f-4575-8603-e574fa21eb3c", "indicator--25390bc3-4144-469b-9bbe-1b1924d2d519", "indicator--43713b71-88a3-4999-94f0-59e88b74cb77", "indicator--86b1ff0e-b2fd-4229-b388-a6b6084a072d", "indicator--ea463cf3-1853-42e0-9380-093e9dec17d1", "indicator--c03b1e65-ecc4-4438-a14e-36ad92bb2734", "indicator--8ffd573c-d438-428b-8e79-621d6eb5e185", "indicator--8e4b8765-04b4-46ac-9cc4-b37d21786124", "indicator--205e4222-4814-4e63-b01b-2115a20c9983", "indicator--e921d8a0-27c5-4d0a-916c-919f25599233", "indicator--b27ede08-d48a-4573-8156-9f0bfb7f1401", "indicator--3fe8878e-0390-4888-98f6-fc28fee88bcf", "indicator--6bb13528-3b60-433a-9cbf-2107a08bc5d0", "indicator--20a70ee1-f80f-4ba3-b642-b3a350b59e9d", "indicator--b29d164a-8e99-470f-8b56-2cf97a1a2d83", "indicator--088813b2-4b94-4d4d-9d56-4fa293dada2a", "indicator--22b76476-3722-49c2-a183-de9332699084", "indicator--08b3cc5c-cbc0-4e3a-a9dc-a5dd0b6e958c", "indicator--17d96bed-c04d-441a-8865-b1250dddfb04", "indicator--468ebd28-afaa-4a4b-848c-dcf9c57dd2a0", "indicator--37bcdaa4-4c70-4efc-836e-28444e7d3447", "indicator--334385fc-b55f-4a43-bf25-2c7b24fe67cb", "indicator--04e335c9-07fa-477d-bd4b-bfe0ffe4ddba", "indicator--3f856729-2486-4a24-940f-96cc20c415d2", "indicator--e50e0bb4-6d02-4ce7-a9b2-653513e43daa", "indicator--2c23cc6f-7ff6-45da-b383-d8714feb5f28", "indicator--7b0200e6-f465-48b4-bb83-11c4a4c60273", "indicator--6781fd67-2b56-482b-9bb2-b05b86f37c92", "indicator--7aad49ef-0ee6-42fa-aa0b-1f827b204313", "indicator--8155a075-b3e9-4808-bccc-7f5b0ab53cfb", "indicator--923cfe87-59bf-4ecb-9e4e-d5b96d4b75f2", "indicator--2eb09ea4-5dce-4926-ad2a-0a241d373d5f", "indicator--9a34b58e-9632-4789-baa2-7b8fd0dfe019", "indicator--a9f10061-5b60-4953-b441-ff6804f804e2", "indicator--0c3f90b9-c83c-4996-b4e1-e8e9193f0922", "indicator--c4b6a217-3a56-44b0-938c-18794b8aea46", "indicator--9d3ad909-fd1e-4073-ad59-dbbcd160d653", "indicator--9d6501ba-ef8f-4ca8-879f-23a1ceb01824", "indicator--0e77eb7a-6a0b-4a9e-b24a-8dfb629e9e75", "indicator--51860224-4118-4725-b9c0-e3fcf9c60f41", "indicator--f371553e-63b1-4f97-bdac-bf3ad2b04f54", "indicator--7a253a7b-f1b1-4e4f-bb2c-86c64a953d13", "indicator--68bc2639-961d-45e5-abf0-cb72dcad74f3", "indicator--f127fba7-df66-4e53-b7ae-c74120a87806", "indicator--d901be81-161d-438a-b35e-03d6babe6be8", "indicator--7d27a416-219a-47c5-9c12-a61898887f0b", "indicator--82467411-909f-4e50-8426-3c7fd49d9ff3", "indicator--babc11ef-981a-458e-a18a-c276ab9f4c90", "indicator--ba6b0cd0-0a53-4488-a60a-341940116134", "indicator--8cd69efb-f711-4f2f-99b7-cba639777e55", "indicator--8fef52e5-42c2-4d65-a938-f3e69592a4dc", "indicator--d27699cc-e727-4d01-a16c-006fa72497c2", "indicator--531e096d-be58-4525-95e3-d80fd85ee495", "indicator--14eca7ad-8acc-456b-956d-903526083287", "indicator--f793aded-9185-418d-8118-48e8a5d1b2b5", "indicator--b5d25aa8-2e47-4615-8fe3-27e6180a7c53", "indicator--a060b516-a4cc-4dcd-b193-99a89b7b7009", "indicator--fd23b4f7-2773-4370-8fff-b9bfaaff69ef", "indicator--87769e28-2f43-4d81-b436-fe3071d02568", "indicator--f0f086d6-b2b0-441a-adf7-263d27281218", "indicator--fc14b29b-d982-4642-85ff-e9c0c19a33cf", "indicator--7df78e50-b236-4c8f-aae2-513d3f759e32", "indicator--5dc11080-d222-4054-bc24-e0eb6ea5e70f", "indicator--ad1c9038-d7db-438d-bbb5-8e2386a7a0d9", "indicator--e6ffdad2-bf0f-4734-b465-465a7c4e0a09", "indicator--2d5c43fb-7e30-49a2-abcc-c2758b3e24b2", "indicator--ab4f7d68-ec27-43b3-8f6a-dfc376d9e3a8", "indicator--fb347ced-2e00-48a7-8ed1-faf6b1bec56e", "indicator--5a3e8800-aba4-4a72-997c-e7b89b97e22c", "indicator--00371f3f-b3c1-492c-aa22-acb21ae25091", "indicator--86014902-7bd7-40c6-a91a-9d39dd809e43", "indicator--6c087593-7f53-457b-a5c7-75f5427d99e2", "indicator--3aa09c18-e13f-4c83-aef7-295af724dbe5", "indicator--e15f1dc4-13ac-4698-8754-3311bc30d9dc", "indicator--f8a845ee-6af3-41e7-a39e-fdbe7cfa4117", "indicator--57abc4b7-20d7-444c-8112-4f6928a0c7f3", "indicator--d11225de-074b-4820-bbf1-a5e1e03b2297", "indicator--b82ad22e-2ca3-4c37-ac7b-eebc1a5aefcd", "indicator--b8f3bbf4-290d-401f-97f4-ffabbbeb2c8b", "indicator--35c0dcac-0480-4b97-b74a-797ca37add41", "indicator--3f78a285-156d-47fc-84e0-bc4b0f020299", "indicator--67f4e1c6-1622-4554-b199-bfdcb525d87f", "indicator--a005d3df-659f-47e7-8b1b-961dfebee485", "indicator--b98253fa-189c-4721-b6f5-701cefb08b93", "indicator--ee7d5d26-a795-4afd-96eb-63bbaa097a46", "indicator--d698f1e4-b407-4cf2-a562-5aeb62784f02", "indicator--57023e76-652b-4851-8094-f42f6bc308f2", "indicator--dbe1fdb3-a4d0-4fc0-9bc4-7e68560bc89e", "indicator--7ea15dad-9958-40d0-ac07-328a7a7f215a", "indicator--8c0de554-c03d-4a54-b826-59ff5b9ffb60", "indicator--9426b314-c1cb-4398-8271-573283babf95", "indicator--1aa0c9ff-8bc2-4e6b-b0cd-3658bfeedf8c", "indicator--ef05eb11-34e3-465a-b76d-511bedfd9bff", "indicator--6ab07be2-2129-4a14-8ca5-d57e98e65a94", "indicator--d984c8ca-8e65-4651-8e59-bb95c50e217d", "indicator--affb063e-f4f1-4ec0-a263-47c015c436e8", "indicator--ba365646-ae7a-4277-8c8b-5634da7aaae9", "indicator--189a49da-c963-41c0-a836-297d0f9f2573", "indicator--ba5c1521-762b-4857-aec8-9f1fb3ce78d0", "indicator--0a56d4b8-b47a-4f52-9b71-ca5d4beb7458", "indicator--fb84c841-fb99-4761-8aa5-f857c7d73095", "indicator--c353e0b5-ed99-4b37-b726-af78090180ff", "indicator--0a8b21b2-e2b0-4da7-8485-e14f27aabd72", "indicator--6f5bde95-6779-4f2d-ba9c-81b2d00bb448", "indicator--33e07e3e-61c3-4c36-bbbd-0d597e0faca6", "indicator--713b7384-5cef-4514-a3b3-7e87191a7117", "indicator--afe65294-90fe-47be-a8f9-8f6b47552cd6", "indicator--6cf7a7fc-1a5b-4301-b703-15c1351d1040", "indicator--1deff4aa-1472-41b6-b497-2a140df9af00", "indicator--4cb5e9b4-976d-4c25-8914-c3ae65d291c2", "indicator--c32b2b66-0019-4f44-9083-c9ad11bd7ed8", "indicator--901883f2-220d-42ee-a773-1462159bfaf8", "indicator--3aa09781-857c-4072-b62b-ca1cca1195f8", "indicator--e46515e4-f8a4-4cb1-a89b-87a34217c3fb", "indicator--1d54a16d-b2a4-4987-8ecf-192fc2d25e62", "indicator--bd261864-82aa-4ad3-94bb-a1ebf8c6b9ad", "indicator--d4cfd95a-8aae-4a47-a804-f740964777a1", "indicator--9dc9e2b6-bf3f-42b8-8565-444e968408e3", "indicator--60c40bba-8b1c-4efb-98eb-8fbcb3bae6bf", "indicator--5321ed63-ea9c-4c6b-bf43-1e32757350c0", "indicator--c957a25d-5898-4575-a459-1d1621bc5796", "indicator--8610fd18-8378-49ff-bd02-4bcce7361312", "indicator--c1dfa960-0208-4891-9df2-78e0b2908801", "indicator--51c6b45a-9e47-44cf-b966-84330415b0ec", "indicator--279c86b9-ac75-41a2-8496-8092ca3a9eff", "indicator--8e56f540-475c-4c25-910d-fe74b02fa0e8", "indicator--75c97b7f-1811-419a-809b-1165d21496f8", "indicator--1317f3ff-2a04-4836-82d9-866d389b3e78", "indicator--a6188869-57ed-49f2-ade8-4a7363b7aec5", "indicator--4df74aec-778a-4a24-8d4d-f2de9b6ba798", "indicator--249d21e5-6873-4d30-b9b9-c1a6801b909e", "indicator--fe8878f3-53fc-45de-97a2-b422883d14af", "indicator--43df72ed-32fa-4be5-b738-25835238de3f", "indicator--dadda6b2-d070-4416-ad11-d7e7a1db947f", "indicator--622c2cd2-37c5-4257-9138-110aa8d7bee0", "indicator--5d3741e9-7ce8-4eab-87ab-92e5e5e2783a", "indicator--d9e617b8-b01d-4736-9672-fed698f606c0", "indicator--3cd6a53e-b443-48f0-8ec7-23d86a9aaf32", "indicator--6ffc5cd4-b3fc-47ba-80a8-7a7ed02897cf", "indicator--39185c4d-0c74-45a5-a132-797cedce0bf8", "indicator--c8453ad4-4bf4-4c71-b61d-28868467114b", "indicator--41e741bf-7a61-4ecb-bb02-fc3993eec954", "indicator--9db25f04-a0dd-483c-8bd8-01030a7bc8d8", "indicator--bbbfdf0a-a7a9-487e-853d-f4039c858802", "indicator--da6231de-005f-48d9-a26b-8f9fb0f2094c", "indicator--5dcd7956-33ca-41ab-8d25-615399cbadba", "indicator--d507f19a-ba16-4d04-8b74-38f1f220a0a7", "indicator--329d792b-ed44-4221-ae44-b94c48091df2", "indicator--c97bc994-0df6-48f6-a39f-f9a63841e8a5", "indicator--15b1ef33-8287-49e0-bdd7-07be09470d2e", "indicator--9cc15bc0-6a4b-4d2c-b0bb-06b9e75f6ef7", "indicator--7a467ce5-547f-4abd-9cc8-5ae54a99c61f", "indicator--a0910191-56cf-4dd1-9bd3-7ddf327545f9", "indicator--77055c55-1d11-4ac9-8a06-9504b91234c4", "indicator--1d049c81-fbc8-4906-95dc-6c4598dd8ea5", "indicator--7ea01c5b-96ca-4689-b89e-1eda7305c13e", "indicator--f63017a7-15d4-4fbb-a379-3ef75a726103", "indicator--cab88f47-d9ca-4666-8a33-0a6211862661", "indicator--083c7c00-c18c-4835-a2a0-5c5ab7ae50f9", "indicator--dff57b8f-d503-4ad8-a2a5-9d0414d80907", "indicator--ace27b9a-2de4-445b-871d-af12e03a4398", "indicator--ed09b82e-7dbb-4750-aca0-a81f976c318e", "indicator--6ee1d592-211c-4fcd-b19d-48cd08958b3e", "indicator--c5084a10-4a35-4ae8-bd08-1995432caf05", "indicator--6416173d-40b6-4050-857a-eb5824e0e1d1", "indicator--355d148e-0e71-45f9-9bb2-ccf6a8391def", "indicator--4d5b0866-9cfd-426b-ad81-61ec8be94b8c", "indicator--25c6bba7-fa4d-4743-8f3b-1f73920405f6", "indicator--7b560635-c8cf-4479-9d3f-1bf5fe58cd6e", "indicator--5cf417d2-25d8-4a3f-9549-4247d064ea5e", "indicator--cadf6bfd-4ab2-484e-99fd-2e086c2bd49a", "indicator--e2d8f78b-363c-4430-a033-ffa5a8f9c18c", "indicator--c8508c2e-61d3-45e1-a8c4-706bb3128c48", "indicator--c675d71e-0b0d-4273-8044-cb9404f94b44", "indicator--afe9e877-56f8-4bfb-b539-a514cdc17b1f", "indicator--b0a47ef1-7b4d-45f0-aaa3-cd682d556d0c", "indicator--f6d39124-9e85-4c5c-ae27-7437e9813192", "indicator--726f39ee-4d14-44d5-aae9-ffd51c7bbe7e", "indicator--94f1838c-d447-4f11-93f2-4f2d62926464", "indicator--6f2ac2a4-cd21-47cb-8a45-2552461543f1", "indicator--df54b290-189a-4d8e-82c5-092b81735fa1", "indicator--4fb7e1b1-57d3-4295-9e0c-925e8a398efa", "indicator--fdcb6791-af71-417e-a8c8-fe1b128d4e9c", "indicator--5ef0acdf-9a33-4348-921c-823597e816ae", "indicator--656c2abf-b81c-43cd-a066-9e4ba14e2136", "indicator--c117526c-9736-42ae-8afa-dec1c1f7aaf8", "indicator--90c179cd-8025-48fc-85b1-61c642b70857", "indicator--78b614c2-d2c6-43ce-b7f4-1db2ca133787", "indicator--b4f64b5d-efb0-4933-948a-b4afc5d8d31e", "indicator--9156a5c9-de14-418b-8cf4-01882c0f916a", "indicator--36310503-bd8c-447e-ba1b-1c6a71119edf", "indicator--04ec8509-6f92-40cf-9f78-53c51ae802c7", "indicator--57dd17b0-0982-4d90-85ef-6be2064e2b51", "indicator--30881583-18d9-43aa-b5cc-b3750424a6e6", "indicator--07010f68-071c-4e33-8fbc-66f445d11a52", "indicator--18c2463d-a9d7-4fa0-bba6-4e2cf5a07f22", "indicator--d6842553-1f3e-4d65-a132-234f8c955245", "indicator--04a85378-71bd-4398-b006-5d8b3bee2815", "indicator--442474c0-fff7-4d60-bf7e-f0ffdff3b803", "indicator--a102b623-7b44-4a52-a291-b2b92958e212", "indicator--28bb17d3-bdf5-4f06-a0d6-fb9099bc9bc0", "indicator--ac0729d0-4a97-4ceb-84a4-4f9b3d2c1b79", "indicator--f1a9941d-91d7-4ddd-9f67-b9aea441600e", "indicator--5478cdfe-78ad-4525-aede-ee68fc70737e", "indicator--4366305e-b7d0-4b62-96f4-5325c61dcc0c", "indicator--8b3b8c45-91e2-43f9-bc57-d3b68c53de57", "indicator--a6d45ffc-4738-428d-867d-015bc7468cc2", "indicator--46eaf883-acad-4a1a-b3a0-0f84a383fcbe", "indicator--4b9ba682-df6e-4715-a8c5-11461d21173c", "indicator--2a33778c-53a0-494f-a91b-3aea1367d91a", "indicator--58ae90ea-3acc-48f8-b3ac-e562c79891a7", "indicator--04baee9d-f7d6-4835-94a2-7d8cf31d721d", "indicator--0947096f-8424-4b43-bd48-3ec95cc8b8e6", "indicator--40627f82-f54b-4827-a30d-82fa60224d5d", "indicator--12b56779-4eb7-4837-af03-78acadf6b658", "indicator--4d3a159a-2271-477e-9300-e63d587f7141", "indicator--d39cd663-c8e3-4f47-8a59-1de7218fd7e5", "indicator--1644ba19-68cf-4893-9e2d-18b672ce53f8", "indicator--809687bb-819d-4055-9369-764bde0ec042", "indicator--12ce33d9-b9c6-48e0-b3f5-a2b0fa647867", "indicator--bec67533-e8b4-42df-ac5e-e9ddeb6d5014", "indicator--186d28ba-44a4-480d-a36b-aceafd8c85dd", "indicator--059f07ef-ef4a-48c5-a162-eba1875590c0", "indicator--1f710d00-6d80-4940-abcf-927cf91ccae1", "indicator--64f484e9-6e0b-4e73-b2a2-ba8129832c02", "indicator--5eee88f4-ead8-4d20-935f-5810550237e7", "indicator--f8692bfb-ce89-4e62-94b0-34e15aaa03ea", "indicator--b20ccd54-27e0-43d8-909b-de5327b93aa5", "indicator--325e5577-a965-4446-b4c0-a2a1e0c9794f", "indicator--639b92c8-a69a-4dfd-b526-4ff52654ee0d", "indicator--227e28a8-24eb-48dc-b10c-b93b1bed74ee", "indicator--c405b495-a942-48a5-b964-1d832bf15c34", "indicator--b5cf3962-2920-4a76-8128-70d7be05c5cf", "indicator--c1629150-7784-4b96-9868-2a38979f32d6", "indicator--edc945f5-415d-4f43-acdf-0dde34ef4c9e", "indicator--1ba307cf-9dec-4cc5-aeb8-8f86fee41b83", "indicator--9ec0dddd-e1c3-48a5-88f1-71fbb41151f2", "indicator--656e88bf-ccc9-4a36-888f-43a598aa36c1", "indicator--794c6673-34f8-405d-a795-8de35cdbfcc1", "indicator--97fb22ec-47cb-4ce3-bad5-5f98ce061bb9", "indicator--68595821-114c-496a-914f-7c17f40b62b8", "indicator--aa8d6b09-fbee-4842-8bee-d462dc26265c", "indicator--57c2a21e-e739-4d68-b45d-d95066accf5e", "indicator--9bd1fb1f-f9f8-47ce-b141-352addcccee5", "indicator--2feb8b44-a63b-4508-900c-afbb078d4595", "indicator--e1490a14-e7cb-48fe-8b3e-a370f17fe419", "indicator--532e70d8-12d4-49c8-bbc8-7c8e35eb6aba", "indicator--30174e84-5197-41b1-b9c5-b3e60daeed8d", "indicator--89954a80-aa68-4c80-93ae-f168b9589b40", "indicator--cb5e828e-7b9c-4e1f-a0e4-e16548c7852a", "indicator--b4e5438f-3761-43a5-8110-e7a6f874c106", "indicator--975c6ea0-f1ad-4343-ba59-a700f8bf1c06", "indicator--e765f1a6-6452-4a65-bacb-6187f8467b8e", "indicator--aa58d417-adb0-4279-85e8-815335e541a1", "indicator--110273a2-2f85-4715-a469-7b0dc57096b9", "indicator--bd3b1750-ec25-4981-a919-c30b6a0767c0", "indicator--a0663448-225e-406a-ba2d-930d7fd5728a", "indicator--08039933-a051-4851-b259-1cba93eed4a1", "indicator--41a0f0b3-5282-4ba7-81b8-2531ca3d1e7c", "indicator--6899609a-8c87-4a77-a2cb-6ae8ce718149", "indicator--f76f44f3-7686-47f8-b46a-b4263d446972", "indicator--1b3de2eb-6f68-4bbd-bcc4-89d5e94526c2", "sighting--d2b159dd-7dcc-400d-8e60-7589e265e0d4", "sighting--1c019e97-0a40-433b-9928-503928dbe157", "sighting--8a179808-eef5-41ac-9976-5fdb5d9e14a1", "sighting--e9949129-9bfa-477a-8a1b-951f98f53c65", "sighting--c578eda5-9258-4a60-b0d8-07931cf26d99", "sighting--dd27ed2c-bec1-41c2-b47d-9bdb3f7a4f6a", "sighting--06dce13a-45f4-4a92-a0da-be731ffc971b", "sighting--5f58fb8a-e187-4b77-b839-e5f385f80f0d", "sighting--9057e91a-fc3a-4707-a513-39ac3fb10380", "sighting--38b45a2a-ad64-405a-8d8c-069ff23edc92", "sighting--25a94907-a788-45d0-a4ab-84cb853fd8f8", "sighting--f6d43893-879d-4c1d-ad94-0756d10ff296", "sighting--ac524c4e-f8e9-43fc-971a-cc218b962827", "sighting--b7b618b2-8753-4b28-bbd7-16d728f776a4", "sighting--dc0678eb-a225-435d-a741-306e127ab7c7", "sighting--e4d3573f-3eaf-4af4-942c-c6ef9450bd6d", "sighting--fdcaf7c2-1b0d-4bdf-b6b0-3a57adfcb3f3", "sighting--3d272dc6-42ca-4885-8907-0cdacc5129eb", "sighting--f515af17-72a1-46bb-8255-02893567e9de", "sighting--481d4b76-72dd-4838-b96d-a272432d7c67", "sighting--ca1f9bde-4493-4660-bc96-9034b2ec0f50", "sighting--8e0fa94c-4cf2-444d-a703-16296d51ee78", "sighting--02adfa8f-9f19-4a00-b626-e5cded4afd95", "sighting--c33ec697-834f-4e82-b61f-2c587a29be03", "sighting--bf728e5d-6597-4d0a-8ef0-e8e6768d519c", "sighting--7cb8bf27-57a7-4a1e-ae64-c917f94b4469", "sighting--3cd117e6-1695-484f-9cb5-02ca921cb36b", "sighting--a795193a-8bb1-4cb4-87d8-78ec1568ae3a", "sighting--f08f3bdf-930b-4b0f-aaf0-3c450361361b", "sighting--a1c74216-3b35-4b52-94ff-4f252c90a9a1", "sighting--4b09a607-9a7e-4b09-91ed-2574c77ed67c", "sighting--bff880eb-b1c6-4c44-979f-4a822803395a", "sighting--d2d0e336-15a2-445a-a272-e7ad118289ec", "sighting--3a925110-c22d-44b6-882c-ff2b8f880ca2", "sighting--da10708c-22bd-42de-b103-c9ee0783c0a2", "sighting--e63b9899-eff2-4d39-82be-cb14daac2ac3", "sighting--110cf124-65be-4674-966d-efaaf6e18459", "sighting--dd0046c0-4434-4de6-9f9e-717f4259d353", "sighting--539d3d04-b837-408b-b577-fd5e189b928e", "sighting--1f906fab-fc6e-42fe-a773-2029139eec8d", "sighting--d91b52ea-d672-453e-8f70-228044368822", "sighting--55f6c0d3-1b83-447f-aa33-24eba9f78269", "sighting--4659e20a-2803-44f7-8f89-b96dac5eeebd", "sighting--1b29eb78-e026-4242-87df-60ddc0856a9b", "sighting--18807b37-3ba1-4619-be14-55e2b664cdcd", "sighting--c12685f0-0695-4099-90a3-f3cd4d2806d5", "sighting--de50e910-daf2-41c3-b3ad-5235e35e5607", "sighting--c63bac93-21e1-4c07-974b-f5ccfd8bed87", "sighting--a1a1f675-ed86-418f-b57e-62ae7c22e90e", "sighting--87ef9123-554e-4720-beb8-b455d3057fdb", "sighting--f381cf95-e7b3-418d-be3b-20db996926f1", "sighting--c32b9a87-2439-49b8-b2b4-adb361de3717", "sighting--9444fce4-5e28-4848-8e0d-6d7db4dc29b7", "sighting--aedba252-3c52-4a4a-bd90-45ca5ce0cd3e", "sighting--6906cefb-7779-481e-bd97-9d1ae958c264", "sighting--c1f17d35-9938-47d1-a17b-da68fc057506", "sighting--fde4a554-2d8f-44d4-9e30-d827faddfbc9", "sighting--93763bff-54e2-4e1a-897e-2bf8449fe9c8", "sighting--80cdb07e-bd00-40d9-9698-171ee2ccef11", "sighting--a6cb92d5-5f93-4c4f-a6fd-37db3375d49d", "sighting--825d6017-ce80-4676-828c-bb0a9c214b0f", "sighting--d67f4bc6-49e8-4dd1-9913-b163a9a43fe0", "sighting--cbc47059-f0eb-4496-a892-290bae2550b7", "sighting--f17f7504-6ca2-47ff-bb1a-90ff4dce1cc1", "sighting--f59c4aee-83ac-4106-b705-e3e66f68d34a", "sighting--25389a6f-8fee-4081-b2e4-32af195274fb", "sighting--e3a59355-177d-40e0-a135-bf8291130506", "sighting--1b5e51ac-5cdd-4424-bb0e-c685e14c209c", "sighting--fc74a852-322b-4cc2-9d82-423e12257748", "sighting--a2ef2fd5-4c7a-49a4-9591-3ccc89610314", "sighting--dff9707e-ead4-4898-b913-be1ebc7a9d22", "sighting--65d86d98-5480-4b1e-9c81-42f3848cce6e", "sighting--8c1a0199-b4ec-410e-82a9-7de876754bec", "sighting--10be9803-e4c1-403c-b294-4f6e14037cea", "sighting--459ee186-4819-4166-899a-35b91b9be80e", "sighting--4e7f9496-926f-4c0a-98ca-dce6ee0142b4", "sighting--416232df-6721-4ae0-bedd-3c34f003b71d", "sighting--6d652a76-fd46-4fbb-993e-63598099d957", "sighting--94d1c5e7-4fd6-4e1c-93a5-4be67d25f0a3", "sighting--677ff530-94f0-4d00-9fbc-78b3e9ad5fb1", "sighting--1a33eb5a-72dc-4569-bc7c-36b032645142", "sighting--3d8b8dcb-c9f8-4502-9d3f-db6d3dd90e38", "sighting--f1482e7e-edb4-4754-bd34-8232e805ba8c", "sighting--692a88f7-6cd0-4311-a1a7-bf54891939c7", "sighting--c2697bff-cfde-4029-8448-e24bc8d1f9bf", "sighting--a76142a7-f131-4fba-93f5-d10f911ff42b", "sighting--c4e1dae4-578a-4699-ae67-36dbecbea906", "sighting--677f1bb1-51b4-4061-8f2b-de837ec4d968", "sighting--01276e15-ea6d-4470-98b5-c35ca2173ebb", "sighting--b90396a3-7f26-4dd2-9a76-4aea4bd99523", "sighting--e94c119c-ae4c-413c-9666-2e8c43894a89", "sighting--46a4dec2-c423-4175-ac00-f98b8c78e464", "sighting--6cc2fed5-ab5a-42bb-ac4d-d874780afa18", "sighting--6f122304-783b-4d4c-b55d-f9f11178e9cc", "sighting--0aee2307-43ae-40ee-8a11-883a2d121c33", "sighting--64460273-5fdc-4e86-982d-df70fe4d412c", "sighting--865c569b-45a3-4e43-829b-155444ab548b", "sighting--be07ef9e-4ee7-442a-af83-3ca416e27891", "sighting--0f83dee0-602f-4d0d-9d39-2aacefc20922", "sighting--9e253fbd-ee23-48f2-ac78-645e347e8fc6", "sighting--c7c66281-e663-4b07-b9ce-44ea16501881", "sighting--87e718e3-d85e-47dd-8a62-7ddbd558f62b", "sighting--3dec82dc-89b8-44cb-be68-c0720c925daf", "sighting--0be29bae-5375-471d-a93d-9fbb694038d2", "sighting--7b8dc33f-ba88-4d63-a20b-266b0b64db16", "sighting--15a16a3d-f041-497c-b757-de1cb881777c", "sighting--e7cd5612-84a0-4bc3-9ef4-ee7c2e4744a8", "sighting--4a045973-d35c-4c3f-a05c-0ed93e884010", "sighting--366de9e9-b5fd-439d-bd8f-4e1960cc9122", "sighting--a82f4125-1ecc-4b44-a2f0-91e721d9d5d1", "sighting--09ba18c6-eab5-4252-bed1-84621c893494", "sighting--24fec1b9-e3e5-4997-b683-8baf1427ddfa", "sighting--e42ce0fe-2457-48da-babc-0b740db17843", "sighting--649c3a44-bc0c-4913-9adf-f25f88560e3e", "sighting--cb91848b-66ad-44e6-9f86-56136a3ff2b4", "sighting--5350427d-42b5-480b-bdff-5f6e2cf811d4", "sighting--7ce2ac53-7ae0-4a52-a92f-a2f240100ec0", "sighting--8ab08765-130d-41a5-982a-771e4e5c93a9", "sighting--78e850a8-522e-43ac-8ef3-da87af1e4e63", "sighting--83cc87b0-c9c5-40e4-b2ee-f23be69e7c35", "sighting--8f1dc430-5b50-4fdb-875f-72beaf38dd19", "sighting--c9ef553f-a726-4fd7-88be-5f239fd4dc9f", "sighting--d7b7b55f-cee5-4399-b835-fa35ce319148", "sighting--30abb873-3a7a-4806-ab5d-258658262cc0", "sighting--5a7d392f-af73-4158-8241-749741534e44", "sighting--4b13aedd-3a2c-48ee-a5be-44d0cbd9cfe3", "sighting--50b10908-aa14-4369-8f93-3873f268c487", "sighting--266f5cdc-088d-4745-a138-700a0a3960a9", "sighting--daa41691-b645-408f-8a98-4211d1076689", "sighting--df097e11-73ef-4a0b-86e2-1d0360cd00bc", "sighting--13ecf847-2b37-4b79-9f28-cccc76f10822", "sighting--c0ea8458-a5bf-4797-a104-f8865fd392fa", "sighting--579799d4-8d71-4f57-8af3-31ecf773eb08", "sighting--331dfd47-8ce8-4569-8710-256f20405e56", "sighting--6a77adeb-1029-4d54-80dc-f8deeca630fa", "sighting--af3cc56b-8352-4e2d-8e45-352df1e5024b", "sighting--237831e9-a6ee-4beb-82fc-0849765529a5", "sighting--5b058f43-98ed-4896-8152-e574f05dfa43", "sighting--4a4b51de-0f49-4144-921d-f728f83e3a70", "sighting--25c86a35-4a5b-415f-8c81-ba16e1adc832", "sighting--868866fe-ed1c-4eb0-97f9-aff8dbf1b746", "sighting--bbbc0586-0485-4b0c-81b1-b00f33ac98b3", "sighting--fede1b9a-893c-4a40-a8e1-2562e827f421", "sighting--2be38db1-9cd0-4f65-aa40-add11e4a9685", "sighting--dcbe59c2-8af3-4ec9-95e2-61839f57c9e0", "sighting--b6631c5d-8946-4b3a-85ac-b9e267356432", "sighting--da0d0c83-2746-4816-9086-66aa8c09e17d", "sighting--b08656fb-39c5-4be4-b83a-023ae679cfd6", "sighting--9932b10a-6779-47e7-aa8b-f39bf56b8df4", "sighting--ccabdf6e-8962-4222-98b2-f715f2f6fb76", "sighting--01aa6f3a-7066-4f8b-8fa6-d9831e5aae3b", "sighting--ce7b1971-9840-49f0-a866-d5ffd7fd460a", "sighting--ad6ceca4-ba6c-4834-9308-8772378b0dd9", "sighting--e25b352e-5de7-458a-aae7-f467dd2af9c5", "sighting--ada29070-962a-4884-9a13-43e23026f00a", "sighting--9e7b04e9-be7d-48b7-9142-2d5c52b99dc4", "sighting--e9e8d9f2-27f4-4fac-84de-89f9a2fa8fb7", "sighting--8030fac4-2e57-4b1e-a272-faba0dfeafe4", "sighting--419608a1-8134-414d-9e02-122a1a4294b9", "sighting--3688ffb9-c42c-4a7b-8539-0c57b87862bc", "sighting--85a27c3c-e014-4730-8a9d-9f24d8c14c2c", "sighting--78a9ff30-182f-4593-879b-b4501075d783", "sighting--d29ccef3-511c-4fd7-8c98-d3e530bf952f", "sighting--e3916bc6-9545-4c8a-a98d-79011c3b9191", "sighting--5d3af134-2b54-4d60-a301-ebca51fcdf86", "sighting--d750ca3a-9448-480b-b94d-66e2634b9301", "sighting--c8e365dc-c873-49fe-9bfc-d7ae26839a13", "sighting--20c544ce-27b7-4a67-a155-daf9be683606", "sighting--4fd2b780-a856-4f94-9554-a9287d41e588", "sighting--82778608-d5af-47e4-bc8e-bedc394a7a28", "sighting--fd40cb19-4e08-4e47-b740-188525e0c353", "sighting--9459fe01-03f9-43c0-8c3f-345ccabbf91b", "sighting--81695fb1-2b4b-4d53-ae4a-e7bca14ef859", "sighting--b25b5e50-63b2-4bae-a977-f22713c1b04a", "sighting--d81ac55b-1ed6-4d5b-8952-661beb19b2af", "sighting--74638d42-9e53-4cea-b16e-732ab0a9b9f0", "sighting--409052a9-f671-40e0-b679-d9711f66af57", "sighting--2facb553-2834-4ba1-bf81-2a7c916142a0", "sighting--a343f9d2-cecf-4229-b039-dc34f29dc61e", "sighting--47650612-9573-4017-8ad6-67512c1296aa", "sighting--5fca1ed4-a093-4721-b75f-2d829ebeec7d", "sighting--58d6a38d-ae7a-4cfe-9a0a-f37330ebd395", "sighting--6af64c28-df7c-4692-85e7-7ad3aa288c84", "sighting--59396413-1909-46b0-a7b0-8d641cfad0f9", "sighting--adf639bc-aed9-4fb5-a181-274d14881e1d", "sighting--3125bd25-c1f8-404f-91c0-60d233fe7e29", "sighting--55d876fb-6dbe-4c27-9de0-2a467094a8f1", "sighting--957e8d44-54eb-4f6f-990e-086a4bb53eb9", "sighting--f1a2f773-94ea-41c5-963a-7666139b3afd", "sighting--b592b514-04f8-4acd-aac1-60c59d14f4eb", "sighting--7eac9213-1949-4299-b6e2-1aa974d1c628", "sighting--2f5c9da0-3388-46e1-a593-cef8d7c2d945", "sighting--12d86112-96f7-443a-8c7f-410b44e20c8e", "sighting--7373840c-8a8c-4c81-9d7b-1418623ee2fb", "sighting--60967a2b-66cd-4421-ba81-ef48b8898793", "sighting--772a250a-e0e6-438a-b437-e7f7d2605359", "sighting--97eb5487-1264-4cb9-929a-b72d92926ca9", "sighting--bc8223e7-e68c-4f2d-ba94-6f5098c1098e", "sighting--c2ee9f2c-0347-4dd3-8ad5-aa92296eebe3", "sighting--4d3c9a19-2371-4b8a-95b5-dbd0f4c78047", "sighting--96096c2a-1002-4003-84bd-8448f2ed1246", "sighting--39a9d058-5ae5-4b1d-9a6b-34d4238f623e", "sighting--a8ee8b05-47ff-41a4-b1b7-8f80c158c356", "sighting--b573e56b-dbd9-49a6-a9b8-939977d58103", "sighting--6ead2b6e-a194-45d8-9eb4-4cd77937390b", "sighting--538ec146-e725-46bc-a1d0-7db3568fb4fc", "sighting--7f95d539-b295-49da-805d-d40676a7e454", "sighting--1477d5d3-ebad-4836-88a3-60cce1b4563b", "sighting--4b88a7ab-666a-4944-acb9-87d1e8d147bf", "sighting--eaab8356-35a3-4606-a796-eaa1aa38a6bd", "sighting--16305cd4-daf1-487b-b405-2d7ce24f4a6b", "sighting--8fb5c7e1-95c0-4051-9560-f6a7e21f1852", "sighting--745e1ec3-adc2-4313-b955-6969fb73304d", "sighting--022cfe84-79d4-4fe1-bfc6-1b23b66aeafd", "sighting--9be4c305-4ff4-4b69-b52a-6db14077ff88", "sighting--9862fa7b-90b4-41da-a1e0-0721e4d1e41c", "sighting--d17fa7b0-4082-426d-86bc-b09368c97dfc", "sighting--1d4741ea-5d7d-44de-8290-a07593d6663e", "sighting--5ca4b8bf-2c16-4688-a618-009fc73f7b9f", "sighting--d8ac8f12-6397-4d17-b23a-51d72428eb4f", "sighting--b3a1805d-efae-43dc-9d23-55fb76d8241e", "sighting--7e299821-52af-46f4-96bd-f9a0060c24da", "sighting--a963418e-c491-4a2d-9931-e9d7434a6aa3", "sighting--5ef5c4b1-0938-49ee-a2e4-145c0fa17bad", "sighting--3c8a7991-2cfb-497a-855b-a85b2178bfa9", "sighting--548f7938-001e-4089-b2cb-fea96df9e1e3", "sighting--38fe1221-04c5-4c9c-98cc-57c2e3041286", "sighting--8f127d27-d517-4030-a0b9-1cf0e393739f", "sighting--48c0b68b-8ffc-4a44-9aa4-f23933e13dec", "sighting--5a0e023f-a7cd-4b9b-a7da-01bfcd399c3f", "sighting--c7c5c4c6-f46d-41f2-aed8-7e0b4c552858", "sighting--69214895-7821-412b-b27c-e9dee071e030", "sighting--472a963c-451a-4164-ab79-e24eb90d283f", "sighting--0c0d7f9a-1ff1-47bb-b8e4-943655ab531a", "sighting--f8e38ae5-b8ad-404b-be2f-c5c905ae814b", "sighting--f513200d-cf09-4a73-bfb7-66fe51c99666", "sighting--00f257fe-3e6a-42b5-86fc-4862cef87adc", "sighting--c73e9bf0-f92c-4039-a96b-9cd7ca9800b9", "sighting--1081927d-de73-47e4-92ed-30c61ea83908", "sighting--3364a4bf-348e-409c-8604-25da4159a38e", "sighting--4138822f-5c09-401a-a23b-0f0b4743947c", "sighting--27ac152f-6c12-46a6-8130-63785b5ef687", "sighting--254f0fa7-6380-493d-a417-f3b9f972a34a", "sighting--c2449abb-7fed-48af-8a83-4a649c510422", "sighting--51873368-fcf6-4f61-9143-00a5455e8940", "sighting--6c665df2-2b82-4588-bc16-dd274bdb42a4", "sighting--decf5905-bd6d-4077-af2e-a28d763b4471", "sighting--d658f86c-a6f8-4322-9cbc-425dc302bcf5", "sighting--2a2e3e9b-46c2-4fe9-9732-fb37cdb722e4", "sighting--70d7cd80-c488-45a5-94af-aa6b64846947", "sighting--9bb35ca2-c7bc-46ab-b41b-efa1b34e3f90", "sighting--bb70ac11-5277-499c-91b8-815aad66d5c7", "sighting--c2ade2ac-e155-4111-9e1b-a1436fede16a", "sighting--cd93b5a1-c3e4-47ee-ac85-6b9c4db6e222", "sighting--d16288af-5ea2-47cf-86cf-7258bfb438a9", "sighting--036239aa-08ff-4565-9cfa-6884156050ac", "sighting--00ba9e34-27de-4fd5-a841-f00dd1a651fa", "sighting--54a87b83-0113-4596-a7c7-f7451ef8304c", "sighting--2f59fcd7-281c-4f46-baa6-d46334e7f0b0", "sighting--b3c06b47-811a-4020-8a41-d0ff929a429f", "sighting--0466bd1e-2a78-420c-be69-fc79237cc1b3", "sighting--33f39a32-df3a-4a23-a7df-69451bdf825b", "sighting--3027a7d5-8a93-4ba7-906d-967be97da705", "sighting--c7d11b11-448b-4ce3-b27d-de1ae13f31f9", "sighting--193c6d8d-64f0-4abc-977d-1be391de7cc5", "sighting--e25f8371-73a5-41db-854d-d5687ba5f516", "sighting--9eee292a-a8fc-4f18-9294-08e4f2c4dc93", "sighting--bd1ef501-722a-4b0b-a9d7-92c22b976f80", "sighting--351cd836-37f6-4025-8cc4-57c0a8007985", "sighting--cb93bcbd-7ea8-4285-9e1c-7e4a9a1ddd7a", "sighting--3d1a889b-07c2-48bf-8787-ac9d843421ef", "sighting--ec810d05-bc9f-4d17-b9ec-24169b62d292", "sighting--f1a2b823-bf6a-4f92-ab32-fe10a07d1a8a", "sighting--ff4398e1-c23b-4996-8ea2-065b572ef9d3", "sighting--03201242-b09b-44de-a628-a44b1dd31ef0", "sighting--1c5af5dc-02c9-48be-8546-9eae14e5284b", "sighting--a15feea5-4c75-43d0-8f5c-9367f630f028", "sighting--c6eb2c98-54a5-4997-bb49-b6f648f2520d", "sighting--056147af-7694-4e18-ba7d-e702f0205416", "sighting--f0246dcb-3c47-4bbc-bc5a-d7cf5fce34f3", "sighting--2f6a18e5-66db-448e-a7f8-0590004a064d", "sighting--b1078fe0-11f3-435c-8a59-a76371dda2a2", "sighting--5444f999-f474-42ab-9abd-56f379339355", "sighting--69db3a36-cca9-46da-b767-eb851d6f41ea", "sighting--9b2cbf0f-d3d9-482b-8f51-78917dfb2972", "sighting--32ba17d9-70d6-4135-a6f8-7d25a37c2b29", "sighting--0b7ac7ef-9ccb-4595-bb93-9ce528e89442", "sighting--b313fd85-6f38-454e-8540-0af600f0d56e", "sighting--aaf4ccd9-7fc2-4c83-9c40-e784dacbe7f2", "sighting--74e7db02-6204-4d63-bc93-56f626f612d1", "sighting--70de7c9c-7c1b-41b8-a3a4-24caaca6fc1d", "sighting--d932bfb9-2ee9-414a-9ac7-3648f2490bf5", "sighting--1959b2e3-7f82-4d07-946c-6c98c1ac4556", "sighting--e248a829-c81a-4fdf-b147-7e89ebe28636", "sighting--9cf5b535-1655-48cd-9a21-9e7577a59529", "sighting--cf58092e-b688-4fa0-aec9-674c663931d2", "sighting--4a28aa6b-9012-480e-b1d8-89f9322727c4", "sighting--0aa934c6-447c-4e1c-99d7-245fcbd7e7c7", "sighting--273c8fc0-1063-4290-a65f-f37da91917cc", "sighting--c70699b1-8c7d-4f66-bcf1-67ff4eb89a9d", "sighting--4066b71a-54ee-4c9a-9bc3-20ab0f636fa4", "sighting--14f32f34-0011-4139-917d-691a1a01d94f", "sighting--11401fbd-57dd-4462-9109-ad439dde898a", "sighting--cc8cb664-34d1-48e4-b79b-fc1189967acd", "sighting--088d4666-5fa4-4933-b87a-e74576157ed1", "sighting--774e7b2f-f8ac-410b-9758-dc4cef6fe249", "sighting--0b00d776-3444-411d-942b-4cfb51106ffc", "sighting--e5631b6e-b8af-49a9-a025-f2d19a5c8029", "sighting--91fac226-1580-432f-94ec-624083f0dafe", "sighting--764b54dd-be49-4b7a-b036-2d9583e0eaa1", "sighting--af88aeb3-e135-4381-ae35-58f8c6fc4553", "sighting--32fb1bee-af38-47a8-8c7d-05f2adf07228", "sighting--ae431315-fab7-42d5-b5d9-ec3aee63d713", "sighting--9b35cec4-1be7-4e16-ad9c-f4ddfb432a13", "sighting--52e1aeec-0250-404a-8814-ae92592619cb", "sighting--f8fbaf90-3a9d-432a-a95f-8263fac59fed", "sighting--fe4d8717-3784-41e3-b418-18c7bc29fb3f", "sighting--148c525a-47c2-4fc5-8e17-546a5c8218ca", "sighting--3f7a4b5e-b955-468a-b8a3-8739eaa506d7", "sighting--8d6ef114-db6f-4992-bdf5-0a1f4d3fac35", "sighting--2ee7a576-f830-40b4-9f67-6e3d5863f135", "sighting--74b7f6af-5012-456a-8e61-4f15c9229f91", "sighting--3d3b4089-8284-4b2f-8118-c937d756e660", "sighting--72ada266-3d75-405d-8d4d-44d8f9c25666", "sighting--f0774c8a-f434-487f-adeb-992e49270b00", "sighting--6cc215f4-20a2-43cb-bfb7-61fe9b009f26", "sighting--7ec53251-cb59-4ff3-820e-335b0457ce4c", "sighting--9571308e-58e0-4e3a-9fb4-917c7a6bd504", "sighting--f8f12bfc-5266-4277-b8a2-d466a07110d2", "sighting--af3626fa-1261-4733-b887-cf58b645afe9", "sighting--4810f327-ff79-420f-a176-3d6a5a11e0c0", "sighting--d85b963f-705d-4a62-be56-7560cc53f574", "sighting--e32cee0d-77b1-4982-82b2-cd39d51796b6", "sighting--78573565-bfb4-4061-b85a-9643117209dc", "sighting--c24a13bc-b590-4bec-8bf6-65c657b58224", "sighting--f2cb34de-6b58-4c79-ae06-b419eb5a526f", "sighting--0eead572-b747-4466-b299-d7f17aeebf40", "sighting--fad8f8a6-937c-4867-990e-043be1f29ad6", "sighting--e2a2edb8-c9c6-473d-bcaa-daa7260ce59f", "sighting--ef4c8ced-3201-4bbb-98be-02fac7f2e229", "sighting--4418f0ab-5c01-4d76-8e0d-1257b9c4583b", "sighting--8a4634c7-156a-4d3c-b63b-7519ce3f5e5a", "sighting--48ac5404-91dc-4df2-9daf-debca3ece031", "sighting--ef73cc02-8fb8-41fc-8633-a37a3fbb41a2", "sighting--29275521-5cce-4793-94fd-357b089bc694", "sighting--f06615f5-77f6-46f5-a5d8-57b6c0917a89", "sighting--be2aa365-d3b0-4984-b16f-570899b1da50", "sighting--e7418997-48f3-4eb9-be15-ebb4a2196d51", "sighting--0396d184-a546-40c7-a0fe-834a1888bf1a", "sighting--c5a10581-36eb-4b3b-b939-397af8f78712", "sighting--f486ab03-b7b1-49ef-a078-ec216cb99219", "sighting--f72770dd-d50e-476f-9a43-6861860ae888", "sighting--8bcd540b-5afa-418d-8adc-99d8e0485359", "sighting--edc8f64d-209a-4976-94c8-9133d9eddc8f", "sighting--e8c98019-2e9f-4266-a098-86e587bc6841", "sighting--c6be83c1-4549-4841-a2fc-668bdffa8f95", "sighting--b96c458e-f470-4442-a81e-5f0d4a19f8c9", "sighting--f18cea51-a3ba-49d9-ad00-d2180624b7b5", "sighting--ced145ab-10a9-4edf-b670-bc6abb2f7c94", "sighting--62f736dc-c84a-4ba4-860f-77a8f2827089", "sighting--0c1e0893-2c90-4446-b184-d9d365a4e130", "sighting--e9275d9a-2822-496d-b437-559794f6c954", "sighting--0f571b45-815e-4100-8818-bb5a1101290e", "sighting--0401b33a-e027-46df-94cd-24c5f0b1bba3", "sighting--a3db9565-f2a1-4dbd-8c7d-10f376c0278b", "sighting--35ba379a-122a-4935-a3b0-76aacbffb9e6", "sighting--ff7f5f0e-d07c-4d03-aa64-f6cbb04d4e38", "sighting--69986e73-dcea-4cf3-95bc-917b3c44ff72", "sighting--f49fccfd-b978-4f51-a1f6-56a3f6dec549", "sighting--e391ed4a-d81f-412e-910a-dbff4e321dd1", "sighting--48b5715a-93b2-4e31-a947-8d1554b20424", "sighting--218766ac-b1dd-4bcd-87a2-66091493e035", "sighting--f5bae541-7de5-472a-9bc6-1570b37079a3", "sighting--fe91e9b6-de1e-4ce8-b8ca-4c4f789d3e28", "sighting--88856d46-cc46-41e3-aca7-c3c09e1fb0b1", "sighting--d1086c2a-50fc-4fb0-98eb-cc33d9a55fe1", "sighting--37f0e51a-f28d-428f-a3c0-4dee955a81f7", "sighting--deaee51e-1c0f-4a31-9bcf-3cac3505593f", "sighting--861a4901-6274-45b0-b26f-150a6df6c4a1", "sighting--b8079556-f98f-4fc8-82a3-19dcaccf3f8a", "sighting--65169206-6e57-4693-b980-7c285990a4cc", "sighting--a0c23d3d-e27f-44cf-8e45-d79fe08af193", "sighting--4037a9df-3dc9-463d-8c18-8ce6c72e6d28", "sighting--1aadd8f8-d4e8-4a68-aac4-ec891a4b7b0a", "sighting--236787b2-b65f-43bc-b668-58944945864b", "sighting--9f752318-150e-4812-afb4-6bdd17bf70a0", "sighting--6114756e-8dec-46b9-a5ec-231ebed85633", "sighting--05ebc7d2-28dc-4805-83f6-48acb75ba75d", "sighting--fe38bfd9-7643-4c3b-95ac-138170dfe735", "sighting--0086bc37-f64a-485e-a286-523b3c31e27c", "sighting--bc4f802e-6f3f-4467-ba54-4f02ad73db5d", "sighting--e4f0b0e2-3b5c-4e47-b6ad-31d522b55418", "sighting--546ba189-9695-4064-8b2a-5bbfaafe6d6d", "sighting--28231454-b38a-475a-85ad-587da0e776b5", "sighting--2f5b7a85-ebf4-4cec-8e73-078073a0afa1", "sighting--587b44af-d7c2-4d98-9752-59c166aa27e1", "sighting--01c9ddff-e06e-41c5-b8e3-9db7fb83db45", "sighting--cfeee859-131a-4bcb-8288-effa155dc4d6", "sighting--85405e61-a338-414f-91e2-6e1c828fad00", "sighting--440dde54-d74d-4376-9a9e-669b90b084df", "sighting--5cc00ba7-8e9b-4062-bd1e-6036ab66305b", "sighting--4582cd91-080b-4dbb-bed4-704910c5034d", "sighting--c56902d3-db69-4788-911d-3886d5de749f", "sighting--92c6954c-881b-4fea-841d-f7befbadc6c6", "sighting--d7d84862-48b3-4930-8e94-9d57d8d3c190", "sighting--53975c87-91cf-42b7-84a8-fad05605b473", "sighting--99eb4b5c-5787-44e1-99bd-c9f4eb9f7a42", "sighting--291d07b3-7478-4e77-8c35-4247598b7970", "sighting--e3547ef4-9dda-4bd8-a0c2-bfa8fca39457", "sighting--ce35be7c-3104-4a34-b1da-8a861e5880f2", "sighting--ac74c26e-290f-43a0-87f3-026d942d06a1", "sighting--8bfb2e62-e723-4bf2-9082-dd3577af8b79", "sighting--9d5938b5-df2c-4d21-827a-e7b1d4f19ddf", "sighting--ac68d72a-c122-4425-979f-da5d56c0838f", "sighting--a96183d4-2fb6-4650-99a4-b3bcb3f427e8", "sighting--d91b90ef-afc4-42f0-add2-8f97e166290e", "sighting--483842b3-eeaf-4de4-a00a-49d8172c0784", "sighting--3f5b6bdc-1c73-46f6-8a11-da9165c557be", "sighting--358974e8-e3c1-4d44-addf-af8b835e8efe", "sighting--b9fec0f5-7d8e-466c-90ba-a727897b1243", "sighting--3fbb343f-752e-40ea-b633-2a733e9aab43", "sighting--b94bd755-63f8-40d2-911d-0c668b67f038", "sighting--65a25cd6-fb1b-46c4-bb99-729cdf9ee55e", "sighting--3cc2b118-56d1-49cd-9997-ae0326fe7e17", "sighting--3d15a2ac-4518-44fd-95d9-a41ee3dcb3fc", "sighting--411bee0e-8fc9-41b4-8fac-248f6f025259", "sighting--a5ff53af-6229-4c25-96d0-cac584476945", "sighting--a4b15885-1006-4560-9979-e16e9fe0d1cf", "sighting--b2bee891-2f46-4d2c-b126-d4464765ac1d", "sighting--e9ae07c4-b715-429c-835f-5ffd8c7534f0", "sighting--c157f6cb-4529-4b91-b1f9-5646f5ac8f8b", "sighting--3a37db84-173a-488c-9f23-95e0408a8964", "sighting--1330a5dc-49cb-48e2-acc6-ba9354e63e24", "sighting--824c4808-10d1-404f-a223-1ede7a73e5f7", "sighting--efd0339e-c22f-40fa-b46b-cf8659a78a0e", "sighting--13250572-0592-4f2d-bb4b-1ef804830b0a", "sighting--0c744174-8be6-4912-a6e0-58ee5067913d", "sighting--be5a1fb0-10bd-42ae-b324-7eb252f555d2", "sighting--bea8c13f-6967-44ff-8c54-d3ea6d96816c", "sighting--3a593485-0ab4-4755-9f0c-560a69681920", "sighting--da3a65f6-41a3-411c-8a56-93e0499bf396", "sighting--8bf80191-0925-48a9-8384-c05ad37e5994", "sighting--4fc4a014-05dd-48ce-b2fe-245cd3baebb8", "sighting--9c35136b-ef79-4d54-8c56-aa8ca40ba267", "sighting--f508d465-1208-4b09-a4e5-74ad73ce76e3", "sighting--198ebaf5-59a3-4881-a1ae-1deb8d98be56", "sighting--10324c25-bc16-428c-b4cf-519aa41eb7fc", "sighting--b5394b51-cce6-4927-acff-bc1ef6a14cb6", "sighting--ae4761fd-1c92-4d70-bf6e-0949aee10398", "sighting--ec43accd-7ad0-4ace-bd96-2b604c50a88b", "sighting--d9913912-d340-4a25-af95-a84a0518b094", "sighting--c7557779-ef50-4287-8ca9-cc99c61a853b", "sighting--7b2ba7ea-1302-4004-b469-1bf99ae65240", "sighting--c02840b6-be79-4913-a0ed-3018a084e168", "sighting--1be910be-506f-4d4e-8e72-05362ef4bdcc", "sighting--0d974cab-b8f5-4128-8c52-6d7255235da4", "sighting--3508244f-15d7-47cd-b152-ef87579cb62c", "sighting--b37ad819-7740-4c15-a785-dd8cb64470aa", "sighting--7f3ea930-db40-4895-8d3b-775ba9aeb3d4", "sighting--c71626a7-c800-4eb3-ac2f-63389c17dbe1", "sighting--9e15ae2f-95ef-4232-aa18-ad381c6b73d4", "sighting--cc0ed293-03be-4759-bafb-7679e8b284de", "sighting--977a927b-ed90-45c9-9bf9-5926f46381bc", "sighting--e7c70b24-278a-4266-9129-e7a9b6b82e27", "sighting--83a66bfe-9207-41fa-8333-56c1d6d0fc71", "sighting--d6da1c7b-e692-4306-9417-ea9e834d7957", "sighting--2e6b2aea-c561-4243-bcb3-8286868d6231", "sighting--3ecfdc8c-d13c-4fb3-9511-57a6653192c6", "sighting--e1b4dc65-f67f-4319-ada7-37aed5e07a28", "sighting--9787cf37-4682-47ba-9be2-83dcc8638187", "sighting--58761375-b41b-458e-937c-83b48957567f", "sighting--1dc9b141-20a2-4785-95b1-99939ea5416f", "sighting--d4b978dd-4de3-41ad-ae0c-1963bf397dd2", "sighting--1999faad-93e4-4901-8ca4-ac79a10c2e46", "sighting--c8764bfb-206c-4341-87c2-ca5d94161de7", "sighting--106f431b-1619-481a-92c0-6c61fe9dbc50", "sighting--ee10bb59-9915-429a-933b-9057d297b53c", "sighting--b15a61da-07a6-45b0-af4b-9b69102b9921", "sighting--21b540e1-7185-426d-8ea4-98cf085a6cc2", "sighting--2ce40dba-91f3-4067-85b7-5137380c5aca", "sighting--2e03749e-c5da-4687-adfe-210fb833a11b", "sighting--6f183e1e-b77f-455c-93f7-1d454dc609e3", "sighting--821f84cc-0a89-4685-8ed3-3ee90eb1dea9", "sighting--48e43066-1266-4027-ad89-3955133d4b17", "sighting--427a00c0-253f-4206-892e-fdf9a1f35c57", "sighting--3b19c529-f5c3-4d27-b52a-acecd94d0600", "sighting--dbdaeece-8b49-4b92-99fe-7361384908fc", "sighting--9d2c4722-0ae5-4f55-8702-5e7ea7c1adde", "sighting--b1f19be9-50ee-4737-be7a-118b877d7a52", "sighting--af9957b3-2d13-4384-9f13-5fc3f320ecfe", "sighting--1eafccf3-e887-40ff-ac33-790eba099dfa", "sighting--35d88f55-28d1-4c5f-8706-3e8b9f1d7ded", "sighting--32976234-1e3b-4338-94b1-a1acb895433d", "sighting--bcf07b7b-d616-4502-b01a-252af7a7d657", "sighting--ada7d2e5-591c-4366-a211-1cbf8b5192e6", "sighting--4ac46bec-38e3-4e04-904c-ffa780ae406e", "sighting--d84a4c73-76f6-40c6-b63a-d733f47d7622", "sighting--652a2251-dfe0-4d01-b35a-3677c13624c6", "sighting--91c1b3fe-d0d7-4cfa-b930-798897899b45", "sighting--9054c34c-d728-4fac-87c0-3bc18892532b", "sighting--3dbf6e56-bc84-459c-9a81-29f8486ae7d2", "sighting--48cb6b3b-afae-426b-878d-da4176d00957", "sighting--94cd8476-0137-4057-aadc-51120a79a430", "sighting--514be9e3-cda5-4a58-b458-a4dd001c7f8a", "sighting--6d7b9968-54a8-480c-b080-0cc887880ac6", "sighting--15685015-fb29-455e-8d84-662a4334c849", "sighting--6233a0ae-4c78-4460-9fda-338e3d6e0934", "sighting--3d6ec51c-9f52-4aeb-af33-5ff2d343ba69", "sighting--0b528f9d-8a29-49ee-aed6-6ad02599b934", "sighting--ed278b8b-81c7-4708-9d5d-b33ef574ae8c", "sighting--a0780a62-e588-4d1d-b87d-47283f396ccd", "sighting--064673dd-dc96-4213-9a86-3bc96746991d", "sighting--c38e2805-51e5-4ca1-9cfc-2d315e708fab", "sighting--f54da5e2-0f38-41e2-8286-7b800ff1a13e", "sighting--0a79455d-8686-4519-908e-f10b1426e835", "sighting--cb2e2948-948a-4e51-a35c-d3189497e97b", "sighting--f489ef24-c3f3-4382-9a2b-96c88cd23a80", "sighting--de18de72-2172-43b0-8582-621777d0de8e", "sighting--99f6e807-db32-4da5-96bf-80c6798585ee", "sighting--c01134cd-3207-4396-bd16-42e44ddd2dc5", "sighting--6562b125-f4a5-461a-9b6f-721c86503c9f", "sighting--d4f401f2-8650-4b04-a8b6-3f08f7cc0390", "sighting--2820ccbf-2c99-4c0f-8ffd-057f48f550af", "sighting--ebad96f4-7e33-4940-9463-a48eec5c561c", "sighting--b3abbb8e-0c55-4365-9ece-90a59bbf2f04", "sighting--84c14497-d48a-40d6-b074-97892a958d86", "sighting--05f28f17-473d-4886-b7be-9ce4041cf1f6", "sighting--b70f4f52-22d8-40b3-b8a0-3fc8f530a1ab", "sighting--eab61a89-e9a4-4860-a872-dc941825d990", "sighting--d02b83f2-2a79-44dc-880e-c7bdb3fa1290", "sighting--0dc2daba-4faf-4563-aac6-68a28b6fcd6a", "sighting--bcdf5b5e-2f24-4542-a280-57f10ce465f7", "sighting--8d760f04-f7d0-43d6-bc64-ee15f6906c86", "sighting--06832126-03c9-4e14-8253-8d35258f91c2", "sighting--fa2d4b27-5a3c-44b7-96f7-264a1f49d3ed", "sighting--4c310c0f-1365-4df9-9bcc-6ba2774532a4", "sighting--50bd22fe-2ea9-4a7f-8d7a-ea29ab189b1a", "sighting--e82eb707-492b-4eef-abbf-cec3040abb20", "sighting--1fc14681-9b17-4ff9-a7f2-30a760b50927", "sighting--188ccda7-04f2-4eba-8e27-566a87e64ba7", "sighting--79004922-5ce0-4f2d-a72c-8966af299aec", "sighting--fad645dc-bf81-4fd0-8b25-d13a26ab57bc", "sighting--529c951e-bed9-468f-9ceb-e8f4f0441848", "sighting--5235f3a4-737a-425d-9fac-a49732078d3a", "sighting--b212bc67-ea68-4795-b3f7-9d74ba87c899", "sighting--75fb23a0-3d3b-4734-80b8-182f19570850", "sighting--faa99bc1-f6dd-4f94-9c3b-23ce139ff720", "sighting--1029936a-d65e-4b43-ae3a-0e7ffa81c018", "sighting--0089f95f-49b8-4244-a42f-00a8b376be34", "sighting--c9efe633-8dde-4342-a437-0323ff30db4f", "sighting--33731351-f74e-458e-817d-13275ec0ffd3", "sighting--ca5fde91-0964-40a3-8b8f-0253e8aad5a4", "sighting--f8985e1a-ec72-4fe5-b904-3f38801ada6e", "sighting--48cd87ab-05af-4318-a462-5d9b40328e0d", "sighting--f8da6c48-ae61-4b2b-a960-282006476e02", "sighting--4587411d-c37e-43e8-ad86-6551001d9443", "sighting--fc057f3d-3782-4fb0-ba0e-07f08b0f10ad", "sighting--6d04dca8-a3ff-4fbf-af28-af73b05aea5a", "sighting--7e308318-6080-4103-a2cf-6d76167a5f5f", "sighting--f5c89536-805d-41eb-b7c6-8f3da7c130cd", "sighting--64fbb1b6-033e-4bcb-9d25-f1a08ae2bbc9", "sighting--89ea5ceb-0153-42b6-9ab7-ec909c07cb6e", "sighting--f38c19b9-517d-4929-a17d-9f70544e9ccc", "sighting--2c057b7b-cff7-41cc-8b4f-aa9c13b55f3a", "sighting--add5e58e-f142-4d88-9559-38fb2ce54334", "sighting--689ab89a-c2e7-4183-b841-bf6f921555f0", "sighting--522e04d5-be70-4320-b2b3-22f1c5a1ea56", "sighting--bec1b88b-0e79-45b6-9e96-159473906aad", "sighting--cfa5084d-9220-4615-b172-65789f87744b", "sighting--843ea547-1917-4660-94bd-73fe76b89cb4", "sighting--dc795206-8002-46c7-92ba-0767b57f4601", "sighting--de223602-164b-4504-b28c-ad4a307b68e2", "sighting--d30bcf2f-e217-4d32-9cc9-e18cd093799d", "sighting--df19210f-e57c-4324-814e-784e57cd73c6", "sighting--c64f866a-2314-4bd2-824b-637bec939a9a", "sighting--44b20d61-d2fa-48de-85b0-d4aef04b5112", "sighting--c7f53dbb-e015-4105-b43e-9ae2585456da", "sighting--0052663d-faf8-4c37-b1eb-d89545358e3c", "sighting--000a8c9e-7d57-4478-bce9-45ab02e0e9fa", "sighting--8fcece34-d915-4b86-856c-519b75a7cdbc", "sighting--74c328ee-946e-4f67-9ae9-c14f17306d41", "sighting--2ed0d35f-9fd3-4391-9084-80a124071803", "sighting--69cbc05a-efe8-4da3-9919-e272740b5284", "sighting--b0c9230b-86e4-4bf3-9c06-a5c26dabaf98", "sighting--05401411-424a-4be6-b249-b1dec08f0d2d", "sighting--33f90f9e-f54b-43cb-b05b-848f7652487b", "sighting--fdcefc8c-a66b-4931-9f6b-50639a1e7ff8", "sighting--d0ed3b64-753a-4e73-9918-d99e116043f3", "sighting--16f65608-8a10-475b-aca5-32cba0f0d62f", "sighting--e287d2f2-5ad6-43b8-bf33-760cd0fedd09", "sighting--129e3b49-bd32-4a64-b774-f79a548f4fd8", "sighting--ac9b3c01-406d-4eb2-bc57-71bc5d89bbf8", "sighting--c0a69f5e-a5a1-46ee-b4f9-96fa1dfabee2", "sighting--7f6bc4bc-4e90-42c5-932d-5bc061a7c995", "sighting--72574053-b135-49d2-91c6-1ecef3107ff5", "sighting--4d03c242-1f69-4524-8188-026f22419690", "sighting--29a319a1-e299-4889-84ac-abdee341ed32", "sighting--e9f73e30-1e40-43cf-afdc-5154975cc8af", "sighting--b405fa40-caae-4e30-a6b4-ee6259e08c26", "sighting--38516df6-f2ee-41b9-a77c-258b6f1a6d77", "sighting--26dabceb-6125-41e1-85c5-2d1484ddb32c", "sighting--8269fab4-f231-4b28-8cd5-1692a7c69a59", "sighting--eb8c7fce-3500-4ef7-8e08-22d7a2834285", "sighting--027cbdbc-0dd5-4571-b22e-71b5ad9fbe60", "sighting--6986599a-5dcb-46db-be2d-1490e3611647", "sighting--45440b94-1a11-4f3b-91c5-fad56d026210", "sighting--7683e72d-5304-415b-b8f1-8b7eb236c3f4", "sighting--067583c1-4a9d-4b19-bae6-7b3db1389daa", "sighting--22731857-3bb6-4a35-89a8-848c9c5e779e", "sighting--f0f2f5d5-fa4c-4b18-92cb-dbab43d16071", "sighting--b56cd3df-f51a-4a39-ab1b-beaee9223f82", "sighting--5b96d121-55c9-4692-b5df-db38f48b178b", "sighting--e95b2f16-2403-4499-bd30-85850fbfa040", "sighting--68554ac3-5124-4c45-87a0-cf7358c3b010", "sighting--4464e2e3-e12f-42b7-beb9-8f88f07c4eee", "sighting--1517b14c-32bd-41da-88f7-20ef89629541", "sighting--aa457a2a-6e91-48d6-bb9b-ab7820f15246", "sighting--afe6c984-1954-4787-907e-7d151cde1204", "sighting--11e4fe81-9383-4aee-8050-c543856e7158", "sighting--e4764061-1f7f-45f0-a130-f6693d2b67b2", "sighting--20ca0d89-4b37-46f0-ae34-33e4f11fe824", "sighting--1b01f508-09ef-4662-b2d4-613f80547cdb", "sighting--a533b8de-cb71-4d51-8465-f0ab217e61b5", "sighting--236af534-b220-4138-96b2-9c7e6c08cf1e", "sighting--43e5cffe-c5e2-4859-af2e-1b649cb94d00", "sighting--5e88ad57-b6dc-43dc-91c3-75405164f43a", "sighting--63403e65-3284-4be9-9ee1-f35a0ab3b1e5", "sighting--14a4894a-f931-4516-b220-1a6481423079", "sighting--647e6af3-e6ed-4597-8560-97c3d58233c1", "sighting--e2c0eea0-ff63-49d9-8cea-85348221f839", "sighting--07f550db-21c2-40ca-9b67-c3d80bea9d4f", "sighting--7779ea3a-b2a9-4cb7-a0ab-e71ee1a97a44", "sighting--e84eb554-d8a8-451b-8143-90190fe5186d", "sighting--1d09e1d9-a582-4447-bd73-68158dfb8525", "sighting--f3ca8d6a-ca21-462e-bc4a-06250d95464e", "sighting--ea3a9a02-8042-42e0-bafb-fbbb06fcadb5", "sighting--a81b3e9d-ef07-4009-b59c-62df11660bcc", "sighting--00e96c20-accb-4bd1-ab92-ac8733ffbce4", "sighting--7a54321a-0651-4f4f-b45b-03e14133089d", "sighting--45b6ca9d-cf41-44c1-982f-26b2cda55c1c", "sighting--75dc5b62-7ad3-492f-a482-5c6e025e9ff9", "sighting--b89c128e-55c8-4021-8464-d798fd0f37b9", "sighting--cc31d02c-82fd-4dcb-bdbc-0e61077716f6", "sighting--9711516b-35c5-417c-8101-7593433fb685", "sighting--8f043f40-a9ea-464e-bbe8-b0ad46e21574", "sighting--2dbdda0b-c33d-4cb8-9084-ee4700f82d85", "sighting--6ba5cb3e-b8cc-4b51-b281-f5a3b2bcac30", "sighting--239b2f1d-be62-411e-bf08-f40202f9bb82", "sighting--6d27f1d9-45e9-4efc-80d7-710a44c418f0", "sighting--5dddcfdd-0123-4698-9b89-d5f2b2f23443", "sighting--307e38d9-b33f-4c28-9701-6c79dbcdda73", "sighting--8bce0d22-bbbf-4ba1-88fd-64b65b34b7cd", "sighting--f8f2c07d-6e9f-494c-8aef-8a143a04c3fd", "sighting--45216526-08bd-4d2f-ac58-ce00f6ff665e", "sighting--3e1b0f87-193a-4e09-a289-80713d67b8bf", "sighting--a2ebbf68-fc5f-493c-9f82-3099a9a69ad5", "sighting--47483298-3e7e-4727-bbc3-88f17cce44ff", "sighting--c4f1bdcc-5be3-4dcd-ada1-d0e8fc84bd7e", "sighting--d46c3744-94fb-4374-979a-866332849aee", "sighting--0320bc16-1cb7-4411-bf3c-5e7e172d548d", "sighting--572210d4-bf9d-4232-9618-392643ae1dce", "sighting--8f421892-3b7a-433f-9bd3-7e7f04f4eb12", "sighting--d7195380-c349-45bc-9643-4da0867cad85", "sighting--9f77e994-ec02-4f7c-9458-a744a4a2f705", "sighting--3ee0683b-9bd3-48e8-b5e1-a1c66048d1ec", "sighting--02bd3807-06d6-448a-b335-33524b194119", "sighting--ddd36ef3-0925-4dd3-a08e-b5c4c0c59dd6", "sighting--fe4ca91f-211f-4a73-8705-c7ae91dfa53d", "sighting--a11ecc0b-ad1e-4797-b35d-1c3d0e66ae8a", "sighting--7fc03cf8-0279-410b-ac5f-51c6ce324bb5", "sighting--2b29861a-97b2-43e6-9e8a-9c208188bcd7", "sighting--0a7a620a-3508-466c-a6f6-1846ef46887c", "sighting--0f6d9c52-cf6a-4fc7-94ec-e649ce9a51f1", "sighting--ebf0206f-7344-4f8f-ae28-04f6d283929e", "sighting--45fbe4a0-f312-407e-b955-ca3eca9a9633", "sighting--e353a7cb-bbd7-4d4f-aaf8-21f532346bf8", "sighting--c165b3a9-1180-44fe-aad5-4df25773fc39", "sighting--977a8e45-70dd-478b-8a83-72dfe30933bb", "sighting--9ae99985-471b-49a0-975e-f5b49511d600", "sighting--6ee5d372-02e7-4b84-8ace-6966d863fc84", "sighting--328d09fb-0f1b-475c-b692-01a88138c79d", "sighting--07f60a6b-7713-4adb-9c6a-6c4d82fa8e3f", "sighting--f09b54c0-e0d1-4af2-96bd-2a998502036b", "sighting--d78b8bed-991b-4d16-8284-3733167c9c95", "sighting--88ac7eb8-ebeb-4b8e-b870-982d1cee1182", "sighting--4e1b1503-f84b-41ea-951f-30649d4b813e", "sighting--91f27480-e548-4066-adee-1db0943b8a49", "sighting--9e4ed159-e070-4488-acf0-f69900362f64", "sighting--799b5abe-5a89-4ab6-9e5a-5ddd987f6073", "sighting--1a6de853-b4e1-44f2-a4f9-3170975832bc", "sighting--ffd1c5e1-9f1b-4e3b-ae6b-f3dbf4ddff5a", "sighting--1d43097d-2b79-4bb4-9ca9-4e70542c75d8", "sighting--efac5e38-264a-44ad-95c6-a3b848a0e24f", "sighting--9f121f21-c93a-41ec-a2f0-3f0bc08ca226", "sighting--03e8d952-eebc-4bc4-b28b-cba5721fcc62", "sighting--a6fd1501-6894-4fe5-8c40-30b772721ff9", "sighting--c1d3fb49-7071-48c5-b2ff-6ecf53652d0c", "sighting--b5528c86-fa4d-4f30-ba8c-8fc64c045498", "sighting--6c3be61d-1454-4009-8565-319351de68d3", "sighting--b66fdf4c-44f2-4eaa-9b0a-c5056dd2f3f0", "sighting--7a872ed4-435c-4735-869c-09c6abe8c6a6", "sighting--c60f1093-af6a-4430-b59f-4c5e2866bf2e", "sighting--43b5fcf5-9ed8-49d8-9bd1-1fe03ef3d5b3", "sighting--abc360f1-b9a9-4cf9-aa16-6776b66b318c", "sighting--6d894f78-7b10-4a23-9c1a-5a5e59d61dcb", "sighting--44d48864-ebdc-4557-a1f4-9bd90cd52dfd", "sighting--2f766702-e4ee-4887-874f-bb61e27df39c", "sighting--b763b291-2179-47fc-81b9-62ac9737608f", "sighting--34c99613-b4e8-48c6-9092-30ddfe39660f", "sighting--9deeb1b2-61bb-4eb1-83e0-bf6786e408fd", "sighting--0b349e9a-c4d9-4886-aaa2-b6ba967980fb", "sighting--e0633a18-e2e3-47b3-bfee-ab7e1a814a15", "sighting--065edb16-d658-4265-8498-e0bd8bb861f7", "sighting--17bf63a7-4a67-431e-9632-ae65bc173fd9", "sighting--58859432-02f0-469e-93be-29b5a9986ac4", "sighting--eb9be12f-a816-43f8-ba5c-b2580865aa20", "sighting--8ff02387-2d19-4cf0-bcee-341d0b61671c", "sighting--fb80eaba-f1c5-43db-9cf1-353815fc1106", "sighting--d356cd38-1b41-4339-a0f0-c1c53e39a2a8", "sighting--5ef70e99-bc20-4b7e-a12a-0e0b25c31bfa", "sighting--d1d2839b-cdc2-431f-bd53-c2352fdedbee", "sighting--848526b3-52d3-4351-a0cd-7dda17bcda1c", "sighting--e91326f7-5617-4e54-8efc-195559d8a689", "sighting--6a665664-68ec-452a-8bca-e915eeb5b78e", "sighting--23fe2b0c-2743-4a77-9ff4-79b7a9e1d745", "sighting--92aa92e4-984e-4f5c-8ad0-12bb2b86e221", "sighting--191348c3-4ef3-4cc4-8197-46e23609ac27", "sighting--ffc141d5-312f-4fc0-befe-0fef2f07fb72", "sighting--84d02305-272c-43e3-8edb-1ee63f4c5d34", "sighting--6fc4781f-9f7c-4c20-908d-b165136f5d02", "sighting--3a1d12ca-7d78-49ac-a8f2-80169b35ce17", "sighting--ab765d55-6b05-4134-8b9e-81c70e2813d7", "sighting--f803ec19-3b2b-44e4-913f-91d3a64119bc", "sighting--70b81941-5fee-41f7-ae62-79eeb1d92296", "sighting--52a95248-a04f-40c5-9551-3c5e5109cda0", "sighting--354423e1-a4ae-4ae0-9da1-64ab0c665f93", "sighting--27fc3f9c-7e04-4e53-948d-6d74eb0340b2", "sighting--01918d42-e02b-440a-a379-27dea9819603", "sighting--fe20b487-a1b8-4560-a5d4-0e9bea513262", "sighting--c61e9194-9ece-498c-9a0e-e8628abeb6f7", "sighting--2d19e4f9-8833-4599-b271-45149d76ebba", "sighting--15c78ef8-4714-41c3-be0b-6a955a98fa99", "sighting--3bd436cd-78ec-417b-88ea-11c96e35d680", "sighting--23768faf-a315-4c28-b290-a0792a58b0e2", "sighting--ceb9cba0-159b-4411-800c-be71d5027c23", "sighting--e0939e06-4727-4868-a349-7c85f60d6928", "sighting--7fb512f0-6c7d-45c9-ac50-a956079b2eac", "sighting--a54ae8a5-27ad-45dc-aab6-7c8b229d9429", "sighting--227966bd-2793-4854-8084-51f7d88a4a41", "sighting--dfa0a149-fe82-4ca9-b1ae-ec77d330c6f0", "sighting--ceb51cf4-136d-45c5-85b7-916db0a94ea0", "sighting--f962aa68-ed4a-4811-ab64-1d1394933f2f", "sighting--edb87cfb-aab7-4b59-9e5f-7432323200f1", "sighting--b54e1fe9-547d-4d6b-93b1-570037117e75", "sighting--8149e456-13a5-4326-ae58-c2096617bac3", "sighting--d765ca2c-c28b-498f-8256-966e963c2242", "sighting--16fce8a3-33c1-44ad-9134-401b15f8af21", "sighting--94cd82ce-67af-419b-a567-e919dbc2317c", "sighting--baa38a9a-9150-499d-a792-219ddf552349", "sighting--649abcb3-9be0-495e-87f8-4ca8676f4dd3", "sighting--a6cf12ea-3110-4ec7-bf12-0aefa39fc8d6", "sighting--f69f6cee-a77f-4746-98f2-817b81f5d9a1", "sighting--237ee635-0284-4b27-ac63-f1a0f02c7ff3", "sighting--d0caafef-934b-4212-8c05-4e6451547543", "sighting--0e906784-6e18-407b-ad32-95c123b3205d", "sighting--0689eeba-1aa7-4ab4-ab05-1437eda1498c", "sighting--9aa29cc6-9f9e-4019-a2c9-a3bbb6914d9f", "sighting--cdc094f3-11af-4e3d-a58b-d70c90672c21", "sighting--e5dbe2c4-179e-446c-a266-75f4319f9f11", "sighting--26d0c7bb-ab8f-417e-aba1-1b71935f8490", "sighting--243fc91c-b753-4c5d-941d-fb2f452db3a6", "sighting--87c2e985-552d-427e-9287-1f17c3d99019", "sighting--3a97f10b-c87b-4a0f-bd11-8f8d5d49c7e8", "sighting--34469cbc-26a0-4f0a-9805-1a150da8ed18", "sighting--5ba005b6-4667-417d-bacd-bac2deda82cb", "sighting--57bf6683-a5b8-4aae-80fb-d030e1dc9b9d", "sighting--d277a3f8-4eff-4d77-8156-b52c8d7c6dfc", "sighting--ca6b89ac-d297-4ba7-acdb-21bd2b5bfcee", "sighting--b2bc0851-e6fb-484f-b428-180d52a145a8", "sighting--f54ecc30-97b9-41c4-abdf-ac1c7b5be3c8", "sighting--9721534b-f97a-4909-b4c6-6bfc1487b128", "sighting--9c506a9d-8d28-4c88-8390-3a6fb22ccb40", "sighting--e2b3ebd1-163c-4fbe-b516-55366cf93b8b", "sighting--86f78749-8717-48fa-a263-9e154e042746", "sighting--05907225-f851-4468-8173-58fe54a7b8b9", "sighting--3be6f080-2bff-4bbc-9f07-36714fd47dbe", "sighting--54b2d082-af20-4498-90c6-ddd6f185cfc7", "sighting--94b7eb84-b2dc-4cd7-bba4-896fcd3a2779", "sighting--d4089bb8-ed8b-4330-9201-a7edcaddf78b", "sighting--d49ad9f1-4b97-47cf-8c39-a72f1583814b", "sighting--c2981328-ea26-4d37-9cbf-3fdbab453341", "sighting--2679bc7a-c4dd-44c0-83c8-1bb565e0e7a5", "sighting--fde4678c-9c30-4993-85c7-7031f858d541", "sighting--01fdcc3f-7214-476b-89b0-4f0b204f7c40", "sighting--70d30933-d38f-4f73-ac50-85a4b91a07cf", "sighting--020e2c4e-fef2-418e-bef4-8c142cbdc608", "sighting--3bd99582-393e-438a-b7e5-24538ec89833", "sighting--af8c10e8-fb61-4ffb-acec-956914b3f3aa", "sighting--bbdbc23d-8c9c-40e5-9d85-26039c4a25fb", "sighting--08008e5c-9f9e-4978-a841-e666f0833718", "sighting--e708d5fb-3d77-471f-931c-0b66bd8f1af4", "sighting--468f2098-ee0d-4711-8fdb-cdd646e1baac", "sighting--9889a462-72e2-4b62-b5f1-a1093c0f6da2", "sighting--1f4ce419-df7e-4ae5-8e40-9044366ce538", "sighting--5a3e9b3e-c291-477a-8ed5-4815acc6c511", "sighting--cd982a4a-d1a4-4f73-8b31-222887aa4fa2", "sighting--7d6bcbf4-13a8-43d5-9e86-6a4bfb21e976", "sighting--b4dc976f-d3eb-4b61-bbb4-6b14fc157f9b", "sighting--7ae45e05-dd4e-4056-8980-957b25c3a622", "sighting--28b61c77-f341-4d87-98a5-49efb9e09d19", "sighting--53206564-d96f-4d9b-9586-bbe50e240e76", "sighting--67b4048a-285f-46c8-b6ef-6326550248bb", "sighting--2393960c-035a-4afa-afdc-a2a745ea955c", "sighting--ea581c67-30bf-4fbb-a763-71a390825c56", "sighting--a9225421-fda9-47fb-8456-2371ce672fcc", "sighting--5569e598-2ddb-4dbf-b645-3a736cc81d23", "sighting--6baac131-d3db-46a9-a5b2-ab9a3883d50f", "sighting--0a376baa-02bb-4790-8b41-ac094ad012bf", "sighting--f58ea860-9490-4c5a-a83e-0d883823bc4e", "sighting--419a7b0b-b2c1-4e02-bcd6-330eec6d4490", "sighting--f4ffc122-93fd-4889-be88-3de9ea712d9d", "sighting--cb3d34b5-b372-4eb4-b8ba-af51cecdaa12", "sighting--ece71b31-da45-46f0-9cef-81469c619c8a", "sighting--f622cf82-4f78-4aac-8cbe-4890e54efcda", "sighting--c5a7da47-a701-487b-b9a6-1585d07aedfb", "sighting--82af23f8-a492-4bbe-becd-56459e78d52a", "sighting--260f0c36-e305-4a52-9473-090752823075", "sighting--5ec56442-75d9-4637-af60-51f39b69e51e", "sighting--8eada5b6-0934-4b61-a0c9-f2369fabf919", "sighting--09e73a4a-40f9-475a-beed-348ade0856c0", "sighting--03fd04ec-df06-417d-9a65-9d7d353f9fb2", "sighting--ed04d07d-c1e3-4f0c-a0e1-0714030487fd", "sighting--40cb63c9-6329-4a7c-a148-e102dc226bd4", "sighting--9d25ffae-241e-4556-879f-c23d812006b5", "sighting--c526aaca-0207-4cf8-95fc-d26b72b68561", "sighting--a1879671-c151-44e9-82bd-44f3aba24a61", "sighting--27e4f69e-26c6-48ad-97b5-12b44319611e", "sighting--d043bb41-b5f1-4476-876b-83db113c5595", "sighting--54540986-7159-43ee-ae01-2bafa9db3e6f", "sighting--ca2d79c9-ebb3-4f24-b76d-7e6f3d47d818", "sighting--a7d4e0d6-21b7-4c5b-909c-eca5c3d2ae0b", "sighting--ef9cffd9-08ce-4651-8fbe-fc92ca35cc86", "sighting--23bd78f5-772d-4edb-9ba0-51ffd275ae22", "sighting--9dc04519-3391-4b61-85eb-966c83f5cc77", "sighting--592b756a-f036-4cb7-aed4-77b7da359825", "sighting--d73dcf55-c22e-4188-9eda-830830141cc6", "sighting--f05d6d39-216d-45cd-ad4c-92ac6e4a057b", "sighting--656853dc-0d04-47a4-9d1c-a4072aaee8dd", "sighting--65360306-1e11-483f-94cf-c374137c2f49", "sighting--7d3d411c-1639-4365-8eee-52223601ea82", "sighting--3bd4ada8-ed24-42bf-b703-2c2359afa0ce", "sighting--2d9c4189-44bd-4a0a-b05a-7d9a9348087e", "sighting--3aa5d956-5b4e-42c3-8abc-ecaed60affc2", "sighting--fa85f8ce-61f4-4f89-b223-81a3166c8e6e", "sighting--813bf69d-0a68-49de-a89e-070cf2c5f761", "sighting--8b32d340-ecfb-4fa4-84b2-8dadd7fd598a", "sighting--0142a1cd-12a1-4374-af81-f3d1c48f8d65", "sighting--bbb91125-5ece-46d7-9dc8-553b1ad72074", "sighting--cfedd20e-2da9-4a2b-b516-f65a18277064", "sighting--187157be-a9a1-45ec-8ea3-067c6b538c56", "sighting--d039267e-d2fb-419b-b712-a28e66f3dbfb", "sighting--68f850a1-cf5a-4ef5-be08-6e3896e31560", "sighting--7fed7c74-3734-4b33-abd0-77867b35574b", "sighting--31f3d041-df4b-4dac-a054-d38b22b1d811", "sighting--6c4cb57c-795e-448d-88cf-7a46ba48b290", "sighting--92280752-d425-492c-8afb-16bf52a75174", "sighting--11625f1d-e996-4689-9b0a-621b7a52cd0b", "sighting--c1082fb0-0db7-4ec1-b9c5-01a97d7cc4bc", "sighting--dd7d4ab3-4e86-4228-a3fa-3478014f4d39", "sighting--82a6d3d7-8f88-49f8-bfc7-f33b04b53dfd", "sighting--1164d1b6-a4f1-4dce-bf5f-0c17192076b7", "sighting--dad7905d-ca1f-4d5a-9e0a-177c85606bff", "sighting--6897c2ab-3ba0-4315-ab3e-83ce20b09fba", "sighting--502b2238-1d81-49a8-97e3-c253bc7b15e6", "sighting--748c4919-d206-4bd1-b199-28164a9487ba", "sighting--6b9031ad-ca87-4582-a580-b3c3b14d1a67", "sighting--2e87ced4-9694-4dd8-b083-4ffd20a5e417", "sighting--f31066e5-fe42-4879-95b6-f6e54c8c2aed", "sighting--bf76fcc8-f756-4e51-bb26-3527f6261a6e", "sighting--2c61c23e-1b4f-4176-868f-f3f81cd23dee", "sighting--e51531a3-55d7-4088-b881-dcbff4a0c147", "sighting--0174b700-abe6-464b-943b-c43ef416dc40", "sighting--20563a46-2ba2-4388-831f-dc5f62c1386e", "sighting--2c96934c-b818-42e8-a3f5-3345c6ea82bf", "sighting--18a5c60b-216b-4e49-8afe-1921be3e3a1d", "sighting--a5bf270f-c399-43d3-b7c0-eeb51bf1c621", "sighting--c2e45a98-cfec-4546-a470-be8f9d8cd7e4", "sighting--c76282ab-8bb9-4f29-833f-101dca01447b", "sighting--7bb88f56-d8f4-4bd1-8adb-608b6ab555d7", "sighting--9e3e11ce-7861-4014-a91c-26f8acbbc69d", "sighting--edb8d832-8753-4f06-9890-1effd10d3af7", "sighting--51c73401-5dfa-4b05-b9b4-3c315a7aedb1", "sighting--3aa1cb38-5eae-4683-a91c-b05a7cf1f64e", "sighting--6e9633e5-f143-466e-a1c1-ad4550e79232", "sighting--65e5219d-9ec1-4c7f-bdc4-64641ee1b3f2", "sighting--e962adb1-76cf-4969-8fed-505e195d8997", "sighting--a281d801-2ca6-42fc-bf1b-91db62cc46df", "sighting--d71bee62-750d-4435-b9c8-0506f21e3325", "sighting--c24d47bb-4d1d-41d5-a618-074784da8ce3", "sighting--c19763dd-0220-4e09-b52c-8f596a1c3811", "sighting--7b1551a8-ffd2-4141-8ce4-0887c68588e8", "sighting--8cb0d23f-7b09-43a3-9d1e-6535cdaf4fb1", "sighting--0e7cc5f9-ab2f-429f-ba61-dd4918cc4b83", "sighting--4ead267f-1df0-4aa3-bb07-7e28a9362f0c", "sighting--0c3afa0a-79db-4f89-a2b4-e5162f945574", "sighting--3e38e8b7-f840-4a4a-ab2f-4b36b6ef9494", "sighting--d527b93f-b5c8-447a-b68a-59146f9aae48", "sighting--80f0d484-03ef-4371-b1bb-93b44f26594f", "sighting--e149bc7f-2fcb-4cce-814e-b49946599d20", "sighting--82c39b3d-b856-4cc6-8b73-019f7004b56b", "sighting--ea848bd2-4409-444d-8ed1-531266738f14", "sighting--f4f2e484-11f8-455b-ad10-3c317c07317e", "sighting--e3f806ef-878b-43e0-b6fc-de73cbe38dd2", "sighting--6b3ea96e-97c5-4800-a5fc-48e744f0ca93", "sighting--c7793a48-2eed-45f7-b4c2-c3af4f9dbc4c", "sighting--9e7e39ee-15cf-47ff-816b-01dec042983b", "sighting--da91b9d0-aaf4-4dba-a035-2352a1524aee", "sighting--677fd677-b82b-4678-b732-e1ec37efc675", "sighting--cdc66a7a-261f-4529-9391-65bd40c74cf9", "sighting--c0ac660c-ea26-455b-8173-988410b9bf1e", "sighting--1103ca16-50b8-4641-9e32-fd56e60b3508", "sighting--4d74c92f-bb7f-4032-b5db-2241f76d3046", "sighting--0bfb8b19-fa66-4c85-b4b6-e3345bcec035", "sighting--ed9cd8cc-0ad8-40d0-a086-e27391f3a840", "sighting--afd6b6b8-3f43-401e-90f4-a9b2b2b5f6e2", "sighting--0cc9b15f-70ce-458d-b3d0-9c82484929c8", "sighting--e2c5ff6f-87be-4375-a481-faaec8121f4a", "sighting--e2e1c910-5ab1-48e9-aa9d-5118b405e312", "sighting--d4067895-a255-4376-84f5-d55e62c30315", "sighting--1db1b5e4-714e-494f-8dfe-3c164d1ddf4d", "sighting--b2a17ef6-bfbf-4673-88c6-b0963aacb592", "sighting--00d4cd3d-4fe0-4dc7-8afb-1dd432d258e3", "sighting--62c150fb-a50a-4496-a5c3-2f380b4822f1", "sighting--5041ce66-ce36-43d9-a4c7-278c22b7fb3d", "sighting--9b0b0448-e061-4497-948b-d2c2cf83da38", "sighting--d46c9093-f327-4f7e-88d2-a80677f99df6", "sighting--77bbc72d-e121-4d0e-9bc6-aba04968d712", "sighting--8bb109c4-9589-4ddc-8f95-427046abcd20", "sighting--33f39fb1-3441-4612-938b-1934b01bf25d", "sighting--0131d031-cb7a-4d1e-a664-8575535033ca", "sighting--29f8fe1f-ef68-45df-b09c-d2b9202cb713", "sighting--f20837d9-0db1-4f29-8e2a-0244de8e66d3", "sighting--b0cf81e9-cd53-42f4-befa-73830d76bff3", "sighting--accf71dc-e543-45df-a839-c5f218e58232", "sighting--d2df60d4-0971-4e87-81fd-dafaa5d73a56", "sighting--f0110b96-77f0-4b26-9f67-541e2b39c7e8", "sighting--e061494c-3fc6-477e-86eb-c34b4eb195a4", "sighting--61d2c983-1fd7-4ec3-a3b2-e91c15f251b0", "sighting--65fdd7c8-abee-42df-8254-609ceaf4dc7d", "sighting--38a95695-a281-4382-bed2-e5eef4051db7", "sighting--eee0eae5-4ba3-4a7e-af90-0ca6539d8123", "sighting--63663565-7c2e-4683-82ba-3c0e6b3699db", "sighting--fab9ce2e-6a5d-4c3a-afdc-296cb6d43d9a", "sighting--1329788e-a75d-464b-8e55-a0dcbcb10460", "sighting--598f717a-b107-4a42-b904-cc9d259928ae", "sighting--ea7b3c0e-9fd8-46bf-bfb7-ab0e9e45fbf8", "sighting--9b8e5c4f-6c03-4152-b41b-aa24e832afd4", "sighting--88f636ec-99b6-4270-90c5-bb7ef54b63b0", "sighting--b3262717-1ff7-48c8-8dee-7c611598daac", "sighting--fee4f7f0-5aec-4ec6-8fb0-27dc3b0112fc", "sighting--46b52157-834d-43d6-8d04-5f2abcf7c5aa", "sighting--785864f8-33a4-49b8-8f63-fd382beb5b33", "sighting--2f751f09-b432-41e0-9742-229d30653269", "sighting--53c09074-e71a-4174-bc56-782de34cff2a", "sighting--92b356a1-6f75-4323-b307-390f2d5da1be", "sighting--b55a29e7-747b-4ede-b832-57efa4fc631c", "sighting--3c6181aa-4173-4535-ac10-718da3f43bb8", "sighting--10f60822-8fbd-4890-a975-9a9e085ea6b8", "sighting--ec706adb-25be-4d08-aff4-c7d73cc91017", "sighting--a8c2f7f3-77be-4251-a843-a1d329904309", "sighting--18256aa5-6031-4855-8d12-5e324c15a7b0", "sighting--b2c73df2-2abb-414d-92c2-65e6d89ae8a0", "sighting--523a7dc7-d4e2-45e2-b232-7ac75d4e4218", "sighting--c14ea54e-e79f-446c-9624-93c2ba0d9613", "sighting--f35436d5-e231-45bd-bdc5-0096b109e61f", "sighting--e164a1b6-7ca4-43b6-a0df-b87ddc646584", "sighting--5f35963a-131c-4180-b080-ffd0aaec6167", "sighting--aa52714a-48b9-4d29-8d50-8bb222688313", "sighting--d4f9f072-3f27-4862-b580-6ea9269f36e6", "sighting--933483b3-1429-4704-9a83-75690c5f7897", "sighting--6f7b73ee-b90f-44f3-9b57-3e89d9ae3aee", "sighting--8a83f061-5e0f-41d8-b2e7-4287cd31be68", "sighting--c96cb98f-db72-421d-be30-db2bab2a283d", "sighting--71ebf27a-d5e0-4ac6-a13f-648cb42c9986", "sighting--dbf22fc8-9eeb-4b9e-af11-c1a6c089ff77", "sighting--b1ca5dea-0327-42b5-b834-6e7cc9bce75b", "sighting--4fb981af-4928-419b-8e67-022d592f1829", "sighting--05f612c5-cd02-4bd2-b34a-3da1e33a69cd", "sighting--f67e70e1-a871-4480-afcb-9e4698d452a1", "sighting--78a4ed5d-433d-48dd-b5a6-4ce2250ef5c7", "sighting--17e3afd0-c4ca-4eed-85a4-d3e13a09303a", "sighting--c95e3a8e-5985-4403-834b-76010b5a3796", "sighting--47cdd2a8-1218-446f-9c73-2376c38c9db8", "sighting--5a425dab-747a-4fe8-be98-0df581893376", "sighting--f53f41c9-8d28-4abe-8b60-eff86c308e27", "sighting--0f0e8067-bffa-4c68-8578-6a01ae8f5295", "sighting--d450267f-f39b-4d7f-a806-7a134d00beed", "sighting--1375fc03-5bd3-493b-a00c-b8dcf35689a2", "sighting--168f5e8b-a95c-4d94-a293-0c113e1e6f83", "sighting--716dc2a4-ed03-42ad-b235-5bbe1ddfb2c7", "sighting--68ca7817-e40c-43e9-9be8-355ec276da19", "sighting--191c33f4-201d-4a2c-9d38-0d02be9e600d", "sighting--ed426ace-8bf6-470f-a28e-555177b83784", "sighting--4884f025-018a-46e8-82c3-2f3f560d0139", "sighting--da5c1652-7aeb-4445-92a5-ec47436be83e", "sighting--aaa0c39f-84b9-4fd5-9b7c-2fa18d380dd8", "sighting--812e79e9-7f73-4fcf-8762-54c9f934284b", "sighting--59d4000a-1142-4a9f-8468-3e933b16c2d9", "sighting--5f1b7542-8081-4a08-a387-79f852f37c66", "sighting--f787b037-27e7-4901-b388-f44a929b6af6", "sighting--75c34c6e-3169-48a8-b8d8-99df89e358ec", "sighting--84bccf60-9826-41b8-b078-8ca5cd04e368", "sighting--d0aee276-4501-404f-bf23-dbd181e0678a", "sighting--753f5642-40c9-487d-8245-cd6905329359", "sighting--4447d228-d39d-4ee4-aa85-bfdfd7092ad4", "sighting--1c818420-282b-4202-aa50-6a29b1bf4fa1", "sighting--70da5a83-ff18-48e1-81d7-07665634a4fd", "sighting--cf7fbc5b-b884-44a7-88f0-13c9176c6b34", "sighting--85eba51f-7e33-4107-9892-52f1cafef1d5", "sighting--81cdb2e3-777a-4fbd-a0d8-f397f751179d", "sighting--93da042c-7abc-4553-a4cf-836c6b1e6d05", "sighting--6fa0edcf-dec5-431f-8d21-0571372c27aa", "sighting--96e6578d-5b97-4ab7-9ef6-a97f2b1474f3", "sighting--e3249467-45ec-4e9b-b4c0-06d9c731adf1", "sighting--87bf583b-3f09-468a-82a7-9ed19b25be0e", "sighting--93386465-a4bd-4397-b2dc-03b3a9003bf8", "sighting--1a145a87-147a-453f-ac08-2f292b18b239", "sighting--c013233e-62e5-4ff1-a572-5bd6995984fb", "sighting--8ec2e526-ca28-4cee-9336-ab1517cac3dd", "sighting--db985280-e7b3-476f-a27b-601a2743b802", "sighting--9bb0324b-b059-42ce-a75c-e67f5aa3e69a", "sighting--ec10c737-aca6-4e81-ab20-7871377a27d4", "sighting--47e2d9ba-11e1-4039-a848-89efad81b95a", "sighting--ec712d3d-90f4-475a-850a-331d3fd5066c", "sighting--55de1714-22e7-4f3a-886b-ae8592cc784b", "sighting--e87a2f09-5740-439a-b201-0ae9375d766d", "sighting--e4b29cbe-9c22-462e-aa67-e0869655279e", "sighting--d8ae40d9-2249-4239-9df4-55a491bdf7fd", "sighting--17ad5d66-068e-4f76-ae96-a2fc242fc180", "sighting--c1b73992-f3ad-49c9-bd96-fa973eb03796", "sighting--03a58b20-d61b-4ca7-93ef-2e119f2cce63", "sighting--6cb56e42-4606-4fd1-9a29-b5f177779fe8", "sighting--4eb588de-73fd-4aa8-9330-7863037cf433", "sighting--d0a77b09-11cc-4a60-a8b6-6e2e7336ef9b", "sighting--8acc5657-6675-4682-a299-fcff700978b6", "sighting--39d79c49-86ec-41b8-82e3-449cf4be2940", "sighting--629b752c-9b82-4af3-b1aa-7c5d45a0efa8", "sighting--a4af3b3b-465f-4014-bfbd-7c7f51afc7df", "sighting--13f6a7af-3496-4a89-bdbc-0ae52fd8e755", "sighting--e3eaf4cc-0333-489e-bec5-d5d43b070f83", "sighting--1abc0746-5f5a-4042-8993-4665f913f7ab", "sighting--48bf86b7-8ffd-476e-896c-ee9f5f64bad3", "sighting--aba4dd22-90b0-4b3c-a0f9-67763824a962", "sighting--7d7d9231-7097-46e8-96d3-ea3d41aa17a7", "sighting--771b376d-67bd-4e10-a1b3-7ca61595fdfe", "sighting--51c44732-853c-43ca-951e-13a200d8a063", "sighting--3471072d-787d-4fb7-aaa3-b72ca526c423", "sighting--476121e9-2046-4bd9-8d98-06f223f1bd65", "sighting--181009e6-57cf-4fab-a6a8-7e051b5b4de9", "sighting--91979635-7af5-46d0-a378-6222032b05a3", "sighting--e7c85e1c-ffce-44f2-b7f3-c88c72146c86", "sighting--542b2661-0cf0-486f-ac7c-e68ddb9ebdec", "sighting--cfd02934-fa2f-4e1d-a7b5-c24ab69a3aa2", "sighting--92a91ce8-ea62-4342-a9ea-742afad9076e", "sighting--1a71cfc2-7cf4-4deb-87cc-59df7499f942", "sighting--ca2dc459-8064-41e2-972a-f751bc558362", "sighting--e556de3a-7dde-4b9e-b5d6-5e240c331e77", "sighting--cce244d8-4de4-4ef0-ad68-0430c1a9d25a", "sighting--1ef536c9-150c-4280-b340-dc5168d5d2f2", "sighting--6496f3bb-b214-4a96-aa83-f8666b5e8356", "sighting--5e7ef470-5c0b-4543-96a8-a2d293aa9455", "sighting--55fe7946-a5b7-4a4c-bf26-2066d5d92581", "sighting--a5821495-23b9-4e9f-81d0-e2ef117623dd", "sighting--b0ad40e8-0ba6-4d61-b2ca-2cd1bff1baee", "sighting--4ae216d1-a531-4f50-93aa-3f39df91e41d", "sighting--26a736ea-ce18-45a6-8b24-a71eab9caa03", "sighting--f96798ab-8837-40e0-89e9-7f5e8a6292e8", "sighting--fd62db19-24a8-45f9-93bc-5877dc6e27ae", "sighting--a7d3d60d-a7b9-4c85-acb1-c3ce3d6b7878", "sighting--4026d41b-3161-48ea-b2b2-6d46aaf1bb03", "sighting--9beb694d-e7ee-4e09-ad97-3a74e9d79b51", "sighting--959d0844-c588-4a11-97a5-2793b9e01a8e", "sighting--f55c6d6d-d95b-469c-a934-efb683e026ea", "sighting--b4865c7a-2799-47e9-92b0-0a131b64a375", "sighting--f921718d-4fd3-423e-84ca-28f774f2359d", "sighting--0fdf439f-bb95-4dc6-bb01-83f09fc734ab", "sighting--6109adfc-06fe-49ab-8dd6-8d60e8ce4b2e", "sighting--5c725aa2-4273-41d7-a47e-cb6ef60e945a", "sighting--dfc2329f-7893-4133-8b77-138e06bfd2d0", "sighting--7b4a455b-ff48-444c-9a11-edb8fc3ace40", "sighting--a94e1242-a864-43c5-b5f1-443a8121f1a7", "sighting--6736b300-c881-4fe7-9d0a-60c546ac33ac", "sighting--1b4379a7-dd81-4449-bcbe-5a00e5f97232", "sighting--529d5827-06a2-4c4e-a8a0-4cad17e26d1f", "sighting--97ec7219-a5bc-410f-bde2-06ddab29a2eb", "sighting--7f9f6800-5c2b-443c-a2d4-2d9f1276a240", "sighting--29430ecf-33e3-4c02-8d4f-552c57fcb27f", "sighting--bbd9d832-1308-466e-9ac4-e31834d3385b", "sighting--6b635801-95cb-4d6e-9ac6-cbaf2dc7090f", "sighting--a725bbcd-d2e6-42d0-8f2a-0a7190085a39", "sighting--c3893b62-e9a6-45c5-b4b3-09fb36688f59", "sighting--5bfeef46-1c5c-4654-9ae7-27c25efc95fa", "sighting--21ddcf2f-7afd-425a-821e-3c594a57f4c9", "sighting--c5fc6191-acf0-4fd4-a0b5-34e7a6e66e3e", "sighting--f0f6dc5e-e6de-4291-8f21-078ab2abab9a", "sighting--5fc89034-dd84-4b4e-9192-b051b5fbb957", "sighting--ac579ce6-43a6-4543-b5ac-fe5ba621d171", "sighting--2fbfb28d-21d9-4dc9-8cd9-f7e0ac375b50", "sighting--e166d855-a42d-4832-912b-12d0944dfb7d", "sighting--a457a161-f48f-46e3-8a25-1e26157d906a", "sighting--2914236d-4e51-40ed-b03e-c6b067de8c47", "sighting--aa74d24e-e77f-447b-9ab7-a84db0bb4814", "sighting--4f846ecf-3902-46be-8e9b-e588014cad24", "sighting--b2e1b429-e8a3-42e1-b754-a00c1d7dfeec", "sighting--59aa40d2-bb60-4308-9763-5cafce5ddd8a", "sighting--7f88d005-bf6b-47aa-898c-b5b67c216465", "sighting--8440c4ad-0f58-4156-ae05-17dfa42aec41", "sighting--f097e617-3a0c-4c39-8702-2a1b9bd6dae1", "sighting--0f01d978-04d2-4787-b7ad-4385ce479596", "sighting--9309e45e-acbd-49f7-90be-0d0e5e3e4299", "sighting--9a6e46d3-0a13-48a9-a54e-57ea75d041a4", "sighting--cf9eba6d-076c-4eb6-934f-ed8deb3c1eca", "sighting--958b75ab-f760-411a-b8a5-6debd2ba3e14", "sighting--d3e9206e-7ca9-446c-b33e-9d01dd084a34", "sighting--896ec647-a08d-4802-a994-4e6d092002c7", "sighting--b8e234d0-18b0-4984-9697-a2b2094b25b7", "sighting--ced9156e-eac1-4de6-a640-e45ba3f116fc", "sighting--20e3b1fb-581b-48c8-b742-2bdde1ee0a74", "sighting--d5371869-2eb4-4aad-8807-99fd622b59aa", "sighting--11899f3e-2dfb-4139-a527-dc5038963e10", "sighting--db7baaef-9d83-4c23-bc7e-2d0be11303be", "sighting--0f306f0c-c926-494f-84dd-267d62a616e9", "sighting--e87267ed-6acf-41dd-9105-d82deb269cdd", "sighting--9b72743f-130c-4da7-ae98-da087324b1ac", "sighting--d55bdce8-4d03-4811-b745-9f992454151d", "sighting--99e37f63-ea65-4d18-b5c9-eece3bfc9170", "sighting--77e97c66-5ad8-4c4b-bb87-bb80ef774f21", "sighting--1fc72f5a-d3a0-4d9c-998f-8f213ad1e00e", "sighting--0b1fedc4-2205-4d4d-b75b-4cf414f56add", "sighting--0877831c-8113-483c-914f-4c49cab3ae98", "sighting--d5b60006-b7f6-4e88-952f-433b7c821961", "sighting--52b66f77-ae23-47c7-821b-d2402343e3f2", "sighting--d935301d-fd50-4141-b86d-f774db2f8d7e", "sighting--d775f72d-bad3-4c27-94f0-97774bf1767e", "sighting--dd6e6ce5-fca2-41ea-8338-e0f2f57fa512", "sighting--6c262d06-730d-403c-95cf-298de1d0c273", "sighting--ab9a02a9-ce00-4b04-807d-02eeba4420e0", "sighting--a3c90167-4889-4c68-b95d-bae3e5e4e997", "sighting--7ba70929-ac0b-404c-b43f-6ed517c0e53c", "sighting--0ee8f0c1-9b8e-41d6-8ecf-a5fb42e31d1f", "sighting--dde1ec20-6c6b-423a-beb2-a4eba5a712d2", "sighting--d6b96878-56f2-4e74-bed5-7995888e5d9b", "sighting--489bc772-5633-4df5-aeb8-bdc4f7b214d4", "sighting--92513905-a519-4ceb-881c-e6da539de978", "sighting--6308e8ca-71b9-4113-b4ca-370048dbb34a", "sighting--c65aa2bf-1ab0-49ad-9a6d-d36eb234031a", "sighting--352da323-0fb1-415b-ab54-a8c92889245f", "sighting--7f388a57-4b55-41a6-bf69-a0d4074ac4d3", "sighting--ef34e2fc-d157-469d-a96e-071a184abb92", "sighting--d4382958-4060-4bb0-99b2-1f98cc3ca4e0", "sighting--b6a6acca-918f-4493-972e-5e57c8ae3c52", "sighting--03d53586-d642-4a53-8376-e383194f6f42", "sighting--decb9d49-375a-4ecb-8c10-9c3c1bd94043", "sighting--df9d0b7a-3e71-40bb-a0c2-f28ae4524fe8", "sighting--51b88061-efb2-4a78-8b6a-84c6f2e6bed9", "sighting--8988e2d5-2660-4995-9368-ec0d60f6895a", "sighting--904d7d67-7972-4150-9bff-387c730b8b5e", "sighting--110d181f-e007-4d11-ad3d-d9debcb6c09a", "sighting--c289b72e-f943-4895-8152-599daac9175c", "sighting--c37a2082-49a4-464b-a62d-8d047d858aa1", "sighting--39e81427-a505-4d6b-9c10-e4f5e607b5f7", "sighting--a3d8db01-0cbb-4a45-8e6e-cd1efa0c3caf", "sighting--9cfe9601-41dc-4012-b333-38a9dc2fcb99", "sighting--400aabcf-327d-4c6f-b661-d10e06dbc05f", "sighting--cff87d01-a485-4999-9019-8cb08a9c9c2b", "sighting--7ac24783-f075-4458-bf2e-b6b9153e85bb", "sighting--6eb34513-c550-4e0e-8129-121d23d027b2", "sighting--33751200-290d-4a36-a111-8447aa06c7b7", "sighting--1622076e-71c2-4a0c-b3c3-61ee025a9d0c", "sighting--1a758fe6-0f07-4df8-ad78-d90c6a687818", "sighting--0f10d988-4f7f-4cfd-9b5a-5a4854bed0f9", "sighting--062c6d02-c9ce-441f-82f9-d721e0d9f967", "sighting--bfeaa431-49e4-4364-9097-2ca69b744c2e", "sighting--0317a401-e3ff-4a33-86e9-824923084cfa", "sighting--dea05ecc-208a-4c03-8cdc-ad922c1d145f", "sighting--8423104b-4eeb-4a93-a27f-30719a622f25", "sighting--da17eb6e-bb83-42e2-9cf4-c707b33c58e4", "sighting--afaef825-be7f-463c-bdea-a44fe132fd67", "sighting--171c5bdc-5d7b-4979-9b4a-5a02c31ec48e", "sighting--b21b667e-c748-4559-bf72-6e82c408c4b8", "sighting--a02383ce-8d05-4c7f-89b9-bc8ba74fc0e6", "sighting--0da54f93-6292-49bb-88f1-c3a5b78becde", "sighting--a554b5ca-fc63-4f11-a520-eac7b6746864", "sighting--08d3aa3e-c605-48b2-a106-4fa63ca33367", "sighting--3563e027-5f53-4654-8669-a3196fe0659d", "sighting--e2fa29ec-41b2-4864-ad91-f45a11efdbc6", "sighting--742e5d4f-14be-41f3-9c2c-694b2282374f", "sighting--e4603378-ba19-4eb8-9498-32ef394e15b2", "sighting--fc59df9f-9e2b-483e-a918-1b4667dc9278", "sighting--69bf1670-ebaf-4442-be9f-ed6573586d1c", "sighting--aad22c1c-93e6-4281-8bf2-78cd142a2dcd", "sighting--a7100266-d66f-4201-b005-16786659b463", "sighting--b2f0eb35-dc6b-40b4-9c06-e654d66e0c3d", "sighting--f4a6386e-6bd8-4379-abf1-f478808f0776", "sighting--280f88af-c3f6-49c0-8158-d53920e69328", "sighting--19ff87a0-d4f0-4693-ab26-093650fd3535", "sighting--6adb22ab-6f5f-498d-8570-d6289830c1f9", "sighting--490db519-7d41-481d-8e07-c84fec4ccd6a", "sighting--171c190a-96ef-44ae-98cf-af54960fdea6", "sighting--8bed8ad4-a760-4fbc-bba6-adf8af9baf5f", "sighting--c7169f71-3b23-4214-bf10-b7aba1345126", "sighting--8565d3fe-e95b-4f0a-aca5-49b9285a2c4d", "sighting--2fb41441-a0fc-4d65-bb59-4a7182abc766", "sighting--c2d068e5-6de6-4f7b-8b31-1d704f1ddaf5", "sighting--1038f2a1-b83c-49b9-821e-c67ca34f2946", "sighting--01eecb61-79b9-4ec2-b9a1-e53632e27e50", "sighting--4d850cf3-f966-4bd0-b68e-c5b6e6608a0b", "sighting--cf360e83-a379-4aa0-847c-d8690448b594", "sighting--8e47a72a-2e69-40e5-ba3d-6c5ed7dd2240", "sighting--950fac09-1e10-4c02-8509-7dad73a939d3", "sighting--19ccf1c7-5cbf-4f93-97ef-288dc4ae4a0a", "sighting--ae0be33c-d6e9-4f0a-ad93-44adadb9f59a", "sighting--e570c456-00d5-4d1f-a03c-4db0c7bf9c69", "sighting--b4906299-41b6-43f7-bae4-516dafe71a89", "sighting--7d5902e8-b031-45e0-8550-d02960d5c6a5", "sighting--f8c73a05-65a8-457d-99c2-3b03a5b9d3d1", "sighting--11745068-ecd5-4d0e-81e8-a62a9555aede", "sighting--baf2a1a0-08b0-4daf-a866-6b0f9b0789ad", "sighting--8987e2ed-633b-4b08-b51f-e05ddd0a0ff2", "sighting--bdccc770-2ff0-413c-900a-fc12c9db69c0", "sighting--535af9cb-9883-4bec-a2e2-0f6b6ea886d4", "sighting--d76bbcb5-ee3d-459b-ab6b-26f39a40bb1f", "sighting--5d308da0-33d5-41e0-89ba-a032e532a478", "sighting--ace76655-601e-4727-beb6-7bf8ecaf8c21", "sighting--4eabaa05-90dd-4de5-8f21-5a4a08058f79", "sighting--64ef5693-48c8-46de-9b70-077d9b8485dc", "sighting--909b5f60-6eeb-45b9-a33d-54cbf4f124e5", "sighting--358eb950-a41a-435f-aab0-6eecbf879242", "sighting--2f266f32-f79c-4977-9cb8-0980ad06ae1c", "sighting--ec79e489-4571-4e08-b44f-f1c3a329f1bb", "sighting--9e611ff1-9e93-4377-a02b-960e64dc70d1", "sighting--fbdf4630-f2c9-4be2-b7f3-6f4d7937970e", "sighting--865ec8d8-1644-4842-a2f5-6b8858832217", "sighting--882233fe-818d-4e79-b38c-9c8f63275f1e", "sighting--4d9635a4-111c-4c87-acc5-43bbb3e1a90c", "sighting--af40f5f1-78ea-44b0-926f-4097f6964cb3", "sighting--45671e4b-b784-4add-9d61-b97fedde81e6", "sighting--634ffd68-69d6-4562-a91b-5a3bb010328f", "sighting--aa56815c-0818-4f0a-bbec-51751c01ce87", "sighting--eb040434-219f-4ad2-b466-b55649b48c84", "sighting--4ef0e5ac-51f5-474e-bb13-0291f1ca660d", "sighting--7f603b86-84ab-4258-9608-5b30245ad7a7", "sighting--9b4d3290-8d11-4f4a-9978-ceb28f6f1f15", "sighting--a03a20e7-a2a7-43e5-bd7b-5bdd1f4e96a2", "sighting--a6c88d23-6d9d-479b-8b45-193af1183111", "sighting--59842148-f0cb-43c0-a364-29566ebdf960", "sighting--f93a69e5-5729-4949-98b5-ea301693d52d", "sighting--796fba25-a78c-4cec-8ee1-b60e843ef425", "sighting--be3da943-2245-4975-aa3d-d0f5329f6a5c", "sighting--fb49b14c-1b3f-4c06-ab5e-3763bc53039e", "sighting--9706e722-a36e-4875-963c-906d01f8148e", "sighting--62c0404f-8305-48af-9607-7ce4908341bc", "sighting--57e0f1c1-99f0-46b3-acdb-23abc2901a3f", "sighting--f485d1b4-e953-4b8a-8fcf-4d800e17df21", "sighting--07b455e4-766e-4d38-9bbb-6c5cd94e7996", "sighting--19ed5379-5fd4-4dc1-8515-30f3b85f5804", "sighting--f8103566-958d-4e35-bb48-50feff84e1ea", "sighting--3e115829-1c0e-4a4a-99d0-948b36b12758", "sighting--2c1c3b07-3094-49d9-a570-6d2cfbc77597", "sighting--d73663ff-7dca-48bb-9bfc-6ae7c1ae7d7d", "sighting--47198b4a-2d8a-4b42-9aec-466288e986e1", "sighting--7e82020d-37f5-4f54-bc3a-670482de9854", "sighting--f5e49c84-08f0-4b9e-b0b1-7cedc16f6373", "sighting--8788b6d9-7adb-486c-a0b4-237afb1efa5c", "sighting--6a32216b-069e-4c24-bf0c-6439ff602257", "sighting--8ffdc2b6-01ad-45aa-9114-7eef2cf8eded", "sighting--9db2e7a1-81d5-42d8-8a83-0ea52f2c7224", "sighting--98178036-00c5-4db4-b283-d418d43b7323", "sighting--c6746dfd-07a1-4e69-86bb-5678c0056bae", "sighting--48c7c17f-ae69-4315-90ff-99ee126d1a5a", "sighting--6ae2024f-08fd-418c-a9d4-cc6519e01a62", "sighting--453f413d-a140-42b7-9c83-e652897d63ca", "sighting--ff9f582e-e0d8-45e1-ad3f-079c09818d44", "sighting--d746cade-64e6-4d76-81d5-c79cc5863b5e", "sighting--f308015c-87c9-42ad-83a9-55a91328558b", "sighting--52016f9f-cdb6-4f02-830f-84863aa2ec46", "sighting--a74d442b-b020-4486-9cfe-e6d528066718", "sighting--19ba156d-8342-4569-b82d-884a5d1a0126", "sighting--b2a575c5-4e85-4c8e-9d31-d5b0bf64c047", "sighting--14f37d78-f392-48d0-9f35-698298225449", "sighting--9dec2cc3-1ff3-4107-ac8c-75c68d427107", "sighting--3ea7c697-6606-4bbd-91e3-2f864088b233", "sighting--4a10d18c-ec03-4e1f-b14a-3cd0532928c5", "sighting--14b52cef-aa2f-486d-ab35-62878e0a4270", "sighting--413db2de-eb67-4116-87ea-b7e769104d0d", "sighting--7f3313ae-1cf6-4c31-9371-8953a2933098", "sighting--a8e7659c-49ca-40ad-84d0-a11f2ddc83d3", "sighting--36a1d99e-5cc4-444d-96ae-fdffef79aa7f", "sighting--f8a76c7d-380b-4999-b728-58e7610c7eac", "sighting--effb085c-2918-4156-93ec-cdbcb71465e1", "sighting--13711dcf-5aaa-4f28-8a4b-67634bf31a4a", "sighting--67724208-7ea0-4b9c-b802-e93e7253ee89", "sighting--c7fac831-fe63-4fd6-b711-16bbb724cc8d", "sighting--f8886440-76a5-401a-a813-e41825f979a3", "sighting--420bf413-bb52-4766-b296-3587c2b3aa68", "sighting--e827adc9-a868-49cd-b992-50f0a4d17682", "sighting--aee30522-eb86-4e16-b44f-4ab478b24ea8", "sighting--e05b1349-f8b3-49df-8808-db31a5a3034e", "sighting--f430bff5-18df-4235-a8d3-aebab4d65c4f", "sighting--1f41adb6-6883-4cab-a359-f33102fb577a", "sighting--f2bd5fcd-ea47-4ee8-bc54-0e7f2be52efe", "sighting--f97c21e8-fb9f-4551-8544-56dfa5c0bd3a", "sighting--bc2d209c-4436-4d24-9a08-63a4132870a8", "sighting--326d3c24-88cf-4903-9b9d-a154e7591241", "sighting--7bd7b49c-ee46-4861-be67-96d749a30de4", "sighting--cf08aa94-1d70-4187-8193-9119db414a19", "sighting--3c2b09c5-e5c4-45fb-a9c3-9fe1d821f93c", "sighting--bd0445a8-0522-4093-99bd-d3f114c12d50", "sighting--f639b800-015a-4071-8d48-cb9eb933aa3b", "sighting--c46df221-7860-4611-8e22-3adb0d461941", "sighting--2d4dc92d-9aaa-4968-85a4-6ba1722cd953", "sighting--6fd6c28e-bd7e-497b-b87c-b0327ed7eaf8", "sighting--1f6909e2-3864-4400-9605-d8bce1c4172f", "sighting--2ea36195-67db-421d-be37-91d270da9f7e", "sighting--24951443-e5db-4af1-a470-b0b3a02309ed", "sighting--6b819f58-1a85-4de3-8db6-827774276cf7", "sighting--19ed381b-2628-45f0-a0ce-ceaeecceb4b9", "sighting--6aaf0e8c-4a73-4086-b867-9c9292ce0412", "sighting--30cef506-cbf6-4580-80be-0f3f4aafca8e", "sighting--d5b13ac4-8264-406a-b092-3694ca1fc72e", "sighting--0cfa2ffa-22d2-4217-b23a-db0c481af8d4", "sighting--729e0bc2-2a07-4ea1-9a8c-968a6a57f862", "sighting--decba7b7-80ce-4421-a4e3-e22e50ba5bcf", "sighting--a0bffa74-8e4e-4b24-b83c-3a4cf2af5ae2", "sighting--f013b6ab-41df-4614-8d35-7c6ffc401e6e", "sighting--3863873c-3f04-4a42-a9e3-0735254e2833", "sighting--8380f9cf-0a0a-4343-b778-b82d133ffaa0", "sighting--469e1e4d-c075-428c-8d97-7fd423c5da78", "sighting--ab4a4121-6523-485f-af92-582d9e4947c0", "sighting--216680b9-15bb-44c0-a917-a6aa2cb812b9", "sighting--b89dcfed-13d7-4ca2-b891-1d012b104f7d", "sighting--44ec4179-edc7-4443-a2d3-d93d8dbe261d", "sighting--83989698-25a8-4ad2-9b4a-81e0923efd49", "sighting--3cdbe8d3-ddac-4189-a03a-be36dd5a3c28", "sighting--8f0f652b-ef6e-491e-83bd-e7753900a5e9", "sighting--e9dd7039-2cea-4262-91e3-be03d9d0c2e9", "sighting--597dbbcc-6bf3-461a-9193-7bda560a6e25", "sighting--a6336b9e-7d47-4786-b3c7-ac57a7284b36", "sighting--d0179b16-9e5a-4a23-8f69-73683399eceb", "sighting--92162606-5c58-4eb2-b9d1-f637aacb4e7e", "sighting--6c6afc20-effb-4258-bc7f-577610390f37", "sighting--ad39108d-084b-4cf6-a5d7-0167bf81e4b3", "sighting--792f6435-d878-449b-b193-24d5b98796da", "sighting--b7886a44-db90-4aed-ac8e-18d2342cb863", "sighting--d5e53715-55f2-4ec2-b6d3-2d71fb50dabc", "sighting--5772a7b5-bb62-452c-a147-f1d2da2fbb49", "sighting--f1ca73b9-f9fe-4778-9c23-acbe66879163", "sighting--2e3966c9-4384-45c3-84a5-6a0bfbb86d7e", "sighting--437825f9-8340-4f17-bb45-1afe23c1250f", "sighting--7cd53621-3986-4d53-8aa2-c2939fd80b9a", "sighting--4ff8df92-da46-4cfe-98f6-e0d22f72bc3d", "sighting--872607cc-d8d9-47ec-9b82-f91dc64fb107", "sighting--5c5e34c7-d325-400f-bcc0-18dc379417a0", "sighting--270542cd-df5a-493d-8c12-4d1be264fef6", "sighting--af81ba85-cd2e-44f5-94a2-625514de1e8f", "sighting--1c826afa-b68d-420c-a34e-e8ce7fa994ce", "sighting--622c3b48-4d27-475a-a42f-10a2a7298190", "sighting--b6a1284a-5e3c-4fe5-b895-e57706f2f0c3", "sighting--7ab06da3-66ff-4af4-968b-7058dff7191a", "sighting--64735016-f75c-44f8-bf06-0dc9c2138da2", "sighting--7da6e388-8be1-491f-858f-c599f8f73054", "sighting--180f0d84-2d12-478f-89e2-cfa27c0d6d59", "sighting--f36290f9-0822-47b6-8189-bff2facfff99", "sighting--bd1e20e6-c634-404a-94bd-b40a0b26c47e", "sighting--32844cc8-91f9-4121-8896-e7c1b1c51b63", "sighting--ad65331a-a3bf-4b43-96b7-b5e55df36c7c", "sighting--54f45309-7390-4372-80b0-c18d35579b7d", "sighting--b691478f-a277-4881-aae5-ba5ac1d222db", "sighting--37fc748a-8932-4779-b071-740c3534349c", "sighting--d7a1bae4-4cbc-495e-9c72-3f22158f08d7", "sighting--f08abc23-0768-4f9e-ad86-06582df216f5", "sighting--b8b4159e-11b5-44a9-b024-831e3b8c3089", "sighting--12110f0e-78b4-4035-bc5d-e877f182e3ce", "sighting--cb100671-4346-459f-9188-e2cd0bb9e20f", "sighting--d9a5c4db-6b12-4f47-b10d-282924bf1e7b", "sighting--c3a854f1-ead6-4628-8436-a310fe869b80", "sighting--b8991d19-de7b-466f-ac1b-56f2ab3145bf", "sighting--80fd6fb7-24d6-41e2-93ea-f51007e71883", "sighting--1121b4ba-11b3-4b81-a6d1-efb4a135548d", "sighting--63d758cc-a2d9-4fe7-a054-1c6a60797afc", "sighting--95a3d8aa-235a-4713-857d-33cb0695c829", "sighting--aeacf33f-ba38-4404-944d-b93d595c2392", "sighting--4dedc691-1f85-4bbe-9b8b-69e11f5d83fc", "sighting--7543b909-ed77-4751-a827-5b3a0f7d4c9c", "sighting--585fa327-d63b-45c5-9f1a-696f55275d56", "sighting--b3741d47-2f43-441d-b27a-b54bc9991ae7", "sighting--0d02532c-5c2b-4329-b0d2-ac545d4bcafd", "sighting--0e05d9b4-eaa0-4911-9a87-278d22282217", "sighting--c158cfab-c8ab-4979-91f7-6321de58404e", "sighting--f0bfbb61-41e6-47ef-9652-3896c85b0b9e", "sighting--d08ab423-6e4e-4d1e-b355-7f24f1fb5c3b", "sighting--0c0aec4c-76e6-4df0-93f1-4aa84699b316", "sighting--ded25d7d-5e27-4045-a47e-594db5f16f11", "sighting--6a7c5eb0-b1b9-4ebc-8c43-94c81a1a5da7", "sighting--f3e9688a-7d26-4d21-b41b-b22df70968d1", "sighting--1855fe5e-45b8-4c11-8283-ad9f9300d177", "sighting--17d1cfff-36bb-4eef-ab9c-e81738c85fec", "sighting--67edab21-4319-49f3-9235-0fe382555751", "sighting--ca722ced-b7bb-457d-acd1-c57580a57bed", "sighting--9cfe96ed-f282-43df-a60a-71d1f97ce104", "sighting--c3f9a6d0-63fb-4cb4-98c6-fe39f732cc1d", "sighting--5349c924-3713-45c7-b491-1c835b6ff789", "sighting--f1082ce5-7435-42a6-b446-306e0912a49c", "sighting--bd4a1ea1-9bfc-4c44-b06f-3794a7edd3fe", "sighting--64e2d577-15f2-481d-bb9a-030f6a452a28", "sighting--d011d3f6-b3ed-4361-b0af-d205d92ab68b", "sighting--c402ee4d-dce6-4d07-937d-4b8d1f8fe7ed", "sighting--9c7c6d4a-a011-49a3-9159-bb66e742e462", "sighting--b5dba1ec-0a6a-49ea-9a54-a6e829bce481", "sighting--65ab04d7-ca4f-4b13-9698-45d29337f863", "sighting--c10a2669-bf1a-4784-9175-c715a2a84a7c", "sighting--4feedb0d-f811-41de-909d-7ed9499991ee", "sighting--382191b7-bdda-4ecc-86dd-56b1bfbec02c", "sighting--1cdd3b94-2c2c-448d-b080-2c0638647c69", "sighting--a422a904-1f63-40d1-8b99-871f8cd5edb8", "sighting--3b82421d-da6e-4b6c-92ce-9003ba605e13", "sighting--2911c09f-3ae5-496f-a01e-a00b83d681d8", "sighting--717018e5-11fe-4956-a311-e413a725f4b8", "sighting--86057a53-f0ed-4f57-a562-cc1b90c4287c", "sighting--c569efe7-e9dd-4f92-bc57-9b81317a9a1d", "sighting--a031d9d2-b594-4dd3-a94b-d242df2b7fcc", "sighting--75ea36d4-972c-48fe-bcdb-eda50e92f76e", "sighting--27e79d8f-d2d5-4164-b171-f1cdebb9eed7", "sighting--2ed29cc4-a034-4cc2-8cb7-7dddbc8c9fe7", "sighting--46a0c861-81b4-4ae0-b46a-65f188364dff", "sighting--82799d7a-0b67-4e40-bca0-920d0ba0ae45", "sighting--d471ea0d-a449-4180-bea1-ecf7a095b521", "sighting--0d841927-3119-4217-8945-a2259dba5d5d", "sighting--45fd2368-3e92-4dad-9217-f5c5c1a41359", "sighting--6839d664-c03a-4c4c-8872-3376b243b37c", "sighting--862ad295-05e0-402a-b436-9e7eb5a54907", "sighting--447167b9-0823-49b3-80e6-49ed52cee284", "sighting--d584d3c0-ca9e-4fe5-9e92-12279557deef", "sighting--c7545088-cc25-4acf-864f-8c34eca7082d", "sighting--48596cac-430a-4496-a912-9b008c6a9768", "sighting--8e3ee529-8259-4912-a454-697ebc8997dd", "sighting--96d4b5a0-9c76-4adb-ab52-252b63c4154d", "sighting--485eca8e-e619-40ae-863e-b757cd4ff5bf", "sighting--58c477d3-3d8d-40dc-b9e9-f7f4599b1e70", "sighting--52e3a204-6255-4873-a5d6-bb850211c3e4", "sighting--2b584a0d-6b81-4fd7-972f-184901fb6641", "sighting--b19e12dd-3f4f-4940-a680-8b056ce9eecf", "sighting--81d2df18-6f51-434f-ac8c-fc046538b048", "sighting--8db38208-95fc-487e-9bb7-6983163bb41c", "sighting--5ee73796-e7b6-4950-9651-8245dffa2851", "sighting--de5b9341-20a3-4a28-b698-d438ecd785e7", "sighting--4515bd38-9c94-47a4-b5b5-14c7eb98a4be", "sighting--1b30e448-6a04-46da-93c1-4d048dee703c", "sighting--35a31364-3373-4118-b812-2803c70483e6", "sighting--d71972ff-1975-4b57-84e1-af6ac4d0eb9e", "sighting--716f10e4-57dc-4eae-969b-b7e219ed946b", "sighting--b5214f8a-3964-4688-839c-f2551ce44618", "sighting--40106dc1-6b1e-4bcf-bd38-715b56867c92", "sighting--dbe7e47a-cf01-4da2-8ac7-8b1ee7e9da52", "sighting--5a900f65-50c4-4606-946c-8973a7c6dbd0", "sighting--fc84c316-37bd-40d9-9e4c-48530838f802", "sighting--09dbed4d-a53c-4a49-aaba-efb919b62d43", "sighting--c05fa16a-28ac-4298-9acc-f7c2c8de70cc", "sighting--493b4cbe-e411-465d-be73-ac0fb6ae74d4", "sighting--90d19769-1df3-49ee-8596-68345bbfbb37", "sighting--dc1bdc45-5c5e-4656-ad5a-d0b14d367c09", "sighting--603e3738-4d91-45b1-b9df-25a8d2dd78e5", "sighting--673e6af2-dd76-46fd-b795-827280b84be6", "sighting--806989ec-21f7-4418-9b91-f0aed32b50a5", "sighting--864d1661-f1c6-4efa-9e01-868996fe8915", "sighting--3fecf7af-1219-4417-a86c-438369dead71", "sighting--079aa80a-8dcb-4372-8175-c2be8d47b86f", "sighting--49a9a10b-0d74-46a7-978c-c5ca906d7af1", "sighting--8181e50d-7955-4291-a6ca-bde131fbf147", "sighting--fcd46823-0552-4c8a-89c8-4473339e25c3", "sighting--e950f3ac-4b2e-45b2-9569-dc88198840af", "sighting--b4a83b78-c8ba-41fa-9b19-e385fe794a1e", "sighting--75a91b9b-7713-44fa-9c08-995455e7abf3", "sighting--710385d3-9bd0-4101-9a41-056c95a1b08a", "sighting--5e1719a5-d9db-402c-ac5b-e3fcb965eb4a", "sighting--02c1a213-7dbe-40ef-aa9a-550c5d4b7f19", "sighting--5e4667bd-69da-44d6-8912-775452648ff0", "sighting--4b23d848-d32d-4845-828a-114fed3c5ccc", "sighting--2b489fad-a1c9-430f-8786-48d2176ee45f", "sighting--2ce044a1-157f-44db-8d18-e78e34c771f4", "sighting--d185104c-5359-4362-8b9c-2ab00988e6b0", "sighting--864b916c-772d-43a7-a1d3-5cab2ddf0579", "sighting--9a2701d2-59e6-4890-b027-38702a032ba6", "sighting--dc77d4fe-0d51-4ebc-b56e-dc3c51f5c71d", "sighting--190dd46a-b9ea-4927-bef3-311b6cc566da", "sighting--8e69bd75-ba5f-4ff3-98e2-0ce2d4f3f6c9", "sighting--6a9a1108-add3-4f66-be91-2ab013c9c652", "sighting--1e24a2d0-5f2b-4c0a-a3a4-094368aa15d0", "sighting--0e163258-2d7c-4163-bed5-9a12ab832ce9", "sighting--ca28df1a-6efb-4cb4-8b93-9b2de0bd2b72", "sighting--f9691067-dd6a-4be6-bf77-c904ba86fb6e", "sighting--aa15d859-725a-4250-839c-302394a30853", "sighting--81066009-a440-49e7-851e-5ca92061453b", "sighting--d835f44c-ee0b-4ea1-b1a1-77006d1b205f", "sighting--e6856f2d-46c9-447e-a80a-7da2088593fb", "sighting--2c3304a4-7049-4129-9fd8-889ecd612bd9", "sighting--3e42eccb-f23f-47cd-9a56-36bedb16157b", "sighting--e09af64d-7c53-4014-91e6-887c4e540875", "sighting--2cfb9017-cba2-4514-9876-506a63bce5b6", "sighting--ae119c0d-4d0a-4355-a278-55260f0034ff", "sighting--e8d4ec16-50a2-4370-b0f3-74719cbd8169", "sighting--25706b88-c2f0-4f85-bb23-0f4c24a8cc9e", "sighting--d15bf095-f8cd-4820-b6a1-e77e6660c0f5", "sighting--556da473-77f1-49c3-8e3f-0c0f1155089d", "sighting--35833d76-ae10-4427-a0bd-140e6e09823d", "sighting--1fb3c0d1-7820-45bf-90d9-d075e43d1990", "sighting--e1f1d938-4631-4b1b-8656-3b8359c094b8", "sighting--55609c95-ab26-443b-a431-a4677e5690aa", "sighting--0d7d0ab2-c0fd-4769-aeee-8ea5ef562b32", "sighting--0e7be135-d0d6-4c11-9d9c-627a1984bc85", "sighting--641fd109-89fd-4a83-9987-3c4e0c62f60a", "sighting--a639e373-9dcf-45bf-aa8e-851aa06fe226", "sighting--e4cbc7f0-23d1-4ff5-929d-a61a761a2436", "sighting--bac55278-c0d8-45e3-b020-9ec447409efb", "sighting--69a4f381-b46b-49ed-9f4b-b2cd5cbb8ccb", "sighting--4f7e6891-55ec-48eb-9b56-0b67e84b5d4a", "sighting--346177ec-4cd3-43e0-a640-d49d00b21c32", "sighting--9ac73ac8-c16a-42e3-9866-931f67a9f533", "sighting--0b7a82e9-2e74-48c6-a1b3-6c39a8e9f1c7", "sighting--ce4baf85-fe6b-4bbf-8dbf-34196d03dfb6", "sighting--785c2573-6581-4444-8da6-91fb1ff6d368", "sighting--58e23355-2312-4e7e-8a40-88a367af3528", "sighting--2a6be842-2b95-48a2-9b73-0d1a07a87438", "sighting--e8a4f07e-a814-41a1-85e1-83f8249830a8", "sighting--09e2e63d-b4f1-498a-a141-8cca9a0921f5", "sighting--e0aff541-9e1f-490f-add5-cb54db69b02d", "sighting--b5e74933-9ad7-4d6c-8ccb-49090b1af370", "sighting--21bec03f-ebc2-4025-8107-2b0d1b03a4ab", "sighting--dccda34f-7e98-4045-9235-8d6ba178995e", "sighting--8f783fd6-3330-4ca7-ada7-d0d417423c96", "sighting--31f3f7f0-cc4d-47f1-95ee-89432c260810", "sighting--2511017d-2c75-49a2-af10-6538d7212373", "sighting--bca23749-03d6-4048-aeeb-6f680d8e2c31", "sighting--149caece-d0a8-4ed9-bcd0-0cd0b4eee5d6", "sighting--0a71e417-6f9f-42b6-b997-8e57b38a5bea", "sighting--45a0c56e-11d0-4d8d-9ff0-43d351f90eda", "sighting--8836d95c-022a-4f50-bfa0-61c34b956410", "sighting--e71556c8-60a7-4b02-8092-710d3a099f20", "sighting--ca94bee3-3a08-46c8-ae53-eb59daef5e4b", "sighting--90d881da-9f55-4901-bc14-90d35a47f445", "sighting--7c3360d6-24c3-4e7b-9b8a-96b781b22854", "sighting--f1e5dd2c-a8ca-41c5-9544-a47ca076c7d4", "sighting--9394f426-a1e1-409c-b43a-e05b16389231", "sighting--9fefffde-eb3b-4b03-92dd-0a7a508efc35", "sighting--9f55d8ed-fcf6-49f2-8bc0-36aa0f25ef6b", "sighting--e1f7e011-e9ce-433f-b8db-6a697daddff1", "sighting--d1f6d5cd-8a93-441f-9b8e-8af316e5dadf", "sighting--623693d5-2786-4b9b-b0d6-007ec3d3773c", "sighting--6895afd6-06eb-455e-bf8e-df184d98dee4", "sighting--69256ce5-0033-49b8-9f45-d6f6a5a225c0", "sighting--46bc11bb-b8e5-4dac-a250-297f25c8d229", "sighting--e608f6c0-68fb-4828-8ace-48d042d4c843", "sighting--97f04978-7722-4953-9ad6-88355f33ab3e", "sighting--3dab4e8e-37ec-4d71-a3e2-938c4b096531", "sighting--674a98a5-4bfa-4930-862b-f6fb0bf6769d", "sighting--aa49fe4b-53c2-4e98-a3d5-d67987e4ce08", "sighting--8e046004-c40a-4ea9-9795-d315e83504b6", "sighting--6fcfac31-4a3f-4c0c-b71c-e480ed17a6c9", "sighting--f4691b5d-117a-4f47-a92b-f4417ae016f9", "sighting--bb0b8071-6c0a-4a0a-8a74-87e15f711f2b", "sighting--1c5e32f8-723f-491f-a1b9-d8cbbe5bb467", "sighting--d7864e0b-59fa-4dee-91b9-d77a3d0a13d7", "sighting--a3788ad7-892f-4896-b70d-eec4faaf5005", "sighting--71f4d527-6073-4808-940b-eff62ed8a704", "sighting--b2abf266-6055-463e-98d8-a8250a1a2563", "sighting--d645f719-bd67-4aa1-8bde-c9996340afbc", "sighting--eb6bf120-e900-4942-9b40-45c79d1e5001", "sighting--3f3b1ee8-c465-4551-a83c-483dbd29bc29", "sighting--b2f67aeb-650f-4540-bfdc-4247074f9dcb", "sighting--b61133f8-1743-4838-ab90-f26f8a661547", "sighting--4fb8f536-bcf9-4eb3-978e-82af032c7b32", "sighting--9769e662-1151-4474-9ed1-1f1f446286ef", "sighting--d7fd8794-1707-4aa4-8737-7b23dc5d4044", "sighting--d149183b-bbd2-4f11-a922-db8539944184", "sighting--d127e0ec-fee8-439b-aa53-b295f858de16", "sighting--a2bb084f-b021-497c-9621-86efd78856e9", "sighting--1caa6fe5-899b-48f0-87f0-eda0dbc8ad16", "sighting--f0fae4d9-5625-45bc-a964-33d1060f1ed2", "sighting--0e2d3baa-61d5-4724-8ae4-be94243a3beb", "sighting--3accc312-c405-43fd-93af-a7d783150440", "sighting--5f98883d-1e5f-485f-ba87-b7bbb3a50abc", "sighting--a9e82174-9db2-4202-a5af-194984e5bf8f", "sighting--342cfa3b-192e-46d4-bfef-0a3b3c766b44", "sighting--b42d9b31-6c72-4acd-9eef-4daf6aaf7ea9", "sighting--62242c30-1e06-44e7-8b8d-52f338572ae5", "sighting--869bae82-132f-473d-a6bb-4907a9061419", "sighting--a2b112f2-4c1b-4701-8ae4-e5d0f339b814", "sighting--7c4bd732-3800-4fad-a5dc-9388798cf356", "sighting--493f9ca0-b8a6-4c4e-998e-77e17cdf4f33", "sighting--394412b7-a4b2-4ac7-8b5b-75807574ae0b", "sighting--d6270d4a-2b61-4100-b991-7c11f4f0f581", "sighting--588bcb74-cb4a-4b39-8635-07a66ab1e169", "sighting--56c3ee3b-3d7a-4668-86d5-a659515ba85a", "sighting--8561a537-0f1f-4c40-86c7-bf10e9987150", "sighting--29a8524e-5c46-4fb4-8567-d79a63453366", "sighting--2e778f0d-1baf-418c-a500-2b933004a0d4", "sighting--1c41ebcb-2c40-4e32-b842-23f57c44c84c", "sighting--dcb8d234-0ab2-4584-a011-1dd19f3eaf5e", "sighting--8e158352-876d-4ebc-83d8-ccba2720abf3", "sighting--b797ed79-7bf2-44fc-9356-e6e5c8cdac56", "sighting--1a5f67fd-b212-47f8-877e-c1137da381a7", "sighting--11ce42c4-57f1-48fb-b638-f63ced0a9fd6", "sighting--6d48039e-c7fe-4602-8402-10316eeda76f", "sighting--c396d95b-75a1-4784-b3f9-abcc6f980ebe", "sighting--121dbadd-11be-48f9-a1cd-c642083e0d0f", "sighting--5ff670b3-a53d-46d4-90d0-51ad98f8e843", "sighting--03014edb-1b13-48f1-9c0b-58ab99b161e5", "sighting--133f81d3-2bbf-4bb6-ace6-d5f0cb5b6b76", "sighting--21010f9f-ce73-47d8-bd0c-3a681353ff87", "sighting--a0e5229d-d82a-44ec-9e17-1b4073c39d89", "sighting--dc5773f8-7481-4798-b22e-b50a53336eb0", "sighting--88d482d8-2f92-48e1-8875-8e5d224f6827", "sighting--e5f06af9-65c0-4e53-b11e-b5b1e96cba4a", "sighting--6afad59b-a69e-4f27-b1b2-039c31b246e5", "sighting--92a30e3a-cd6f-4795-8f20-b02cc307b535", "sighting--e220864a-9741-4237-865e-2943a69fcc9f", "sighting--c5735818-4b84-4e4e-b154-86f08badd581", "sighting--c842d66e-a7d0-4a86-aaa2-051d96376d60", "sighting--614aefc1-cbfa-4519-ae7d-f9f62b5f0986", "sighting--0d94c0e3-86bb-443c-9d8e-e6a555d17f23", "sighting--0b790983-0d15-4133-8160-aebbd0e21e1a", "sighting--67115f45-5e8a-4347-b7b3-467ac622edcd", "sighting--a7218912-737e-4d3c-b8b6-65767a3bfe5c", "sighting--7e847990-b7e2-441e-8e4b-5ea72dd9cb1c", "sighting--b1e2718b-102b-438d-95af-2c7ab859264e", "sighting--f052e370-b9ac-420c-bf20-f993e61f9d34", "sighting--87601a43-6df8-4e65-8a45-75df7e025267", "sighting--c31666b0-93a7-46af-bdcf-a271ad988e25", "sighting--e7c14d59-be69-403e-8a96-d5082749cf08", "sighting--ffb53585-b0e5-408e-ae34-ad676741c78d", "sighting--5aaf86a9-855c-4a6d-b3e8-181b578b5fac", "sighting--f1a86db8-d63a-47b9-ae9a-f428e4b04499", "sighting--4908a1ba-e1f3-461f-bdb1-1bebeca11cdf", "sighting--e1e5a722-26ff-4907-9aaf-43243928aa5e", "sighting--b58c1f53-a7b4-45d3-84a0-d6be3429579f", "sighting--116d2ccd-903e-42cf-a5bb-433b62f9f122", "sighting--eaddd0ce-c186-43fa-aa29-3719bc824856", "sighting--6ba5c184-54ca-4107-950a-2b48084e5f05", "sighting--b198a8bf-f2dc-452f-9d23-575e32a8862e", "sighting--0a715a5b-d1bd-4c1b-8a0f-a194418eeb36", "sighting--b8ca778b-c55b-40b6-8ed6-f72154ec1303", "sighting--84a80623-6207-4fe4-aff4-816abff7c791", "sighting--4a99325e-24dd-45ba-999b-b39cd395f03b", "sighting--7dc0514a-582e-4c87-8b8c-b12bd3f51cff", "sighting--af748e69-5cba-46b0-9725-caa6cce98d38", "sighting--4320148e-8523-4089-8a3d-6c8330e4019c", "sighting--51ba5141-628c-4c98-af61-4b05bdc6f8f7", "sighting--b1500f70-60d2-42d7-bf74-8498dab49e1f", "sighting--b2729101-f220-48dd-91e1-85d1f2474bdb", "sighting--393e7434-1fd3-48d4-826e-8c6c65172169", "sighting--72fddcec-a837-495f-91a0-1d33a648e2f5", "sighting--0868d525-4b21-49e5-ac46-5015b495da22", "sighting--c09739a9-316e-4a07-a509-9c2bdf7127e0", "sighting--8e315070-9402-47cf-8273-201ac86a0b5e", "sighting--eb43c211-7e2a-4002-8c8c-c6f64727714d", "sighting--0179f35d-4182-4c38-aab1-fc2f42db6609", "sighting--e21bdc7d-0afc-4a13-bf81-33eb8988bded", "sighting--62c78fe8-31cd-411e-b37d-d10a42b9f79a", "sighting--cf8fdf40-6832-4f4c-ab32-5adeb71ec2ff", "sighting--4b660e34-fb5a-444d-a3ac-40cb81832ccf", "sighting--3a908de1-ab9c-45fa-a350-66b3aac0d4c2", "sighting--fdf0408e-f7ed-46ad-9758-ee70f1db5eb3", "sighting--df483bfa-cc77-4de4-8710-a1c3cff89231", "sighting--8e59c1e4-6032-43f5-8d41-4d39b97c26c5", "sighting--7f7e3267-4552-4d0d-a0c7-9ed089855164", "sighting--67cf457e-291a-4f9b-b46c-c9284e748dcf", "sighting--cf5b2aba-31b5-45c7-91a7-8804d87f2846", "sighting--5bfd3e93-62e7-4912-83d1-b1dda4962dcf", "sighting--9ef6eba2-7727-4252-9720-67d796148504", "sighting--b7da1ec1-c2c3-40c7-9bd8-4d3dd5356da7", "sighting--cabd61e9-61bd-4dd2-91d0-347d791cf83c", "sighting--897d5016-a719-49bd-830f-66a78d7f0a7c", "sighting--9ed5b1ad-48d6-476d-9024-097be101a829", "sighting--b2329fcc-5ac1-4f70-9b3d-ed58f6955d31", "sighting--7491d108-5a34-4810-8528-3adb6532505c", "sighting--9ede5fb4-8a46-4d4f-b388-8d3c51491f26", "sighting--dfaadce3-9347-4db7-8599-7e883b55a562", "sighting--097eb0f5-1c98-46ff-a8b2-ee1d424db714", "sighting--672d8e5a-5f81-45c1-8da1-5e6e77f0eae9", "sighting--92bf94fe-481d-4fe3-b391-17408b382ef6", "sighting--e71ed418-2d18-447a-8960-268fe4abaac7", "sighting--de85a9ba-3d07-46ab-8528-0ddf709c5971", "sighting--5ac1a7f3-8095-46a5-950b-f26b94bc07e8", "sighting--c7f93a0d-7dea-4032-a6c1-f07a68edd90e", "sighting--bb8b7ef4-80d5-4ec4-90dd-2101f1f8527d", "sighting--ed37c24a-10ed-4a6d-a585-b221e77af948", "sighting--5513d125-4896-4e0c-a4ce-29e9310cce71", "sighting--cf1249a7-7272-45e8-a12b-fdc639a85c2a", "sighting--639780d3-50e9-439f-a488-6aa41b81a1e4", "sighting--efdd3d29-ead9-4f9b-9c0d-dae4b8d7b7a5", "sighting--6ff2b215-8710-4369-92bb-fb38ec2ff457", "sighting--187e5728-6406-4c25-9e2b-234e0d2b19d9", "sighting--fc66c941-a95b-4660-b948-1a1e31a0fc85", "sighting--b06a8597-86db-4122-82df-821aff785d3b", "sighting--1a63bde4-5840-4725-8370-8da333a3e692", "sighting--f50fbc26-84fd-40a2-baef-28d7f27e2a7d", "sighting--4ed8f265-473e-4665-af73-173383ca9dc3", "sighting--790db140-58eb-4a3d-a509-fed05fff3bea", "sighting--fbeba527-d24d-4aca-bf57-d8276a6e5c39", "sighting--7952b120-67dc-40f8-9501-c0c5822b32ae", "sighting--831926ea-0c9a-4fc7-b381-6b6adcf217d3", "sighting--d491b83a-c431-415e-b360-a30cc01fa11b", "sighting--840a7778-34ab-432a-bf78-dcbd85ded0cf", "sighting--ab039ace-6538-40b0-8475-b544c23ba9f3", "sighting--1fd78dd6-1989-4f3a-b92a-fa868d0dbd18", "sighting--6c592ed1-112c-474a-b382-4e4babecd98b", "sighting--fb93c007-9d92-4c18-ac0c-e5277dc89a7c", "sighting--d8fe7cc9-c54e-49b6-ad21-e451eea959fb", "sighting--20911ebd-1ca6-424e-9908-ef1f2dcec46b", "sighting--1825992f-9440-4b56-8edb-ce7ff99ec7c7", "sighting--86a0427e-365a-4102-a18f-ffd9d5275f0c", "sighting--5f5081cb-8201-4e24-b6ae-1cfcaaab0438", "sighting--cc2a5038-e3d1-4618-9878-8349b429c45c", "sighting--8f498f67-fda1-467c-9978-3015eca218f1", "sighting--f27f0d8c-7113-48a0-854a-883df7412787", "sighting--07e8e996-2b8d-4813-b8aa-a1296f84f10d", "sighting--93a0239d-13be-4694-aff2-87df334b486b", "sighting--34a77824-df9d-4581-b4eb-d27cf2b7caae", "sighting--e18baceb-e696-40e3-8f37-cab17d80dce1", "sighting--6875c9dd-5b38-4ac5-b565-f6d9b1a9049e", "sighting--94e50927-1f3c-4fd9-b444-4235c002f8f1", "sighting--312b049b-f262-4104-9057-c50d1f0647aa", "sighting--41188587-558d-4e7a-8d71-d9e2d3574c0c", "sighting--0e0c695d-d1d5-41ab-8fc6-274988c34122", "sighting--cd96f6b4-9f19-4b98-8d2c-146c34ad8a5a", "sighting--88099037-4ed9-458b-927f-ad28cbf26c8a", "sighting--f6d52f7c-dd5d-4fad-be8a-8791f9d5afb2", "sighting--07d54097-f98e-4efd-b35e-42208cbbbfa2", "sighting--32814bf1-7d0e-4f7e-87ce-0cd9ee77c9c5", "sighting--9e73ed9b-fce3-4bc1-a2bb-dd9391e38204", "sighting--83f02bbe-316c-4f46-92b1-5768aa9eddd0", "sighting--501a71ab-0e4a-40a0-8e6f-05bff77132d4", "sighting--e356c19f-9777-4745-bb93-833c97d82b10", "sighting--6af449f0-7240-473a-aedb-02b0731058a0", "sighting--2e3a7f93-d925-4313-bb24-b668d39d911a", "sighting--8b3801e5-2551-4094-b54d-9eb374b69fe2", "sighting--72ad7241-4b48-483e-86fa-375fbdf22d32", "sighting--7d6eb6c8-373e-414d-8335-e771d1d3f8b6", "sighting--2d7ecb34-5846-4529-b5a9-11f6a5fb7b3f", "sighting--2eff9d51-36df-4f75-a133-d454ff4c7964", "sighting--61a1f936-6eed-46f1-b5c3-523cc7a5cf6a", "sighting--b711a78c-e8b0-4558-95a2-5b6486b8bf2c", "sighting--aa6ffb7e-5570-41cb-a91b-7fc0c3a39642", "sighting--0951bfd7-fd3c-4591-9cf3-2052881bb0e5", "sighting--62a79232-a30d-4c10-b1bd-1da520186a4d", "sighting--f7da68dc-415a-4199-aa85-1d6ac1b13fb6", "sighting--8efc02de-bfeb-497f-9918-99f74b14fec3", "sighting--ff8c498a-8b78-49b0-9c3b-35bed478d24b", "sighting--ff8a6205-3eb2-4938-acb3-d5eaffda6028", "sighting--e4d38fa5-99dd-4b80-ba87-1b26c90c7d93", "sighting--7b296042-ec55-4514-915e-f4271f267b92", "sighting--3cee2dda-e254-44a0-84a8-9ce091597661", "sighting--c4e34646-8a94-4e0f-a539-ed99b39bc191", "sighting--51bf4681-8376-409f-bc4a-11ba5dc99618", "sighting--e0ba4522-003b-4dbf-bbe5-2b98692fa7f7", "sighting--02181340-a613-40e7-bba5-8b3d68b0319b", "sighting--89d44374-e0a8-4a99-813d-ddc2fc1276c4", "sighting--ef53a607-c1cf-42c4-8999-d8e237b042d2", "sighting--c554693a-b7e8-4bf1-96b5-fae50d854903", "sighting--3a07d0f8-e0bc-4f02-8547-47b267d8c27f", "sighting--02aad022-d3bb-4ae6-bd21-539d739c2edf", "sighting--2716c83f-7e8b-4d5e-a897-f0a564791b65", "sighting--6fe19a79-b8be-4a3e-9fbf-5f103e1b9e2a", "sighting--b0fccae6-cfa8-491e-8dd1-e75324a77599", "sighting--ecf0e794-3979-4d53-9ae0-74d97deb72ff", "sighting--6c9d5686-4ecb-4044-b831-e71519fd6449", "sighting--a05a05a4-4fe1-45a0-a3ad-0458034933dd", "sighting--6f25f114-88d4-42b7-8ca8-3e744a549c9f", "sighting--566dcb68-afce-496b-8929-1481a5fe4c26", "sighting--55d7658c-61d8-48ca-91ea-a1ee8413dfdb", "sighting--abab597a-7ac4-406e-9c19-fe3f344e5175", "sighting--932fc4fa-0c39-4a15-90b9-d6ce9fa69d9c", "sighting--fef313ac-aacd-489a-a18f-3f8bd0f64063", "sighting--22b19c47-fa78-4626-9ac4-3b5576756320", "sighting--f8f6dcd0-2576-4902-b443-52221359cced", "sighting--99f9563c-969f-4acd-a57c-ae5bfc238576", "sighting--08f6d0a1-8ccf-437e-a18b-845fb918021a", "sighting--13c71c20-d0de-4349-b4dc-eae20b94f92d", "sighting--7b352def-f77d-429a-a800-04cca6255706", "sighting--fb24832d-2b87-45d3-b0f7-81dad7b51ea9", "sighting--00d43d09-d1e6-4de9-9161-a32896235fbb", "sighting--e76d4699-372f-4b7e-ab2f-d6157361bb0e", "sighting--fb4feccc-0bd5-4c08-91a2-6c35e1b7490c", "sighting--4845acfd-c907-4fd4-a64f-0f7148e346a2", "sighting--572b4dbd-ab2a-4d7c-8e97-105694a1edd1", "sighting--b034b753-8b7d-4dee-86fd-be0a7e0075c7", "sighting--02276603-4412-4f6f-9350-de2186a03eee", "sighting--8f130c5f-6a69-4ba1-9044-601cf5f0b5dc", "sighting--5d62e82d-4ae1-4cec-946e-e9fc6b7b7e5a", "sighting--a592a469-c550-4142-baa4-7227b8f25507", "sighting--511e130b-02d5-45f6-8026-ff0c1cf20d98", "sighting--c1f1321a-eb38-45e4-835e-412e7eb2238e", "sighting--1191aaaf-ef43-4917-9427-d43616495d33", "sighting--87acb528-3f52-48ab-b7dc-ef7988b3b2c3", "sighting--c6ee057e-e5ab-4f2d-9a1f-6290197f96db", "sighting--b9b1cd5c-99bd-4826-9501-5de3642b22f6", "sighting--bf0c5470-2b59-429a-b4c9-75491be5c520", "sighting--641d2385-ab56-436e-b4a7-b254609b5c98", "sighting--e31f3eb3-dfc3-4484-9118-f27cbb9298a2", "sighting--6c155915-5cdb-4241-ac12-797100213104", "sighting--c29385a8-28f8-4d05-b59b-7679d9a7f4b1", "sighting--0b78c0a6-2b9f-4687-ae85-4e2e3ed51416", "sighting--724bc916-9daf-4a64-a8f8-ab5a9fff970c", "sighting--aaf901c7-4e34-41a8-9c58-6a9c13b117b9", "sighting--71c69096-08ed-4fac-aafb-1d5152762e61", "sighting--ebba5bf1-009f-40b4-9d2f-f92dd1af482b", "sighting--1d7fd872-ec8b-4152-84d2-7eb0987feed3", "sighting--ae4fbdd7-f639-4f0e-8c2f-59552ec7ccdd", "sighting--bd94f33f-8d50-4b71-88a2-e3770bcc84e2", "sighting--47995fca-ab10-4687-b174-d9a9d57f1702", "sighting--baf3cc95-641b-4bc6-9838-25b104608d11", "sighting--351fb8b8-f98f-49d1-930f-2ba473f9d0ab", "sighting--48819c96-1862-4e28-a417-19c48c66180d", "sighting--b9fb3f44-08a2-4163-8647-ab55a9171b2c", "sighting--e3805968-5c7c-4ed0-bf12-3e6d6f0fcfb9", "sighting--46869f90-498e-46c4-8ad0-11e95fb3526d", "sighting--bedf0eba-26ec-450b-828f-e3086e40e315", "sighting--20ebcdc2-cd9f-45af-bccb-65fffc9989fb", "sighting--a3a9774b-7c3a-4f2e-803c-f349a05198d4", "sighting--39faf3dd-b7ba-4c74-93a8-80fc69635662", "sighting--6637a485-d6c5-49a7-8cde-a190f2d3a0a1", "sighting--aab47060-e1d8-479b-8fe7-5f983130fecc", "sighting--d081349b-f6ad-4b0a-b496-94dc9b7f7baf", "sighting--bf605529-cc4b-4002-a63d-7850e95446d3", "sighting--96c2426c-5d0e-4bf2-8182-717455935558", "sighting--f3bff4b5-d3f8-453f-9b04-1081c3115e6c", "sighting--be1624c5-1954-4ede-a42b-9b9a31d96ce1", "sighting--423ca228-7279-4bdd-b246-aa40034d4f48", "sighting--62d5e633-cddf-44c3-9184-8e6f894c1c23", "sighting--e4b9ae23-2591-4f00-ab79-5762e5381cad", "sighting--9df5c933-7183-4e29-bc1a-9218986aa943", "sighting--95c6a3ba-3fff-4685-8702-35a11d890856", "sighting--7d55e860-9b1f-4fc6-a1df-3c98dce1b881", "sighting--a658a2c9-ad0e-433a-ba57-60cff8074b23", "sighting--94813ec0-aba6-480a-9be3-a1a2c611fe39", "sighting--661f7489-9b9e-45a5-9e17-776ffb4493d2", "sighting--ea01a498-9bd0-489b-9340-df652f78bf80", "sighting--005bd8f0-a5b9-45a3-955e-7d1c92023fe1", "sighting--a6d5fa20-a31e-4ba3-b6d8-a8730c9af239", "sighting--18775205-bb6b-4d13-a48c-215c0efff88a", "sighting--d92d3801-4efa-48bc-b344-1a3431c2cfe2", "sighting--2c076fa2-f9e7-4bdb-9f44-c0a0583bf85e", "sighting--53791446-4afa-4315-973c-8913cfd9ddc1", "sighting--b43d7526-cc5b-4a6c-9f69-328ccadd53fb", "sighting--8250d8b6-dd30-4071-8c72-8b4a82759520", "sighting--9d1d4267-dad0-4120-9264-808da1d08fac", "sighting--fb828f1f-0a73-4778-a23c-57b6e03fca3e", "sighting--7abc2fc0-2919-4b39-84a5-42aed31f2db9", "sighting--067e16e0-2ce8-4031-9bd0-2d0c74c05453", "sighting--2b01a479-7fbc-4d38-b400-81bbf8df4292", "sighting--9aa30951-b92f-4c9f-91a9-89932caeb63a", "sighting--15ce6b45-5fda-4461-81fc-7e6b7a161dcb", "sighting--c9b9427a-2341-4b52-b6ee-1e3fe51a5e8e", "sighting--20a7f714-426a-40cb-b06e-627d5279ad38", "sighting--fc354129-79c9-40fa-bb34-871092317758", "sighting--b457d09c-ee2c-4c37-98c2-188146b45815", "sighting--fcfb3d9e-3a78-4739-8ffe-455db889a419", "sighting--9838d708-63ed-4246-abce-8633f3093eb1", "sighting--1d1b87ca-4016-4a79-96ba-356b85580d7e", "sighting--41c95b7d-dd88-4c8e-943b-323fcf420363", "sighting--bd902154-bc69-4a89-b75d-9a8e9a082058", "sighting--aaf80374-83f5-4efc-8ace-63b7a53e70fa", "sighting--632c8cc0-9340-4c26-86c7-c924b5569e3d", "sighting--0cceb00a-45dd-4043-84e9-97f8a9dffd65", "sighting--cc241f2e-bf31-4c40-8a54-aa580bb55083", "sighting--7345b88f-bdea-4977-a6ec-40949f6ef8df", "sighting--e32d23c6-b4dd-4ecc-9899-cac4dbbb6593", "sighting--6ad5375a-31c7-43b9-a557-63ee48ed323b", "sighting--cf893875-e1bf-487c-88fa-f2764d5f59a3", "sighting--a7dfcb72-8d74-41e8-b5c8-6ec2d025db07", "sighting--fab5c8a9-68ca-4df3-991f-73c6a575b8bd", "sighting--e8a0cd0c-17c9-49bc-9e4d-f24531b8cdb6", "sighting--cc0a7ec4-947e-4e45-8dac-76d9e02953ff", "sighting--0b2b347f-e56e-4427-a666-d93bf7523fb7", "sighting--020723c9-d970-4454-9b38-93039570819a", "sighting--2e26e441-b111-4eb4-9fa1-c0cda293765b", "sighting--c8b7087a-4902-4496-858f-510358d55209", "sighting--c47f9750-be1a-4f79-a423-e2367d189fd5", "sighting--7b14e6d2-6081-47c4-ab2b-e6fe90a2e9ce", "sighting--c025eb0a-f4f1-412b-8ce1-398d2fc4d0ce", "sighting--28272182-ad76-470d-bff3-3d761e793890", "sighting--d88dc745-4561-4862-a664-2148603623a0", "sighting--ee1391d8-d6a8-4c77-9a18-283afd598cb7", "sighting--5a9f0c3b-d7a2-4a5f-bf43-60c03bcd4129", "sighting--7c8fbdac-09f6-4881-8b77-3924a1ab4600", "sighting--81ce9b99-4bbd-45bc-b0ec-67037fcdce37", "sighting--0b28b7cd-d6c5-4d1e-8f9d-013a83c26d3a", "sighting--abcd2baf-6ca4-4443-8d56-ca10e9e98a97", "sighting--8e2c7deb-a3d7-4c39-a1df-2343c5b56d30", "sighting--d3272de5-5531-4196-8b63-45498062c0b5", "sighting--67949223-d7f5-44a5-b21e-ebd0f58a1f56", "sighting--cd199f95-f9aa-4917-b5fb-b6ab550df18e", "sighting--2d2f0ade-c648-4c18-b159-416f17a14f04", "sighting--30c0d04a-2cd9-4902-ac22-a1ca6b647a51", "sighting--ebf72634-2659-460c-94bf-fc43f89184b8", "sighting--fb174743-0cc7-45b6-94c9-59cfcb49a5c1", "sighting--9c0698b1-3055-4157-804b-00ab63e7339a", "sighting--746006b2-c3b6-48eb-971f-721bc1a9170e", "sighting--3c2d21bb-98db-41f0-bb42-2d6efc7db652", "sighting--c4927591-cd99-4e1f-be62-625a085e270d", "sighting--99910e05-557d-4c23-80e9-d875d85d319f", "sighting--41868ded-3576-4643-a103-426faf4f7deb", "sighting--a5e0805f-ba02-40d9-b2f6-6510cf4f6452", "sighting--54e0bbb8-22e9-448d-893c-d80ab7d7b1ad", "sighting--9aada3f3-63fb-4582-b7ec-76afeb4385fa", "sighting--e5b45573-a4a1-4ce7-adf0-00e2eee41798", "sighting--eb888e0d-c661-4226-b3fe-8f5e40ad54c0", "sighting--7bf9118d-8f53-44d1-aa19-afb0dfaf0375", "sighting--ed456108-7e80-40db-aabc-dee19c1117e9", "sighting--07079259-294a-410f-a0f0-6260e5ecf1f5", "sighting--4e7b709c-8393-4bf9-94eb-b3436b94f4d6", "sighting--01cc42c7-5646-4e8a-8bf9-db8a2f8d5a79", "sighting--adb750de-8321-4ae9-b4bd-fd98250c5dfb", "sighting--95b55c0f-8f25-44e5-bbce-26d1b8ed9db8", "sighting--38bb71dd-79d5-40ce-a957-a71277111363", "sighting--d9a1477c-dde9-4014-afcc-eea28c321e8d", "sighting--5d409d7f-df1e-4688-b709-36b5a9258253", "sighting--80419140-e7d1-4b04-b640-5185b544d796", "sighting--a794ca1d-3c32-4b01-8f74-537c33e2d08d", "sighting--acb2ed2e-ce7e-41b1-986e-1e6a62a30d08", "sighting--78346362-3d20-4f81-b7fa-68b7792a8640", "sighting--433fb986-0739-425b-aba9-34cc82ce559c", "sighting--a62c851a-daa1-449c-9710-c4bb6df405eb", "sighting--4f548605-27b6-4c86-b20d-0f8ff3dc95fe", "sighting--92e50558-ccf3-4086-b77a-cda169eab55a", "sighting--8a146092-2788-47a0-ab88-a00cfaa6b9ef", "sighting--d7d88c68-dc2d-44d7-b298-2d1e1dc99461", "sighting--1fbe6ae6-eec4-493b-989a-d22d0fec1cc7", "sighting--fe145cca-99c0-41a1-8ee8-5926f132f1fa", "sighting--8b9480c8-7375-4f17-8060-9f8d265da983", "sighting--272f855b-5ce8-4d94-8977-29ae07561210", "sighting--f8564e36-64b7-4366-8264-e17e6d80b1a3", "sighting--95d200ad-033e-409b-b5ac-70fc22319461", "sighting--5a9d9d71-1361-4a4a-b29c-b8488fd290fc", "sighting--df397a4e-a790-4dc1-8ba0-438052fe2b1e", "sighting--3fe29c39-fa01-4090-98e0-ef58b0599567", "sighting--849723fe-b836-424d-afc2-d5ca2e7e1d5c", "sighting--1bdb1e72-5490-48f7-ae5a-b7a6cd55c57a", "sighting--e10edeed-7966-486e-9e5d-fdc7ac8440f7", "sighting--e0c16599-2408-4e6b-a359-3ef57c9cdfc0", "sighting--6cf79a86-6753-409c-b20a-a8445d48092c", "sighting--63c8eaf2-c459-447d-b2a2-2c6f52975b2c", "sighting--0cf59c90-5f4a-473e-8236-0a6d44f6f7b2", "sighting--4705da4c-7088-44a6-90ea-b4c3bdca38ba", "sighting--1f80e1af-c3a1-4499-a8e1-f1bbe328df14", "sighting--d88f577e-7c4e-40cf-9c1d-9abe29b0dabb", "sighting--21ac5b66-48de-4332-a6b9-570e2d74533e", "sighting--a1ded6fa-86de-4ab1-b748-37cdef6fef49", "sighting--d4364680-5209-42f4-ba32-2287c645f0f3", "sighting--d8c2a941-8428-4c61-875c-45ff841f002c", "sighting--49b7c21c-7c57-4b8e-b43c-81c98b62b20e", "sighting--ed92a6ae-621d-4451-a25f-0f294b1e9a1b", "sighting--9c08a23b-7771-4e67-8f3b-40c0b6d966b8", "sighting--26a035b3-908a-4bb3-ba5e-b5f6470c0b3b", "sighting--bb880575-a4aa-40e8-acb5-77272e1a98bb", "sighting--d1b7264d-4715-42d1-9643-2281dce1e63a", "sighting--48919407-7d2e-43d3-a778-3bae64497b90", "sighting--a6a74b37-83e9-43f6-b9b2-b1559ca4b77d", "sighting--5e4ff85a-b880-4054-931a-4f8e9a6b6a23", "sighting--e5a4d3f9-c49f-48b4-925d-dada1a21ded8", "sighting--9f89c07b-c513-434f-9cb1-a51fc0dcf906", "sighting--538adb51-d02f-4389-87fe-5609990e8316", "sighting--4352c893-b210-4c38-8d5b-6a154db07921", "sighting--ef6c9755-215e-4892-ab00-0321c2654c77", "sighting--f9dff934-9208-4f59-b1d4-6c2c673c08f0", "sighting--db42dd08-095f-4d4e-9a69-b8973f722c80", "sighting--a8d761d5-9bee-44f0-918f-6b5b34bbe154", "sighting--46f1e823-0f45-499a-aa19-813f1fd8d9fb", "sighting--e70cf8a8-1bc0-42e9-8ef5-fdca44b0f14c", "sighting--e662211e-4fe9-47e8-a9e9-8fc219d39519", "sighting--b175bd33-9ad9-4f5f-a846-244781db8d1b", "sighting--b21a0829-b3be-4959-a53f-5f9e7b57f869", "sighting--5aad7dc2-14a4-4aa5-b7b0-4b5e762d8c4d", "sighting--3bccc24c-564e-46bb-8445-d078956189a0", "sighting--ef0df1b6-a05c-4e41-a2d8-db7b01cfe0c8", "sighting--b3616d44-2080-4593-a000-f8ae54791fa4", "sighting--eeea7c33-674d-40c4-99f7-6e23bb85e8f0", "sighting--25e01460-d53e-4773-87a0-f6cb1d4e4d98", "sighting--e3a9d8a7-eb86-4a1c-96d2-ec59f15829b7", "sighting--7291142f-3bf2-49c6-9c12-9a7b376a65e9", "sighting--df8a4aac-766a-4443-b21a-1b598698167a", "sighting--4b98c90a-0ea1-4b67-a56a-ff4227b1c265", "sighting--6afb1c66-5b2e-49bc-865a-6c6619ed397f", "sighting--881b6aec-e3d4-46c0-8db8-3d956687864a", "sighting--9e0c840c-5e5b-4bb3-901c-3c7320b61361", "sighting--5d7d475d-a147-4fec-a318-79fcb68d47b6", "sighting--04953a1b-6bde-404d-a4b9-943d7274b3c6", "sighting--e051ee29-1d69-438c-aa46-24babb747630", "sighting--00c76cf0-74a7-4abf-96f5-2c74f3ff56aa", "sighting--7323e8c3-4396-41f5-89b2-b32e62ecfed8", "sighting--16bd4538-37c8-4a11-949f-6bc1164bb876", "sighting--d81efb00-ac5f-432d-bedb-64ffe57b44e4", "sighting--a0de7608-032b-406d-97c3-688504842848", "sighting--da897224-1618-44f3-a9fd-726efda29c14", "sighting--6fcd289e-5c71-42bb-b96a-5434f75f0701", "sighting--ba7950d0-c8ad-474c-a3ef-0d4e962b4381", "sighting--b29ec6e2-987d-4e2a-80c7-a34cfc9d717c", "sighting--0ab0e391-6e26-40c6-a6e9-8914697dccf0", "sighting--60c17e00-2703-4c8b-a18b-8e70d908a2e6", "sighting--6de74eac-b1a3-4024-8ba2-1d6661aac419", "sighting--879a24ab-e2ac-4c1a-bfd3-d99843e8dc40", "sighting--999d93b8-a9b9-49d5-a86e-29d1e841ce14", "sighting--661480c4-6ac1-42b1-bddb-84c6ac6fd780", "sighting--bde7ab01-40a5-44d5-98a1-40fd2d67ae13", "sighting--12d7905c-fedb-4e2b-a74f-87a14f975d8b", "sighting--11ba91f0-a29c-44c9-b385-909d6345c8fb", "sighting--2fc90d74-6756-4e14-82ad-5b4e2a645104", "sighting--123b9403-2e3b-41c1-a855-d2767eb2144d", "sighting--6c32c96f-b486-4e37-b906-cea3956b1dec", "sighting--3bbbdb74-3210-4224-8f1b-1826e9ca4e86", "sighting--eb3a100d-da1f-4f6e-a60c-ece4fcb94778", "sighting--09bca627-b858-49d6-b4cb-73ea09deb084", "sighting--418528c0-d628-4379-a5b4-dfc807c17ddb", "sighting--f811857b-03f5-4711-80fe-3898ff2670ae", "sighting--49e0f722-fe75-48fb-b056-e0752e36b71e", "sighting--d8f8a0f6-7918-4578-a2f2-254e45d49472", "sighting--a4719c78-1982-4a63-8975-5ed78aa73387", "sighting--749f92fa-f981-4f22-96ad-103fbc312089", "sighting--37155fe2-7a28-4e4f-b3a6-9d8b9dd407a5", "sighting--0319c8a0-5e92-4bf6-893f-d9b805903364", "sighting--0e5357e6-5ab5-493d-8380-ab2534613c8c", "sighting--b4cb07ad-34c7-4cbe-8f18-052265abbfa1", "sighting--c2b818bf-fbbb-4648-9582-95e55c316055", "sighting--5508be9c-d97f-4f15-a6b6-84fa91b0ac7b", "sighting--20d4c317-cf35-413b-bac7-f9b0765a52e5", "sighting--efca98e5-3cd1-4a0b-813e-ca306f90b272", "sighting--3b70ede1-db0e-468f-b0e5-7870875d0c5a", "sighting--91eae803-4672-4830-9a7d-f4c376d9095f", "sighting--6f87e8aa-cade-4808-a0b3-5f6f0a7c74c2", "sighting--6f295474-5d84-4eb4-8db1-1a904cea1415", "sighting--d89dca1b-b5d3-45dd-802b-cf696cf42aee", "sighting--9b6e7368-50a6-4900-8c51-ed1c49d35b98", "sighting--65f18753-a47b-4aa4-b522-cbfd32e16149", "sighting--9dd24a2f-5b60-4336-ad24-e7c505aaa8dc", "sighting--e51ef279-566c-4978-b434-d0653824de6f", "sighting--8939882d-d355-400d-bdfe-b74ef8446fd9", "sighting--f8be00bc-5a86-429f-b2b5-994e9a95bf84", "sighting--d814c9d1-e051-4e29-b5f2-cbfd97482a69", "sighting--afe856fd-331b-4615-8d15-9280ed72e64e", "sighting--64836306-c9ef-40a3-bec4-75371b7ebbcf", "sighting--0b92bf8c-d3b4-40d7-a67a-2c38145061e8", "sighting--0c0d420d-98f4-4d60-9c9e-386345d5038d", "sighting--f8f9cee3-c344-40f7-8985-6c7095829c7e", "sighting--69d0a9ae-ab7c-4899-8f46-cab2eaaecce4", "sighting--e5accfc9-0eda-4a17-9e7d-6f93419305e5", "sighting--847834bb-4697-43dd-9baa-faa49abe60e5", "sighting--2caeaafd-9b30-453f-9e42-29aaca3b2add", "sighting--53ddc346-c492-459c-b81d-04aaf9a920ee", "sighting--60df44cd-f8b0-4f92-a278-abba5b396320", "sighting--ce9f8ee8-dc4a-49d1-8356-5d5bcd0cf01e", "sighting--ccb72fe3-5907-4fc0-bb81-1b3137c9decb", "sighting--6d2b8a57-1487-4817-9320-664f9d7f1db9", "sighting--47f745e6-fcd2-401f-8062-0d827da2fbdd", "sighting--559b11cb-f360-4d4a-91d8-978650ced350", "sighting--c1a70d8d-fa74-49bd-8b79-82fc330c435d", "sighting--f7b26646-d8d9-4561-a354-6d627d38c17e", "sighting--948f5e63-ceb3-40e1-a03a-5b227e566b0f", "sighting--82875198-70a6-4583-8615-57430285499c", "sighting--60f03016-1a15-4f0e-beec-8aff02339ad6", "sighting--99dfb1e0-7d54-4d9c-a284-f116351236bf", "sighting--65c80754-f5a4-4330-b9e8-08ca244973e0", "sighting--a15dcc6b-6fb6-415a-9a34-a24cfb927a4e", "sighting--0dd6736c-484f-4d1b-a4b6-5d6e09d9064d", "sighting--05a280a2-7700-4d00-9c49-c9f77f2839e3", "sighting--79274598-24f4-4056-b3a3-fc4b72bd76eb", "sighting--7789224a-1bb6-4f84-8324-cf137dc3c45c", "sighting--a79bbf9a-0cdd-432c-bf78-e49a80a55909", "sighting--33104cfa-a9ad-4b71-9d46-04eefc04f1b4", "sighting--7441f430-1b4a-4e6f-926c-84954702e59b", "sighting--fadd348b-0e02-404b-88de-b9c3f16c4b28", "sighting--a6445010-ff1f-4d68-8289-bd0229e50763", "sighting--ead30b56-e975-4b27-803e-be09a30e0be0", "sighting--9788f2f0-61ea-4eea-aad4-79336d51730f", "sighting--413682f7-01d9-4ee3-a655-2cfb7e5a9696", "sighting--989e36e0-164d-42bc-a974-37e9c7acec3a", "sighting--0bd74920-db07-421a-8454-330fbe19fb99", "sighting--395f1629-be64-432b-bf9a-bac4973f1f64", "sighting--0cc364b0-7a75-4bf6-bae6-e9c1c5eaef54", "sighting--8ddfd9a1-499a-42d7-8af6-a1215297c819", "sighting--3cd11ebd-b6de-4844-823e-7bb1e5c7991d", "sighting--59bc2a75-3f00-441b-becf-dc916b4ec2a0", "sighting--f6fac5f8-2915-41b3-a0a5-fd1058a720b3", "sighting--b8fb0e32-c865-4f96-9498-2095bd67aa06", "sighting--4e520008-2a35-41fb-b506-bec7e8e51938", "sighting--3bf3b81d-a27f-4606-a767-fbed00cd4533", "sighting--12fb6b04-a6dd-465c-8e37-e097d7099c98", "sighting--c24942fd-1699-4b02-9b4f-3e8cffb07caf", "sighting--db78cec4-1dd3-4cb3-9e7d-2965156bde53", "sighting--018d192c-6a9c-4e64-bf67-9fde5ac52b8a", "sighting--a8b8a892-58f3-4bb7-8a1d-2027119157b9", "sighting--ca548062-e198-4e99-872f-040809de7c96", "sighting--772259a4-3e27-4f3e-bdc5-2e5f86d62f6d", "sighting--00092438-d3a8-497f-9fa6-2e85433fc8dd", "sighting--b4cff74e-b33d-4017-8e91-d1f29c64023e", "sighting--e1034f2a-0f95-4694-8422-63a7f4adb26a", "sighting--c58974e8-502f-43c9-b0ef-5903e37b0d54", "sighting--3b6da9bb-ecb3-49b1-847e-3fa063db6f3e", "sighting--faa3960c-7ac5-4a4b-972f-55b64dbab255", "sighting--b4552cf7-f7f3-4788-a57d-b96dc8387e68", "sighting--7052e9b4-1c17-4066-87c4-1899af90c448", "sighting--3a60aa5a-e186-498f-af6b-ef8cfc3cb5ac", "sighting--029f1e0c-f8ca-4b06-b55b-a3e1fd234cc7", "sighting--221816c1-32a0-48de-8fc6-bc9c94463de3", "sighting--0056a46a-c8c4-4f1c-8617-6f9e101ca3cf", "sighting--47a59160-61cd-483f-84b4-c2b915e9a341", "sighting--0067cd2b-1119-4738-af79-130b312b54ad", "sighting--f6c82066-244b-4fec-9d73-420978376b35", "sighting--2cf1d902-8e51-43f0-a1cd-02fd9e8dc35c", "sighting--1abbcdeb-d48f-41d4-9c8f-24152c38cc0b", "sighting--96429743-b283-4855-aed2-a247ec2061c2", "sighting--d5c47629-42b6-4e8a-96d3-83247f4cabd0", "sighting--948f97d4-c333-4d84-a4a6-162b9ebe54a3", "sighting--0b75b191-849b-4d68-84f2-74a2128dd00c", "sighting--ade0c514-0081-422a-8c24-43a4c0336574", "sighting--6b09600c-c852-443f-8b99-6c92de7bf388", "sighting--a92aac7e-85d9-458e-a2b0-e98acf4973f6", "sighting--32fa8abe-6a4a-49d7-9245-746c42b2e32a", "sighting--9e0a1b7d-aba6-4bba-aa1d-d5f09f171581", "sighting--8a3cbd89-59e0-4bf0-bd94-8235c5cb6e20", "sighting--80241d21-180f-4491-bd39-43ae482f2088", "sighting--d6f46dcf-e190-4831-9736-cca9f208db44", "sighting--1b947288-6c49-4a68-b3c3-d4fe8fce99a4", "sighting--54b358c7-beb5-4110-bd3f-27f39eeb4f39", "sighting--e09742bf-bdae-402a-a62a-715f058c4619", "sighting--1dfa7aa4-b0cb-46c4-9005-71587710c0ff", "sighting--d09657a7-9dc8-46ad-bf16-844f84de70b8", "sighting--bb286b34-9c4b-458b-94ca-9701563c9c80", "sighting--a9476f5a-1fc5-459b-8804-6c53c46bc8b6", "sighting--dc56aa15-dfc0-454d-8e56-5ddfa06c9598", "sighting--52babf4d-13e8-457c-996a-e2884001b357", "sighting--0d3a7db1-1742-44bc-bda1-5e21d872e8ba", "sighting--f39093c3-85b2-435c-858d-0905b7b4bec7", "sighting--60ebbe38-8b2c-47f2-b2c9-9f62d1fa9237", "sighting--5422bbce-469e-465a-8bda-6b2285fc939f", "sighting--853fc219-e933-4969-840b-df7fd03eca66", "sighting--d75eaf15-d659-43e1-a772-353f6e7fdd4c", "sighting--2021b810-4c07-42ae-a631-f8214da537a7", "sighting--9917036c-f3a7-4ec1-918e-10be359e4852", "sighting--ec153163-d8cf-4da5-9d20-6a6a48beb5bc", "sighting--08ce6d2b-6994-485d-b0b7-7cf970eb3a67", "sighting--1b59a94c-6543-49a8-8e72-bcdc4e6c34c2", "sighting--ffe21c99-4bfb-4d89-9b0a-24bf3e0575e0", "sighting--8edef5d8-5679-49ae-8f17-2c64d3fcd846", "sighting--3f7110be-a9be-4c3d-8c08-b129fa45d6f9", "sighting--fdcf2aa4-878b-4823-acbc-8ee279c48e67", "sighting--4bdf1389-4313-44a3-aafe-d1bd9fdbc9d5", "sighting--9678d8d1-5f6f-4d26-a899-7d5e2e9c00d6", "sighting--f5fdd6b5-9cc3-4eb4-9899-20e49cacffee", "sighting--3f297cbf-6855-4103-bd83-5e22312bd220", "sighting--c5edb521-437d-4880-9415-a88461bf3f4f", "sighting--25af21e6-13cc-431b-9d93-f67ebc62f4d2", "sighting--5c8ffa0f-7416-40a3-9af8-a8db17c577c4", "sighting--26552635-a09b-4bba-bfff-1f7656bf0023", "sighting--b23911a2-3061-45b4-a934-e6797b7a0a02", "sighting--96e9c833-9392-45b7-b5fe-13e0c2eabc97", "sighting--0ac139f5-6f73-4a0e-b5c5-11246909c509", "sighting--dbb9970f-9390-4c25-87dd-4b7ad6433ceb", "sighting--fa74fa79-f4fe-4ab9-9b87-00025d390d5b", "sighting--419753d5-d125-42d6-80b1-5456aa5fd86d", "sighting--7a2ab421-ee75-4276-bfa4-e7220f9a76db", "sighting--ebeb392a-bfdf-469d-99e4-12af8f8f1606", "sighting--d0e30156-42a3-4578-b70c-0ceebf8ddd29", "sighting--0c72d80b-7111-4b5c-a397-7486cafd5089", "sighting--8b185317-a76b-429b-bdc3-a96405b1a80f", "sighting--22a38d9c-ad06-434f-a44d-ce537118eecc", "sighting--282377fc-c955-42ae-8eb5-7a0c1f749c5e", "sighting--d6e0c746-e72a-407c-a121-f8050341567d", "sighting--e84e7047-af5c-4473-84ca-f819e6dbe3fe", "sighting--4dbdb91c-f36b-42d8-9790-5516d62ddcbe", "sighting--af4b3ac4-d2f1-4acc-990a-2645c766afa9", "sighting--7ae0bc6b-eede-4b8e-8358-96a7075bf5fb", "sighting--655dcfe6-d6d5-4339-a37d-e65a3ee8ee69", "sighting--187e7de7-b047-4f2b-a35c-a2e8bbe9af76", "sighting--0e978f8b-bd1c-43aa-92f3-f90a60059918", "sighting--24ba193f-db3e-448e-b8bb-c51acbf9971b", "sighting--8f7399c6-9478-4fdf-bee0-9f5a2f5885b7", "sighting--0aead7d4-ccfa-4ed0-bb44-4b6bda3f2017", "sighting--757fe280-e2c2-4d96-8856-e39a45d8335c", "sighting--e3e7de2f-4abb-4eef-bdec-055b0cfc0d0f", "sighting--e66d831b-e01a-4c34-aaa0-271d13ef6231", "sighting--ffbe3162-35f0-4bfc-8e08-141ebd413e70", "sighting--9a798885-9b52-439d-a854-0ac7ef53125f", "sighting--26ff00c6-b0e5-4551-92c5-3f251810bb19", "sighting--241b0f36-41c6-45d7-a4bf-2f792b8b04db", "sighting--5c835c95-0708-49d1-ad57-ce744744f864", "sighting--29194adc-3119-47a9-9dfe-ebd7255f4706", "sighting--ef2c20a7-476c-433e-a7a8-b543da3dd2a7", "sighting--9de226ed-00ad-4e0c-b5f0-8570c1109680", "sighting--b1c7e1be-003e-4bab-856c-debfe761a2c5", "sighting--7e8f78c0-ccea-4730-91a6-8ed8fcc2020d", "sighting--8aea6320-78ff-476a-93b5-c94c06961b47", "sighting--2c1e0713-30fd-4426-8d33-01907203b7c3", "sighting--0f4f1075-0135-4212-a347-a2d389a4c1cc", "sighting--0f2e7903-d606-47d2-8da3-428a65a2fa3d", "sighting--42f90540-5de9-43e4-a5d8-e84d1fb20c9f", "sighting--07f80526-6233-4540-a5ca-d4c16d3d1441", "sighting--5f1043bd-a521-4c7c-bdfc-16b9a74b1594", "sighting--99bfae11-d872-4cbf-ae27-06aa2cb89a5c", "sighting--d0681fb7-51ca-4a3c-a868-ddccfa8a7a8a", "sighting--6c79d305-1a80-40a5-a256-82b74d9afc3e", "sighting--83424810-991d-4e50-8638-758b441afab6", "sighting--3ea30485-5d85-45ec-a91f-0c7c0b0e7765", "sighting--8fb760ba-03fd-47ea-a110-6123df581162", "sighting--a618b51b-8816-4037-b9a0-1cdb02d2c2fa", "sighting--500ae722-73d0-44b9-839f-edc3b57bb4b0", "sighting--bf15273b-819f-4d11-9c28-9734b0a749d2", "sighting--cc56677b-e17a-4921-a055-49c36ded7502", "sighting--8d5a50d1-20e7-45bb-bdb4-618b19baaaa6", "sighting--05f72ef3-264e-4fa9-a3d7-a88e151a1392", "sighting--1d8da4d0-5bdf-49ad-b61b-081c69751450", "sighting--8cb03bc4-f3c3-41f7-9cb1-740ca06ef94b", "sighting--a15282d9-6c42-4b7c-a5ce-d75d2da16a5d", "sighting--4a188838-19be-4886-88f6-3be26ba52d92", "sighting--3dfe9efc-ccfe-4566-bff7-07cee9e8f087", "sighting--58b9e583-818e-4031-9c01-898d5c0fe332", "sighting--790d124d-91ac-44fe-9782-bafd5d06eb5a", "sighting--a38e075a-3d34-4299-b8e6-40927ebc70eb", "sighting--a53feaaf-4a9c-4aa8-88be-ab5c10b32e9c", "sighting--d3d7c3f0-8eca-47bc-aa18-4be957c058e1", "sighting--657b130a-5074-4977-a9b1-1406b88233e4", "sighting--6cc02819-a2eb-4ca6-86f6-7a0b7c9e92ea", "sighting--a26cc0f6-2b08-4d15-93f1-d20f32de9b62", "sighting--00faaaaa-826b-4a67-a25a-55fdc2b8157c", "sighting--44949822-d3a5-43db-a604-18cc73fffe80", "sighting--18225b56-ab6c-491e-a56d-e6aa6f81a7ba", "sighting--0f7f9c5b-2e7b-454f-803e-61d9404b283e", "sighting--7ecc5fbc-bc9b-4da8-bb45-30939ff9b718", "sighting--2dbf67db-2674-4cfb-af56-5caa034dfd29", "sighting--b0da781e-f215-4a7c-ad63-23e4d4a4e7ce", "sighting--1e9d9ae9-27bb-471f-8ab3-ba11692d83bc", "sighting--1d1be603-b349-4cf1-862f-d0a620d1b759", "sighting--27f61463-7ee0-4639-b023-540d7d367f01", "sighting--247c4f13-cac5-4013-890e-5df46ad686ab", "sighting--49f64cca-f125-4384-ade2-f29e53b5cb65", "sighting--0ca47952-463d-4cbe-a12a-ccbedbef3434", "sighting--2331751e-4d6f-488b-b9bd-8e029ff4a864", "sighting--ca77a397-a2b8-4a92-83a2-4f1337c7a388", "sighting--62baf3bb-0f9e-4aca-acd0-9abcadfb40bf", "sighting--ffcc4267-ac41-4e58-a201-33b9486d55ce", "sighting--b2f237e1-68d9-47ae-be94-106e6ef1c8b4", "sighting--4de809cb-c542-47eb-8ebd-20570c25da40", "sighting--b4d6aca7-4790-4fc5-8986-03622b369b0c", "sighting--5c7757fa-2d9c-4ab5-9291-36a0728b10da", "sighting--0a38b389-5c48-47d4-ba3a-6a1d04e37578", "sighting--c0d5c207-929d-4524-9f7c-3b575a8fe7bb", "sighting--a48e46b6-7e7e-4ba7-8f5b-31b4399dd003", "sighting--716c6a44-0690-47c3-bc38-890e6403161f", "sighting--7f1476fa-d2e8-4692-8638-a28f665c860d", "sighting--23da5d99-16be-459d-8278-2a173f05e5a7", "sighting--4651e85f-d8f3-4c12-8afb-9c62332c4a30", "sighting--a6990d87-0bf8-4435-bc1f-21ad48f77009", "sighting--4bd55d35-f5bc-40a4-b2f5-4626d06cae47", "sighting--32d3512f-b930-470f-9bf0-c930e42e4e31", "sighting--20f02afe-91d6-4ead-b906-d28a73928564", "sighting--cc5d6f83-742c-4238-a706-2ceccf7904c2", "sighting--3381b409-674c-4bca-b5d4-a75aefe31d6b", "sighting--596a537b-b1cd-476e-8ed9-a01156936c0b", "sighting--ce722790-3485-404a-b465-79ecd768f17b", "sighting--47cee43a-17f7-474d-934f-57910215c2cd", "sighting--3f5baf20-ca2f-4c62-8977-7345f07e129c", "sighting--9b4063a2-7645-4fdf-9ecf-5fad6e52d4f8", "sighting--24ec7d92-bf97-4955-99ac-ccdeacbd72a4", "sighting--2ba3b871-327e-493b-8d37-249dd3bba2f5", "sighting--695514a4-cfb9-4c52-b136-a73ecd13dd5d", "sighting--2e3b7f57-751e-477d-8ab6-11f2c238ab18", "sighting--488aae75-a990-461c-8852-97abe2d3ab99", "sighting--bbe79f3d-ec58-42de-aca9-0d85d8aa6c1f", "sighting--07c28932-b65d-4bd8-b8ca-3d4ff6816304", "sighting--af4313c1-092a-4ed2-bc8d-2fa7d2e69b7b", "sighting--032a9bcb-47d0-48a3-899b-f80192bd606a", "sighting--7a584b3c-ead1-4895-82ef-c7fece13dfe8", "sighting--3062f265-0fd6-49a3-9966-4f3aa58ffb17", "sighting--c9682434-8e5a-430b-b0c1-778c4550fd90", "sighting--6880e65d-2970-42b6-8d20-49b9423ac374", "sighting--c6f6459b-1233-448e-b94e-17a8d6ed21d6", "sighting--01f5c030-a3da-4a1e-b52d-5d726f7b2326", "sighting--83d4413b-d5b9-4d8a-a50c-ae95372fdc1b", "sighting--758e9de7-f812-4bae-ab71-888bc4c4e72f", "sighting--a11a11e6-8ea9-4be2-96ae-cd41fc3aee48", "sighting--37c18204-5985-4f6a-bde2-dc51eab23ac6", "sighting--77e9cfb0-f208-4e3a-9807-4bbfc71aedf6", "sighting--e2602b5b-6081-47c8-9de7-b28ba6f14b73", "sighting--917a2803-f1e8-4898-86fa-e95e66835120", "sighting--8f84a69f-a5d4-48aa-91d8-e74ecb860df6", "sighting--a8e896eb-96a3-46f5-99dd-dc5e60b90fad", "sighting--3588656b-5d14-4888-80f3-a50256fb7dc8", "sighting--8215fb09-533b-4793-ad50-5206abe41f87", "sighting--5b3d7883-0651-40cf-8025-84ec05190975", "sighting--4aa1e2eb-b9eb-4b9d-97c7-e69e30035f84", "sighting--f1d6e59d-b5db-431f-80bb-90f1cb3f81f2", "sighting--0d6d6935-740e-4edb-9126-f0e82feff0fc", "sighting--a13ccbfc-554c-4103-8fb5-5d99fa5e8a53", "sighting--89e871f2-9df2-4313-9239-7c9ed840c185", "sighting--59e8cb29-567f-434c-a20d-37c14dd2da1a", "sighting--b6e10aa2-acbd-4e58-9778-2c66e7233e43", "sighting--cbd5a642-2583-4f81-9335-3b56ecb4b805", "sighting--0917e8ac-86bb-4ca6-8056-32f007465e46", "sighting--d7ebe713-e95d-45ce-9150-3834ad87b2a5", "sighting--65c41fdd-2126-4f0d-8da9-42e9522f405d", "sighting--7d6e4cea-c72b-4618-b0be-b304ed0e6604", "sighting--b9b7fbfe-471d-45e3-8580-9d3fe028db36", "sighting--0fe14e0d-cd8a-4e6d-bc73-633b2af9ef12", "sighting--7d868c4d-dc47-4ccd-b89b-3d88b0b5727b", "sighting--8050a068-c648-4637-8630-433f84cb82a8", "sighting--0a508fe6-1b98-44fc-94ce-dbf0d64be8f3", "sighting--54cd3e73-8a8e-4cf1-9c46-0658d5fb2022", "sighting--d6b1d7d6-2015-477f-b77f-c14764e9a64b", "sighting--5d4886dc-bd06-4d80-b390-675c1ecd3145", "sighting--00eff7c1-7d02-432e-b56b-0bbc1a6003b3", "sighting--84169dbf-9db0-4c17-90b5-9ff6e68d503c", "sighting--cb2f4323-4318-4e23-b86d-d85b71f7a67e", "sighting--429d6f4d-51a8-43fc-87a6-6300403dc527", "sighting--6359a669-6471-45ff-9ca3-1d4971b37052", "sighting--a6dc46ff-2fb3-412d-aece-62c5a79d5498", "sighting--b7174723-caf7-4439-ac88-1a8f4e9db010", "sighting--3f1c87dc-2240-4583-99bc-2e952711cb99", "sighting--d41ca8ef-ef60-4e54-a8cf-4f62af06720e", "sighting--a869b328-7d21-42ca-84c9-ff1912a8e3f5", "sighting--5a565a45-126c-4085-89c3-1e396c235961", "sighting--39655637-e4f8-4ebc-8bc8-d55479551675", "sighting--82f2ce9c-8bc2-4148-be31-1f5c308ecaf4", "sighting--3cccb63e-7adf-4c5b-9e46-5df895cc21fb", "sighting--de8fbdf1-6744-4529-a3aa-47aa67afea9a", "sighting--9ce259ab-a61c-49b0-ada3-2eb6e2472b37", "sighting--2db88a64-0c6f-4c5b-b9da-2b5b87a52d63", "sighting--429850f7-c8ef-4040-94e3-815c694d4218", "sighting--9b9edfd6-9265-4d90-b551-9040ed4663fb", "sighting--5d3abea0-115d-4dba-86d2-63df3434e44f", "sighting--4ae695fd-9a2e-4c01-bdff-e33eacfc976d", "sighting--4ad2a5f1-bcfa-4f8c-9d2a-4a940fb9c6ae", "sighting--34377e25-e18f-4371-87c4-7ee6a1519978", "sighting--297c47cd-26b7-4984-9f1a-6efaafe2ce59", "sighting--5f189262-28c4-4ecc-ab8d-6cc4deb6aadb", "sighting--b18d4569-8db3-4dac-b136-4c02a5c3445d", "sighting--247a27ff-0e1a-4c60-9b94-6d64f44f7dcf", "sighting--cfb9d71c-1fa3-4911-b689-657212fbb105", "sighting--0727214a-30d9-4b90-aec2-350c1fe55b81", "sighting--ce77f390-feba-4920-be79-8953ed793194", "sighting--c1e389c4-65de-4b7e-8004-6b1ece56647b", "sighting--caca1827-69e3-47f4-896d-d738cf6b6dfe", "sighting--d661cecb-ebb9-47ca-ac91-481f9ac74630", "sighting--cc67c350-2cc6-4ae5-85c7-ae9d30ad5d4f", "sighting--149656e8-0aec-456d-8d75-fdd3ee8a25e1", "sighting--a9cc0b6c-9b8a-4f72-97c4-276a8e6f35ed", "sighting--16c9cc4f-ef10-4d42-b12d-1eb0169606b6", "sighting--cf1b88d3-55bb-480b-847c-a06433007d49", "sighting--9f26f8c6-851f-47f5-904a-8374f0b5cd50", "sighting--1d4c27e3-e4dc-4717-8bd9-d91d6da95e9d", "sighting--af849733-17ef-4c44-bca8-a56213144240", "sighting--f0c8c815-9b76-4f63-96e9-877a4b9c448c", "sighting--fea54b6a-20d2-4319-b742-2309174942c1", "sighting--0b88fe64-585c-47bd-867c-b7fc7c87c73c", "sighting--bdb27506-a0fb-42c0-9eb7-704ed0e59dd4", "sighting--4882ba36-2c5f-4f54-aeab-c7ad5cac1efe", "sighting--f461e6ed-daf5-4eeb-b652-cfb7c7976ec2", "sighting--74033c39-4f38-4be5-97ae-10d422539ba9", "sighting--d1e717f8-606c-42e2-9ffa-b1662992ddc5", "sighting--a0078918-9821-4e03-b516-5c9b0e79a8c1", "sighting--b34e58af-6715-4662-8e4e-71e696c72abb", "sighting--951943c8-1f91-453c-810b-de2c9a9a4136", "sighting--5e86e4fa-e2ff-4b0c-8244-00e80e530f8b", "sighting--ee429efb-9e54-48fa-a577-9418eb540f6a", "sighting--19de88e4-cd60-4af0-821d-079182ea349b", "sighting--b02ff9f6-4ac2-4863-9fb3-5ecc44aee7a9", "sighting--5f69c520-e49e-494c-af3f-87b2e7415034", "sighting--5852558e-cadd-44f1-b665-bb32001e1059", "sighting--d84e3db2-52ee-4102-ae35-a6ba91c0cff1", "sighting--fcf5496f-c8d0-4d92-9ab2-5fc8bfeb1006", "sighting--4f61c09c-5544-4969-8f1f-9d0f2ec43b3e", "sighting--15c3d792-b0aa-475b-b114-f57d219cd2a0", "sighting--3ba2d28b-0a51-400a-889d-04e49395201f", "sighting--ff4af4e2-a076-4d7e-b6de-aba8c8393a57", "sighting--511f7d6a-b528-44fc-9a9f-ec1b4019f4d8", "sighting--176b7a84-f236-4c0d-a231-add0547d9b6a", "sighting--759f4578-07ef-4aa1-8a94-22e4b7238146", "sighting--914fcd60-64f5-403c-8f79-de1fc4acf0f7", "sighting--26fface4-3357-46a1-a32b-94d828413494", "sighting--e2e836fd-09dd-4255-8738-584ae1205654", "sighting--9c455030-3402-4b55-ac88-eb405ff0cad2", "sighting--39326342-d341-46be-8525-389bdd8b99ff", "sighting--d1ebbfce-148f-4897-91ee-57d920b417b2", "sighting--7736a683-f6cd-4a2b-ab44-2899e84e115a", "sighting--9b80966e-9715-43bb-b28c-f01179bc2b34", "sighting--353e5797-dd84-4707-a19b-70c0a3b6cf70", "sighting--6c7bbc69-794a-465c-8cca-fd28a3b1ecb5", "sighting--0987fe91-4a6d-4342-8e09-f42062a9dd0a", "sighting--7700a688-661a-4b4c-a3ee-9c6c9e207f72", "sighting--4663d250-5c07-47f6-9286-e801742da561", "sighting--783d131e-e032-49f1-a234-8299fb6818b0", "sighting--2a666da6-5ba5-41aa-865f-c14cf8f6106a", "sighting--1d1875cb-2e76-40b2-9e90-a2f5d1d59aae", "sighting--7849648b-efb8-4b19-bed5-a0603e616967", "sighting--228ccf57-f31a-4366-9e15-a95bb86a6430", "sighting--2ca66ff8-906a-43ba-9238-c84ccb691266", "sighting--b8604164-38ee-4150-982c-54037ff8683f", "sighting--1fd96eee-e83c-4b0f-b12f-3a659383817e", "sighting--521b1b89-e57a-4948-97d9-1b1b6755df68", "sighting--d60442a2-3c79-4e7d-942d-c8b07ce662cf", "sighting--0a2a3fd9-b7b0-4cf5-9144-f63cc6d3dab7", "sighting--877c7284-71dc-4f3d-b7e7-d523b1f4e149", "sighting--94bf44db-feba-4cdf-980f-1f179510167a", "sighting--517507b7-57e8-4ffe-a698-f6504ccaf584", "sighting--e1a33b72-0228-416f-942b-f2ce9af4ef55", "sighting--58901971-af4a-4e24-b7c0-360a997a2dd1", "sighting--98bdf4cc-2884-4421-9eec-50b15fa908fd", "sighting--32517b76-9f38-48ad-9970-55ecffa5eb98", "sighting--54b3c27e-bce5-495f-b8b8-1e0b23f0511f", "sighting--82a67786-2c28-45b4-afb6-21d7da38d159", "sighting--41809ff7-f3e7-48b4-8734-21bfe432b0cd", "sighting--d75b7693-dd65-4f29-980b-13d5d35bd2cb", "sighting--68124bc4-2c3c-4468-bd79-daa7f24d7af1", "sighting--f466cb96-1741-4e29-98f8-3b613543e0bb", "sighting--6bc15200-9f15-4be0-b60b-b628e784aac9", "sighting--9dd995ab-524a-490f-8dd0-ad5a58467417", "sighting--ed0a3055-566c-4a6b-bf5d-11b9e98e6dd5", "sighting--d394f23d-9f42-4542-9de2-e908ccb07cc6", "sighting--89ee2fb1-2065-4a3f-9c4d-261bcb757ebc", "sighting--2a9b7167-ac8e-4778-9534-ee44c3768645", "sighting--4b810c0f-c9fb-48f5-bbfc-6604a0d05cf4", "sighting--e58f127c-9461-4867-8ae6-6f71c21d3ec9", "sighting--a0b2dae8-63cf-46d2-91b1-6cd9037828a3", "sighting--e635bb24-cd32-4aab-b367-26f48c69e54b", "sighting--0430a78e-e52c-4524-b486-62edca582fd0", "sighting--2b81c475-f606-4add-a46a-58da7f72504f", "sighting--e76aac3a-ab15-4375-99d4-f1d312a02864", "sighting--974ed70a-2680-4541-b07d-8b6f2ed964e4", "sighting--458a5be8-0023-49bc-aab2-ac03288c3d23", "sighting--c913b836-d458-4188-b5e4-852ff03a95bf", "sighting--aa017e2a-aa74-4854-a7be-2e538ac168a4", "sighting--95a80455-dc6d-4498-8ac7-34f0f614b615", "sighting--d2776143-78fe-487e-ad87-291df7058e42", "sighting--e286a4d7-c6a8-41a5-b714-bfdb045fd986", "sighting--efd88c8e-b9d7-4687-ac62-bcc8f6aa8838", "sighting--65fff7d7-e6c7-4bd2-8287-59b64744e60e", "sighting--593f4af5-8be7-4708-9b5e-104f3073f4a0", "sighting--975c6be8-b3f4-4b7a-9b8f-f58a81522aae", "sighting--5bc70036-60b5-497d-ba3c-35a0f46c292f", "sighting--51835103-3ddb-4828-8927-cef996a503da", "sighting--fc7502b6-5f85-4149-abc4-abf6a3d4b3aa", "sighting--683bd2f7-9720-4f0c-9b7c-fcea7855c59d", "sighting--672e392e-964c-43e4-a31d-8a7f26b5ff2e", "sighting--a50a5262-1af6-4033-9921-78dee1b142b8", "sighting--9cc84a91-cb2c-401e-abb7-7b4dc8ae086b", "sighting--79bb9ac8-7045-4998-9871-faff458874eb", "sighting--2bb71e30-d222-4497-b38e-4294187bc994", "sighting--9822858b-5e19-40a6-9f5f-4f71c2aeba83", "sighting--c19b7bc8-8cde-4df0-afac-8be890e38a42", "sighting--83667cb3-bae8-4bb9-aa54-a483fecf1d52", "sighting--7679a592-483c-4c14-810f-d14543710e3b", "sighting--aa6a5f14-dff8-456d-a5dd-1a4bc91d26c4", "sighting--fb8e1471-bf08-42d9-a0cb-b5ba3afd5b99", "sighting--deabeca9-0834-4810-b397-f6c9f9ee741d", "sighting--8f4ed40f-9ba7-4017-be32-c0565d53d6c1", "sighting--3b5c8646-e20a-44a0-9d60-ae61c90fb1ca", "sighting--0e9ff57f-d582-4431-91a3-97799206cf40", "sighting--dc3094b7-8113-48bc-9456-2afa4def2255", "sighting--ca62f355-5d3e-41f1-8849-d95c93da04c0", "sighting--a6bfdf30-e80d-46c4-9df1-a7de033b3040", "sighting--678f2b0b-e5de-42a3-a564-23a11037818d", "sighting--695fab73-52c7-4544-b2e0-5fd072cd229f", "sighting--c1d98df3-c851-4415-9b7f-6854a5d525ea", "sighting--a9a2f4ad-a99c-41dc-8674-8b5601673cab", "sighting--e02ef245-dc81-4453-8054-21ad268f0d3f", "sighting--da98fd3a-484c-43af-bd72-497aed1f8d58", "sighting--498107f1-a848-467b-bf23-20b60a47013e", "sighting--95e69782-29d5-4c4f-a9fe-467a45b266aa", "sighting--4c41f347-6891-4283-a4bd-02c7dd890d24", "sighting--0faa122d-6aae-49cf-8bc3-74a6c67675bf", "sighting--f9860bd8-10e7-417f-9115-96c241db80d4", "sighting--64fd78b2-707c-41b4-9cdb-938327b1e811", "sighting--e395c653-e1fd-499b-bdd2-fef49ccdf7f0", "sighting--d5ec5a92-f256-4f84-890f-3cd904e5b6bc", "sighting--c13b55db-3fba-492e-9f8f-29b69fcfb88b", "sighting--b8e6bc1b-7547-4146-9d32-00f3cef86dcf", "sighting--f3bfa6f6-33ab-4cd7-adcc-f00f186c5ba8", "sighting--c7019076-3b65-493e-9564-4a004aaf0969", "sighting--15320deb-7f86-401d-b21e-6a8a53e87a06", "sighting--ea741abe-53aa-4888-a201-128ccb174f6d", "sighting--870a6c75-8283-44bc-a4b1-3e36aa3f1230", "sighting--7367144b-f970-4b79-97c0-c5d1d9848dca", "sighting--ad97698a-b1ca-486d-8da3-72422155d9d0", "sighting--0e4408f3-4437-4d91-ba3b-0f1d04461031", "sighting--9384dc6b-7033-41b2-b682-c814ea1e2ba1", "sighting--6d1056b1-1872-4f92-bcad-ee2eaeb27deb", "sighting--17eb2ecd-aad6-4285-9f06-128f6ce2b83f", "sighting--ff6ee85f-8893-4ecd-93e0-25b94ae61e6f", "sighting--99ac94c7-cb09-4248-a403-cf2e3820a7b1", "sighting--aaa5fd77-5aab-45f1-8cee-cfc0776813e5", "sighting--443cc75d-9384-44cb-bc6b-616fb27df09a", "sighting--d2515f71-4dca-4b7f-816a-c89aa7572127", "sighting--a2e183b6-df91-48b4-9e62-c79d813ca08c", "sighting--80616c17-ca30-419d-8d5d-8838e49e4d4a", "sighting--1dfee3bd-492f-4f55-b3c0-1528e5a4c3ef", "sighting--f8b77c32-2d93-491d-a2b2-d9696115161c", "sighting--941370e2-a787-41b7-8ca5-a5f9005616c9", "sighting--cfad693b-6b3a-4afa-89ad-62e53a6ed800", "sighting--87b5cafe-92b7-4efe-9a9a-d4aa85c5b578", "sighting--97964de8-2c18-4e83-b60a-fee627cf5f6e", "sighting--96327604-4808-4959-9bce-5b5614297c9b", "sighting--adc8d03f-c9a7-4366-ba71-55d865ef489b", "sighting--e1dc3940-2a4d-4e56-b04e-cf6ae7e69723", "sighting--bb831f2d-8fc9-4fae-b7f9-8cd19ea61078", "sighting--69cb50f4-33af-4f4b-8989-49864d19f041", "sighting--18943c4c-a9cc-4f6b-9e05-730bf7cbd8c4", "sighting--d9c0855d-d78e-47de-8735-1959195d6a57", "sighting--09fd75d4-1719-43ae-9636-04e9c31c0539", "sighting--6fc33722-1a55-417d-971b-7a84c6b01b6b", "sighting--9edebd5a-97a3-461b-9ab6-3b0e87147d9d", "sighting--6e5e3788-6572-439c-8ea3-b4cdd17a7a55", "sighting--bbf39a54-b9c2-4ba8-9e25-2418be386cac", "sighting--36577198-f580-4a80-a5b5-e990d7252ebb", "sighting--e85e39b3-1baa-4b0e-9586-c68b88becdf3", "sighting--20f77715-1204-4b11-bc8e-20e7f42d5a6e", "sighting--1e9db20c-175c-42b1-8761-ceefb455749a", "sighting--1798fa17-0543-4f13-a7aa-aa19d021460d", "sighting--04eb8828-1a3b-4538-9edd-f22d31d3745c", "sighting--ac197f2c-0cf3-4546-84a0-f3d9f60fb90d", "sighting--ebddecf5-68ff-452a-87ee-372e7030037c", "sighting--e92d39f5-91cb-444d-ae17-5c8ce39b25df", "sighting--7510337e-1b64-4ef4-956e-0d1d1fcfd7e3", "sighting--39035776-439f-4ee6-92fe-f2cd434ce152", "sighting--2e8f23c9-2651-4c22-a74f-2d0f617b8ea6", "sighting--5310b8a7-b17b-49cc-913a-79f21b82f8cd", "sighting--5841bc75-21c1-473a-b451-d435c278d0cb", "sighting--5c16deb5-f075-4ca0-9948-ec60c2d0c46b", "sighting--39bb621e-8c6c-4b1f-a9d6-7957f529bd81", "sighting--6e6eb0e5-86f3-441c-9d0c-8f1b910b0bdf", "sighting--6aa29059-323e-40d1-b082-943319a766ff", "sighting--e60a27a0-4f8a-4d1f-a4e1-6c36b6fbfef2", "sighting--724c6e8f-14f1-47b3-b1cc-92baf296fd1e", "sighting--625ed441-21bb-4266-8a16-a2c52fd6ecad", "sighting--7e05a468-defa-422b-9d4b-aacf784ee2eb", "sighting--d62f8c4f-e73d-438f-9ecf-4d59bae99bee", "sighting--21208378-14f3-4cfb-a458-16b0a909448e", "sighting--6e1b8473-da7c-429c-85db-d55e27896ffe", "sighting--5ba26d72-d85e-47ec-894f-2abb3a817fa5", "sighting--648fa76d-9503-4f28-89a1-1f204f2011bc", "sighting--7d935ed8-25d2-480c-9078-0072daa4682f", "sighting--432457a4-6ef7-4b20-b275-659a16dfc78b", "sighting--026f0511-ded5-4a65-8070-ed81cb8e57c1", "sighting--2172f83b-373c-4882-88d6-fb8895f2ba79", "sighting--d7cff026-4e77-4710-b452-07adfb200992", "sighting--205eb5d9-16a9-432a-bea1-fdb81bceaef8", "sighting--c56b6c02-519d-4c1f-ab9a-ef968df24d28", "sighting--1f4a704d-6e08-46cc-92b5-814e283af1d0", "sighting--80b91180-1e91-4c25-86ea-61dde19bf3a1", "sighting--26d74ada-5a37-4fb8-9e39-bf2679069980", "sighting--753525ed-40c7-4b5a-9424-66960bab1a52", "sighting--4dabaf30-dd5a-4eb9-a704-14d4d24fa2dc", "sighting--f57e29e0-1afd-4dfb-937b-062cc77be299", "sighting--eb33d14c-2e22-4178-b30e-fee995d15b82", "sighting--f66a79bf-9343-452f-9060-f503fcbeebca", "sighting--a11da019-964d-4be4-8668-ee4bd202ce40", "sighting--02f63b2d-1fba-4e80-b896-dbbde64d5245", "sighting--691ad186-2d71-4a63-8845-4b9bc305f340", "sighting--1f05eac2-54a6-4162-9cc9-b6d5cfa7794b", "sighting--a8208af4-0899-424b-9ade-f2068b110a46", "sighting--01f8edfe-ebd9-4f7d-b33b-19c0d5d232c5", "sighting--b9ca1f24-2a52-404b-8fc4-4a8eaf737aca", "sighting--587b7494-64fa-41be-b1ee-5f099eb804fe", "sighting--8235c541-a62e-4220-b121-9f2c3c7893c8", "sighting--3fd886e6-73e7-44b9-93c7-b2dd718ff4a3", "sighting--c26b9fb0-a2b8-4d69-9b4b-c4e167b60ffd", "sighting--c1658a63-d63e-4b01-8689-f57340a85a19", "sighting--6d9094c3-8a5e-4104-899d-bf9d0919a7c4", "sighting--9952c731-3362-4bfb-8f47-467dadf67885", "sighting--d1624ac2-1c6e-4d1c-8daa-f9d9dd2a7c3c", "sighting--9d379f4d-d3a4-4175-b3fd-642efce65ee0", "sighting--cc5a8038-3a42-4e4e-9ba2-0d9e9c00f513", "sighting--0ba0921e-7e0a-4154-814e-77703a5c6b20", "sighting--060f9552-6373-43fa-aae4-986f243648b8", "sighting--a6c462dc-a7f5-46ba-a55b-f724170c6a5c", "sighting--1cbc973c-853b-46fa-9f3a-3f56d3c2eb95", "sighting--3f8665d6-4ecf-41a9-adfe-81dcb0771f82", "sighting--363929ce-1a52-4a1e-a18a-1e92b520f6f3", "sighting--8c0fa0a2-abbb-4b7e-bdf0-029ff8f79065", "sighting--538e0ad7-f38b-409f-bf4c-96f2e9c897d9", "sighting--1cb6aaef-9d09-43d9-8112-5eb35a6ee814", "sighting--f79f2af8-f804-40e8-a6e6-7072bfae4e60", "sighting--ece03493-936d-4b9b-8e51-aaee66aab7d4", "sighting--360e9edf-22e0-41fd-97d3-87a67357abb1", "sighting--b24201e1-c499-413c-924f-0c0e27da618a", "sighting--1b907b5c-8ca8-4cce-a024-28a77eed4be8", "sighting--35571367-995e-4d25-809d-d0c8b36c9cf9", "sighting--9ed8c746-084f-48a2-aca8-5f02661f0956", "sighting--3e031680-f112-4a21-a2aa-777225db5fd0", "sighting--83603e07-c8bf-427b-a0e8-5b086e30e2e1", "sighting--1974f512-38ee-49e4-8108-894c763506f0", "sighting--46758b26-e4b8-4350-8e8c-83a7e94b79a8", "sighting--ca8c2711-e9f6-4391-80da-8095e3809948", "sighting--48b3aaf4-08a2-4214-9320-6a40130b340e", "sighting--866e9659-3d64-444f-907d-32f63398cbe1", "sighting--386842df-2664-438e-aaed-5a096d7e58e7", "sighting--70152378-584e-4658-81fb-e19d98dedf72", "sighting--8db10930-b5c6-4570-a763-72b49767a1fa", "sighting--fcead66d-ec6e-48fa-98dc-4753955b75e1", "sighting--61317eea-6432-4621-afd5-fee3cdae16e9", "sighting--8a4dcca2-652b-414f-bd70-f3416673f566", "sighting--3f173310-5e2b-47a8-a35f-a036648477c0", "sighting--5f12246a-eeb6-4775-b623-30d35a456f58", "sighting--dd439830-c241-4ceb-a12b-1d6eb44dfca0", "sighting--63424d9f-cab5-4f6d-ad5e-55a14f375116", "sighting--549a6796-a472-488a-988c-9d55807f5aba", "sighting--6f864ac6-3e2e-4ff9-ac50-8980dc9152c3", "sighting--a02ce64b-70a1-4370-8afa-0b4329d1577d", "sighting--27a59454-316e-4ab1-9d47-431cde227405", "sighting--d769ed3a-d821-48eb-a538-8ce94e53fcdd", "sighting--2c220db3-8375-4cca-b12c-779b84ce3c40", "sighting--8b61c341-1e2e-4312-a42e-fb101eb98d7a", "sighting--8b30cb1b-e63b-454b-924d-ab00f7857fb3", "sighting--0b4e26ed-aa8f-4df9-851c-66e19b2f2716", "sighting--ee0999e5-96e3-4f39-9c12-775fcaa16543", "sighting--0f9563ae-2469-4651-bdfb-f8208acf1f2a", "sighting--2bb14c17-fc7a-42fc-87f7-55120b5fced8", "sighting--6d30ab93-0108-49b0-9892-ea9c697c780e", "sighting--3a15effe-1c48-4b98-8b51-d0c348955663", "sighting--5ba0f07c-80d8-4646-a50e-27665c66ffce", "sighting--9e0ae60a-0b71-4167-a3a4-cb4f61acaf62", "sighting--cfd9014b-05ae-4f8d-9305-b64a61edeb8d", "sighting--eed0e9c3-09cd-4ea8-8065-b1f4dbea27e6", "sighting--61d837d7-22aa-4fb4-b4af-ed6ef49eb1d5", "sighting--f097b0dd-67f3-4d52-92f6-3367ed12748b", "sighting--e3c7ff05-ff59-4d78-8a5f-a2bbc531f73a", "sighting--c8aa4ebc-1dbb-4b6d-80b4-f4b3577d0003", "sighting--feb786b3-f638-43d8-af0a-7d734273d295", "sighting--f3462e33-a872-4970-af19-31fa21fa1a32", "sighting--56d96230-8ddb-4417-82c6-456af97a7705", "sighting--69f89531-e9d2-44aa-96ee-ae29afa633bb", "sighting--74824241-0958-4b83-9a2d-56864e2d0a19", "sighting--39d4c104-a1e9-4ea1-9567-f45662853caa", "sighting--51835dae-63aa-45fa-9c11-7b0256297ea9", "sighting--d0fddcbe-a209-43a9-ad24-5bc1c450c316", "sighting--09cabae5-e610-4044-8e8f-f0b495d9181f", "sighting--0998facb-e3b9-4b4d-b63d-7f78f52007ef", "sighting--75ede10a-1118-4cb5-9c7e-8d300557d779", "sighting--a5c9cb74-aa2b-4118-8361-b0c0073a23a5", "sighting--08eae212-a14f-4990-b88d-7f1b20725526", "sighting--0027cb36-5ec0-4bed-a614-86e206bca62e", "sighting--99afad6e-9016-44f5-8db9-e170a8a62129", "sighting--1e6da5cf-51c3-486c-aecf-cf0c20462b32", "sighting--7fee4a93-7a36-477d-bee1-8e24ec602368", "sighting--1de1c95e-0a7e-423f-9af9-c12a016aa798", "sighting--6dce5720-de48-4f38-9b69-c5c80609e449", "sighting--c9f6601b-75a3-4636-92a2-f10518fcf142", "sighting--b721d896-d041-44ce-b382-3d5ef56348ac", "sighting--7a06de97-488f-405c-96c1-b99a771924fa", "sighting--0fe27c2d-5a71-495a-a86a-16e5975eaf1a", "sighting--5b94ba4b-bc39-42b2-a8f9-a99f8a755463", "sighting--6fab4429-f4ca-497c-948e-a0e3668f9b10", "sighting--ef97718b-67e5-4c10-9eea-42420d8728bd", "sighting--400e0a34-171a-43e6-a88d-5a38d68a545d", "sighting--fc76028f-d6c1-44d1-bc98-27b2da3a1195", "sighting--9ed657a3-11d1-41c4-8a77-3481d445bc0d", "sighting--1b6892d9-08f9-4f4c-bb00-0e234cff6b35", "sighting--e4a9e1f4-9ea3-4400-ac00-f301b617c6db", "sighting--9843b9d6-ef9e-484b-9bf6-93209e2dcbf4", "sighting--393461e6-f8a4-42af-8c23-f5e2bbddd888", "sighting--902c898e-79c6-4348-8d01-55d1b1ee60be", "sighting--be5ca644-d658-4ec6-815d-dda211e09d4b", "sighting--bf1bdacf-2b9b-4eed-b06d-d3d08baa5977", "sighting--c048ad1a-b58c-4a5b-8d72-64087981a93c", "sighting--c7d524ac-5c56-41e3-9528-bdc7ee73d637", "sighting--cae844c8-f08f-41a1-9300-4a4249a97c48", "sighting--20fc3c62-8120-41f4-ad66-a79d6e76ea8d", "sighting--4fafa182-f122-420d-a254-9ac489959c63", "sighting--e929bd78-7ab9-41fd-8460-90b597ec5f60", "sighting--302c0505-bac4-470a-a182-5c89d8959698", "sighting--713e927f-506c-474b-a992-8982dc0ac516", "sighting--4dfa9637-83a5-45ca-bfa4-6b11829e69a0", "sighting--406bb7db-ab13-4580-ae9b-393b4ded7c87", "sighting--6c4a0bc4-5841-416c-b5cd-fb832225b3a3", "sighting--c9a7ddef-b2b0-45a3-8bee-5ef68165697f", "sighting--3bcfb3e2-c204-49fd-b954-f9262e5471c1", "sighting--442f59ff-30b0-4434-a2ca-79adfbb12582", "sighting--22bc84c4-3783-4597-bf51-eb7e6ba8f6f1", "sighting--3f48159e-c6a4-414c-80d0-31c5839b6e70", "sighting--ca216d22-bf0a-4318-a399-0a5713fa8ca1", "sighting--ce22f3e9-b492-4ee0-bcaa-d63ae55515ee", "sighting--14ff7c76-bbad-4040-b52d-5743e28401de", "sighting--a65977f5-ba55-4ed0-9476-957b6e4a9655", "sighting--139d6527-2eec-412a-8422-c5ae2ce13a46", "sighting--2822cacc-dfc4-44ac-a284-abc9adb5c24c", "sighting--30f982c6-1b3c-4052-bdc8-f65f75ae6c44", "sighting--2a33e555-95a2-4c48-bc8f-0c6f3c9c995c", "sighting--dba723cb-6f36-4441-aea4-05126342cb6f", "sighting--ad0b6d5b-5272-4ba1-b477-b8cd72119659", "sighting--b2ad6d17-e902-4483-8ee8-546b09187887", "sighting--bf8e59ab-8d38-4bde-a250-38d174ddb21b", "sighting--67b3e8c2-760a-4f63-a358-b326e83400b4", "sighting--9537ca82-d912-445f-b66d-92260adef3b7", "sighting--1197ee34-949a-42de-a230-9a94440b7860", "sighting--43dbbe09-ad34-425c-a146-a4f49fcbdc5a", "sighting--74a8d446-b03f-4e9c-a0a1-381e7e429807", "sighting--2ac92ab6-b06b-45cf-b63c-1c492cdcd890", "sighting--3e00017a-cc5d-49de-88b5-500c251701df", "sighting--0eb62a52-8345-4866-9334-cc29faa32d1e", "sighting--42bebe72-1050-4099-b5e8-6f904fe1d1fd", "sighting--e09af614-984e-4b4e-b304-6793d912d6dd", "sighting--b3fd480f-c04b-40f2-9a59-e22c8682f1b2", "sighting--eb79db6e-645d-4608-8864-1ab770f256e5", "sighting--1a39f1d9-dbcd-4929-875f-72093ade1fef", "sighting--bc41ecaa-b15a-462d-ae4c-7f120decdfed", "sighting--276ef253-1dfe-4708-906e-8b47708711bc", "sighting--bade9aee-79fb-482b-8a98-fa44e62e2ca6", "sighting--4c4f0a2b-d567-48b8-818a-cec9909f7886", "sighting--7134188b-7c70-4973-84ce-9eba9ad1c9e0", "sighting--380b0ea7-ab7a-4bcf-b6a0-4422b1f9e0ac", "sighting--b572c217-81a9-4094-a564-d282ec1d3f93", "sighting--6f2f444c-fe3d-4f7d-a535-825f9c02243f", "sighting--fd1111df-629e-4ad0-92da-f294c6a20fc6", "sighting--e71900dc-d890-448e-b568-1b79940ec4d1", "sighting--92eaf934-29ac-4a27-85a2-fdac00f570b8", "sighting--3e98c30e-355f-411c-a20c-66c1b11dd560", "sighting--6fc3b50e-68b7-4f5f-a03b-caa6db1b0a89", "sighting--aedf5d99-eb39-4ab6-a310-1227a29b7c71", "sighting--c6b55a08-586e-4a35-b425-7b9cd4848d67", "sighting--b707d939-2f67-4ca1-97c7-f2f512d5fc03", "sighting--99d642b5-19ec-4b12-bbaf-619f31009150", "sighting--8a20332b-3c81-4e3a-b061-ddaa93b814cf", "sighting--93a3d547-7876-41b1-89f0-89c217e70d13", "sighting--f1a2771a-c2fe-4e25-a090-e45bbf79475f", "sighting--c30930c2-f169-4be3-a7a9-0cae2e740f08", "sighting--3641b2e4-1acc-495f-a00a-3687edaadbe6", "sighting--8387d88a-91e2-4a6c-82f0-1a38df8c83c8", "sighting--08886e57-6602-4d17-8ff3-a3913191d3c0", "sighting--ef817dab-9290-43d3-a10c-201dec5139c5", "sighting--d22d0694-cc8b-4fae-8c90-1163e9b5da29", "sighting--c1f17401-2577-4fb2-a84c-5ae321feefce", "sighting--582a61c3-6f04-4b15-bddf-e9dce165170b", "sighting--80846d48-1b5a-4622-b984-50d981ea641f", "sighting--d4e5bcdf-41f4-4e98-998b-2405f9e99e29", "sighting--b8478bb2-01a3-4760-adde-134b8b279780", "sighting--058c3ad4-33df-4471-af1f-f9ed6f32095f", "sighting--b38136cb-4d6f-4bcd-836b-d4c8ab36b934", "sighting--2f2fd155-0d65-48e2-89a7-53ad4f45ee5e", "sighting--2d595613-e09a-40a4-933d-1990342e993c", "sighting--c54c0c80-c5c7-4e3e-b9b9-7f6be08d02fe", "sighting--28538c6b-c03a-4b59-a5cc-d901528d3637", "sighting--d5d8f725-2fbf-4e98-846b-d989c4b12464", "sighting--902bbd41-5322-4f4d-8f62-b53f95580b7c", "sighting--ce1af9f2-0045-49e3-be74-94ce414e8c5e", "sighting--782757fa-c3c0-4684-b635-1e76d5cc8c1d", "sighting--fd04251f-6b5f-4758-8c61-aae5af12d479", "sighting--94a652d7-df10-4fa3-a571-d08cb2384b85", "sighting--20890ebc-2889-4cec-8174-b2bba29073c6", "sighting--d2eb43f2-f600-4a21-96b3-ec9005b90ce5", "sighting--566e6130-3571-4b46-90c3-27a85bb211fe", "sighting--eec89cb0-c727-4fce-b7e6-97d5307278ae", "sighting--75e19e61-8582-42b1-8363-6bd25664a9f6", "sighting--d8421be8-57d2-4d98-b503-168936630cc3", "sighting--55889e17-284b-4cbd-b232-3267bb603449", "sighting--61e803fd-5c5f-4f4e-b8a1-09e98d5aeb3a", "sighting--ba202f7e-7a13-4238-9eeb-4a59f1d46269", "sighting--ac562728-1783-4dc2-a40a-8d85e97c7c88", "sighting--980947b7-2d17-4405-a61a-d17384e0b35d", "sighting--92ea8443-1b58-43df-87dd-4e0169488354", "sighting--4d881ddb-900d-42a6-91db-88e073e1af87", "sighting--7c73bca1-12eb-44f2-994d-af9724894cc8", "sighting--5f43e918-e4f0-411b-a8b3-0e04bfa2937c", "sighting--c9963a59-218d-44d8-91d1-79cdaac62d30", "sighting--4844a9c2-56af-4deb-8c60-cdbd5049fe4d", "sighting--cc09b96a-6e23-4567-a9b1-32c368fa9967", "sighting--bb68a8d3-1597-4919-add6-6dff934e7944", "sighting--d6a1a21a-c325-4507-891e-c3f573cf3bd2", "sighting--b8b12fb1-c742-4df9-9b6f-87828a43136f", "sighting--5e30b3be-a060-4d25-80b2-5b330852e217", "sighting--0562d3e0-c57f-4e0c-b943-0a935aea72e1", "sighting--5961094e-7a0e-4598-9527-43e717e46af9", "sighting--36e2c487-29cb-40eb-baa6-d9cd4fb2137c", "sighting--1245fe51-4efb-4765-8818-d7987fc67b8a", "sighting--d08c239a-447c-42c9-bbfd-4eca6a2a117a", "sighting--2fb1d510-cac4-469b-a8cb-d560ac330975", "sighting--7e61a16b-cf70-4d18-a9d4-cc3df5a26a9e", "sighting--315b684a-cd90-4ca1-b226-8a3faeeb3594", "sighting--1a21f4fb-b5d4-427a-bb67-53abdfb1c6b4", "sighting--c5b23a27-02a1-4029-98f4-ae7d342df543", "sighting--9d6f5474-bd2b-4813-bb84-4dcb77358142", "sighting--e12a5822-fdd6-4f9e-8ede-3203e24fe0ba", "sighting--b14685e4-5ccc-4083-8f60-338407cf0922", "sighting--91c4623a-feaf-40c4-a62a-cbdf5ce4e163", "sighting--2bd3faa3-1064-4793-81cd-a1b740c2e41f", "sighting--8e746acb-7204-440c-83e5-27434d2fa726", "sighting--bfbaccc4-df7a-4017-a3ac-1cf4f4e61507", "sighting--580a3ad4-0a06-49cc-85b2-ef60b6caa8df", "sighting--e1031167-6994-402c-8cce-49a6abd27328", "sighting--da431641-d69d-4c1a-93a2-ba8670a6b179", "sighting--38862adb-b1bc-4af0-b529-6a1e722cae51", "sighting--389c4076-a970-4e40-908c-ad6847af9b56", "sighting--60b98a33-261b-4404-b8be-0c6dfa69059c", "sighting--994457f6-4649-4ef2-a70c-7f387fda261b", "sighting--297b2166-26c5-4d9b-ad1b-44135d553fb6", "sighting--f4fd548f-29e3-421e-9e79-eae560dcb43d", "sighting--487851bb-bf59-44e4-8874-f0b84a8a6f93", "sighting--5d8900fd-c015-484b-81ce-a0ac5f48900a", "sighting--064e3bdd-c184-43f3-9cdf-11dd30c536ad", "sighting--354afa3d-e35d-4778-8abc-df0a539e43f7", "sighting--4e5c614b-9616-4184-b5fe-8c69f1e8d020", "sighting--b829df33-a96f-437f-bfc9-4d07ba64475b", "sighting--873ff725-c2ad-43c0-bd34-ff2f16aeb0b1", "sighting--dec2f177-ea4a-42a4-ad6b-d4e991c3c175", "sighting--77297121-a327-4d3b-9a0a-015b737ed45c", "sighting--eaa122e2-c620-4ccf-b709-3f841948d800", "sighting--b1739715-3d8a-411c-8c00-e9d653f3b7ef", "sighting--d6ff0fc5-c407-4b9d-ad45-af83f309fbb0", "sighting--bf362e70-fec1-476c-a695-a425dca7625b", "sighting--52d1cc35-18b5-4819-b402-af3ed3f92b93", "sighting--d3e3cabe-606c-4b0c-9f28-a71f0120247a", "sighting--30b3ee27-a95f-4072-8b92-9a0385f725e2", "sighting--ca68f9ea-77ea-4a9a-ae03-577cf2c00d21", "sighting--3ffc9c94-ae08-41a0-a434-724583d14bdc", "sighting--2a404ab9-2b38-46e7-9936-737b0c53b7ab", "sighting--26114373-c970-4d00-940c-7c60b35daa2a", "sighting--37613800-b4c9-4a0a-84c6-ee70ab234c81", "sighting--1488b095-22de-4676-b1be-87f435d97226", "sighting--6704daf6-dc50-4070-b7d1-00ed99bd12d6", "sighting--fe644755-9fd6-42b8-a3be-7f6e4273a740", "sighting--2782b3fe-3556-4e02-b6ed-f6f22cea99c0", "sighting--be28d47d-da5e-47b4-bb61-e2a0903bfabb", "sighting--cdc1e8f0-8942-41f7-9a9f-23aa2894f4a2", "sighting--a465c0a8-6d8e-4681-b18f-0478acf37dfa", "sighting--3b8337f5-bf58-4b4c-9e59-cb4a1bfd0123", "sighting--f57dc627-65bd-45a1-9423-e7f90515a3b7", "sighting--0926c013-3888-4cef-8f3a-502568db8158", "sighting--2a57c949-08d4-4021-bc07-63cb97a8756b", "sighting--369535bf-508f-484f-93e9-c46737cf6e03", "sighting--8f68771e-cba2-4c26-a5fb-59f48629e760", "sighting--8c10cfd7-3edd-45f7-b997-8c252c53e14f", "sighting--c2ce591d-ef1e-4944-aa88-1e02bef1c5e0", "sighting--981a6bfd-1575-4c30-ad96-93057df98778", "sighting--9d770253-555b-41fa-9271-600499687822", "sighting--0ec9040f-28cc-427d-99ed-b56fc0b6b4ac", "sighting--3f2663d3-8b06-4256-89ca-06bdbb5ed94c", "sighting--c2e2ba82-8467-4698-82ba-435d5adf7acc", "sighting--e83f212c-ca0e-4d59-affd-4ec1ddbbcbd0", "sighting--208491dd-b147-4b2a-b719-86d298f7d085", "sighting--b1fc2cd1-b0fc-472d-a64a-4fd7b9b35d1f", "sighting--477703e5-6d0c-45c7-9e27-6808f785d207", "sighting--43e2c246-5d4d-4bc8-8b4a-350576700dea", "sighting--a6f2d5f1-35ee-4b42-bf8d-ebf3cb1800d6", "sighting--df52c3e1-2689-43f8-a5c6-1675f3812f59", "sighting--2ea6a6bc-e0e5-4426-a401-4bb10b63a687", "sighting--0dc4a1e1-2c74-4265-8576-d6cf58a6653a", "sighting--111cc8d3-1e4e-4bdc-b3f9-ea0c820c5c6d", "sighting--a4d38cba-cda7-492e-97eb-902a3896bd3e", "sighting--1b7c0438-4741-481d-8f42-792e58b69857", "sighting--18f8431c-5b35-409f-9fde-9b2d81d95f09", "sighting--05ba842a-bc92-4680-9abe-0ec5216b0e69", "sighting--c6e95fa1-a4b0-4dac-b9ef-d1d6ccc372ea", "sighting--5968a55f-f6d9-4058-81bc-8502caccff5b", "sighting--9d0e388a-5cab-42b0-a584-d94c6becb66b", "sighting--bb0f4d63-3398-432d-b63a-a9ab569fa82b", "sighting--c51747ce-79cb-4111-be1e-b4dd0f675a06", "sighting--1a62cfb1-a86c-4979-ba83-12487edb1cb7", "sighting--03508863-9c21-4847-aef5-dfe605a0038b", "sighting--65b86420-428f-42c6-bff1-98f836a8b3df", "sighting--023bb1ca-465b-4a23-99d7-00fceb2a1a3f", "sighting--2fd37009-d6ec-4aab-ac3c-57719bb99b3b", "sighting--44b3d8d9-b890-47d8-8e85-a20fc571a01a", "sighting--c687b7ca-5ae7-4de6-a769-9623aab08782", "sighting--dd4de7a9-5f67-48bc-9969-e783bb1cc9d8", "sighting--072fc988-1716-480c-bec2-007a75201e0c", "sighting--db3cffe6-a6ea-44dd-af90-800df3b226ed", "sighting--6e0a1ea4-3b9b-4411-8466-34522f397540", "sighting--2283771c-c6fe-4419-8c8a-48095005d426", "sighting--73dd9471-72fa-4acc-ad74-4b427f823491", "sighting--8df228f2-d695-4ad4-85d0-f3344a707cbc", "sighting--737ed37b-2769-499c-ba88-734c7ea32cc3", "sighting--58996e07-040e-428b-a01e-b92559c54b22", "sighting--dbe86a9b-8d0c-4e96-9a72-62f19dacc02f", "sighting--51bdaba8-569c-43f4-9d41-4b7994476aec", "sighting--2b083e08-df68-4086-a53a-78e9198df952", "sighting--4e4110ad-f07c-46b2-863a-2eea53603d3f", "sighting--4651f5c6-5505-4f2f-9e0f-e5c5737a9828", "sighting--63c7afdd-0376-49c7-b1ef-07c27901a190", "sighting--c7534795-1540-4986-8b5a-3b65c97f2812", "sighting--7a4f5a62-2616-4447-886f-a3b2c3149496", "sighting--958f80e8-26bc-4a43-85d9-75f34df9993b", "sighting--7d052644-a5b4-4fdc-98fc-8da21f593e90", "sighting--2af25c67-53c6-493a-ae40-70e13826fd62", "sighting--49ad4acc-17c1-4fbc-827f-402b472a0caf", "sighting--27c7f560-28cd-437a-a1f6-e6bf806d5a16", "sighting--ccfea7d9-e3b5-441c-9fd7-2f462c2e34fb", "sighting--1f79ec1a-43ac-432d-8843-4f5cc8608aa9", "sighting--09d83ad0-26ee-4287-85f1-d535b94030d8", "sighting--3129badb-4ee9-4ff1-b41f-aa7f727b8a8d", "sighting--32d47903-966c-4036-9fb2-b0461271b2c1", "sighting--0b92ebf9-f18b-4fbc-9dc5-219c77b5619f", "sighting--7d601041-7a0c-4148-aaf0-7b1d0902c1ca", "sighting--8893b4e7-0ab9-4c72-95b5-08797eb072dd", "sighting--11572076-15e6-4dde-be51-30f7cc921def", "sighting--4816a0d0-93de-4bb4-817e-0f0090f6aae4", "sighting--bc4e98e0-7e21-49bd-969b-47320769b583", "sighting--7b38c121-61ca-4695-9a41-a78b92d4e0c8", "sighting--461983fe-cad8-4c7e-ae6c-fd347bba4d7f", "sighting--f795a354-0af7-47bc-899c-775773d724d6", "sighting--43bd15c3-fe87-43e2-a572-684ccd357366", "sighting--6be9138f-2558-47b2-82ce-9e6074b4d180", "sighting--e04d2b82-80b7-4459-ac14-c115911dcb6a", "sighting--d8eacc74-c8f9-4798-8f8e-cefe734a4472", "sighting--f0bb7f21-2ec6-431b-91f2-803ea62646de", "sighting--7cab51c1-04e4-439c-ad7e-d80cc2871094", "sighting--e8fd8a4d-862c-49aa-a378-74d24824282e", "sighting--1c81d16c-2e78-4da5-bebf-7f33d6123d33", "sighting--902f8a5e-912b-4173-954c-68e2e859511a", "sighting--1cbc470d-255b-4791-9c50-563a201a9ab9", "sighting--8e3e1790-fa8d-49b5-a801-e320cc0920bf", "sighting--a1b77b58-0270-4ca6-8489-ab10f05d59bf", "sighting--814c1f31-22b5-42d6-b181-74b0eb7af694", "sighting--b97bbd6d-95cc-4e36-a800-0f4c78f3bacf", "sighting--e2d5c5e6-1e45-4dd3-b6e1-b305249e3b45", "sighting--f95b9232-bb72-42a4-b738-b7664e7efe20", "sighting--8e93e843-9ff1-4a50-9697-614026e45516", "sighting--da1dca18-7300-436b-beaa-d6767db3e29b", "sighting--c23d3d97-627f-4b44-8646-3a51ffa648af", "sighting--7b2e2a45-cc71-41e7-bff9-e55ae3ca85c2", "sighting--5ef6f21e-5261-4d72-a9a9-6d40f3b29fcf", "sighting--a2a747c9-f3bd-4a99-b8a2-5cb7ff3823ac", "sighting--8da800b5-bd06-40fa-ae94-f432a53fa77b", "sighting--11b5f7bc-a32b-4f9a-a388-8619408dcd88", "sighting--a7942293-089c-47ea-ac3a-44ab9b21ea34", "sighting--c591a721-8a5d-4e08-a761-269bfe5e5e87", "sighting--249fc0ac-efd8-4cc2-827b-5bc8090af30e", "sighting--d933fa62-4152-4592-b881-14407080cde6", "sighting--05acc6b6-605e-46c4-a20c-85855247f8e3", "sighting--fd964660-9951-443b-9410-8285abce01bf", "sighting--74579cbd-4013-48b5-99fd-a5139cf9a935", "sighting--6cf4960b-c393-4476-b5e4-cb039cb79b8e", "sighting--58d1c09c-dff5-444f-bf97-0333302d0c8e", "sighting--a2446d01-c9ee-49d7-afd1-62dec954fa7d", "sighting--97fdb789-eaa7-4b02-87d6-31b2d7aa9fc6", "sighting--729cc501-bcba-429f-b275-53d826f668c6", "sighting--7b89198c-8101-4a4a-b132-02a0dd575d01", "sighting--e2462140-eb4f-4dc4-864e-8677380fc3ef", "sighting--3c95429c-29ef-447b-9fe8-4a36dd19e457", "sighting--c292a669-f2dd-4c5b-b74f-e4c1a3826ccc", "sighting--fe9c830d-a71d-4277-80d7-c34b589b9fa1", "sighting--e71614c1-1d21-4a51-bc37-63723561d50b", "sighting--51b21688-db8d-4654-9cb9-a2c23e9abe10", "sighting--2409a452-c6ac-4453-96b3-4257d081fe4d", "sighting--28daf337-b9b3-4a97-b5d9-577d23605079", "sighting--e663e359-c12e-4906-bb06-0e9e7a2c2152", "sighting--ddbd092a-bfe6-460d-aeb5-fc3f43c4b7ff", "sighting--ee8731dd-e9ac-49b7-b0fb-27bca30f3c7d", "sighting--1bca49a1-11d1-4e50-9111-6ff951d985e4", "sighting--4760efff-cf39-4302-8566-aa3847de3892", "sighting--851c064c-3ade-4897-9986-e346b9bc3aac", "sighting--4eb39ed5-6411-4955-a5e3-0a1f29c8632f", "sighting--a0e69301-c2e0-407a-9480-d6149a5d8b87", "sighting--cb852145-dd24-4ab4-8e18-d745be818e65", "sighting--8f7140c4-f88b-4a0f-8b21-f863905169eb", "sighting--8b957a69-8666-49a2-8bba-0f1c40993462", "sighting--fd8b35f6-8982-4206-ba3a-9183973de9c3", "sighting--2041c17a-3cdf-4d48-89b6-64c4255aeb57", "sighting--d72b1c7f-f572-422a-b5a1-31e0dd725b05", "sighting--9eb6afbc-b16a-474b-9264-807502b13daf", "sighting--ea93de34-75a3-4346-b628-0e9f706bba6e", "sighting--2b43fec1-930c-40e6-854b-cf5d623a71aa", "sighting--e612a865-5116-4d9d-8fce-62e9eef5f456", "sighting--bc046a87-14fb-4920-9c2c-f5fb669f5615", "sighting--16103750-814e-4898-b6a7-06bbddf4c049", "sighting--823bdc52-de55-47e8-b30b-6a273732efdd", "sighting--0ef0de47-b9fc-4b2d-a4d4-d0b410b6cbaa", "sighting--7cc8ca43-1fd9-4652-a601-ee306c676ac9", "sighting--dff62fba-c382-4b3c-8a72-615411454b08", "sighting--6c145e90-604e-4695-ab4f-b83e94180095", "sighting--dd3d9987-680e-4b54-acea-3740c7af4f3f", "sighting--dd1035b4-e678-4eaf-bc68-f769de7ed388", "sighting--e6c31940-ab2e-4452-8120-f2cb81622755", "sighting--0d20381c-16f3-4e16-bdf8-8451df150c05", "sighting--de82f864-f448-4564-bfaa-c91d8f2f6c53", "sighting--1c9f9412-8f3f-4034-822a-617977dc5a63", "sighting--7769215c-049a-43d5-bd1d-2bda187efc66", "sighting--54065e6e-adc7-4ead-a64b-ad32a7223d1d", "sighting--cf062099-8b29-4796-9ef8-e29fa4ac0738", "sighting--792196d6-0f63-4ab8-9cc9-2f5a3ebd7cef", "sighting--421bbab0-d707-472d-b062-cd6a96fa4d7d", "sighting--562dbb8e-7ca9-415b-b105-0e4fec136027", "sighting--f079036d-5a8a-47ba-aaf4-1bfa4fdaf34f", "sighting--81101be3-b313-49f2-b8db-e4b89b16916e", "sighting--1fd71f33-53ba-4beb-81d1-761debc4d316", "sighting--664990b6-cf79-4b2a-bc68-e32ca3ccd8da", "sighting--ef937250-30b7-4311-af63-e385add69630", "sighting--b2633cdf-2e42-446e-b320-53b145673400", "sighting--2721d3b3-8e76-4fe4-a013-108eaea8dcfc", "sighting--29a7cc4f-29c2-4561-96e1-ec43428b4da6", "sighting--cd5d2a2d-3a26-49cd-9496-259502377a35", "sighting--1f1aac56-a5cc-4dba-bc31-ad1fc7e4176e", "sighting--cc6752bd-4805-4acd-9f9b-d66fb5206466", "sighting--4faddaef-b5df-49fe-b4e7-94c4400c03d2", "sighting--f516e5ed-3957-4817-9164-b9ac1a48823b", "sighting--503cda7e-cdce-4a89-a109-e89483e52426", "sighting--b1166084-b266-4621-811c-d60932deca61", "sighting--25bdc577-ad35-4af6-990c-7cc20a74fd04", "sighting--a99ff53f-0bd9-4c75-a232-ffa034cb9fed", "sighting--8f74cdac-afa8-4b99-b349-b1a797a3022a", "sighting--829db6f0-eaf8-4b5b-a139-39114cdbf6da", "sighting--f92fed21-2945-45ff-b2b8-67a1d60edd88", "sighting--795109dc-5770-4f03-a239-38ce77fcc184", "sighting--88fb3e88-a92a-40d3-849a-be0518a6482f", "sighting--541ca9c0-1827-4862-a0a6-ae255f9f7598", "sighting--5f36afb1-f149-4f7c-affe-62d65bf9afc7", "sighting--86589401-e522-4e21-962c-a07d557b0b7e", "sighting--8c28bf0d-fa60-4f5d-9209-9959c9a36d29", "sighting--d9a65ef7-a74c-47ba-966e-1748eb997a1a", "sighting--edc83ef1-c9ae-4fde-b9f4-edc0be44a6e6", "sighting--150f4f36-736f-4e35-9258-f9e01118d2c3", "sighting--9b7182d5-4358-4e37-b977-4f80a9590fe8", "sighting--31577f3f-8a71-4bfb-93ac-9a2a14ea8a8f", "sighting--c8e58345-18b7-4ffa-8499-a877b536b28c", "sighting--2d003c2d-5d31-45dd-ae52-e3b8bd7be119", "sighting--df21f1db-6ab9-4661-be45-303fd259873f", "sighting--2b4f9559-902f-4fa6-b837-df80a13008e1", "sighting--94c21e97-6519-4f7f-bafe-1444e49bdfb3", "sighting--97164445-e1a0-42de-93c0-6d696c9dcbb9", "sighting--b6109de3-f3e9-41a2-af6b-da3826eafb13", "sighting--d4d3f223-5bf8-4d69-a843-cc1c7e83c0c5", "sighting--9b919a32-3570-4535-ab41-5e328721205e", "sighting--fbc2d50b-4c06-4cf0-b7ec-796f1a0141b8", "sighting--6652669b-fa2e-4636-8f86-4b1f9729985d", "sighting--ce9802f5-c10c-40fe-aff5-4dd9040d3f14", "sighting--3e3e9810-8be4-4405-bb42-0ae41df26a1a", "sighting--ee9efdae-ae88-4840-bdca-68bcd1dd3337", "sighting--a179e14c-051b-4cb1-8fe3-686f4c8b37df", "sighting--c6fb7ef2-590e-4012-bcb0-db9d7185f1b3", "sighting--e91b5545-3c73-4e82-a042-98228ab04379", "sighting--e11f6ae4-808f-4429-a1cd-5b65e79f67bc", "sighting--9d389d42-02dc-4804-92dc-991d0a653a2c", "sighting--bbd78836-21d1-423a-ad5a-ed6662dc3b6e", "sighting--5042e5e2-749f-44c7-8ae9-209f56376676", "sighting--5379c3fd-73d2-4839-9450-5b0512502f25", "sighting--ca35fae1-7196-440d-a797-010c073e0c76", "sighting--97eb7184-244d-4384-830a-45a183e9721d", "sighting--bdbb4e52-44a8-48fa-96d9-c800115b3a96", "sighting--6b9af71a-55cd-4229-9fea-e136b8b21aa7", "sighting--c5246bf3-4669-4432-8daf-83dc572bb6ca", "sighting--c86830e8-b345-4c78-9b3c-d60a65f36300", "sighting--e6b199c1-dfed-41c2-a528-c185d2f3d093", "sighting--3fc8e362-3d71-4da0-9975-fce8f3533ca7", "sighting--f047ff7b-a0ed-4f2c-af5d-cdbbf43e1b4c", "sighting--3c997483-82c0-4435-ae79-da531876879b", "sighting--5effb600-7dcc-44f5-8d27-938c52406016", "sighting--a370c48e-1391-4625-8d23-06ee8139230e", "sighting--a9d36cf5-33d4-4e48-9618-671c98ed6ca2", "sighting--c71164c1-c08f-430b-a20e-1845d0861bd2", "sighting--9ecd6c31-6b67-4973-b6c9-192bc5c9cf96", "sighting--af62e9c4-d350-4eeb-b602-7a9ef05a8ec4", "sighting--e3af4291-4d9e-4cc6-96a0-7ad5f0fbffa2", "sighting--1d211ba2-8e2f-49d3-ae4f-23a53f785f38", "sighting--69c6e114-a2b4-49d9-bc54-9a8bae744f5c", "sighting--ca4d9ebf-6c11-4945-9cac-85f71307b6ae", "sighting--a2f5a53b-b5a7-4222-827b-eeb21f48f3e9", "sighting--2666148f-8c56-44dd-889b-eb8b4052cbab", "sighting--318914f2-fb06-4ed7-b121-e2bd3bb96363", "sighting--952c42fc-1f54-4b00-9cde-92bc34e8bdcc", "sighting--c2d00cde-08e8-41c7-86f9-5520fc61a957", "sighting--2a4f7c2e-2e14-4702-80bd-4dc723709da8", "sighting--50c1dd47-537f-4d44-ac73-f13df7e45845", "sighting--0f167710-738f-4bd8-87d4-2a81aaa3df18", "sighting--1ebcedd6-a09a-47ad-aad9-26fc1e17f4b9", "sighting--6fc24e28-fc50-4eab-989d-2520b6ba7a3d", "sighting--ad94f8b7-bc58-4434-92c9-e6eae44e1731", "sighting--20d01859-858b-4524-84a8-87a588273934", "sighting--ae69bc6a-df7d-4f7b-a075-8592a9f6293e", "sighting--388029f9-c449-47a4-a56f-41a689385cec", "sighting--741a5f91-f58a-4b53-a59c-4ba0d7bed9b8", "sighting--7bb81253-3d46-47ae-9e45-8c513f18ed89", "sighting--1c5c767b-460b-493a-a0b4-96fd0d2483ba", "sighting--15d31c52-46af-48ce-81e4-b56d4021d7e1", "sighting--6cc4657e-32a9-4075-b1df-956daa0d5060", "sighting--ad0a5b70-5cbb-466e-ba17-530f70de8013", "sighting--5c9bd56c-b947-4c5a-998e-58e1664fb20d", "sighting--af383b0d-ee31-4c5b-9a29-afd07dc5dc29", "sighting--f76ad406-8140-4515-ae68-8f6f8650645b", "sighting--94cbfedf-0661-45d6-b6b0-600b2fc693b9", "sighting--eba0b204-addf-4371-a9d3-89d4f6dbedad", "sighting--32cb9de6-12eb-4822-a001-1575e22ac2f0", "sighting--eaec1b68-d5bb-400c-b652-77ebf51004e5", "sighting--7b7c7208-b72d-42d9-b5d6-a072cd1d1520", "sighting--6684f886-a1fd-4f2a-a15e-320240a846cb", "sighting--b7104a32-ab93-4bc1-a101-4bbc2cfc695e", "sighting--bdb7682c-9136-4043-ac24-38a96ed3ac99", "sighting--cf9a499c-52bd-4e02-8209-29931876e87c", "sighting--f3e84cfb-89e1-43eb-a8cf-b362b6ce1270", "sighting--34b8fe3a-e6bb-4e3a-ab46-fd60ff7717c0", "sighting--434ac830-b348-439b-97cb-66e018536ae2", "sighting--a13373fa-924c-40aa-82bb-a3a355978cfe", "sighting--fb3c726a-8dfc-4702-bb74-3e677cd9210b", "sighting--4351cf5d-6757-4a85-acd1-d353728d79df", "sighting--e2c57767-e6e2-4a81-9cb1-aa5a7589dbf1", "sighting--d46410ed-4d6f-47c0-9899-4ecf46afdf8a", "sighting--9cac83ad-428d-4adf-8e00-c32d5789f117", "sighting--3619ea1b-3110-4cb4-9de6-31708d3d8796", "sighting--daea4426-4414-4bca-a22d-a55a1e0409d4", "sighting--9dc6bcc2-9b20-4f21-bd6b-5061167e675d", "sighting--65e21972-b0c0-4668-9226-01e8ad6f8f9d", "sighting--cf1ccb45-adfb-46a4-89dd-0d6a2f89dc67", "sighting--428f72d2-01cf-47a6-b845-f8b9969bf757", "sighting--57a1d39f-656f-4ce5-85ed-0e186bd1f36c", "sighting--92ece707-6d8b-49f2-9122-595c25fd9d99", "sighting--e1b31a7c-80b2-4328-9c10-6b57bb790093", "sighting--29974e63-687f-4b39-8818-c59c841326a1", "sighting--108567ba-0978-46b1-94ff-bbd3337f4e29", "sighting--1d75b22f-57b6-4789-94dd-7d093cb0898c", "sighting--1481608b-865f-4406-a805-1c4bb6723a0e", "sighting--7672a88e-a705-44d0-866c-fe88566a2b94", "sighting--5e0a071e-3b52-46a9-a55a-29d3e2949006", "sighting--21b9b534-c501-4086-86dc-3343b68afd33", "sighting--f393f964-5080-4dca-b8c4-cb47fd1322a7", "sighting--9aeecc43-33d3-49a4-91de-85a1e611c57b", "sighting--7c979831-d6a3-4861-947d-c6253f8827d5", "sighting--56c5eac1-7e74-48a9-80c7-eed1eeb7e459", "sighting--d0369d84-69a9-4ad9-9462-69f7e9c9c1f1", "sighting--d39c2c9b-c8da-4055-8dea-8f842550e661", "sighting--7fb80910-452d-4359-9c9f-0061b020d564", "sighting--fe91c162-f297-473a-98db-1766f39dc989", "sighting--30437314-0976-4bb4-9467-9d716102503d", "sighting--3e420f7d-5f89-41be-a398-47c70aac2616", "sighting--a8e8f567-fe7e-4c42-bbef-e987a17611e1", "sighting--b272664d-c6a9-470f-bfeb-bbefc6257138", "sighting--8ace7106-ee65-40f8-8647-17526a445853", "sighting--a48a5b89-3ac1-4595-9e2f-16ed5cba5969", "sighting--ce4f4cf4-fbc7-4d69-90d2-f740c2947065", "sighting--ea45b01c-7362-40c5-8e52-ff5209e45f90", "sighting--380db0d4-3fa3-4f2d-a821-82c773a42f65", "sighting--ec98b2cb-2f81-4f13-a8d5-d9ff88bf2378", "sighting--f371291c-727f-4bf5-9a43-dd513a8c8c57", "sighting--c83d1a73-9d9d-4234-ad3d-c4da561cf521", "sighting--b26da7ef-cc50-4e0f-9f56-185cee41abea", "sighting--cd421576-750b-4d05-ac8e-c21597753330", "sighting--38bd3bcc-880d-45a0-9a04-97b564a14b59", "sighting--31783b75-6d35-450f-b7bb-722bb339153c", "sighting--3fd4a036-17da-4957-9cd1-1c94d173bca2", "sighting--08945aa0-367a-479f-ad6f-a7c730e1479c", "sighting--bb43606f-30db-4a94-87c4-b4f3aeb0ba37", "sighting--7a361fbe-118c-41ac-8df0-c19c0eeb6854", "sighting--012c0de7-46cb-406a-a0ff-1fb238776d39", "sighting--fe8205b9-d0c9-4186-99b1-8a928101036b", "sighting--6800d66b-8010-48fb-ac8f-993a5bb97ba4", "sighting--d4314bc9-9e55-4ed0-bdf9-296d613ec5c5", "sighting--e1072341-505d-49eb-abd6-719caa1cff24", "sighting--b4e8466f-06c7-4b4b-bcc7-bb73853eed98", "sighting--389a9961-955d-4edf-979e-c81268c09c1d", "sighting--9af07154-d111-4f1e-8fa2-9bb9953de9f4", "sighting--94c8eb94-869c-4838-a6c3-64e33e791849", "sighting--cca9ea36-e141-42c0-922d-1e6e7f2f19ff", "sighting--56fd40a7-8470-4df7-a2cd-49405b3a4980", "sighting--8b3190f0-9795-455a-84f8-fd5b5f83c231", "sighting--2bb77280-7c12-44e7-829a-003a283f2983", "sighting--5f73cba4-f465-4301-9443-4c6725594f2e", "sighting--035f9832-90ce-43d3-8dd4-ebbabcda0ccc", "sighting--196488ce-3123-4de1-9ed9-47cc0796c668", "sighting--891111c0-3fcc-4e08-9c1c-e836be18a6d4", "sighting--5ddb41ec-126a-4ae9-bfc0-bd5450b7b514", "sighting--9b0446a6-1b4d-47f9-9e1c-09578c347119", "sighting--b6d89aa3-fdf9-48a9-addd-5cc73a7ec181", "sighting--f9371a7f-b4a9-43df-b959-806ef7cf8d5a", "sighting--60af8cca-0fb6-42f2-ac08-119c071386d8", "sighting--4196fb91-64d2-4186-9831-9f3cfc5b62c7", "sighting--5de80f12-6ad9-46c7-89c2-e9fe0a699924", "sighting--c1aae61e-2688-44d5-80b8-dc24ec3b3909", "sighting--70703d61-42c8-4c61-9e05-40f83714badf", "sighting--519e3011-c608-43f3-99d0-50f7598a5463", "sighting--7e357f8e-b0eb-423c-9aa0-5b5729015573", "sighting--bd3dfbb0-5b67-462d-9c03-96e154b05e6f", "sighting--44e0b55d-3258-41d9-bef9-303484a705ac", "sighting--0d7c0f93-c70e-4d1d-b1cb-8b4f695f5a01", "sighting--04789af3-e6cd-4d59-9898-827faef431d3", "sighting--93b6f7b4-278c-414a-ba21-09e205b66617", "sighting--928fe3ce-815e-4bcf-866b-e7ef23b950d0", "sighting--634b2109-a848-455d-a360-5ea26a77acce", "sighting--9d88381a-f46d-4d3c-b64c-d70a296504e7", "sighting--2886fc20-00ee-4ff5-81d3-cb4ed60030b4", "sighting--3efda44b-de46-44b7-b5ba-7e58e0291369", "sighting--cdd00393-02b5-4caa-8098-aeab68b271ec", "sighting--be9df202-20ab-4dad-b97e-2ad3aaf70ed3", "sighting--a6634d4a-cd94-4b88-9c24-8cfc81012cb7", "sighting--9f7275f9-a912-4c95-8178-de65cfac0e54", "sighting--995c5968-f48b-4b03-bfc1-ccccab70b2a1", "sighting--05e19dcb-4a51-4cb4-a37a-3908579bcea4", "sighting--fa2c7d0f-00b0-4876-97cc-50c54ae111f2", "sighting--0389ba36-955f-4644-9a6c-02ac6ddb6a19", "sighting--6eb074d1-d786-457c-a4cb-fc7ac6026bd2", "sighting--7ed8e801-a8ff-4db0-a979-f61e60a52900", "sighting--70ac67cc-706d-45f9-9992-306a7d9490df", "sighting--eeb3476a-5f91-4ada-bace-02ee15d81d6e", "sighting--c8f07e59-c28c-4f04-8183-a0f197f5c557", "sighting--aa686d42-1aab-45b8-bb60-e046c9d27e5c", "sighting--2c83f914-70c9-4776-9ec5-40c895a391ca", "sighting--18948119-e223-4edd-a4d5-c25c05e3ad4c", "sighting--7c15cd46-8482-45b8-81aa-6a113693f411", "sighting--97456d06-5604-43b4-8a20-a34979748539", "sighting--1038db7a-b05d-4408-a654-4b5cbfd56e2a", "sighting--b247cf7c-b991-4aeb-8450-956779fc3cc8", "sighting--d3ac1496-7ccd-47d7-9999-5e82b6f603f1", "sighting--dacd7e17-4109-47b1-b0b6-5d57ab762294", "sighting--24fdbac2-d9fc-486e-a298-b5699d6e1d9f", "sighting--95ba617e-28ad-47b4-b765-26c5e2b3c740", "sighting--b39048fb-8690-4272-87ac-66d18c581ff7", "sighting--2aedf1c2-3f56-458d-9bc4-a0747e93ca1e", "sighting--e3c88c8f-0c62-4b76-a8a3-5350281404f6", "sighting--04dc0141-918f-45c3-874e-422614a7d226", "sighting--dc5b9ed5-2237-4486-a0f2-e12660081338", "sighting--78c7a806-a03f-456b-9d1c-caec76495c65", "sighting--daeedbb0-0221-4ae5-97fa-77742e03de3e", "sighting--805b9db3-d577-4a1b-8f7e-335056137b0b", "sighting--2cd5b5f3-7413-46db-beaa-0120bce05fba", "sighting--8b6f2510-f0df-4e70-aa6c-d0725dd7ec85", "sighting--3ba51c10-6fa3-4031-841c-45d98d3e3fea", "sighting--e292bcba-36f1-4377-8c14-baad0cdc0705", "sighting--6acfa876-f74e-4f9e-b713-5fd148c28867", "sighting--66d99612-b5ca-4e10-b744-b3c2989ebe70", "sighting--eb40f837-dc3a-4d77-ba2b-a96020e417ec", "sighting--9a532e4a-11e9-482b-84f4-eb96894b3821", "sighting--12e3fd0b-658d-42de-a3ae-c38ea388a3e2", "sighting--c0530dc1-4e30-46f1-8333-251ac28723ed", "sighting--64f8929f-251a-4d9c-badf-13b32e6785c1", "sighting--d277d455-bb80-44dc-916e-daf6210bb0de", "sighting--c5af3f9c-5c63-4978-9a90-d717c1624742", "sighting--790a00a8-c534-4b5b-9987-5ed5f3308395", "sighting--28472678-53b6-4875-84d0-3fb75d71c59c", "sighting--cc6d26b3-fffa-40e8-b7b9-d6f74c2806f7", "sighting--4a8dfb50-54fb-4372-90e3-0f3d78566a2b", "sighting--4c972e21-fcaa-4b03-a830-7001e7a4a24f", "sighting--45646916-a08a-4a26-92d2-46f08a7ef769", "sighting--e211aeb6-84ad-4ad1-a13a-f72fdd83c103", "sighting--ac12fe70-ab6c-4e9d-8b0f-29459b855566", "sighting--c14e01ca-fae4-446f-b7b5-c187df6d1f16", "sighting--b555a2f5-2c4e-4af2-9c15-6a3bc2f2575a", "sighting--a887cf93-db92-4f48-99b9-17004fe15fc6", "sighting--a9b9b33f-1366-4447-89f0-5de6d3c12336", "sighting--50c1443b-c506-4667-9f6d-d337fcc2d17b", "sighting--f452a67a-8d21-44aa-a72e-5b4acc5c59c0", "sighting--927ce0d0-cf80-4ec9-bb5d-f86518503d21", "sighting--ddd10d96-1809-4390-b7a3-780df7de5c2c", "sighting--b72c198d-2246-4fdd-af58-2258037c93c1", "sighting--3a8b76a7-5c29-46c7-ba97-c8c6f660d779", "sighting--17a58638-c3be-40a8-b486-d58130315302", "sighting--4bb6441b-2b8c-459e-9fac-5d8c539e8961", "sighting--9a1b91b0-34e3-4be8-baf9-7ed9393a1b72", "sighting--ad426fbc-1be4-4fdc-9e51-0ada490a5cb1", "sighting--483cfdc8-9780-4e77-b6e1-3ad3efd901e1", "sighting--28b9b6ee-f6da-4e93-8024-79fae08d458d", "sighting--9cd46246-74de-4a34-81e5-d2245be7d3e4", "sighting--c55db060-fb54-40e6-b4cd-b54f688a75f6", "sighting--07eaa36c-77b6-4a95-9db4-d035a735aa3e", "sighting--d4d38dbb-ee62-4ee0-b230-b6f3ca174ea9", "sighting--1ff3cf15-5fc1-4501-bacf-44f8de81f85d", "sighting--eed3c37a-11a4-4b5c-93fc-035d77b17c87", "sighting--7912ca6f-d63a-4e08-a94c-f3b0ca8efca2", "sighting--192e2f63-c764-44c3-b6b1-a7ce16410335", "sighting--2d36eb0b-fb65-49ec-b3f7-d1df2fab4519", "sighting--1e3e1b83-8cea-484d-a7e4-ac717a81bbaa", "sighting--35c24ace-6598-470c-965e-0b386b6467f8", "sighting--83e8f069-58f6-40cc-b826-656767cc4fbb", "sighting--0543dfbf-1f8f-41a9-b0b4-d6edb5cda6a2", "sighting--c70a0047-130a-4587-a6cc-392426a9e4d8", "sighting--2ed2c49f-0e8f-4612-901a-238762500eb5", "sighting--de8630f6-23b9-4414-a38a-004f3a0852b5", "sighting--99d19a4d-0b0e-4d77-8d56-0249989cf8f2", "sighting--b167270f-cebc-4f5d-b019-51f8c9609dab", "sighting--eea2ec05-5a1d-43ff-a1a9-d6f62d565faf", "sighting--4b5b6d7f-db7d-468e-9696-ca3e867ca6a5", "sighting--53ced13b-a2f4-4068-adb0-0664211162db", "sighting--aa23c6c9-c3d8-417d-ad96-1127df8370fc", "sighting--5edec44e-f64c-4933-9165-22cac4bd65d9", "sighting--6b123940-4a3b-46d7-8e86-cadbc8cff705", "sighting--db5e48c3-9883-4308-aa34-3329a7c716b4", "sighting--ca789f08-4844-4da7-a532-4f3d3a4def08", "sighting--d93fad63-9ea6-4363-81d7-97ff87fc735c", "sighting--649a455f-b69c-48a5-93b2-4d928b43bab0", "sighting--43528545-2ab6-4b58-bfdb-9ae96deb3103", "sighting--9cc6ec4e-d547-42d1-bd9d-67d6049c6ec9", "sighting--0d1752cc-fedf-4311-8cb8-1060ed231343", "sighting--b274d261-3fbe-4b65-9fca-6d8ec3c523f2", "sighting--8d9e2ebe-8929-476e-8377-a1158796d4da", "sighting--e093d329-9e3b-4605-89b5-3b0b00b3acf2", "sighting--c75ef3ab-a3f7-4d6a-9f03-68e5eb24e206", "sighting--ce3a47a5-64e1-40a9-9768-2c8ca245b91b", "sighting--3e24e28b-9054-4191-9898-90776d421a2d", "sighting--1184810d-f832-4d8d-a5aa-e7eb635dac2b", "sighting--b0cb61b3-d806-489f-a06d-43f3dd208e27", "sighting--98974093-4c45-48de-93ef-199460a386f4", "sighting--1b3abceb-d0d8-4563-9a65-ce6b74eca3fc", "sighting--c3ca3c86-ccf9-4ffe-aeb3-f406c23d9b2b", "sighting--43e2d034-9c33-4fc5-8de1-568d75887d41", "sighting--cffdc6dd-0aa1-4825-9a03-8359582e64c1", "sighting--7605d178-bc69-4331-b427-41edafcad763", "sighting--a245bf4b-d739-428d-b4e7-489a01050bb2", "sighting--4462b768-d712-42b2-9d40-b832f058053b", "sighting--3bd4bf26-d1c3-413d-8845-191562156740", "sighting--fce8f207-b1c5-4255-ab63-de0823db5879", "sighting--639bd01b-eb2e-4e57-874b-f69ac1648cd9", "sighting--2bb5ed71-4e39-4584-82a0-a9bab6fa31f8", "sighting--b8cd26a7-f508-4897-b134-e19345fc7f19", "sighting--96a91803-c983-4c27-b2b6-8ba30a2679b8", "sighting--8e8d75de-8edb-4724-acf7-3b9fb0352c39", "sighting--865970ac-22da-448a-ae22-551692b7e4bc", "sighting--49209f45-2622-4956-bf01-99c04a0cfa6f", "sighting--498c5ab8-9189-478c-9d5c-442d3ef69684", "sighting--8484ae15-08f2-41fa-a703-965f85d9f4ae", "sighting--30f19786-5f30-4bb1-bc94-f31c60b9d3ee", "sighting--e534577a-4aa5-4e53-a1a4-a303e43622b5", "sighting--ab2f59b7-4d0e-4501-86ec-5bc0571d72cb", "sighting--86c6846a-7aec-4f91-a4df-aa27f4ea488e", "sighting--8bf9b456-7516-4c39-8fce-bd3265dace8c", "sighting--8ec26b68-8617-4ae6-b7c4-6bbe62bd2148", "sighting--e5a8450c-03d5-46e2-bf75-8d0b20f1875f", "sighting--bec0624f-7cb8-464e-9dc1-21599324f3a0", "sighting--af6bcaf1-e09b-4e75-9a03-35099a58ac86", "sighting--e4efb53d-abdc-4307-92db-64642f7f55fd", "sighting--d8f4b4a8-b38a-4266-841d-deca1c95eb05", "sighting--fc8652db-fa10-4f2f-8b31-09f185d1b72e", "sighting--5144e7a8-62f3-423b-8124-17dcc71689b2", "sighting--c30b2963-fe1e-41c7-921f-dfb6029e4427", "sighting--e3944b33-d31c-40b2-9944-91dc7a6b5ce2", "sighting--e4732766-3919-4c2b-ada6-5bebd25557d7", "sighting--821d4201-8fd2-4532-97a6-50d60f342159", "sighting--686e154a-6d3c-44f7-9334-c39604ba1382", "sighting--b4fe8214-f739-483c-8926-89c7164d3d0a", "sighting--a86ccc8c-c276-4e38-bea3-c2c438b26316", "sighting--03f0e6e1-bdb8-4024-83df-701af28c2ddf", "sighting--8b872b16-480d-48fd-a3d7-b52d4cca5b49", "sighting--2c94d574-e28f-4ed0-a927-1e35304a91ef", "sighting--6aa6dcb5-e68d-4eda-9c1f-2c72c4fa8307", "sighting--b3886df3-0f04-4b3e-9f0c-70ce6cbfe114", "sighting--2fd6a544-f406-4257-8014-72eee6480a7c", "sighting--bef9853f-529a-482b-acf6-56a4b52cfdbb", "sighting--2f01f82a-25f9-4e59-8354-c5824484ea5b", "sighting--9347656d-f290-4f1d-97d7-8f50b2a2a1ec", "sighting--88a86516-265a-4bda-a807-8b325b27c5c9", "sighting--7ec40c97-9722-45d3-9941-6747375bbbbe", "sighting--f62b6ba8-68c9-477f-a716-bbd8c043d3c9", "sighting--8c402944-f227-493d-b5aa-647d3dbadaf2", "sighting--4b3327eb-5ff9-4e05-a27d-58d7420bc88f", "sighting--cd4b28b5-d5e7-4517-9b1a-8f203eea03f2", "sighting--2cd9ad97-c005-4430-98fc-88769e216f22", "sighting--3a689fdc-9b43-40d2-b3c4-d2484654358f", "sighting--95f52187-2978-4c8d-bf13-863353ca4341", "sighting--dc9ced10-714d-4877-8257-e09d142fdc65", "sighting--09024044-38c7-4f5d-9bdf-3337778ddcca", "sighting--066d5864-c563-4b42-bde0-50ae5acf69ec", "sighting--a17f8e67-6bed-4cd2-81d5-e556390c8d6e", "sighting--044ed1fc-b8f6-4190-9a93-c7555b34b484", "sighting--0273ca5a-73df-411d-9f30-b4655f73ca01", "sighting--007363fc-3e31-402b-a53e-9b11e4ead32b", "sighting--f611ac6e-14f4-4a38-aedd-0908265a48c5", "sighting--b845a214-8832-471d-bc07-564c10ed97af", "sighting--52b07961-787a-4527-937e-dce66c4471ec", "sighting--6c913565-82b7-440c-b08e-61d3d851767e", "sighting--498b2b87-ad70-41a9-8d89-7891a9fe8839", "sighting--fbc81a89-e361-4462-80c6-5c3a97c00605", "sighting--2bee109b-4551-4e3c-aea5-c9c6d2402d91", "sighting--aa8f0b01-3ce7-4aa9-8999-59405b136b3e", "sighting--5591d351-c809-4eb9-8353-bfa10683196c", "sighting--d55e8f74-46eb-41b7-ac23-0471a96834ed", "sighting--cd05df6a-256d-4db8-965e-48e1315ca810", "sighting--74a29b34-1bc0-408d-be7b-1f5e13f98bd7", "sighting--9c183d1d-5708-4bdb-aeb8-f5bbde29fd3f", "sighting--e6e58157-8983-4029-a661-f4f650ef1cc4", "sighting--d679b7f4-9bef-4f7c-b47f-159b8eb68ff0", "sighting--e50dfbf6-ca94-4f4b-a6ae-b1072250b05a", "sighting--795afc72-ee14-4b3e-863b-623b06cd430e", "sighting--df480a13-2d38-47b2-a3a4-efe6db2bcb4f", "sighting--733bf169-e454-4962-9202-05beaf0f6e6b", "sighting--cb68be07-b233-4e5c-a7ae-c91d418eae72", "sighting--c429bb3b-488f-4b38-9eaf-8dee40c4257e", "sighting--661d5b27-81ec-47cb-86ea-49a52ed4d49a", "sighting--883e058b-b50b-4431-929a-ab030dfcbfd3", "sighting--f1f348a2-5081-441b-b40e-fd426332b3d6", "sighting--1bf21375-b607-42a0-b6e2-ca1bbbdc21e0", "sighting--b8e77d6e-0860-4345-a18e-e783c96cf305", "sighting--cbfe94f9-62cc-438e-a955-564d3f220f13", "sighting--3251c8d5-c8b6-4bfa-a5ac-cc2e86a5389a", "sighting--15629a5a-7b73-44fd-9720-8072f75b6102", "sighting--d46681be-d652-4564-b6a1-5090def2e248", "sighting--cea3b800-d1a9-42d2-91ec-11bc6b1ed526", "sighting--d904d9cf-581b-4036-ae74-397fb28488fd", "sighting--51e46327-3e3d-4e90-a1ba-85164a856bdb", "sighting--8cc6085b-20d8-4adc-947a-5c6757707f7e", "sighting--8bdf45f1-6f4d-4989-b094-86e030af64c3", "sighting--6429dd25-84e7-4afc-99af-c70b0e9cbe45", "sighting--41bf8b45-2fb4-42a3-9382-81c454210609", "sighting--537f8b1b-2b1d-44ac-ac9d-c2e1c7954a7e", "sighting--a46576c9-abae-4183-bb9b-2263c22f6723", "sighting--fb852250-189d-4d1d-810d-992c1381fa4e", "sighting--60f1e47e-e380-4cca-9101-39f8ced53610", "sighting--bc5aa433-d127-447e-a8f7-10f1e651ed5a", "sighting--341ce950-e694-49b6-a741-15307c7663ab", "sighting--910a0369-dd38-4860-83ef-a3cd29325e74", "sighting--b8cf60a5-07f2-4e4d-80cd-fb53dd3c657f", "sighting--2f7bbd91-d7f6-4c78-9219-0cff3d82ad8a", "sighting--882c85e7-e769-4a9d-a951-d57535ab7ca2", "sighting--114e12fb-3613-40db-932d-183f792efa7e", "sighting--74f5fa34-0c37-491f-9d8d-c629b11ec83d", "sighting--91aaffac-b759-4552-a3e0-2f32f9ef7355", "sighting--ea65795f-654c-4226-9899-77953c6ceed9", "sighting--adf1602c-87f6-427b-a016-6c63e0d33277", "sighting--b5179fc6-7307-4f55-bc7d-30d29e4cbd8e", "sighting--df9d2f4d-764b-4ba7-9ef7-a2e4e64c3f34", "sighting--84e1a1c6-1ba7-4a10-a47b-bdce0df5b778", "sighting--1e861c80-3712-4fa1-b6f1-09d16ab4d271", "sighting--c548cecf-9839-4653-8ca2-4f8bed5cfec6", "sighting--4b216ae6-67ef-4aa3-a035-a98c0686d543", "sighting--d11762e3-b0df-442c-b2b6-f96b6ab4dcb5", "sighting--2023b905-32e0-4162-aee0-e117085d77c8", "sighting--13d743bb-e07f-430b-9e0b-bdeb6336a692", "sighting--ebb37d82-d805-46c0-8a70-e8036dd6f96c", "sighting--402fa094-faba-4825-9180-1c393ba552ed", "sighting--a73220fc-e3f7-4163-a9c6-05226aa17114", "sighting--b388257d-90ee-4a5b-b0f5-2eec26f1f78d", "sighting--bbe6ad06-16dd-4e95-b4b0-903674d65767", "sighting--b0426b36-8344-4d94-99b5-a152ea347d20", "sighting--7b688ff9-cede-4fd4-bd36-34e1b7d16545", "sighting--7396cc09-cc61-4722-9a69-2d94036b48d3", "sighting--dbd09728-1e6b-4898-9ee6-d18810d0d083", "sighting--1dec4c79-1b16-40e6-8366-b0f2cd2a5584", "sighting--b007044e-d433-4f71-beeb-b3e50378edf7", "sighting--e8f6f144-4a4a-4bbf-b103-a6500e2f056e", "sighting--dee1bda9-7811-4138-81fd-14cd084850ee", "sighting--340e306e-0ff6-4ebe-9653-6569c7d59a6b", "sighting--5b168deb-ca11-48a3-b104-d6daf017c919", "sighting--fb2b66b8-36fd-4867-93d9-93b890856f4f", "sighting--807f2d3b-6050-428a-8abf-971771300ad3", "sighting--16465314-8577-43d4-b214-6dad675ee259", "sighting--df4f87ca-4cfa-4b72-8b4c-cc6bab3db30e", "sighting--7b6e081b-c55b-42a9-9f3b-27a821104f4a", "sighting--a4d84453-a927-494b-b322-0a29b9984ccb", "sighting--ae5b4776-1644-4b9e-b16f-894b22891d78", "sighting--69160aac-cf62-4d53-8179-6d8abef39ef0", "sighting--b6fe1503-b02e-469b-b870-f648b0d95335", "sighting--d9fbbe44-c365-4b03-94be-4408d1284c6f", "sighting--4608dbd5-e394-407b-848b-65acb39ad6ef", "sighting--66af933c-f60a-4141-adae-dcb998892706", "sighting--b88ef95d-06b5-49d1-9011-2cf6db03aa4d", "sighting--8771e55d-19e2-4f54-a3ac-2f680b2c5f27", "sighting--09a9cd86-c54f-40da-a3c4-c18d86009853", "sighting--5d42eb9b-5d0c-48b1-8490-73f1edcda47e", "sighting--c0157b94-a49d-4991-aba8-d45bc6c9e8fa", "sighting--3ca0083f-32eb-4a9e-8be1-f0f16ec49892", "sighting--05e707bd-1768-4be3-a875-96fe45479e06", "sighting--a2a00aee-a6cf-421a-ac9b-7f2f5234e7bc", "sighting--cfff3eed-8f31-40e1-a204-aa1db3464cea", "sighting--66b53011-ae21-4c06-b9b5-7077c1d793fb", "sighting--cf81c59f-c872-4539-ab0d-e32cd3e3a79f", "sighting--15029119-a4dc-431f-b7c8-3bfa2168b4f2", "sighting--9ebb2d0f-4b9d-4d31-b431-4328cee9081a", "sighting--10b28eb8-26e7-48ad-b74b-198909163511", "sighting--e1038bd0-318e-4158-91ca-0ca4d2a7d949", "sighting--304fe850-2890-4bae-a26f-d10b697ce35c", "sighting--2e9e6cb1-b173-4010-87e4-908269123172", "sighting--953df2b8-990f-4277-a872-e4fec0ae632c", "sighting--37f6d6b1-7e03-4e8b-bc07-d3e842e4ef3a", "sighting--d951635d-2e26-46c5-ac20-df345744dcba", "sighting--89b7fb63-2e0f-4cd7-a0a0-256d87892f85", "sighting--3841fa73-c161-4c42-bccb-8cf8310839b9", "sighting--46cc7334-1286-4f31-afac-1c732189906a", "sighting--356fdae5-998d-4995-83e7-0f8f20e00263", "sighting--71f25a19-250a-4c36-a2ac-760c0ed489f7", "sighting--8d21898f-7d88-4e67-a1f3-44916fb273ec", "sighting--57735827-dc60-4401-8474-eaa810225dec", "sighting--65a11ead-850e-4101-9ec7-d754e75eecc3", "sighting--acde9984-cc13-4daf-a8d2-ea856f6f1174", "sighting--029e72dd-fc7c-44a8-bf48-3d79598c3e99", "sighting--1067d03b-4cb5-4329-8779-0498523c2930", "sighting--274225e9-1391-4212-9e16-f4abec55291a", "sighting--babbda9f-8c4f-4adb-9828-9f3abd783585", "sighting--6d5ddfb8-b45a-4a4b-a4c1-06baf5a159c1", "sighting--31f56721-3b70-47f9-a1ee-ce614f19d996", "sighting--0e833549-543f-49f4-bc08-63f71f619289", "sighting--ecb02b66-bf8d-4865-8880-4ba519cf07d1", "sighting--90eaad73-96c9-4f10-b5db-e90c49e38824", "sighting--68639d9e-391b-43f7-acb6-45cc6446eb8a", "sighting--0f1cdc52-da5e-47bd-a497-f20355c6f2b5", "sighting--a1d21bbc-5bab-476a-9a37-86fe3462c845", "sighting--2c8dda81-58ec-43bb-8d7e-3442515294a7", "sighting--c84dbea7-5fb2-4717-99d3-770b323c2a8d", "sighting--f0b2ac20-a960-411f-8b8c-06cd2e3e738e", "sighting--f8c313fa-ba3c-4d52-af8c-f225acbaf632", "sighting--f541b9b6-0e34-4522-9bc6-4de7829a1147", "sighting--a359c5cf-8e54-48a6-abbf-5c6aef54e6bc", "sighting--63637d73-04d7-4e87-9209-ea470e1e2e42", "sighting--d7033944-8b2c-4734-a4cd-b45d5fce52a6", "sighting--211b723e-5481-43b3-9a43-e08133fde74e", "sighting--ace26bcf-deec-4a69-acb6-717b076277e9", "sighting--74acfdac-ba26-43f6-8aa2-29d79d3b6db2", "sighting--7d6b2f77-8bd6-464c-a4f2-af8ab5a24349", "sighting--750496b7-ec85-4cf4-960f-fc6fa311a65a", "sighting--d7856a60-616f-4408-972c-4f6eee88c4fd", "sighting--7a749532-a14e-4be7-9e8d-13c9342e0d80", "sighting--af64ea39-da38-447c-ae81-8d05b720fbac", "sighting--ce769ab2-72bf-414b-a47a-8ba2443ef293", "sighting--5d5da99a-ef75-4ec5-8ac9-e593541d02fd", "sighting--f08c312c-cfa2-4661-9ae1-b348e36dddc6", "sighting--dc666ce0-db84-4c1f-84b0-52c986b463ee", "sighting--e2009780-27a9-40a1-907c-1ccf0a521299", "sighting--295a86d7-bd07-4182-9469-2c8db66f8008", "sighting--84f093ba-1c98-448e-b6d1-f432615b2159", "sighting--46da17a4-6ed4-4270-ad60-0531c52a7433", "sighting--3460971d-8d31-48d6-9244-6a99be461d63", "sighting--8f1f065c-b455-4a84-ba3e-325149362c34", "sighting--cab0dd6f-41e9-46ec-9eac-1c1a1d3520b4", "sighting--60a255d7-7d34-48f1-a73d-ae93f058a139", "sighting--c50eb6cf-449f-47e2-b517-099bdd7524a0", "sighting--40e3a13b-27e1-4aa6-b66a-da11aef441fb", "sighting--92bb3f79-47cc-4c17-b9ae-5a360edee98b", "sighting--e9a36d20-210a-4935-b7fb-b4820127fcd9", "sighting--f97e1c58-285e-4cd5-9363-6803f585233b", "sighting--6781c5a1-ce23-4844-9681-0260c423c4ba", "sighting--bb1e4e33-1d41-4e0f-8f17-67bdac63623b", "sighting--0618e02c-9c63-450a-a7c3-01c90907b31f", "sighting--0fc29727-808a-4f16-9e76-18b926fe4d74", "sighting--c6305e3a-99e0-4abf-8623-e711b855341d", "sighting--59bca309-32b6-473a-bf43-04a659ecfd0c", "sighting--55d605a5-f6f4-4d9c-b768-bcd2abffbf1a", "sighting--d90cd2a3-3188-4251-93c6-0c6f426340b4", "sighting--7a75c09e-c672-46bb-beb3-a2f45d47d009", "sighting--77682c6d-9c85-45a0-bc62-1310c711f057", "sighting--60143eea-af1a-4c4d-bb9e-357c45b9a40f", "sighting--d5aff6cb-7638-42d6-8f8d-342bca25e8e7", "sighting--1e43fcdf-6cc8-4715-8a5c-49b3bc1726dd", "sighting--fe5d4d08-3f96-415d-812e-517f1e3da128", "sighting--58f6c580-23f9-4879-83fd-892d7c392eb8", "sighting--fc41480b-6e90-42aa-be98-f81f5566a3c1", "sighting--34aa4a97-8b63-4cd1-8be5-13e92f5c34d9", "sighting--c0069a9a-acfa-4af9-8438-ad026a8dbc19", "sighting--5ce66337-bf0a-406a-a0fe-c603cf377b55", "sighting--11296a2c-0146-4bb2-aaeb-4ea4e2b60238", "sighting--cc2f7e4e-86af-4dd3-9be0-93d5fb9996d7", "sighting--c97c888f-0a1c-448f-9dc1-737fdc15b0e8", "sighting--6d6e6d12-42e4-4b24-a42a-19c6288b8982", "sighting--07fab458-d038-446f-9407-06ff69fe1fe6", "sighting--579acc14-7f13-45ca-b206-9af2abc0ff09", "sighting--c0b3df9f-1474-4197-8252-9638b63878e9", "sighting--ca18e5d8-c479-44c6-9a5f-2ad77ac4e249", "sighting--38e5e689-827b-4467-a5e0-fcc9bbfb73f4", "sighting--bb0e60f5-749e-47a5-aa1c-1f1c7a7b0549", "sighting--9b625830-7253-4136-87ec-14ff53780cc4", "sighting--1255fc0f-5e8c-4be3-a792-c62772e5eb2b", "sighting--b6eb3285-215a-4923-8537-e5538a689410", "sighting--ac56c968-013c-4a03-a3bb-b309894fa10c", "sighting--7f9cef50-6b03-4b3d-a6e0-17af48363442", "sighting--35ede6d0-8c59-4243-a4e4-ef7bd9dc213a", "sighting--0e8621c4-b3e1-4ca8-82f4-0db6581477d7", "sighting--778c7308-81f7-427e-aa25-81b95f3f4d0e", "sighting--d179a29e-010f-4e42-b603-28593689e657", "sighting--93d1db02-3cc9-45dd-9684-51193fd31290", "sighting--1cb53637-ba69-4c9c-9a2d-bcf484491f35", "sighting--a8f8e241-6756-4c7e-af4d-4c8d4677ec5a", "sighting--0a654633-182d-4e16-a3be-dfd3d3603ac6", "sighting--294158fa-1ec7-453e-815f-f1882f15c17d", "sighting--1e1938b9-a5c4-41c9-8d68-7b1ca0721206", "sighting--e05ca90f-01b2-4369-933a-31c5576febb6", "sighting--74a8bc18-2879-41d8-b660-c0e122dcfd33", "sighting--541ab146-f82e-4284-9024-6e7dc9da5e22", "sighting--39dae208-96e1-4aac-b4ad-0374b75a28a2", "sighting--3c9e1486-31ca-4ef5-ba54-75d45aaf2dd5", "sighting--6f5e1a15-423b-463e-8931-ad9adbcf2fdd", "sighting--a70a8b7c-4728-46fb-9382-3cda84b5b62c", "sighting--77909887-f793-457c-879f-423a58752fda", "sighting--a7e59806-be25-4ac1-92d0-e284bf2da503", "sighting--356d1d39-d560-45ca-a88d-622c519c7707", "sighting--15f9c1d8-4d62-43c3-9fa2-99e8131888ce", "sighting--6dd39057-c076-4139-93d7-7ec4dbc64e3f", "sighting--15e41aa2-456a-493d-97ab-8af2ecc2fb71", "sighting--499d9b16-fcd1-4862-adea-3458d092a5cb", "sighting--cdad9c95-c1ff-4588-a3a0-c5ef82ad816f", "sighting--48b9c477-1983-42c0-bc21-3576868fef92", "sighting--031e0ab8-be5d-443a-bdbc-09530ed639d5", "sighting--e8853d87-e322-4088-8446-480cb3a2b9e2", "sighting--edf9654f-bbf8-43b7-b6de-3ced22d17830", "sighting--6d04188f-dd23-4dc0-902f-4c773678f1bd", "sighting--abcbcd18-c2ae-47cb-b550-69439ba77582", "sighting--5c1b510b-4a79-4000-a051-c70845abe071", "sighting--2d1d8ec2-6b2e-4b89-b186-a1ab551e3744", "sighting--8e3dc1bb-0c9a-4c07-8ba2-7f34b501b03a", "sighting--e105844b-8cbf-460a-85a4-ef8061b3a212", "sighting--823fa7a3-49d0-4790-8b5a-e6af314795cf", "sighting--71a4e5af-fac9-4647-834c-fa15bac5597a", "sighting--9490cee9-a97c-4877-abc1-21cdee6efe82", "sighting--5603f446-28bb-4fd2-a6c2-cff6dd31c0de", "sighting--fbd965fd-a437-48ef-a1f9-dd7d83c96131", "sighting--f13c3051-cecc-41bb-95d9-5cf0607f194a", "sighting--a5f806e4-75ee-4134-ad21-4a42b2998ed4", "sighting--d431be79-18d2-46b8-a027-90239665d331", "sighting--6332ecc4-a40a-4480-8989-d489921e19f5", "sighting--5d25e9db-2034-488d-bb2f-cbd453447398", "sighting--c46bca97-2f5d-4139-8f23-b8bcd5ef65ff", "sighting--0032b8ef-4e68-45da-bb1a-02f2ab9c7ec5", "sighting--401f6336-498b-424c-98de-41c1beb976b1", "sighting--0eace00a-de55-4725-9ae9-cbbf3eff674a", "sighting--8666d575-11ae-4363-b9df-4ce1a14034cc", "sighting--65e6e198-d665-42de-aa5d-721b3eebd7b6", "sighting--969df5ec-d491-4bc2-ae91-5fcc1eb83a60", "sighting--d2a35ea1-10fd-4e89-a4b6-d863a6991cb4", "sighting--53b06f9b-db90-4970-9c30-db8c8bfcee9f", "sighting--d8231047-0171-421f-b7cc-4a78fb81ffca", "sighting--d2ae1e8d-8201-47e0-88a2-b0bdd2b2191f", "sighting--c3d1d457-bf30-40f9-a7ca-8c79729ee804", "sighting--bcc84c76-ddd2-4041-bfd1-f87054da3913", "sighting--d931e7c4-fd5e-4de5-840d-f8433ae1e042", "sighting--c96be79e-02df-43d2-8482-40ed7b1c6046", "sighting--5169d780-ea2c-4d76-a29d-110181faabc2", "sighting--dadb5c54-9b26-47d9-a203-5529981be2ac", "sighting--c00fe1a6-cf59-4ef2-b015-a8abe34fa252", "sighting--987e64c9-65c3-4df3-8cd1-19dc4f292e05", "sighting--ecacbe15-6cb1-454e-801d-a4593aa420af", "sighting--85a191bb-dc9e-4e3e-987b-fa6554408e0a", "sighting--908aa756-fcb0-4c2b-80aa-d8b009214a0d", "sighting--3d64b6ee-0a24-4909-9d39-60bebf53bbce", "sighting--e8d3ecfb-79a4-4ec4-9c02-470b95e49ad1", "sighting--6432095c-43c0-4bdd-9d36-a2d5ab6a7119", "sighting--6dcb2a33-27c1-4c0f-80bc-0e57bdcfbb97", "sighting--606135e1-2394-4ffa-9cab-d6f5f78938c5", "sighting--c2ffb110-1903-45f0-a04c-8654c937e7a2", "sighting--3923126b-f1d1-4141-b151-beba6c9c46a6", "sighting--2dd2d370-ff73-41ed-b89a-9e799f9fbc71", "sighting--0d7b4334-7f0d-49cc-97cb-ff33d002a566", "sighting--ac516e24-c2f7-4c38-8b13-bf074410ac82", "sighting--5c754eda-0af1-47cc-be32-2c17f92440e6", "sighting--9a4cb5ae-5503-4e4f-b3b3-d47250d1f166", "sighting--faa5860e-3afc-416b-bb9d-2f39b9667e97", "sighting--99e3ed70-d66c-45af-b811-8c052fb30c24", "sighting--df4b8fbe-4366-4642-9a34-6eea68404645", "sighting--63030ed8-8760-48bf-a125-b4d87b4d0eeb", "sighting--1671c27d-47ec-450e-93ab-c514fbb7bced", "sighting--4f8ed713-db28-4827-8601-9baf9ed149c6", "sighting--9c65059b-d430-40e6-9e22-968cedfba9ac", "sighting--066d1d41-a6f6-49a4-a016-5ef037ba3403", "sighting--24db622e-fb65-48d7-b77b-6ecbdb3b9d9b", "sighting--71983a34-53db-4ca5-be47-0eb4b6ed5483", "sighting--56a12a90-a2e6-4f9f-a8c5-525a9f63b637", "sighting--ae9e7aca-2b08-4d3f-84d5-3f21af4401ab", "sighting--c5388b0b-b955-45c4-9855-6c33794c24cf", "sighting--923ca0fb-722f-4c59-ac08-2782c7f9d7ec", "sighting--22d4d3c7-7793-4559-860c-e21d8df6be5c", "sighting--933d33a2-488a-425f-8da6-ab63c14f9b7f", "sighting--58d58439-9217-4108-be81-0ba226ecc013", "sighting--c67d3800-a4af-4b37-b215-66c3df9aed25", "sighting--4026afb7-5c20-486e-8f45-7c73c1c6529d", "sighting--75df7b1a-364b-4f7f-96f8-020e5f5fdb6f", "sighting--d0974f0b-acc1-4aab-9577-85408b6fa923", "sighting--215a2e76-ba49-4f3f-b4a8-9d1ceab2d94c", "sighting--eb163e7b-e56d-4e22-b44e-bab0b0154fac", "sighting--b32c2816-d7da-4a86-b170-d61bf2722d88", "sighting--1e9b966b-dd31-4cc0-a947-d46a2bd89317", "sighting--c3575d05-acb1-4158-8367-d6e25d1435a7", "sighting--6a7d0e24-0c62-492f-a5e0-9248fca42898", "sighting--710f7609-b1d9-4896-a147-db63924fd62e", "sighting--ec3a736d-ed12-4a83-baa8-3f30203b36a9", "sighting--31ae1157-d01c-42ad-8a55-5344aba11605", "sighting--a91eaaac-f512-4761-925b-cd88bff94f30", "sighting--92d8b693-c1e2-4fd3-8277-c512ea3816fc", "sighting--898edeaf-0296-4b72-9882-abd7d3d1faf2", "sighting--6ee838be-1055-40ba-bc46-9a5cf44177cf", "sighting--988fafa0-3032-41d6-b899-2c96aa62484a", "sighting--e3449b97-292d-4e7a-b6d6-716f5925509d", "sighting--fba2c0b8-1383-4745-a20a-b656c27c57d2", "sighting--3511b737-1541-4ba7-8b75-b22cc9b78bc7", "sighting--bbee106c-136a-4b09-a3ca-98d01320c88c", "sighting--df6ce8e8-484f-4b94-ad19-b8b578d72801", "sighting--6958c874-01ef-40c7-ad99-41797622442d", "sighting--b7dde32d-53ad-4bf7-ac15-e1090072eaa7", "sighting--3823fc62-917b-40e3-9f13-fa79f74e296a", "sighting--764e6867-6842-4b74-9ae5-1c22903c4ccc", "sighting--466464bc-ec39-4d28-9b04-31b8b624218c", "sighting--dd7fbce3-c0e3-41da-8742-dd57f8fd265b", "sighting--a1fc4972-2270-4fcb-b75f-a545ffcd7963", "sighting--361b534c-5c97-4960-be0c-0fc90a24949f", "sighting--d3086e21-1b53-4f48-850f-28777f2814df", "sighting--e3991a1f-e5df-4a8a-b0e2-5113f095a222", "sighting--4feaa37e-8559-406c-9bfd-58a61d32f619", "sighting--d4c7ed4a-0586-4bd0-a5d5-ccadc1d9b06f", "sighting--c69e3411-8cac-4a53-8fa3-f24b47e3b820", "sighting--f4ddddf1-20d0-4c04-97fb-9ff6856b12ba", "sighting--abf93629-5385-494d-89b2-692d5d92905d", "sighting--71cf128d-ef36-4c1f-b1d3-5611d202c828", "sighting--dd2f7ab3-0cd1-4bfa-99c8-b31d455c8cfc", "sighting--b99fe417-60db-48e9-bb37-b6a8542193e1", "sighting--0241d41d-4ccb-41d3-b725-0b3ee5bb7eba", "sighting--d87ee6b9-bc04-4ff5-a66f-983f4d7aa890", "sighting--228214b7-9ba1-42db-b58b-3816eff2bf1f", "sighting--b67dcdb1-dfd0-4d4d-85b6-086596770034", "sighting--29b90034-4833-4c1a-8d6c-34cd23233540", "sighting--a393ab74-62e8-446e-93c0-d28e482b4b31", "sighting--be2ed972-ec72-4c8d-8367-ceb087f8fc97", "sighting--0c468972-72df-4637-b933-b7b7e5e8680c", "sighting--7bb6f441-4b50-4a55-a1c5-d8bdbf9e3d63", "sighting--46461659-5c82-4ff1-9896-b7fb22423cd1", "sighting--da1f715f-01d1-49ea-8643-bb562cd10657", "sighting--636549eb-3d9e-46d2-bf1e-ecc29738b20a", "sighting--e194deec-5b81-41dc-b7ab-f93ac7c911b5", "sighting--529ba9db-2936-4f4e-9558-c4c2d9bb7338", "sighting--fb396c60-ccae-4436-926c-17ed453d5d4a", "sighting--b411b302-00fd-43f7-934f-4220fc8c26b0", "sighting--80b68362-3515-4645-8c92-d30b923252c8", "sighting--7371b04b-1e1e-45df-a854-df570ddd14e1", "sighting--4f069c1c-4d06-453f-bb7d-37f008c8b992", "sighting--d2a6731a-a5b2-4195-873f-d738a6c7e127", "sighting--4870331d-44a7-4294-8d41-e5c2760f11d3", "sighting--61f39b75-8f43-410c-9d27-16f68aa56902", "sighting--0cf536ee-afde-41dc-9d7a-62797586b9ef", "sighting--6a773c3e-4d72-4827-9bd7-1467761c2259", "sighting--8799cb71-bc07-4959-b24a-3b48293b5024", "sighting--9963d1bc-21c8-42bb-9c3d-7a9a3366c064", "sighting--f8eef518-768c-4c32-8f0c-e40b8e6b3480", "sighting--adf0c6b7-9ccd-4275-b4fe-0cee4289563c", "sighting--c8fd5297-5bfb-42a1-9bbf-1d9096f3c623", "sighting--b8022136-4aa5-47b9-8813-27049070b65e", "sighting--32948913-913e-4fa7-b944-43739dda2d03", "sighting--ca24f0f8-cb06-4158-a091-243e03615993", "sighting--ccaabc1b-4639-4d4c-ac3d-6e22665bcd75", "sighting--68d8ba29-a2a2-4633-a0b3-ccfe9c8bcc8a", "sighting--b8f8ef7b-e564-4b5b-8e4d-c3c4853c943b", "sighting--b391d740-3eb2-4d05-936b-fa9d6c4c851b", "sighting--c49eafa7-d9ad-4482-8432-d7e3676c5d48", "sighting--5575674b-3c5d-4943-be19-7388f8960caf", "sighting--16d4f6c0-d64a-44f1-b4b2-340eeb996d38", "sighting--e4ea85fb-d66d-428f-a649-feea674e9958", "sighting--621c12b5-b1a5-4522-bbed-346372489ed5", "sighting--6e48b054-3c53-483d-abfa-53d33457d65f", "sighting--d5008c6f-12fd-47a3-ad81-8aa6f0237114", "sighting--050bf3eb-b58b-46ae-90ac-9417cb8b3e1b", "sighting--62d0bd88-cb2c-47a7-9add-8bd70fdac015", "sighting--8885d53d-319e-4b93-81cd-202704549327", "sighting--ed5dd209-f9be-4d4e-a5d1-dec47a785631", "sighting--d53aa492-8556-4c3d-8679-3ecdd2d8e9dc", "sighting--65ab1288-9a84-4130-9c74-0d9a3690da5d", "sighting--21816329-4454-4e85-ad7b-2ecc51667715", "sighting--76a4bdb7-4bea-4260-aec6-62e874614822", "sighting--92318b56-77e8-441d-af80-ee83af8482e9", "sighting--482d6620-41cb-4b1d-8677-3c3e44a82d92", "sighting--102c4594-6a01-4787-9c5d-d159daad898a", "sighting--774df475-abcd-4f23-b4bb-9cbd3c72d2a3", "sighting--1044cf73-f3da-40d2-89ad-ef549baca2b9", "sighting--f003dc3d-86c8-4c89-8586-7b1a64fb7391", "sighting--71fbaca8-604d-4439-89f0-a5df1ebda7e9", "sighting--71bcf2f9-8664-4ada-af1a-da99ca1305e5", "sighting--da1ec93b-60ad-44d7-9299-6294ac8b38c5", "sighting--82747b59-ac21-4a23-9b63-9e2e468c0b67", "sighting--bec204aa-4311-4338-846c-ad2199d45010", "sighting--0a27faa5-a2f9-495e-a64c-43f832383951", "sighting--d89b84f2-4748-4010-a110-76f037d7e6c9", "sighting--5fb023ce-ec33-4b60-bef8-9a8f40569d62", "sighting--e86d1b1e-b9a8-4854-bdcc-2ed6c7921873", "sighting--45c4bcfc-14f3-499b-843d-f0ca1758df32", "sighting--fd9dd407-f7fd-4dc1-a55d-46e7239587af", "sighting--d327aa7c-3bb3-4707-8758-aed27d3ec66d", "sighting--1d3c0002-2975-4906-a3e5-c8c28d734b3c", "sighting--6b05dc89-d126-416c-976b-4e5b7963002c", "sighting--379d42e4-ebea-4004-a9d3-e1c06e40ccf2", "sighting--dfee1b3e-af85-4821-88ea-42dd5c75db78", "sighting--91c5b31f-fe51-4ee3-adc5-5e113d51d074", "sighting--f74a6402-cbb5-4746-be88-6f4306b3bae1", "sighting--a59ab30e-c017-42eb-a222-c1e006c64a7a", "sighting--e73a86d2-4112-45ea-9a35-a5d4a7cee032", "sighting--90eca8c7-56a7-4a8d-9ffc-4567b16173f6", "sighting--8086b5ad-1995-4c00-88d8-2732fa4f6a20", "sighting--302a33ae-0b0d-4a77-be5d-136eec6f2e75", "sighting--776b0e83-d5bd-4d22-abb7-5b17ec30c9be", "sighting--25d6352e-a8f0-4079-932c-30d81b4af6b3", "sighting--f25e6dbd-7ed2-476b-bc5b-0e788d29b5a3", "sighting--e05afa68-8ad3-4967-b51f-35ec922410fd", "sighting--1190cef1-c896-4454-9f5d-d89d9f4108ec", "sighting--ee1ed31f-f6cf-4c4a-848e-a320399a0762", "sighting--235b75c1-c6cb-47fa-bcfa-345191b5781f", "sighting--24b95bac-8e79-4a7d-ae87-a939066a5980", "sighting--90b9c552-569f-4644-b0ed-e0d3629f81fb", "sighting--85e7c03a-a225-466b-b7ef-181bcea9c7a1", "sighting--8ce487c7-8e4b-429b-b8a7-791c3c6ac4da", "sighting--427ce7c1-af2f-4926-8595-5a9b7c9b4e4e", "sighting--66234887-ccdb-4860-9735-6e5f5b0bc4ad", "sighting--7c2b241e-af98-4635-9b3e-72e389fa2d0e", "sighting--911815e4-89a1-40c3-9209-382318e67c58", "sighting--153a94ee-3eb5-49f8-8b46-19d96aaba2f2", "sighting--77f18573-3cd3-4e2e-a1db-3c86b8db0934", "sighting--ad98260a-f9fc-477f-a68b-2d8d86e27353", "sighting--260cdf5f-89e2-4033-a762-fc53c3f0072f", "sighting--27d45885-70bf-41a2-8cde-e7515375c9b2", "sighting--4ad85186-7296-417e-950d-cf698fc5d4cb", "sighting--d70fed93-24bd-4bff-8476-05333914605f", "sighting--21a2e578-79da-4992-9a3a-2dbb0db2fed8", "sighting--b3b135ec-771b-4948-b413-f96a44b5d718", "sighting--a9d5a485-337d-4903-ae7b-8d8a75e2cb1b", "sighting--8493dc03-3e11-4204-843b-e4755d2ed9a5", "sighting--bc5f844d-d7ee-43c1-bd4e-f7a8b8f652fe", "sighting--8d7816a7-1fad-4614-bc5e-d58f71835183", "sighting--1c019239-4728-4891-b115-b413b00e136d", "sighting--804458de-5dd0-44f6-9bfa-ad07b56af4a2", "sighting--d58585bd-7e01-4223-a7c8-6625b4593eac", "sighting--4b2500b4-38c5-4628-aef2-4d356b704d48", "sighting--cd94340b-c612-4323-9908-71150bb4f30b", "sighting--b4e11159-490e-4d03-b65d-925472e79e14", "sighting--4817babc-bca2-4fe1-b4d8-fb911042834b", "sighting--d9eacd8c-fd95-4ec6-8b1d-affa2689b642", "sighting--46a3e9b1-e712-4d87-a76c-ba8c99c60dd4", "sighting--89220cfc-4d63-4bc0-ad8c-3b402b868f0f", "sighting--f2a3df0c-6859-4a1f-a8ea-12f77a16cf92", "sighting--0ff8ce4d-127d-4482-9554-8f336f7162ea", "sighting--0ab5829f-0a26-46c8-91ce-d358b287b9f8", "sighting--09cb9a58-1a53-41d6-905c-bfd247a99f06", "sighting--f1c7596c-c0ef-49ec-aed3-514614241047", "sighting--b6e9fc47-817b-44d6-a3e9-5b224c85262a", "sighting--ceb43803-500e-41ad-98e5-409b282fa03a", "sighting--c3c7995c-3d13-40f5-8519-ae085a3ba2c8", "sighting--fe096d89-a25d-4ef5-8dfa-231e87aedaca", "sighting--b6dfeefd-db70-46a8-b966-34c6a2e1015e", "sighting--10d34ef7-8030-4c16-86a1-043871c5d8ff", "sighting--9e97b7d7-72a0-46d0-8839-97317fea259f", "sighting--b8f2e996-13dc-47c1-956b-5ae776f6a9b0", "sighting--38656973-53f6-4ebc-b280-957f907514d1", "sighting--178fd1d3-db99-4ec3-8759-d408d1f1c6ad", "sighting--a716e839-d704-46b2-9c73-0a5355c503ea", "sighting--eee56a64-7ae8-4b39-b208-80149c2eaa99", "sighting--8c8130fa-9436-47e4-aede-84aedf9c3e88", "sighting--4693bf11-63cc-4877-ad2c-facce58f7aa3", "sighting--a64d69e9-7b89-4db9-b100-df62a5e991ed", "sighting--0a8fa8cb-7f13-441d-9209-027996bc3513", "sighting--46892967-9ed7-4cbe-b16d-8bdef66bfe6a", "sighting--28a965c8-0e2a-4165-9366-8f1a5d41aa19", "sighting--cae9bb14-b912-42c7-9f6f-b9f963ba9f69", "sighting--35d105e3-2e86-4eb8-b700-2ea8943997c0", "sighting--04705fe4-0628-494a-9fac-8643a8adc592", "sighting--c1d30b5b-f7e1-467d-9a97-3f2be3a0297e", "sighting--bdadf99e-a222-4ebf-ac09-4c473892ef7d", "sighting--6ae1eb07-b4ef-4420-9688-62a739444d93", "sighting--1391b72d-4fc3-4809-a271-bd0aa2e3180e", "sighting--32917bc2-6c40-4432-be3a-4dd8e74e392d", "sighting--973e0f69-d3f3-4efd-8f88-af6e32ee1266", "sighting--768f5d64-4a0c-495f-866b-d91499bd542e", "sighting--1b6464b6-aaaa-4722-b3bf-9571dd50d6ff", "sighting--8b9bae4c-8e90-4130-8d24-a84779749154", "sighting--f330ee1e-3c22-4581-9333-f0cfc2a2d361", "sighting--4eb2ae7b-dfcc-4be0-9b1d-36d47c0caba2", "sighting--a5cafb6f-dba1-4f3c-a450-c8e91fa82dd0", "sighting--908565bc-c6e0-4184-ad54-ae76ad7b71d5", "sighting--fc395756-34fd-4bee-a14c-9f8c09d64a9e", "sighting--045d148a-38a7-480b-acdc-109d3b11fbdc", "sighting--e2c62616-ca47-4a11-8b3f-98a0cdf73c1b", "sighting--a8c46734-9a1d-42f0-9ce0-f4dbf55d6848", "sighting--ede9f568-79ab-4164-97af-7aa603a081ce", "sighting--bab52359-175d-462f-a50c-4696fc21c2f2", "sighting--da7a55fb-ca45-4350-86a0-6022f498dbad", "sighting--be84e183-e994-4d89-acee-d8b6109201ad", "sighting--bb725fbe-c7e6-48ae-ad10-32ed0218ed89", "sighting--f62af786-62af-477d-afcf-267510acb422", "sighting--dc1ea3a6-ef77-4988-bc17-92b3f437d0ec", "sighting--02f358e9-1653-4368-910f-455a82a54097", "sighting--e6378f44-80a1-41b0-87b5-a5848be2656e", "sighting--58868c5f-e320-4eda-925c-23d6b7989d10", "sighting--db7e6711-1220-4a11-aaf3-f23d3e902c19", "sighting--12a652cf-fd3f-4a4c-ac73-7bd86860b11c", "sighting--d1f0a272-bae9-4139-ba34-1d7c3626e844", "sighting--dec3b4c0-df80-436a-936c-b5c136b89758", "sighting--40c52554-0595-40b1-9459-5673aa4a7c12", "sighting--3c03313a-3e3a-4537-bcd6-a2bcfca76810", "sighting--16348b89-0fca-413e-972c-cd39639d99c6", "sighting--a1ee07b0-ae62-4124-81bf-073736172393", "sighting--8194985b-dc86-40ba-b7fa-953cef178ac3", "sighting--4a0cfc24-bfcc-4dad-8f31-af7453ecb64c", "sighting--5742630d-00cc-4f76-be3f-a5b8ad480a41", "sighting--cad83db3-ea9d-43a9-8744-160695632622", "sighting--8808b33d-afbc-480f-b39a-298f2a1a04ae", "sighting--11af4213-4c93-4781-ab25-eebaa069f570", "sighting--8ffb5273-207d-4811-a7ce-2071a6017fdc", "sighting--b1df3619-88a0-4491-bc75-8e7294f904c1", "sighting--4ac1b8a5-616f-4aee-80ca-1052d8ea99c5", "sighting--a0c77412-5a4f-4bcc-98ec-4c1e0b23d452", "sighting--509a8202-729a-4135-b8ae-94fe4f113139", "sighting--dc45c74a-3c50-45c1-97ac-8c2e68b9fb7a", "sighting--ed6e9f60-3bff-4d67-be51-16fa28551db8", "sighting--7c2c57fe-b43a-4612-af4c-c02df4361abd", "sighting--8147f06e-2a7a-40a4-95f2-e14aacd2d497", "sighting--c0915dc5-d22d-4ff8-a79e-a82176d03b88", "sighting--2c896190-6f6e-4712-b7af-1e9d50a0e22a", "sighting--3d0f18dd-d854-482b-bf7c-ba37f22bf567", "sighting--2343ed63-84ec-4a03-847a-0aa4e41d1e40", "sighting--f12bede2-4c6f-4bc0-a970-d4dea8048502", "sighting--0770bc48-5ac0-4ee9-8a96-af19978525df", "sighting--c705e53a-d872-44ef-a7b0-a6282e7acda5", "sighting--66fcdeab-21f5-4ac8-bd85-dbe256d14fae", "sighting--b97b22b1-14e6-4574-965f-dbdeba6977cd", "sighting--8388b35f-a67e-4444-98ca-b22c70794a9e", "sighting--966d5b0d-be11-40a2-85c6-7583c0b4333e", "sighting--78ec1f14-efb8-4842-83e0-36ef7f6a9f54", "sighting--5237f58c-c4eb-443c-8853-1397ad250856", "sighting--af4a85e4-044b-496d-b25f-32e7909d001e", "sighting--031484df-96ad-4619-b173-701c5eabb48b", "sighting--8f1d04b4-94ca-48d7-a46a-dcc12115d81f", "sighting--9d6f11af-93bf-4417-a121-c375e53511e7", "sighting--36954c28-26b7-4fd7-b264-ef19aed7d139", "sighting--609696f3-d98c-4e64-acdc-1c359d38ccc5", "sighting--e4cfd98c-93d7-4a22-85a0-2efd73a0eccd", "sighting--19975176-b3be-429b-8eea-02841bb9fc1d", "sighting--b31c8349-65ef-47dd-9d80-21baf42978e3", "sighting--bbc4a4f8-3a46-44f2-9f6c-e2310133a7ac", "sighting--e4baf741-6936-47f1-af3c-ec51071e9576", "sighting--b7fff443-d39a-403c-9b56-d8b9a2194215", "sighting--caaa0ce8-5cde-4e9f-9f40-dcffb642201b", "sighting--433c0cbf-a590-4156-b3b0-e6e99d42a35f", "sighting--ff3cde05-7262-482e-92f8-35ec0dae1b90", "sighting--471565ce-11cd-46ee-9c01-7c6fa83d4f51", "sighting--9881c8b9-f240-478a-8f5f-213e1617c42e", "sighting--27240390-efe5-4b7c-9e7d-b40bd0d77033", "sighting--5c837740-31f1-4735-9fab-e15de4e77fc6", "sighting--c2561509-e00e-47b3-9dc0-8a5c90042c2d", "sighting--eadf34ff-37d8-4c7d-8bda-29d7a0318b96", "sighting--cdb30aa3-c2ac-455e-9d12-dc42bc82dd2c", "sighting--1ed93066-915c-49da-91c8-6c4e1046940f", "sighting--f62cb7ff-f2ae-45a1-9863-71e18e963b4e", "sighting--14bed2e4-a46a-4b2b-8856-3e1607e6be9d", "sighting--49477a58-9dab-4f66-8f8a-4ec074c64d3f", "sighting--7d59f661-11ed-47d5-9fd4-96d4409a5adf", "sighting--86f99cd6-b59f-4776-9144-2ed6b5ec5391", "sighting--bb145db3-892b-4fa1-b90f-f0706c5cbce8", "sighting--5ac4d1cf-ce3c-4514-9837-68a2d5691819", "sighting--5cff650b-1e25-467b-895b-83c8a57887d4", "sighting--648f543f-434d-4122-80c9-d155f504aa24", "sighting--5add4c71-bf1c-4b04-9c21-1b5be91526d1", "sighting--cfc62b36-6c74-4605-a591-9733b1ed1416", "sighting--f9b4dfb4-82a1-4844-8fd4-1d8940341f41", "sighting--63a95ec5-942b-43f0-8b62-b506c60ed927", "sighting--4a204654-0aa1-4154-bb7c-0f86c00a5ccb", "sighting--d322a3a4-14b9-4236-9dfd-e9a978f861ab", "sighting--6ee9cb9e-d90f-45be-8b83-ee34d786abb4", "sighting--ca5a98b8-1b33-4026-b78d-a739e058041f", "sighting--93a040ce-b19c-4c4a-b30d-cd94afe998e5", "sighting--ac3ce51c-5121-4050-958b-935427e86a8a", "sighting--620d94c1-e963-4250-b1b8-cf398f38d463", "sighting--d706a0c6-ef65-4639-9ebf-4b1af1811c86", "sighting--d54c5683-67a5-48c0-af1b-fe7e6c55aeeb", "sighting--909e1abc-e9b6-45b1-b3f0-261e95a3244c", "sighting--b5fef491-6de9-404a-9b2c-456a2cdb7fa0", "sighting--00e5060e-ec2e-4b49-9616-1d3392b4de4c", "sighting--44896e9b-7f23-473e-8002-9495d6ac3105", "sighting--ef260056-6414-4ddf-b38c-f0493faafcae", "sighting--3427308a-f7be-43fb-a0ee-96a703d12aff", "sighting--c7ac6499-2f9b-4929-b46e-98767135830b", "sighting--9f7d958c-d058-4ba4-aed3-5032e60fd1da", "sighting--f0bbf794-7631-4d7c-bca6-e371632304e8", "sighting--05d5ec7d-b0cc-46c0-b04e-a9c1403abea0", "sighting--febb7d66-319c-4544-a0fb-68e702d8bce4", "sighting--2877e8ea-dee6-419b-b096-9655fbe38292", "sighting--33d2c025-6da0-4dc8-b74a-8e528527133c", "sighting--c0504b96-b9c5-4993-a225-4f0384ba7542", "sighting--ba26a893-1019-4f5b-9f51-4f42ce57a700", "sighting--a8df100e-96ab-46ee-83a6-57cfbfb602ae", "sighting--83fb6b3f-7eda-453d-85d0-933004bdffec", "sighting--a99af156-b9c2-43c4-8063-59549149dc21", "sighting--f0ad16f7-48a8-4b39-a611-4f77bc9a8ae8", "sighting--14a0efca-503c-4583-9b94-2ec62d268539", "sighting--719341c7-fc73-4b93-8c68-4673e1e99486", "sighting--4f87c3e1-1d9a-4f5f-bd3a-fd769c312086", "sighting--e37e8232-898f-41f3-b217-ebec77d867de", "sighting--51810222-81b2-478c-9696-ef0bccebcf0a", "sighting--25067efb-99f3-4317-ac07-cfa47d4cacc2", "sighting--f48fa213-3759-40ec-a81c-34947125881b", "sighting--b415ef73-a35c-40c9-99fe-b6730cd32906", "sighting--a8994d2d-fb62-45b9-a06b-022465113e82", "sighting--0aa5e1d3-f677-4f36-abfc-ac25f4fe4229", "sighting--600ad08c-2984-4acd-8bfb-e9a99737d333", "sighting--dce1bcdf-6cfc-4d9c-b56c-01369964fe43", "sighting--84be9688-077c-4677-99fd-22be507efdbf", "sighting--8a6dbf2a-1654-4103-ad5c-c616578c6c61", "sighting--36265f8c-86e8-41ac-8b57-74a93302f768", "sighting--e187da00-693e-4742-9e7b-17296f545b2a", "sighting--d209667c-c76b-4091-abac-515ecd23e9d5", "sighting--dc217495-22c8-431f-bd71-98c7f7fc26e8", "sighting--22a8c2f8-7685-4fdf-ac93-84c6433115da", "sighting--c3b66099-ccb7-4358-8ced-ff6faac32f07", "sighting--592aa2f3-3ef0-4f50-975b-0259dfc54208", "sighting--3917c031-eee0-4c39-adc6-a591c5e25c69", "sighting--a96898ca-1b3d-4bcc-9f91-c828d2de4ff7", "sighting--1b2bd9b3-9b3e-4407-8405-635f36525cb4", "sighting--641598eb-634e-4ead-aeff-316b7ada44df", "sighting--1e18e31f-0a55-4557-b7c0-45b3e0bb2a3a", "sighting--8e3eada6-fbf0-45d5-9507-8b914efc1073", "sighting--85798c0f-3d3f-4316-ad6b-d61fdc6cf9ac", "sighting--4c65c3d4-7d37-438b-a797-747e4ccd6f30", "sighting--4b489f35-73f9-424c-bca5-05b140d2691e", "sighting--073ea5b3-24f2-4868-be98-29419717d544", "sighting--2f7e4f37-f68a-4cba-a61e-2ae2f8f81f9e", "sighting--67c18421-457e-4404-bf5a-04da8228fe2f", "sighting--d958b590-5b18-41b6-bdbd-c2b57d0c881c", "sighting--42002f07-85ec-4b11-92e6-9b67bc5f7e96", "sighting--93f5ec7a-749d-48e6-82e5-ef93f85c3217", "sighting--75d976a3-5da5-40c2-a96e-14dc34fc5b9d", "sighting--63b0858f-cda7-4e69-84e7-cbad14f0c1c5", "sighting--0ecf7b45-e67e-43f5-b6fe-de122bcc9e5c", "sighting--701e844a-4ca3-4bb6-b00b-784ec1c7dd83", "sighting--7ab72568-9f79-4550-abf4-f7163d4e8ca0", "sighting--ced853f8-2362-42db-9ec7-334fac08f10a", "sighting--76dfa96b-994f-4531-ae63-186b39b41fb1", "sighting--4e1bb18e-48ae-45fd-b63d-054e8d7cb215", "sighting--5ed9234f-9ddf-4f48-b538-192f2335e48b", "sighting--4c7da14b-6ee0-4337-81d8-0f846a851839", "sighting--604516a9-1dc3-49de-955c-5cd2c630ebbb", "sighting--72f0b29d-ff75-4cf9-a7ba-55d5ddc55621", "sighting--47ca3954-c7b7-40f6-beb9-aa6e3de9accb", "sighting--fdf54fa0-8f6f-48b6-9d2f-74d1a4e082fc", "sighting--042595a4-457b-4245-ad2c-8d4bed877798", "sighting--5d5ecc73-8df6-49be-a6b3-d2fd2878dbb9", "sighting--49672353-6e84-4357-b25e-3d5580c2e805", "sighting--3f882f64-0d2b-4ae7-afaf-0e9a5fe38bd8", "sighting--e403d933-edc3-4ea6-9799-fb9750f73eb3", "sighting--385d8f23-4b7c-4416-a323-c6d59e4a2c86", "sighting--1c61514e-7842-4503-a188-2da2f3225b5d", "sighting--f57906eb-b2e1-4f7c-a87d-52bf73c7f1d4", "sighting--e046b65b-083e-4785-8ee5-e48cd652210c", "sighting--c24351b5-9005-4836-8940-010721997724", "sighting--af5783d5-24d4-4496-93f7-d230631dcd8d", "sighting--e2ce4ac6-d39a-4d25-a8ec-22dcd56e96b7", "sighting--3645b44d-ca30-42a2-9039-4c0bdd86b649", "sighting--581e503f-954f-4e89-bc08-558845b9bf9e", "sighting--654b7b8f-ca88-43e7-829f-be77e8c7a786", "sighting--a9be39bc-2a42-4bf0-b1bb-ceb4a929de12", "sighting--f3fbe7a7-e8ea-4382-884d-c815cc9a4e2c", "sighting--5d762c00-cfa9-4f2e-9a24-469febaadcee", "sighting--a6abd109-2c19-40d8-b3cc-6765df77b28d", "sighting--96e63463-61e3-40c6-81be-63ca17c43872", "sighting--4943947b-6cce-4acb-951e-605e886ea27a", "sighting--51fa701d-06e6-4dbd-a176-489d799aabb1", "sighting--e535b99a-1222-4c97-9290-7942e37ffc75", "sighting--65dcc307-efbf-42b8-97e9-58b161bc4c18", "sighting--5275dcbd-7e49-481f-931d-ac9712113779", "sighting--30c5f915-d622-4bed-87cd-783362947727", "sighting--88852168-63e5-459b-92ef-b914dd0e7560", "sighting--98dfad5e-c5d5-4874-b0bf-b95e59b93603", "sighting--1d440730-1a10-471f-aa31-984bff4b43a7", "sighting--57787505-ca1f-4839-8c66-339e99c93c6d", "sighting--b4b6ddd7-d23d-4cf9-9903-f9faedd5379f", "sighting--2861e634-6e48-4e72-8d0b-2f1a7c5b3114", "sighting--4fab7113-4a97-4107-8dc1-a080a405f8bd", "sighting--4866806b-16d8-48a8-9aaa-eb1144893be6", "sighting--a26cf66e-1850-4e82-8797-a3f7f7142f02", "sighting--b6b47342-fba1-410d-8c78-b5f1a45a6eb6", "sighting--efa9716e-93fa-414c-8054-4473d501d837", "sighting--d07a95bb-c574-44f3-ab07-c74571dfdcf1", "sighting--5f1a3743-41e5-4a68-95f2-98d2b63c52ad", "sighting--5cbaf6a2-ab44-4718-9987-c8f8c9d49f94", "sighting--1394623c-bf7a-4346-aaee-4ce5f58f9b41", "sighting--eeef4422-1704-432f-828d-6d431ba5c0e8", "sighting--e2d47fa9-7f6c-4d82-ba05-6d800466fa58", "sighting--71a0b304-56cb-4b4b-9fb3-afdbeb4da503", "sighting--23b5351b-5641-4ace-8f8e-8c65d5f6173b", "sighting--0b950f39-56e8-4791-b644-4f4d59f952c6", "sighting--91ada9f5-fedf-4042-bd09-d4e06bcd59f5", "sighting--ac083e6a-7cdd-4535-9821-a0e34266c6fe", "sighting--a009b367-18f0-4af6-ad92-23790b550af8", "sighting--3f516c5b-1bee-4ac8-b0e5-cdaa3c2f9d6d", "sighting--9f8bc2fd-2900-46d1-a04e-f8812eb7c336", "sighting--20b0ee0c-4e06-4f76-a69b-e433c61ec6ea", "sighting--91a7ce6e-b622-4803-822b-d8e8a88fcd91", "sighting--893c36c4-a247-49bb-bec0-44033a4e2284", "sighting--18a717d3-e70d-4fa1-b3c2-7c460eec14a1", "sighting--37f68ea8-d224-432c-b6e5-9b780687ad0c", "sighting--5ab40a02-1a32-4772-8a34-2967373944d4", "sighting--c9197d97-6296-43c4-be93-15a63d530a4a", "sighting--d2702f83-3aef-451c-8e42-e0abc8e486c0", "sighting--418ca7b6-87c2-408a-90c2-08882d68fa7e", "sighting--93f1d2bd-213f-443e-8143-0b22ac4aba3b", "sighting--a20c61ba-d9a2-4923-9f70-e6291b0c0256", "sighting--28badea0-83a0-4b5d-834a-7beedf98323c", "sighting--79277639-918a-41ab-80a4-67742f20e1a6", "sighting--49b5f55f-6f5e-4336-99c9-2027d1f4c174", "sighting--7d147e2a-30c4-4054-a137-cc3982621268", "sighting--c00973fc-b902-4c01-a5d6-622ecd2ddd4a", "sighting--565091ce-f5fb-4c45-b779-607055eb29e7", "sighting--98eb3d64-4db2-40fa-b235-ddbc14f2b322", "sighting--412ecfc9-f8b7-451f-9e9e-00d366c572f6", "sighting--a05e2e3f-6ed8-4d18-9c29-5a7af80c332d", "sighting--bb98c415-fb6a-41d3-91ef-7bf7a69cf6cc", "sighting--5dd18a7a-4b84-41e9-83f5-7b94595031c5", "sighting--2c5f4c4b-5c48-4087-ac4b-bf54a0d5d9c7", "sighting--626b4a7a-b473-4d07-9813-0c606029fc14", "sighting--62861c95-4928-41ae-9a42-3fc3b40cc2e4", "sighting--a1e68a45-f657-4395-a7f3-c5a3e190e177", "sighting--8522bdf9-380b-4ece-b747-a9e350c8d5a6", "sighting--7c08f3c1-f33f-460a-9176-ef888d8de030", "sighting--a02b2889-5f22-4673-bd19-ba5fb77115ba", "sighting--26a1d392-61c8-4137-97e9-a84323dcb385", "sighting--cd6f2748-3a4f-47b7-a6ea-a498ffa5d504", "sighting--fcc31b96-4a37-4b59-8213-e4b84fcb8566", "sighting--0020719d-94ea-41b5-aea4-8c13db65cc7a", "sighting--615e4917-ee05-4c6e-aecb-46d6b006c894", "sighting--665c8b1c-ae06-406a-8af0-4d8c83467138", "sighting--b95b4b5a-63e8-4528-9953-1b81e6181a93", "sighting--7b99ff4c-7623-447c-a3ee-f21800e27172", "sighting--3b762ab1-52dc-434e-8e63-d9f070011e30", "sighting--63e6ded1-c843-4c51-87c1-a8a180ffd962", "sighting--17a99eb6-f416-4e4b-a87d-77ad7cf82308", "sighting--8ec8c2c1-816c-40e9-bb68-2509402b096f", "sighting--1bbe2300-e0c4-461d-a355-1619a6ed6834", "sighting--2bb9a050-c0d8-4100-9d50-23e5a9fa6dc6", "sighting--6aa6e0c6-1d36-4986-8bd6-c159f34d1744", "sighting--f64a49ad-3884-429e-b30a-605880de94f0", "sighting--e061ee77-e1b0-42f0-a327-59c39c95f4e0", "sighting--d366ae70-0be8-400d-a51d-9d9fdd108115", "sighting--7e4ccbe4-25b7-45d5-a669-8156a05fb161", "sighting--416c0d06-8dc8-475a-bb18-0c8cf58ca873", "sighting--bb5cc392-34a7-45bb-8888-a7628b95e203", "sighting--dd629b7e-fff8-4b52-87f2-0124b93b6920", "sighting--8129bad8-3789-44d2-866b-94bd29fce036", "sighting--cd0bdcb5-8c2c-48de-8913-a378b0ecccb4", "sighting--62a38f79-39e9-4651-b70d-c0c152941031", "sighting--167de03d-fc00-4af3-9d0c-92173f03f403", "sighting--783a2b90-fd4f-4cf8-9b00-9540bd3db44b", "sighting--9453e801-2299-4e5f-88a8-48b52ccf0204", "sighting--2e2ca69f-d954-47e8-95eb-c3d5c74d3ae8", "sighting--f3116baa-3423-4250-8015-c3cedda62a81", "sighting--38ec53b9-3524-4b30-a7ea-503c46a7603b", "sighting--8f544db1-85e0-4e6f-9556-c923429d28e2", "sighting--40be602c-5313-45b3-a340-37939fdf5b88", "sighting--10e9c471-5677-4d14-b054-6562275dd4c6", "sighting--63115136-a3ac-4772-b6c8-bbef387c7965", "sighting--debb7fa3-5e8c-46cf-85fb-891e4c3dbef4", "sighting--0b39f39e-ba8a-448d-9a08-c376b64b5823", "sighting--ebb34d28-316e-4e82-8129-6a0a75838d50", "sighting--ab1d83f7-787d-4847-9fa2-4842774231d8", "sighting--b7d0c50d-c470-464a-b286-d6c699766dbf", "sighting--b760b568-c436-4f0b-8803-35d5b49413da", "sighting--24cfdf8a-e737-4d28-8cb3-5db0c8d6b333", "sighting--551ea21a-3021-4ba7-b14b-da74c4d9f212", "sighting--b0f23c1c-b8aa-45bd-8da1-453d50cd738a", "sighting--01eae118-2b49-46ea-bca4-6b51e6fdaef5", "sighting--40b0b18b-ab24-48c6-bc06-9ef10f08b4d7", "sighting--cc05bebb-c8f2-4124-947f-ccd519675ffa", "sighting--077ae464-22d0-433a-b69c-df69d575bb98", "sighting--306c3424-deaf-4a31-8100-58e8eb97b143", "sighting--eb411e2c-2698-45c5-b0d2-af6bbaa90e33", "sighting--5af5f695-7ae9-4501-8107-74140837abaa", "sighting--ef1470a7-6309-4700-ac2d-1bea2bc583e5", "sighting--04583fd7-5586-4563-b823-cd85297e2db5", "sighting--dadea97e-d136-402e-9a4d-34205ff8812c", "sighting--58b1ffe6-bf4f-4957-817f-2d4ae12017d3", "sighting--8794c721-8db1-46dd-86c1-4aa3dc47a966", "sighting--2b9fba51-d339-4016-aa47-993eb7a99261", "sighting--133c82a0-a376-4ac9-b147-5f25b824acde", "sighting--bb6ed8e2-0bc3-417f-ab94-dc480602af0f", "sighting--d5af90e7-6459-480e-96cd-d48430f13af4", "sighting--71b6d094-0d99-47c0-8522-a101ff75e56e", "sighting--a964dbaf-7fa6-4c46-80d7-1d59f89e8806", "sighting--6164b0b4-df3e-41da-8356-ac89b7391284", "sighting--44c54a30-597f-4c78-a366-152f2db5386d", "sighting--b0e41c72-7a62-4e6f-a9de-586bb8be7dc7", "sighting--53d5fdc1-0366-4b72-b537-c69d1ee1d916", "sighting--0d40e116-eafd-4995-8ed9-2e3a60b55588", "sighting--7d31ada0-8c4c-412f-8560-c6e76c8e6136", "sighting--20e54263-c7ca-425e-8a1d-de3898b8d54e", "sighting--4baa00cb-b204-415b-a760-d31d1d8cd9c0", "sighting--9a23989e-7335-4e84-8ff2-04c5f3ecc032", "sighting--6274f12c-6225-4e45-9361-61a38cabb733", "sighting--2c84fb50-194d-46d6-967c-c417052a1bc3", "sighting--7c4021c5-579e-42e1-b130-c9e9483ed72e", "sighting--0dde179e-3669-4631-9eae-fcd5de6c57d7", "sighting--ecb754ac-8b59-42a7-a035-5906a3bd47e5", "sighting--e94f2257-67d0-4768-9e18-21155efd6fa1", "sighting--1b08fa58-6d46-48bd-80c5-4e7413b963db", "sighting--d66863c4-72b3-4ca8-af64-ad55e0225c31", "sighting--1c68f1f1-f12d-4901-8e38-df1a57337437", "sighting--b5d399bc-7d0c-4593-aac4-1422d9d51b89", "sighting--3ebc3709-6a4b-4b87-ac25-ff47012b31ab", "sighting--f0198eb3-da22-4738-a0d9-c01758ced5c2", "sighting--bd4d2618-57f9-4005-936e-d021496aeddb", "sighting--42a77697-552d-471e-a27d-05fbd7b8e4b5", "sighting--6d53d106-ee02-4de0-9459-e92d4c32a1d3", "sighting--ab10ba76-26c7-4345-bf0a-91d20f2d7c9b", "sighting--aa3adc40-7a79-4408-a36f-86d60a21cfa6", "sighting--75257a32-e58b-4d76-8f92-9a214aa06994", "sighting--60cfa39c-e694-4e1d-9b40-3d2cce502f14", "sighting--1d28de1b-91e4-4e52-a8e3-0ebdb0ecad39", "sighting--0d5920ce-f72a-40b9-a5a7-1391871ebf84", "sighting--0e8668ad-6d87-4e41-a1bb-a4e6aef12204", "sighting--6bd25b0c-dc5b-487b-8f67-ee033a0211bc", "sighting--a8da8de0-2b02-4698-8853-85a6a3859857", "sighting--877fd193-1b2b-4312-93cf-93ec0d66c4e7", "sighting--abf4c81c-8092-4347-a49d-eec5359b64c4", "sighting--20057b75-f5c9-4307-ac1e-d7eaf3bbb354", "sighting--451482f6-090f-4e70-9811-3ecdf19e1754", "sighting--0ae91ff6-3b80-4b63-ba11-9f76595604e1", "sighting--84703770-916d-4390-a4bb-40bef1ad4b9b", "sighting--8fab34fa-2637-4ebe-9202-151627eddc20", "sighting--7745c90f-52d8-41d2-a8d3-7e3626a42f48", "sighting--dbd2f25c-2190-483a-8b74-9af9f209e935", "sighting--b2a39ab6-336d-4d49-86f0-d4d73c71197b", "sighting--06e8c875-796a-4e8b-ba41-0dc2a941a503", "sighting--6910fa08-556c-4223-a460-fd62a0a30f78", "sighting--76339c55-6f9a-481e-be1b-691d4efd81c3", "sighting--e6596b57-d761-4733-8b51-9bea6f3acd19", "sighting--d1dae9a9-67f2-4aca-931f-7f6ca6352aa5", "sighting--12f3eb49-d46c-49fb-9d55-5bd1f333871f", "sighting--b1b7b8de-15b4-40b8-a88c-f02a1f262a39", "sighting--6d43ebc0-9fcc-4285-83d3-dab792a7171b", "sighting--35333fee-4de7-4e97-a396-c9a4b9744fba", "sighting--90575b58-5442-4207-8f3c-90a074d53c42", "sighting--eee21647-a315-4d4d-b7f7-e9a19e599c36", "sighting--7625e3f4-4fef-4680-8d4f-f44e9bdf3720", "sighting--fe49b772-2cd6-4fa0-aa39-7a661706aca0", "sighting--1fd6a21b-3af9-4f28-a928-356356a7b7f8", "sighting--0005abc9-b07e-4837-b979-3f38110777ce", "sighting--40e96474-d204-432f-acae-db7188d17496", "sighting--c900be54-c300-4a5c-9a92-8a16b0252280", "sighting--9b5aadc3-c788-41ff-873f-6eb80d4eaa4d", "sighting--6a943106-d7ea-4e75-acf3-90cd547ea3aa", "sighting--d41b9b43-275c-4cf5-899d-4e670909fc59", "sighting--c0374dd4-d58b-4209-b8ff-185b911e059a", "sighting--3505c2bf-eee4-4763-a212-a094e628c498", "sighting--e04ce51f-8d5f-4660-8f1d-9369fb55a03f", "sighting--fbcbcbfc-a3fa-40e1-b947-4fe89af535f3", "sighting--1e7bb4c0-28de-4196-8232-18d4256ac2ae", "sighting--37b4ed02-46ac-4afe-b5f0-87e569f57ae2", "sighting--ce6f1c56-2716-45e6-a939-2ec2787c6503", "sighting--a9b556b6-f198-462f-a1aa-f85762699a12", "sighting--49e56149-d986-485c-a29f-76f7aa19fd9e", "sighting--70f98fd8-29fb-49bc-8a7a-3524d8e4201d", "sighting--b85d1fe8-474e-4f05-85fe-9c02d6f61f0d", "sighting--564104b3-124e-41e0-964b-d1a7286cbd60", "sighting--bcfdb6ba-d00e-4b5b-badf-71321f842f9a", "sighting--2dec5ad4-0e44-4ed1-99ae-09cc1b11aa08", "sighting--2b927322-c35f-459c-988b-afa9933cbf11", "sighting--94673f9c-ccda-4569-949b-8f7c2347b4f4", "sighting--72291ea4-fc86-43ac-bab5-7e216d730966", "sighting--227daabe-6c79-41e4-8521-e312d7a276ee", "sighting--3f644577-333a-4624-8437-ac30bdd15a7c", "sighting--68833c92-d94a-4dc5-9f5f-25399f372fc8", "sighting--a3438f45-ebff-4fc5-a1a7-826c44836647", "sighting--46f4ff96-2c99-432a-ab74-4a1199e683f3", "sighting--03e30728-9e56-4f37-af71-5f87b43b94dc", "sighting--4f2db0d9-7765-4312-aab4-929233b1de99", "sighting--e1901c4f-6896-4d6c-9a8b-f8f0d14502a7", "sighting--93811752-4828-4b4b-a1b9-f607493b8c1f", "sighting--657d868b-1d06-4182-8512-b46b422dd714", "sighting--74ffe5e3-e725-4c30-b804-281178f8f09b", "sighting--4b6df1cf-e5f6-4a31-bb22-f28b2528c232", "sighting--fffaf8d0-b672-4071-9ea2-4053b591832a", "sighting--7385adad-3bf7-4491-9626-72715885a926", "sighting--8c95d521-ca2b-446d-9a27-68af2ce7dc1b", "sighting--773078fd-ef4e-4821-8caf-9b79539bd12a", "sighting--de43ada2-2536-44df-bcae-ae3f41f2c717", "sighting--a0f4a534-c05a-44c7-a4c5-c092a1f919cb", "sighting--fba5a225-7fd5-4977-9b18-938f5c05ae32", "sighting--2c7a3ba2-a518-4ce1-8d92-9536a038c40c", "sighting--a8cb2371-bed4-41c8-9ef7-bcb8afa26081", "sighting--8d0d28ab-8101-4b97-8da0-06208836fc78", "sighting--e4372917-5a51-42e8-b795-68978ff4b243", "sighting--4c05ea6c-fe84-4b04-a487-0a81a8061384", "sighting--f0e99c69-6139-46a8-8300-d64f93e60506", "sighting--d73d668d-59c2-4064-bfe7-9f1eb4f0476d", "sighting--5dc95e16-455c-478a-8f1f-3156037f8795", "sighting--21bec110-ceca-467b-af1c-393a77c73c8d", "sighting--c456092b-b993-4c90-ab6b-60cfd5755b40", "sighting--a1df3717-c06d-4efa-818c-e0f752180e32", "sighting--13b0442d-f3fa-4f96-a85e-74006da4135c", "sighting--7105d7ae-7ec5-45f6-b3f8-cb53a2e0969c", "sighting--9976662a-bfdc-4766-95eb-1be259e3ab07", "sighting--f9966771-6627-4745-9a5c-e90c77f104a3", "sighting--2f01f41c-05bd-41f7-a976-1a3aa782dd42", "sighting--6aa58d43-dd18-4a84-ac58-e056c4bf7ab9", "sighting--cb2a3849-992a-441c-b28e-655c7b64b573", "sighting--e75e0337-9fb5-41e0-9af4-0103a11ddf3c", "sighting--c2ca4e30-6252-4aa8-be16-e964491ee204", "sighting--105bd45f-8f7f-47ea-a7bf-c76b5558abfd", "sighting--a78bfe8a-7f0b-4bdb-8c73-e0757fd8b11d", "sighting--ee030f03-03a4-4d7a-960f-fdd01e63a7f2", "sighting--b30a8b7d-8363-48c0-bd75-ad5308b1f339", "sighting--d15034b4-3b44-478b-9831-e6aadb1d97b4", "sighting--7c30d909-b20a-46b2-9dda-3e22d2ec0e32", "sighting--045bc00b-f4eb-4368-9ed6-d73ecd78ab8b", "sighting--7952bdb2-1bb6-4b92-9c9e-a8d46c1bc7b4", "sighting--576c0727-a0b5-4704-b30a-7c3c66946fdf", "sighting--f4caf4be-422e-4548-8867-9b6d876849ea", "sighting--9454c08a-865f-427a-8667-318ebd347093", "sighting--bb410c70-cfa3-44e5-b8cc-b7c2a5a30b33", "sighting--a8cf159a-58d7-4eec-ae1d-8e647da8cc35", "sighting--9cf0dcdb-cdc8-4fe0-97c7-7724104215b0", "sighting--70362d7d-fb43-4b15-979e-f5be1064b18f", "sighting--d6281695-d1fe-4f99-bbc0-429609475dcf", "sighting--61a3ac01-ce63-4f34-a384-0194d4f2db32", "sighting--88e67fb8-7020-47ac-9a1e-3672d89bec32", "sighting--06d6aae6-7d8e-44aa-a0a3-d2c96009c191", "sighting--86069ee2-863b-4c2d-91fa-9b5452faf1de", "sighting--5e716bd4-9ee7-4ef1-9e7c-721b6c5c936c", "sighting--b5339848-206a-4192-9770-59f8b326760d", "sighting--61ca82ff-62ae-4ec5-bbae-a078fd1b1aa0", "sighting--c5e5dbd7-b26b-4696-ae28-190850eee858", "sighting--a3fc41e2-db2f-4bcb-b652-eb1ec315b0c2", "sighting--e7644ec5-ef81-498a-868b-eccfe9054cb0", "sighting--ed5cdb1e-f16a-4ae1-92cc-eb6f2d0b54eb", "sighting--ca19af95-f0ee-4a67-abf9-c80fde629cb6", "sighting--0908b6cf-97e4-4f9a-99b2-de0a6b09a6aa", "sighting--d54b1e1d-2e86-44a6-a524-b561d3d40a89", "sighting--cb8973f1-2988-44aa-988c-41cc3440ac21", "sighting--1f15800f-024b-45e1-aa83-fde564107464", "sighting--745de136-b320-48eb-8439-91df85c1a536", "sighting--874c1418-9909-4b17-8c3f-399184dd5825", "sighting--65e842f0-f159-4336-b210-4bc2268f97c0", "sighting--749d3c73-c55a-4f6b-b07d-bc2a243c7b2a", "sighting--2f305b93-04ee-4ced-a4c9-98f5a0bd67ad", "sighting--f2c03755-c65b-4b35-9696-33cb9ca1f8c1", "sighting--64f82c38-4052-4e98-98a8-d15e9bd56a03", "sighting--f028a1d1-30b0-44b7-9599-c32f29e97b20", "sighting--e6e04f50-44ee-42c6-9141-011c3810904c", "sighting--e139107c-39a5-481e-950b-56a2b6fb5000", "sighting--ea40e827-838b-42b4-b0a6-89c54f55689c", "sighting--49fb80b1-3437-4778-8525-338f30dec34c", "sighting--57e8a615-3e78-4291-b485-5ab6b0a11819", "sighting--6bc295ae-a8af-49bf-a3e0-a864238a3e87", "sighting--4034a769-ba55-459d-87a3-4eaec35cc0a6", "sighting--31ace437-e600-4e81-b65d-13f900d09067", "sighting--739f50f5-e0df-4491-bb72-5a020b878cc5", "sighting--dac3a20e-d905-4b9f-bd1c-a77f4bf76ed1", "sighting--5267d221-31ee-4d44-a7b2-e198baec6357", "sighting--d18b6195-3a3d-4963-830f-c6be48bc1046", "sighting--8ec5354f-6ab9-446b-a4e3-8cf1702117f4", "sighting--ec9a6581-f4c9-431c-98f6-4ed608b9ed88", "sighting--2395503c-c4e6-494b-ac3b-9cf647c7a2d2", "sighting--a5a21fbb-61ee-4e5a-9579-e9b0cc19722f", "sighting--5529cfae-66aa-4bd2-b6ed-2ec68331d728", "sighting--eeed84d5-da13-4cef-882c-b0f56e09150e", "sighting--9e5dbac7-5439-4012-abac-49b9b0e86ca7", "sighting--f5f853ac-4963-4275-8874-79413bdeb1bd", "sighting--acd3cf56-a71b-490f-a3ac-98c5b2991588", "sighting--650c928b-b9f4-4b8b-b339-8af039b79fee", "sighting--490edd49-b84a-477b-a02b-387835247a9a", "sighting--3415e6eb-53f2-474c-8fbc-d89d24d70c45", "sighting--f6beab3e-83fe-4ec4-9987-1be13f754b12", "sighting--141ba134-69e7-4c90-8cc2-03f8b18675b8", "sighting--52ce1d64-3abf-49a3-a663-d67016a92126", "sighting--f167f8c0-8a8b-493a-b808-946bf0373071", "sighting--31add490-512a-499e-b583-03622ad0c30b", "sighting--ecb3587a-2ca8-440c-8849-c3f017150ca2", "sighting--d3bfa991-e5e7-477d-8051-3ab0a7ce66c1", "sighting--354ea70b-f1f0-46e1-ae04-458453b15062", "sighting--ed740aaf-a1db-4422-b252-dd26790b94c4", "sighting--05c15c29-4ed6-4134-a1f0-15fa62291359", "sighting--a04c03f8-1a57-40e2-9b07-4f63ba497cdc", "sighting--f211d237-9c3c-4b89-a086-351ce445f01f", "sighting--d2b237c6-0f03-4adb-8b91-413e7fb6ebcb", "sighting--54f1946a-d339-48f9-9690-b943d4c5375c", "sighting--97326fdf-16a4-40e8-b7e4-4faff0da3266", "sighting--192cce9e-949e-4422-8083-c7fe86037fcc", "sighting--873be2ba-f37a-4f2c-b46e-b4e893640993", "sighting--4a11a109-5fae-46f5-8734-554a9bc6a9f9", "sighting--15e827e0-943a-48cf-a11a-167e17c84277", "sighting--4aad030a-58d0-4c62-8be8-76d8f7bb172b", "sighting--cf29ad15-a5c9-432e-a5f9-0821b5fb456b", "sighting--918fdef3-70cf-49a8-937d-65eb443eb120", "sighting--e24d7c47-aa49-411e-9e45-5117dc8b4230", "sighting--463fc1dc-990b-4b32-a830-f647c01ea4c8", "sighting--8a844a7d-ce8e-4dc6-9b24-438ca5501b6f", "sighting--022bb9d4-0761-4f46-8581-5f5ce6d93886", "sighting--52a02738-3d66-4299-98c6-83364a349e90", "sighting--7c16abaf-02d4-4983-98e7-540a087a158d", "sighting--a05d0083-8321-4ba1-a8d5-604aa642c12f", "sighting--b555273a-05d1-4277-96e8-0f5bfaec875b", "sighting--20615fc4-e8f1-471b-ab46-eef5f4dcae3d", "sighting--50c4a80a-a241-4876-bf7c-ef4af350c5f6", "sighting--6a5bf294-28a4-431c-b809-094b61be7dc0", "sighting--64db2712-bcd8-4351-a010-0a38ad26e308", "sighting--80ac2eb8-aab2-4d47-811a-8bb89260990a", "sighting--92e31da4-7e46-44af-9c3f-bbae1258bfc4", "sighting--93813e2b-d46c-41b9-9a67-f1a708128ca7", "sighting--20c02dd3-3aed-47d2-a996-a6f0712b445a", "sighting--c8def161-1083-42df-b62c-a9102416eace", "sighting--50667afe-6442-4aa5-b22c-4e244e18954a", "sighting--4e370278-a609-4211-aa6e-271073ad6ead", "sighting--76fdaf8c-18a9-4f19-81bd-1befb4933c86", "sighting--241819bb-e8ed-40e1-b725-e8f8e695fa64", "sighting--c215bdb7-4e83-4e7a-9547-4536ed26ced6", "sighting--e2154499-b475-4edd-9bf9-e9272174b346", "sighting--b2fe12dc-51b0-40f8-b8c8-a00cf4f1c5c4", "sighting--f95c0706-a2ec-46ec-bef2-99c98789b08f", "sighting--e67fe478-b570-4261-b669-bf064ed3dd51", "sighting--84cf8fa9-60e2-4212-b17d-2d10085d7ceb", "sighting--db0a463d-275f-4527-b856-0af4f3cd21e7", "sighting--6cc8cabf-f075-445e-87c4-06a7a80518f4", "sighting--eb7d8c73-375a-4205-a2bd-d461a21b79dd", "sighting--45875bfe-4f21-401e-898d-74c226305608", "sighting--c381087c-c588-4bec-91ac-9f676b1ea178", "sighting--01a84f5e-1336-4e3a-9c2d-bdb6e87ca6f2", "sighting--ceac318a-a8aa-4b50-a7b9-03d4ca295e6d", "sighting--867dd8b6-010d-4d0c-8307-09bd7ab0dbb5", "sighting--cf30e042-b2f8-4de3-9d12-4aec53ffbc18", "sighting--0f4d6548-a9b7-4e3c-80c8-8dbbc76f494a", "sighting--1d8dbd05-e3ed-44b2-ab17-795ceb1d183f", "sighting--18c3865c-3eb2-4b24-8193-9618c26dd203", "sighting--de98c1ea-a217-4d33-974f-e92314eaaa60", "sighting--dc8021dd-fffa-437b-bbfa-24da2f1de6c0", "sighting--20d62ef2-0934-4014-8410-edf196fff403", "sighting--c7c529fd-e5c3-4846-a3a1-eb11aea0e3ee", "sighting--a707e0e1-3070-4dd1-b072-9c78205ddeea", "sighting--eb72f2d6-e7ca-479a-a472-d5bb0f80c651", "sighting--61735574-4b64-477c-bed5-06552d4e6479", "sighting--7c193bcc-78ba-4f17-8acd-a16f2e1f5d3a", "sighting--9af00e58-81fa-4172-aba1-3d072cf20149", "sighting--9ffdf372-e0f3-4e47-9cfc-123dde48d342", "sighting--2e8cdacc-1fc4-4d61-9338-200def7f9e79", "sighting--5524f349-a2fc-42b5-9a37-065d04ff486c", "sighting--7ba14cb9-7942-4b5e-8df1-68dcf75b5dfe", "sighting--6f82d64b-3c2f-4c2e-b830-99aba366f3fe", "sighting--5820f91e-868b-4c51-9015-f18320de7edc", "sighting--5224fcef-ea8b-415a-ad5d-69eb4dc0204c", "sighting--a5712324-c50a-432c-80b8-3e986ae98bce", "sighting--2fdb8c2a-fcb5-44ce-b1cd-fd7f696ae7ba", "sighting--e7fb774a-32e7-40ad-8f23-62ce2302b67b", "sighting--3e9959c3-53de-4184-843c-430264600cea", "sighting--e23953bb-31eb-4cf3-8b12-58d8f989f860", "sighting--6d0e0d65-71f6-4411-a104-f0aee4d80424", "sighting--48e44808-37bc-455a-a6ac-2ebc943827a6", "sighting--b51eb00f-2483-47b2-808a-99f0793d48d8", "sighting--d9ec2b04-7ffa-4310-a9e6-ecfcb8d4f87c", "sighting--fb9d6b7e-af7f-4f1c-85aa-525ebcc73ab1", "sighting--0051dc27-7f85-4c46-acdf-254cc8b09fce", "sighting--9c07d9ac-4f9f-40c2-be7b-5021a520a9f0", "sighting--f6625e9f-c5ee-4289-9d89-b25cdde21d8f", "sighting--5d8bd3e1-3ac5-4aa2-91d1-1875953c8e3f", "sighting--f48f1975-0a13-44c9-a77a-6d166fe62f99", "sighting--3af067bd-31ed-4c21-b8ae-c1edb4fb627c", "sighting--7f3c713c-6c79-4309-853e-44a83ea1a979", "sighting--337f725d-ce7f-43ea-9aee-6f982eb6b383", "sighting--6844cba1-2b61-4230-9767-f2a1e51bc08e", "sighting--1ea12ed2-59cc-485c-b107-edc077a87c27", "sighting--2bf657ea-8e2c-4261-b5e2-27c72b78b01b", "sighting--73151d24-2e3a-49f5-afab-9cbe32db0800", "sighting--7fcc49ec-0540-44f4-ae3f-ff31514c37de", "sighting--59d3e331-75ad-4b95-ace2-e8055e9cbfdc", "sighting--4e897726-3569-43bf-bf13-d7d0062425db", "sighting--d117ec7a-e96c-44c4-b9af-5fba5ee0064a", "sighting--ec34a9e4-3682-408c-9495-97336d6eeded", "sighting--3bad4dfe-4ad1-44c9-8ef4-4887064c2182", "sighting--10065d84-931f-47bb-bd19-845209cfe1ec", "sighting--e99dc466-9d3a-4ddc-8d14-43784c19b23d", "sighting--2088ac5c-f50d-4226-a77a-93ae7a7e075a", "sighting--daeb795c-6e46-4cc4-890e-4a09323e8689", "sighting--6cef7b3f-0ed1-4258-8f4b-13c3facd89e9", "sighting--47272b35-a370-4d07-b200-3ce2642e42da", "sighting--669f0aae-3df7-4bd3-974e-3f8d12cb4ac7", "sighting--7cf17c11-108b-45f4-a2fa-785b104028c2", "sighting--df5c550e-4a6a-4958-8772-d67d7f3beca2", "sighting--c0f835ec-6593-4161-994b-cce0f8d8a963", "sighting--0fab4123-3041-469b-87b6-680c9ab57aec", "sighting--5b65652e-d749-445f-b22f-2b1fe94784f4", "sighting--c5503b4e-a3b2-4e91-8b31-f88f17ffc661", "sighting--bf021bdc-9885-4446-aab1-b040d24afcf7", "sighting--75603b32-6c58-4274-93fc-25d611da3218", "sighting--665084e6-2e22-4fb1-ac0b-613084a9b489", "sighting--5e5ead66-e29d-4271-aa22-ff233272b963", "sighting--c0481168-4286-4fc7-8b39-beb9cc7a2a63", "sighting--baf7b3c9-3891-49d8-a580-0de52ab122b1", "sighting--b1336065-1857-49a0-9b31-38f096bfa2db", "sighting--a1240454-5100-4be8-a0e7-4fe9944d301e", "sighting--44bf210c-5515-42af-8f80-3d6ffcbd289c", "sighting--ef4edf79-5898-45f1-9ace-47da6739833c", "sighting--2dfa12c4-3738-4537-bd10-4152a635822a", "sighting--7f3b665b-b477-44fb-aa88-f9493f6f65ff", "sighting--181d1749-f519-40ea-9b4a-83a6bef8246a", "sighting--37509cf8-2c46-49de-8ca7-16a2948bbc1f", "sighting--c22d7116-863d-4fff-ab78-e11fbc19f9f1", "sighting--6f91bd77-5ded-4929-b39a-90a120041802", "sighting--877778e1-2471-40ac-b9ab-8d6170bf5c8b", "sighting--9d870e28-bb50-4de9-8580-6c0f0430317d", "sighting--8e23323d-321e-47ef-9080-5bd617807295", "sighting--86c25ce2-dad9-4f6f-a545-729c42b65131", "sighting--4e8b5ca9-7e3c-423b-80f2-709af1037511", "sighting--699fda31-fed0-483c-b401-0fae1b4d773f", "sighting--1972564c-45ca-46da-b4f3-4d0cac86ed3f", "sighting--e67138d9-81ba-4462-ae2b-271722ba39ee", "sighting--f562c498-3154-4320-a046-f48482443d6e", "sighting--1f69ed81-5184-4215-9b9d-a09f7c57bafe", "sighting--d926f8db-8f44-4a39-bb84-270269348872", "sighting--657fa959-241b-467d-a429-7cb3580fe4df", "sighting--0e06442a-c18a-4d73-a1ce-45d174926036", "sighting--0e780170-f13f-48be-953e-bcdc66385164", "sighting--f37d8c26-83f7-4e00-ae83-44f578a652b8", "sighting--bbc5388f-71d4-4d29-ba58-869b32ab5bec", "sighting--93e17c71-6a83-4396-ae38-3f0784069201", "sighting--14259123-e86f-45dd-b7d7-77655be8bb47", "sighting--e667a8e7-da26-4bc8-9008-596e4caa8f25", "sighting--73ea4fd1-e458-458c-9a30-3e64007d434d", "sighting--32bc584f-836c-4830-9e90-e3e3051c85be", "sighting--23d5d76f-8833-48c9-9f4b-e5989c103176", "sighting--a9b12ede-0399-4ea2-a384-a0221f16c11c", "sighting--e1cc9502-69ce-49bd-92f2-47cffc239e6c", "sighting--6089ba23-267b-44ec-8e44-d37f77064b24", "sighting--960c00e4-a4ae-4c82-8d5b-af858017b39c", "sighting--8f041684-c418-4c2b-b615-668e8d3b3d71", "sighting--d2004922-3c20-4478-b82c-e31a50dafe12", "sighting--a5e7aca7-62eb-4275-8959-f34aaebd22bb", "sighting--dc93e868-bec6-465a-901e-c68f5628c170", "sighting--909bd1cf-76b3-497e-8afc-94fe611154f4", "sighting--71f1ec37-554e-46b0-afad-8750b0c35cc1", "sighting--2b9ef0e4-1e11-4089-8ae3-168ef7fa3837", "sighting--1d72b48c-378a-4992-9543-469ae27c409b", "sighting--72103065-4a44-454e-be5e-86e2a5a1734d", "sighting--3888ce87-710c-44c0-af00-d1e385d1e978", "sighting--4ca1fce3-cf4e-4a41-8e08-920d586dfca7", "sighting--8f0eab24-0ca1-4cbf-a72b-6a83452a9e3e", "sighting--5c6d763a-5d99-4d6b-bdcd-a064727a3d08", "sighting--3a1949df-e3cf-4abe-baae-deff40f2248b", "sighting--2e3a12f7-8358-4471-8923-5ba9d130f5aa", "sighting--f3eb12b9-d4b0-4848-88de-4f1e35aed8eb", "sighting--633d4ba2-8b86-427e-a077-170447f1629b", "sighting--4eb869a0-a2cb-45c0-a290-5bbe67bc4923", "sighting--478f7134-a4ab-4897-8864-18f2cf991f4e", "sighting--775d6034-f932-4899-81ea-0b046a47e56e", "sighting--2d880ff7-ef08-42b3-ab49-d2f3c0247b02", "sighting--9d0076d9-dd09-4fdf-ac61-a171ac896d4b", "sighting--3e0147e3-f680-4d7c-94c8-a15c62333aeb", "sighting--f828a59e-90a8-4607-9292-06e3cc90a4d4", "sighting--3f626969-3dd3-4a82-b883-de60392e965a", "sighting--52b6714a-7cba-4303-8a4b-d79de97415e4", "sighting--ba961647-ce2c-4302-9922-cdd368417599", "sighting--68d5128a-3e72-45a7-aab6-3442c473199e", "sighting--62dcc9b8-815e-4953-bf5e-becd1d14a8d7", "sighting--c14719d1-5984-488b-a836-73fb5995ae11", "sighting--e263669f-916a-41fd-a19b-7ff8dcc43fa1", "sighting--918485e1-69ec-46f6-9704-0df3bf94af9c", "sighting--29c84b25-58f5-48c2-99e4-ccbfecaa4214", "sighting--2bec7831-8b01-4445-ba6b-69f5e2740b0f", "sighting--8928633c-0615-4bac-bc36-dd15a10484c3", "sighting--b2645350-8a17-4603-8ea3-dfdeaef47e99", "sighting--42ec0320-7157-4c81-8b37-68b82814ef79", "sighting--9848765a-1ae1-4cb1-ae31-97fc3e9225d1", "sighting--0f7db11e-6b2a-4484-ac04-e40b3f999c43", "sighting--521bcab7-f833-4c40-8c27-af60b6eb6815", "sighting--9d5d5ef7-3d11-470b-b479-821c432be21a", "sighting--21462234-f134-4b86-a3ed-944cbd7b7097", "sighting--e06abe0d-45f9-456f-8496-4a7e61771def", "sighting--08170d18-fa04-4d79-bc83-82ad406b59d6", "sighting--ef89e75b-8991-4029-a0ea-060db4bd6be2", "sighting--7430cdaf-1974-4c3d-a95d-0db930dcc932", "sighting--ea964851-d993-4c62-95b2-97a8d895277f", "sighting--902ba0bf-3e19-49b0-b23d-225f0963aa61", "sighting--5f24b523-25d9-4880-8422-8ec49d831224", "sighting--5bd487cc-2f25-4824-8958-f8456a78ed3b", "sighting--7d406713-dab7-40d2-903d-5fabac26cd24", "sighting--031a397e-9f72-4d98-8899-d33af4aadd14", "sighting--2ab5b541-b20b-4518-9145-12d54af71829", "sighting--77a86431-b143-4927-93b8-c2be996baf8e", "sighting--3b27dba8-e072-4315-81b3-680fd746d2df", "sighting--af244e22-f558-4edb-b72c-d69270d313a8", "sighting--c45e8f2b-93fd-462c-a4ec-5d0136ed898e", "sighting--e7208f9e-78f4-4e1d-a8a3-a42884841a0f", "sighting--af976c22-7be1-4543-934e-e6be4067d552", "sighting--a6e29d04-27fa-4d5a-a84b-933308b6c2f9", "sighting--72e2c092-ac2a-4522-8eb5-55c9cb992940", "sighting--d79d4bbb-d774-4e2f-b3db-a0d3b8ae7b20", "sighting--bf441c38-df6c-4f2c-b097-8913552e1678", "sighting--9faf45eb-71c9-4ea9-9da1-b9f74ac1a91a", "sighting--338c4793-1aa0-4cd1-9476-77b22b59016e", "sighting--18a6ec5d-569d-4256-9ef8-60a677ef2401", "sighting--4addd618-e6f8-4d66-90cb-a51fac6f7bde", "sighting--05e88c72-553e-46e9-8d1b-8edc14f800b9", "sighting--f6c981d6-1c96-4a2b-a90a-ce318cb7de56", "sighting--03b28c27-021a-43cf-b285-5fbd954ab398", "sighting--00c4ccf5-fed6-4dbc-a355-64d4bc9c7ebd", "sighting--ffb697dd-b9eb-4d8f-9398-966f80031eaf", "sighting--c7dd68b5-3e00-4212-8ea1-3fbc63491581", "sighting--4fe96422-c7ea-461f-9cf9-5e08a45f3f4b", "sighting--a7a49025-d5f5-4721-9ad9-b2f733cffe03", "sighting--118a8db7-2b7b-43f0-9431-6de475bd2aad", "sighting--f2252376-e343-402f-b84a-e94706dd72ba", "sighting--678d30e4-1c91-43c9-ba25-e60b098fd9ed", "sighting--a9dd252e-13de-4e60-90ce-7f47cbe85d8a", "sighting--905bc5b5-9349-47ce-a073-d49607cf12b5", "sighting--30902af6-e188-4706-891f-c50a6ae3df06", "sighting--4f3bda15-e852-47f2-8190-ef129dfecbcb", "sighting--df66a367-68ed-4020-8835-8892c23d600d", "sighting--3163af85-e508-4486-b4d3-f40093ea4768", "sighting--6dd2d264-e587-4c0f-8026-757f630dfbed", "sighting--1e9af404-0f2b-46fa-ae5a-9edee3bd329e", "sighting--3b8f32b5-c25f-4e92-a80a-4d55ee6d2fb4", "sighting--fb9ba5b3-f875-44f9-895f-82830fee7e2b", "sighting--bc1ba16c-32b0-4d57-97e7-fa4216d62760", "sighting--a3db7bff-0e0f-4481-b3c3-0af446efec95", "sighting--1b6b12bd-3367-464b-b03a-250e0085b3cf", "sighting--e39a9c4e-9707-4582-ab8a-53d931e1e083", "sighting--cade486e-25f7-4c42-9c94-8dad218f9ccb", "sighting--fe3be343-fb7d-49f9-ba6b-3f3076857f38", "sighting--202dd638-94da-43a0-bafb-05949ed11d57", "sighting--c28c7329-e70d-4034-8e1a-ffd7aebd6729", "sighting--4dc74bc8-f74f-4e08-a83e-e3cc59f75386", "sighting--87bf0222-ff8c-41b0-8fdf-0cf83d86dcdb", "sighting--c90919bd-0752-4417-b1fa-2277f4d0264a", "sighting--78fe6cc4-862a-47fb-9796-c8b9acb697c8", "sighting--88c13644-6df9-4a31-9ada-a7c09e3c6b7a", "sighting--ef938876-4618-4942-9ece-38548af0b288", "sighting--acf2cd43-001c-4e07-8ebe-a4eab71b20d2", "sighting--8f4dabc4-21e1-4e0e-ab28-627952cb31a6", "sighting--77cd57a0-a8a6-4083-9bbb-2e28032d00fe", "sighting--e545e94e-d0f4-4cc9-9f4d-e06bf7854571", "sighting--88dbf129-9656-4f15-99e6-652957734668", "sighting--99428ba7-27d3-4886-b4db-2cfd5b9c49fc", "sighting--aa520be6-38d4-4894-adbb-016c5f7e0052", "sighting--aa3f16ab-5e80-4a42-aae2-8d79da6181f2", "sighting--ea3033f4-33cd-4d8e-909d-74c7fd333977", "sighting--f97f6134-b11c-4cc2-bca4-7ce043538014", "sighting--6d0f9faf-be6e-4ccf-923d-3ff04dc62322", "sighting--f08a5da4-49af-498f-b821-6220ce529b66", "sighting--75227064-5015-4fce-bec6-eed999aa663f", "sighting--dc2b12b3-ac1b-4ba2-a00c-3cb378053808", "sighting--c229eb7f-df1c-4500-b4f4-92a9d2bebfd6", "sighting--677e8ce9-5975-4c59-9cf7-c116150de191", "sighting--2fc712c3-62c2-4c0a-9fe5-909616694e28", "sighting--f063b51d-eb68-4ba0-978e-dbeece00cb32", "sighting--eb82a05b-75c6-4227-8c83-b73cbd51791b", "sighting--117900e2-5efe-46f2-914b-c41b5faf2517", "sighting--295cc5cc-63d1-4094-9324-ed2f83716c5b", "sighting--26c420ab-483e-449e-b75d-55dd4ec788d8", "sighting--4f2bd6ca-f7d9-4e70-9898-c9bcdfcfbe2b", "sighting--bbf1d916-2406-4c05-b305-bdfd4faecd53", "sighting--a2b9d3b8-194b-491a-af5f-14024e413818", "sighting--50d0cc5a-840d-4deb-ae33-e755e1fb522f", "sighting--70494d8b-95fe-450e-b642-1bcd68609da4", "sighting--4577520a-2e00-4baf-8f27-4b796468a9dc", "sighting--bf76ec35-472c-4b59-a688-60d1426943b6", "sighting--e43f94be-f0fb-47c7-b0f8-7d9954d918c3", "sighting--6bdbee4e-011e-40da-889f-6c0a1871cd89", "sighting--87975f5d-f5f4-4ba3-91d0-1d74d0e42ce3", "sighting--ef400973-1293-46e0-8531-760ea9057f71", "sighting--3beabb12-271d-4c73-aa04-a5239b3e4e35", "sighting--87d71f96-1bd0-4765-ad72-3f6cc7a21a6b", "sighting--74b225ae-9e13-4044-a6a4-1e9b8969ee65", "sighting--5769b015-177a-4ccd-9bd4-2e0dff03d98e", "sighting--4b6cc948-9077-474b-bf0f-c8c6a3455e7b", "sighting--2f16f749-51c9-41cf-94f0-ea7a6a8714ae", "sighting--ba5cff04-5c5c-49b2-b526-24561eb6275d", "sighting--85da8055-70c5-4037-a5c9-d8aa298b18bc", "sighting--37c017ad-bd30-4bf6-aeda-19eb9f70474f", "sighting--dbd7706a-95e9-4828-a2be-fa97741b8f74", "sighting--ac07d870-4d79-4658-91c1-0404b1097b88", "sighting--03a881a8-6220-4da7-8d31-418a22fd5473", "sighting--da6d8875-88fe-4116-91da-ea3710e971ae", "sighting--99f0d571-535d-457b-b995-7c450656944a", "sighting--f1c271bd-dde1-43d5-8141-ba302892574c", "sighting--ed43b401-2b16-404c-8218-79050a4239f5", "sighting--a1d81c11-b10f-4178-8102-b388176c4e89", "sighting--d2b533e3-418b-462a-b068-7ecd7cc4a92e", "sighting--309a76a1-3ea6-4223-9353-4bb55edbd0ae", "sighting--8af5e057-85cd-4718-801a-14b6839c7b35", "sighting--0aaa375c-64e2-4e70-9fa8-51b011f1a627", "sighting--3aeacd35-e77f-4dd2-bb45-05c3af8d7c43", "sighting--e4ab70b4-72ee-40c7-afe0-0aba0dda5ec4", "sighting--36a4696f-f8cc-445a-b1d4-8422039443fa", "sighting--be3afdf5-277b-4d70-9c40-1845117ca978", "sighting--8aab50f3-40bd-4e67-80e7-786dfa190196", "sighting--7f37bc88-a815-4946-8ffd-ada7a076e3ca", "sighting--7a927260-a994-4f01-9088-528a9fd7dda7", "sighting--ada77c41-ecd6-47ed-87e5-58844e60d452", "sighting--d0d502c9-57aa-437b-8938-524cf17b13fb", "sighting--6502d670-60b7-4a94-816c-7e2422bc83b5", "sighting--729aefa4-8567-4131-b80b-038860b4d513", "sighting--6811685d-fd22-432f-aaf8-427617ade78e", "sighting--56c6369c-9b92-4c59-be56-f823bd8447df", "sighting--a2a69639-14ba-432c-9beb-40babf2920f2", "sighting--7bbc41ee-cc9c-40e6-98ae-d232a60ab9db", "sighting--c308ca0e-d93f-4a0c-86cd-8d5c9ca38a7f", "sighting--4871332f-0f19-4650-8d35-3e661b18a137", "sighting--a5dbdfb1-8553-4f3e-82cb-38121d69d4cd", "sighting--dd67f75c-f05e-4893-b851-57fa2e6cc507", "sighting--815faca0-b709-4b54-9629-b841e9af74fc", "sighting--ecc316b4-5399-454c-ae20-932b2dd45c12", "sighting--bceea171-158a-4dfb-8cdf-557d6a8ff9c4", "sighting--0a02d7ad-967b-49d5-a739-a14f215da772", "sighting--e0beac62-842b-459b-a394-659547c3ebba", "sighting--2480ff8f-d289-4947-bc54-9311c394772d", "sighting--5c29d026-1a5d-4a60-ad93-fe7e9b209599", "sighting--42af258c-dd22-4d9a-be66-d787c34725f8", "sighting--e8afc65a-e7da-472f-a8da-929cf5d79f9c", "sighting--a8fb44bd-237e-48fe-8967-6e5f27e62060", "sighting--6cb12093-255e-44a7-a2e9-17f565f342d0", "sighting--f6f51195-7ba9-47e6-ab43-9b8ac4f08068", "sighting--09af190c-3b8d-4732-b432-22376e852026", "sighting--e4b58ffe-d581-4200-a41d-52064dee56f1", "sighting--e093f29c-4fb9-43ca-bf6a-cc347a6cb2de", "sighting--4ab0609b-c7e5-4214-b558-44f81fb423cf", "sighting--3e2e3e6f-235e-4fc7-b6b2-0dd74ba1a60a", "sighting--7f56493f-b4ec-40c6-b72b-141b9fd9e0e0", "sighting--dd99d44e-d929-4021-94e2-015cf2d7afcb", "sighting--e65927c8-e1bf-4c37-8b0d-b3402ee1d096", "sighting--ade866da-c897-40ca-9777-256cb1fca96a", "sighting--49811ed3-3680-4980-9ea0-c7c27cdca504", "sighting--8386114f-8e8a-407a-a838-82c4d51cf313", "sighting--877a61e4-bcca-4bbd-aae2-9651ab56890f", "sighting--45c2708d-15ab-4cd0-b142-890f2318875f", "sighting--2237a13c-a20c-4c89-a1e9-907bd12220c1", "sighting--836eacbf-33b0-498e-8845-a24634b45604", "sighting--a29a6cee-553c-4e4f-b8db-52cf61b8c60b", "sighting--4d2a72d3-6f9e-48c1-8bf8-18024bc4ae89", "sighting--cb3f1703-afb1-4a9b-94de-638e73dc10e3", "sighting--dc36163d-c2a6-4f57-a2ea-6d59f3358c74", "sighting--047a38da-71ce-4e2f-b908-e75c04550c8a", "sighting--163f7ecd-4199-4735-a3a8-994c5a8a07ac", "sighting--19c00ca6-dd64-4f03-ad14-b5bb79ac7027", "sighting--2c42657f-cb9b-4bb4-b049-bcc626f673f7", "sighting--d093d31a-85b9-490a-8f49-ae0e7e229625", "sighting--482e405e-014c-4057-a82d-124527e17443", "sighting--c300d5fc-0499-4d4c-9a8f-1d7fdac57460", "sighting--00e18f91-c8cc-4c80-9ccb-bc7c6bc274ba", "sighting--445f7c23-d744-4e28-9386-b9d63ad2cff7", "sighting--324ab1ea-f0f3-4832-9d86-36881db088ca", "sighting--332d7929-f391-4f0c-99d3-4789a1af0d92", "sighting--c6383b39-681d-4eb7-9efe-94718c8daa8d", "sighting--fd62a2eb-14c8-448c-b39a-126e4b4c4185", "sighting--545ba78c-065a-44a9-a6dc-8e16d690787b", "sighting--a354ddc1-2ee3-4a7b-8f8c-e2b3e4dd8898", "sighting--dd53841b-032c-4c5f-9c2f-d58938be5b44", "sighting--78be944f-f692-4ce8-9a64-a88a621378d5", "sighting--e0dabd76-919e-486c-a5b9-ce8a50f6eba3", "sighting--d939d003-29a2-41cb-8f16-bb7efca435ed", "sighting--63cfe587-33cf-40d6-b15d-d75d0fca9662", "sighting--e031b57e-ed42-494c-9a20-723e6e1f0a60", "sighting--2d542b70-950c-4e5c-aa8a-27bf037f87c9", "sighting--c95c0f80-414e-49bc-bc91-ec6d48a0e246", "sighting--8ef7b6d9-e557-479c-b3a0-0611e6f8b82d", "sighting--46dffb9b-8864-42f2-8ff7-2208a2221f9b", "sighting--9684588c-6808-43eb-a345-140f5a232039", "sighting--1bb669d1-77c4-4cc1-aa06-fa5fb8b1293c", "sighting--4ba75d8f-f849-46ef-909f-c18419cd47b4", "sighting--9c8ef90a-658a-4aec-acdc-a337990c5892", "sighting--f8610d63-efd5-4c03-9b32-48a741b133e9", "sighting--2ac4b4c1-3eaf-4cc2-a93a-b7a2d5dda9e1", "sighting--bb837810-1f89-4835-bbe0-c86a25fc1d64", "sighting--f7963dad-d6fd-46dc-be86-8a56dab3aaf6", "sighting--cf6735fa-4462-4759-bb95-3d78458a1454", "sighting--171073dd-d230-4738-803a-60cfc810c434", "sighting--18f1e765-3b12-4e39-8064-ef750e636665", "sighting--83e83d2e-1d7a-4ff9-a6e3-25fe244e322b", "sighting--f6c32119-970b-4bbe-8286-46e3968fd079", "sighting--33869fb8-c2db-4280-a153-97e68e03d3cc", "sighting--98205830-bc40-480b-958f-fb90145c1089", "sighting--1f6cad60-8931-432d-85fb-41a09a0bda53", "sighting--972d6996-4938-4ce7-bc8e-e64550ae98d7", "sighting--70ffdbd5-a08a-4f09-a9d2-fffddc8e032f", "sighting--367f20ae-09df-4592-ae12-b769d36c4ba5", "sighting--4dc7c368-8799-4086-83c1-203583539e95", "sighting--02673acb-9ff2-4ed3-a723-1e234c0dcff3", "sighting--ccb00595-363a-4ced-9f12-31313280298d", "sighting--ad6a1843-1705-4154-ab63-f64332a0f124", "sighting--1c052136-85b0-4737-a920-16b6542cd765", "sighting--4950720f-2446-4546-99bb-1be9ae1e26d9", "sighting--e832a789-f068-43c4-8210-3491c69d7c10", "sighting--664db462-5c4d-42ab-a290-f122dc185088", "sighting--2fbfd26a-7e51-4e39-9dc3-9f80a0e4678d", "sighting--074b6bf5-4a9e-4e96-a7ca-8472bfe5ea98", "sighting--306cb3bf-ae81-43b0-b9ff-d1cdd06eca41", "sighting--70ec78a0-cc04-4a61-be0b-4e1f1ca3d1df", "sighting--2f6bdd08-4bce-46fd-8a04-8deef0909c52", "sighting--995a44b0-24ba-4562-bbaa-b63c9ac3f337", "sighting--17e7a125-3f0a-4e62-9e3b-31e072b582bb", "sighting--cce5de25-c9a0-4c99-bda4-a4a3d715f546", "sighting--3d3bcab4-bebd-4af3-b39f-5dcb2ada827c", "sighting--bd59620b-5db0-4003-9a0d-420ca93b21e3", "sighting--1c6ac0db-90b8-4a71-832a-28957d8d4b10", "sighting--2d84815a-d009-4364-b3ae-7a35b07826e9", "sighting--90eb7efc-80c0-4c05-93f8-9057aeb20b15", "sighting--cde8efaf-e8f5-412e-b8bb-8135e3777c50", "sighting--6bdebff3-9f6d-486b-9805-bf93e93114da", "sighting--dab93fdd-afa3-4251-aaf6-35ff0188e16f", "sighting--13820287-a509-4ae2-82c7-169947837260", "sighting--84d8fa56-4f9d-442c-9ffa-f41deeca8195", "sighting--50f5ca4f-8ffa-4db6-9c3a-91959dfb43d1", "sighting--5059bd34-ad71-4686-952e-36da59dbc8a0", "sighting--58cceff5-2b2d-4acd-9d19-5c377cc69a20", "sighting--b4e7b011-cc60-4e7e-aec9-e56d778d9d4a", "sighting--370a4ef2-8b83-4ec3-874f-2780d8f850a5", "sighting--72e4db56-6705-4a9e-a50f-330910fb2b97", "sighting--ee51a49e-a9f1-4592-974e-57522b25e78e", "sighting--ac0d1340-c1f1-4c0b-968e-0b7f41f92f7a", "sighting--3fa5d693-6e6b-41cc-bfd1-6936f0a0d388", "sighting--532884b5-a32e-4c2f-8045-ec8c1cb3d4ce", "sighting--fcbf8e0a-0d60-4bb9-8eb8-d24bd60ee475", "sighting--fafc2da8-fb90-4ca1-af9f-68f550e490e9", "sighting--41d41e31-9961-49c6-a148-dd5d756aa9be", "sighting--58b15716-d141-4628-bb28-7fa49ba675cc", "sighting--d43e34e6-2e83-4454-a27e-e9f7cc77e23c", "sighting--9630980f-4244-47c3-b8fe-bcc298456aaa", "sighting--17c4bd90-0536-4e62-b209-356146609679", "sighting--f40de8b6-f7d4-4241-bfcb-07f24c0c2ce5", "sighting--74648c9d-503b-40aa-ad41-e19e578d6163", "sighting--7333a58f-61fe-45d0-b069-3aa512f43581", "sighting--4374dcd8-08c8-4dbb-8f34-03d0789b0c02", "sighting--64c59a92-339a-4f56-8cb9-19ccb1a41ef1", "sighting--f6da0127-f8b1-4759-ba96-88a7a5773def", "sighting--083b8496-c778-4e45-8554-f4c5e835ea4a", "sighting--77791b80-689e-4a2a-82e6-39f9edb71380", "sighting--1df814fd-9f7d-44ac-8c89-7af73a8ad817", "sighting--77bc9f3e-f9ba-40d6-b63c-f9ba520b1f75", "sighting--a5e099ce-71f0-4e86-8e47-5cf50bde6f6c", "sighting--bf0a90ec-0d20-4a65-b0f6-249e996f60a9", "sighting--802dfb41-75c4-4e7f-b9e5-89ff77a2958f", "sighting--0854cccb-a134-4828-bf88-af89b7da9513", "sighting--4cae607c-8c29-4d75-aa97-2b3a7fb54e2a", "sighting--6ada64c1-cb26-4de3-a873-4595b2830621", "sighting--e1576078-7f01-43b3-8fe5-566f029b9cc1", "sighting--7b48e8be-b6e7-4508-bf0c-6a210d22d0d8", "sighting--4f811732-6d7d-4a64-a4c1-097c45fe4904", "sighting--439a666a-2422-41c0-b341-371737298c2d", "sighting--442f24c7-100d-49e2-9ed5-7dcf7b1ef440", "sighting--7a816cf3-21ee-49b6-9a5d-5a0581e4fb30", "sighting--fe2831e6-e810-4842-9539-6745386ef2cb", "sighting--9c0c6ae0-0cfe-4694-87ad-8e55cf292a62", "sighting--6193288c-2774-4893-9953-a76fdb99bd07", "sighting--3c37d9dc-4dde-4268-9970-4b622efa9a35", "sighting--96be1f0e-01a6-444b-a156-4354435d3bbc", "sighting--97cfe522-568a-4a3c-b520-0b502eed16db", "sighting--1513d43f-0fc8-4f26-91a5-32e96f839a9c", "sighting--2c8e378a-24b3-4f8f-b6aa-76b630e45ae5", "sighting--6cbacad7-7ddd-43dc-b57f-03b74539a559", "sighting--d109a044-c1e5-4fba-902f-87c554b7cbef", "sighting--d0455881-b8f5-41ec-931d-98a44057bc15", "sighting--17945aad-de18-4952-a8f2-a1ec63217a92", "sighting--561dd664-788d-42ac-bb4f-7f74caa6eabd", "sighting--591c0f5f-a07b-4163-90d4-a18f5111d01c", "sighting--554396a5-d2fb-4a5b-a426-b1b2702b6c12", "sighting--c445b379-86f8-4d13-bbba-d75c276aaddf", "sighting--44685816-e490-4372-91be-e3aceb2e9184", "sighting--ee344449-7e5e-45e4-8a1f-40ed523e7391", "sighting--e80fe310-0a77-48bf-aaeb-31d6d05f247c", "sighting--16848050-a124-42ad-9341-9713ff5cb614", "sighting--ae0aadf2-c46b-4771-8ddb-6879e547c6e4", "sighting--ed1898e1-eb1a-466b-a4ec-60ebde222d67", "sighting--56eca18b-b172-41a0-8680-47081f2580c1", "sighting--0c3c1f44-946a-4ae2-9e54-e0c21952ca43", "sighting--5d5ef041-1c4f-4bdb-8c7a-f3e86d8cb922", "sighting--67093f95-8352-47b1-a25f-0015ec0f975b", "sighting--133cb5e7-c063-424b-af5e-52ef9d10b050", "sighting--80305b1e-adba-4789-b8d0-1013c2212cba", "sighting--71b67cf3-9c33-44ad-8590-3134751183d7", "sighting--3e2366da-c368-427d-a1ef-6b4c8951784d", "sighting--c8000e2d-6323-4857-8103-cbc1ca2bcfa1", "sighting--bc014175-53e5-4dcf-9145-294f5952829a", "sighting--09fd2c8b-accb-48b9-8edd-c2871b4ee1d9", "sighting--8a35b896-af07-469d-a3bf-06dcfcabca73", "sighting--c131e946-33e8-4bd0-96fb-008eb7dd03a1", "sighting--def33f3d-a599-4e82-b3cf-4b1fc202d7df", "sighting--7d7f0cd3-0e96-4335-9cd7-836d84d4cd80", "sighting--76319b6f-fd9e-48c0-a283-e2bedf2db049", "sighting--1b6e7fb7-6e70-4c76-8a7d-e093ba062a79", "sighting--4e96bb7b-7148-47c1-bb97-bacc062c400c", "sighting--a4d3680e-e129-4566-a7a9-af50dc18f7cc", "sighting--8a6a8a05-2fc4-40ac-b9e9-9a93ff0e47af", "sighting--24165801-bff4-4204-af52-747a30784520", "sighting--d8137aa3-601b-4eb6-b3a3-3c68c2287e97", "sighting--669b07ad-d52a-4020-9ff5-af39b0eddc2c", "sighting--fade2403-8cea-4fef-9cf7-919d48b746aa", "sighting--8bb76f96-f824-496c-b4f9-55336dc8f9de", "sighting--5e8ac49b-5122-489d-9ba8-a23f69abc759", "sighting--0da88d14-528c-4262-8cc5-18e2100388b6", "sighting--6f1902fd-e272-4811-ba7f-fa43dd44c45a", "sighting--b414c2eb-d52b-4ed6-9025-1cef1704b07a", "sighting--803f2668-1ad4-4969-8c5b-1d483c2426ea", "sighting--fce9d026-b91d-4ffb-8871-e78ccfd59dbd", "sighting--b0513d55-f263-44d6-9210-709ac0cc757b", "sighting--3e91e56b-3458-4cab-801d-afa82b6e3bfb", "sighting--ac6f09fd-811b-49d0-b3f5-0975a855137e", "sighting--51abe4c9-d321-4222-b30b-88338ee45599", "sighting--01c933dc-9b67-4928-a36f-4e610cec1c16", "sighting--17a0ca67-da08-4eab-91f1-3a360dcb90b6", "sighting--1adc606c-33ec-43ae-acf6-0bd352b25d2e", "sighting--e641f04e-9e1d-4d2f-a4d1-5178cd8aabc4", "sighting--fe3bac48-bf38-4152-9e4c-23f9e6a233ca", "sighting--9eefa025-843c-4415-a05c-66de70ca20e5", "sighting--65964729-736e-4c23-bf79-2e4b0fb9515f", "sighting--6f9217ac-134d-4b42-8701-ce3691d73015", "sighting--1b532c51-e3ac-45f1-8c33-4eaa18b39af8", "sighting--efac801e-4064-4b45-ab8f-241d550e7fff", "sighting--752bb51e-0a53-4a5f-8264-d2cd80f63f4f", "sighting--baa6d7ac-6a3f-48ad-8c7c-23f2c41db58e", "sighting--8885bfae-2516-45da-b879-bd49dc97838d", "sighting--b9c200ba-bb02-4810-a3fa-b4197370e2b2", "sighting--71c8c55e-bc19-4bde-9a91-d0a8caced5db", "sighting--65101f59-6dba-4105-bd5b-235a947c4a31", "sighting--d2b91d62-5e01-4bea-9bbf-e985f230901e", "sighting--0c8f8c45-89ad-49cc-8aad-348271926a16", "sighting--8fc2688d-b44e-4de6-b73b-b52501839633", "sighting--df075983-b0a9-4fe3-97d0-aade4a8f0e3d", "sighting--d83a5b47-e0f4-4985-8abb-8d29de5696bb", "sighting--4ff4f2ae-462b-4291-a675-5e7cba9dec05", "sighting--14895eec-0b64-425a-babf-92766ff733b3", "sighting--f9d6011a-7aec-49b1-bc12-a80ba1ea0b39", "sighting--8b582bef-453f-4088-9c41-0c19f9e77943", "sighting--999c5d1c-ee83-4fdf-891d-17c0da77a663", "sighting--e5f87758-d681-4d2b-9e47-5d9a1a24c0ec", "sighting--c71d6c61-6de7-4c59-9d7f-a6200617b46a", "sighting--9af0063f-3ce3-42de-ad0b-a086e012e845", "sighting--e618ee7d-7fe7-4c05-aae6-f69afb13ec7e", "sighting--d9b97f5c-315f-4e69-b328-7f3b545697b8", "sighting--fb170e76-3908-44ba-a8d8-250ba8393b49", "sighting--7b373de3-62af-4c6a-8e3c-7882a8cd977a", "sighting--91e2741a-9d4a-421f-935b-2ef131f04e4b", "sighting--8d2dad06-fca7-449e-9f4d-e56b7ac39dc0", "sighting--8fa3523d-5a37-4b36-b9a7-cc452f6a6bc8", "sighting--2fffcc4d-26a2-4902-81cf-175464fb92f5", "sighting--1f877c44-0c51-4e9d-adeb-d05be1f3f638", "sighting--9624661b-79bb-496f-8f9b-755ba3e37ad7", "sighting--ebf98276-2663-46dc-9bac-fa01ba6e429f", "sighting--cda4fc18-0a18-4f33-b11a-cad410291917", "sighting--3c0d2e53-6a69-4f87-97b6-63a8eb883403", "sighting--b0dc710d-3032-4e4a-856c-178e3d454fec", "sighting--a29bffb3-0ce9-49ee-8c90-fcdd610b37a9", "sighting--0c7eb977-a2d2-4881-8820-0d15782f29cb", "sighting--ad25745c-2063-45ae-b188-14c109f1007b", "sighting--3e7535b0-0a46-4ebc-9e4c-0cbf8231f392", "sighting--ba777fa6-07a8-48fd-a83f-f936b155591e", "sighting--9c0be328-bfa6-4754-a69c-0c505e348995", "sighting--98e1a8bb-2bf1-4dbd-8415-0ce472b29f3c", "sighting--d4e632fd-317d-49be-8813-23a3e8920ba8", "sighting--ab425404-e65a-42af-91a1-0f16ea7462d1", "sighting--2dd60304-0ad8-41b2-891e-260c6ea78f0b", "sighting--8e2968e7-8afd-41b2-99f6-3f16f02d2d17", "sighting--982118dc-b6db-4e09-b9b9-504833d75b90", "sighting--5a232a41-3dc2-4014-b0cf-4a76b0ba6222", "sighting--811c4755-2d67-4e35-8ee6-ad7733f8ddb5", "sighting--80933e0a-4e51-4359-8122-4eaf9d08253e", "sighting--0ec5da00-6010-495d-bf45-b1bde600efc9", "sighting--d99ff71f-622f-4501-81b6-0dfd7ecb63b5", "sighting--4d905976-bd39-47ac-92b3-cbb50d5694c7", "sighting--21e22940-6122-45c6-b8de-a296070d1787", "sighting--17b468ea-e780-48a1-a7eb-c7f420f7651d", "sighting--01ee28d4-a003-4af9-a952-17b0c9e483fa", "sighting--17a46e60-8009-4306-b3ed-28645da0de1f", "sighting--ec517827-cd46-4362-92c0-3bb96c3b0795", "sighting--828d371e-6b8e-436e-be23-066425c6520a", "sighting--c2ca6305-b380-4889-aad8-e549ce7b8cf8", "sighting--e158d0bf-7967-414a-9667-d837eb27ab13", "sighting--e2abc2f6-5f23-468e-bb2c-856d0da17b7e", "sighting--6b5884fb-0814-4d59-892b-d81699138129", "sighting--f0201530-6ff8-4fb9-af4b-0b680f740eeb", "sighting--0c94d551-a3d8-4ec7-879b-ff4d59f17796", "sighting--dc684fc2-0d6a-48ce-9bca-c3a74854c267", "sighting--541497de-71a5-40ff-b7aa-3888265fd57e", "sighting--87382eb7-f9e9-470a-91e3-eca5a9ecf384", "sighting--0096c049-4144-4b6d-9f19-065e686fd9db", "sighting--2e09f436-8179-4d9a-8553-bf634425c670", "sighting--4254d735-40d0-4130-9e8c-ed9e4163a7fc", "sighting--e40ee787-6f05-45b7-bad4-d730f5b26c5d", "sighting--cfae7a1f-12eb-440c-9cba-6361c49dcc12", "sighting--5addb7eb-c0f4-444b-bd12-4c53bd9f47a9", "sighting--46e9e84a-9c58-4f7e-a972-2fd6bb19e3ad", "sighting--27d10ad1-85ef-4be1-a4c6-e2859246956f", "sighting--7bbc66a9-f5f9-492c-95f8-13d8aebde86c", "sighting--26e7336e-a32a-4c0f-85d5-a2f74e251386", "sighting--cc98f498-ef53-4d74-a4ab-ea544d2b8a50", "sighting--34641041-2d09-4353-8bec-44bd2e596666", "sighting--c1851021-17e8-4471-afae-826f3df32074", "sighting--3ac7c80e-cd58-4b14-9a6c-b0b022d56aa4", "sighting--d4e9c20e-2082-4b42-b936-e710a9c320e9", "sighting--818b2177-fdc2-4b71-881d-aa9649ee1e5b", "sighting--ed3920d4-295a-4edb-a657-75d21ca720cf", "sighting--686a9ea6-1358-4c64-989b-bfdf099b67c0", "sighting--21442e0c-e023-48a9-9fb1-68def2f3eca3", "sighting--bcec0802-f774-4fe6-81ef-4ebdcb15efa5", "sighting--8e49c5fe-6677-47cc-9c18-1e34735cb43d", "sighting--466882c1-0fee-4325-93f8-b70d3df27d24", "sighting--50c47b31-5848-4760-abaa-a0b060e6e0c4", "sighting--06ef2560-6fd2-4627-80c9-a25acad582de", "sighting--559441bb-bd34-4ec0-8d85-16e0687df257", "sighting--00f0467c-8536-4bfe-86e4-8badbc36213d", "sighting--328ff756-fea9-41ed-8cea-4c1f081478c7", "sighting--96963b6e-260c-4857-b973-a9a639dd896e", "sighting--4425582b-872d-40ae-a271-b73e32546343", "sighting--38e47c54-e4d4-4b5e-9475-8d1c973435c9", "sighting--4b48f7d8-00f1-44b4-8aea-057fdf058eb5", "sighting--4c513c40-a91f-4976-8a94-942afb324564", "sighting--328d6a24-9988-4157-bd83-125ec8760feb", "sighting--2b237789-baf7-4e42-a0fe-8575ac614f23", "sighting--c210b2bc-e88b-44c4-bec1-c0cc292eba32", "sighting--ef98eebf-c281-45bd-9f5b-7d925bac2779", "sighting--ef42d223-ba5e-48ad-9325-e4cb8e55bcbf", "sighting--73dd4c38-6794-4af8-b9c6-748034b35d9f", "sighting--32574307-83d5-4e12-95d7-d1c9a9753dcf", "sighting--7c7df51f-7496-495b-8fbb-f8918ac8a716", "sighting--0d31f741-b28e-44b6-b8a6-70b0356239c7", "sighting--e70a0f47-8e4e-446e-b3d0-cc6d4a9b2746", "sighting--ddc36643-3d70-4ce0-97c5-ae79e02f8894", "sighting--1e01957a-d999-4294-8ae1-d073dbb16098", "sighting--b76c98a8-987c-4b3d-bed5-473d6e7ab89b", "sighting--4ae2cdb6-1065-4c9c-b451-13aed53400ff", "sighting--e0348fe6-ce1e-48a8-8fca-231f5b26afdb", "sighting--f157718d-61b3-4c75-94bf-aee936f547ea", "sighting--6f84904a-9fb3-405d-abd3-e419e5e8e335", "sighting--2963a865-acbf-475e-88d9-8b9491134d09", "sighting--4ff40603-956c-4d3d-8756-fb9b57c4e3a9", "sighting--ccd6c1cb-c7d9-4d23-a2b2-27bfa070f11c", "sighting--0037b482-7c3b-4247-92cd-3ced58395fed", "sighting--7eb90e48-fff7-4bc1-92f8-fed75d3344a9", "sighting--236eaf52-998f-4c5e-a8dc-0cc493b43e80", "sighting--027e549e-da27-4598-9b6b-2e972da22d2d", "sighting--49ac8b38-9ffb-416a-b00b-8a74b9e9e6ff", "sighting--f2227792-c30c-4147-b7b6-931c62b8fe1e", "sighting--e5f118b8-ddac-43f3-bf38-eacdbe15c60e", "sighting--bfaca6ac-41f4-4f5e-b314-a912ea3c9037", "sighting--1d735a3f-9bcb-4ebb-9f3c-eb604487c9d3", "sighting--f09f249c-7c60-4786-b845-64c92daf3319", "sighting--796943e1-8dd7-47dd-bbeb-98245494c61a", "sighting--de887528-6ca5-422a-84d0-f6226b123795", "sighting--b2846732-1975-4cbf-885d-9cbcb30f6591", "sighting--b23d5eeb-21a9-411d-bcd2-434eae50c8c1", "sighting--2d2d8798-826b-469e-8d55-38965a932d02", "sighting--7f08dcc7-d0e3-4821-a32e-154d3b0fdc62", "sighting--72a93f09-7cf3-4ede-b699-6e899a6c6766", "sighting--089f082f-9458-4fa8-83a4-3efe50606b2b", "sighting--3b91c5c7-4992-435c-8f6f-727154b69ae3", "sighting--507db1c8-a56d-4d46-ad5f-079e8166f34a", "sighting--cd2ca058-fcd3-4dd5-a500-05d4bdc8ae98", "sighting--57e10b9f-2ea3-4f65-a073-91d5716c267f", "sighting--a49f54ba-22c7-4f81-bd0d-e1b376ecac04", "sighting--25740c81-0eed-4241-98ba-6a8205ade639", "sighting--4afbb0ef-1e93-4208-bdbd-a008202df506", "sighting--04b09288-b4dd-4afe-9ef2-0a7d56db9702", "sighting--f535c5df-dd20-424b-89fb-520c9c140cef", "sighting--12658d80-318a-4616-b89d-ccce9f715866", "sighting--d2dc3709-1454-4876-9a6e-d23848896c44", "sighting--063430dd-85ec-4909-b594-826be5345c16", "sighting--a5c36fc8-0faa-4129-8da0-fec7d6ad7348", "sighting--564c93d1-bc79-4c1a-b2a3-56b0c65d33db", "sighting--738f2467-bdd0-4da3-99f4-8a2a14b05e61", "sighting--1f76f78c-ffa1-41c5-b2d6-531a1e69f229", "sighting--4d5075b9-1e4f-489f-8570-8a855a2c0245", "sighting--5362100c-76df-4bca-94c3-3e268323097e", "sighting--9b290a58-f53d-4dfe-ac73-046412394e38", "sighting--a114552f-c28b-4e05-a631-9fca8f02bf79", "sighting--e5c2124e-980e-455e-a1ff-28144f915e4e", "sighting--3cd03d24-84d6-49bd-8a7c-117b2ece2470", "sighting--551588f0-e968-44b8-b2c1-64244023dfb5", "sighting--133cabd6-238b-46a7-b3c8-fa5ce7795c46", "sighting--0340d372-192f-40dc-837b-d3193a02b447", "sighting--af775a89-5ecd-4e6c-8ab1-4d100364832b", "sighting--e1efbe0c-769c-4359-9d55-44880351136b", "sighting--7af50077-d859-448c-b89d-40035f2dc56a", "sighting--2ca2d696-f9a1-4c7b-82b4-69d0ad8925c8", "sighting--461ce82e-19d8-41dc-bfe7-d7ddfb7c9f33", "sighting--43c46ec8-1f48-4850-a123-87726d1d2798", "sighting--fbbaec4e-35ea-4bc8-aed2-dccd94f5cbe1", "sighting--57e6ccb2-7961-46ad-a30e-ab75b2aeb3d8", "sighting--e14f2230-7aaa-4375-bebf-b4921596aec1", "sighting--343e945f-de87-416e-b2f4-e75680bffcdc", "sighting--2696eb1f-4251-4156-91f0-1c0e7e85850b", "sighting--a586d639-09ce-4740-9d7d-cd50327804da", "sighting--d8fa8e79-33c7-474a-9de3-76cf0a8476ed", "sighting--c95df312-cf44-463d-8ac5-08e5cb93b1ab", "sighting--1f4e62ba-83d9-40a6-bbb8-0b2e947eedf2", "sighting--2167cc5f-4239-4efb-a896-15597ec8a475", "sighting--157d642c-7312-4389-bd4e-b83d98b57f5d", "sighting--52cb428d-f132-4c3f-855c-4215662c41f4", "sighting--9b4ca1bd-ceae-42b1-9a8d-ac88d482c670", "sighting--43b2f0e1-fedd-44fa-b634-d1794ebafa66", "sighting--45251fa1-c265-422f-8287-6ad6f55e0c65", "sighting--ec680ea7-4c3e-4468-a494-4804abf6858a", "sighting--09891d84-cb4c-45df-94cd-310f40ffedb5", "sighting--4d728d1e-7111-42af-80fc-45fb9740f574", "sighting--6e96b414-399d-4bdd-b8fe-73d31c205c46", "sighting--3eeeb20a-aaeb-4f77-957e-63baa18b92da", "sighting--d493a2d8-8f15-4c67-968a-1e46fa852a04", "sighting--7322adad-d1f2-434f-b912-5449d784e077", "sighting--7f941217-887c-4b9d-a953-a7a2760c03f5", "sighting--f431a0a3-7ac4-44ae-8f43-041d6d5bd7e1", "sighting--063b7c31-c40d-4cbc-ad52-927a9978156b", "sighting--2e5f1547-8fde-43a7-bd6d-8668cd6ad473", "sighting--b6f4779c-e545-476a-a0f0-458bfa3caae4", "sighting--0ac8bc93-a33a-4ddf-a6b8-a05212c6f3e9", "sighting--64cd6fb8-34d2-46ab-87d1-5965c85dff47", "sighting--8fb49d31-0f8a-4af4-85f7-d8c30ae36bd1", "sighting--6f75b7f3-3149-43e0-b9f5-3b7eac935ebc", "sighting--1203e3b2-8aba-400f-9818-9e4aa930c694", "sighting--04737ffa-fdce-45d5-9d8d-1944ce36f8f3", "sighting--caaa6de2-e492-4853-afc2-4bfc36879fd2", "sighting--c4432a76-8a23-444c-a96b-441600392ed4", "sighting--6e40f182-40eb-4893-8b8e-83b4bfa9fb5a", "sighting--ba57dde2-0d63-4961-99c8-f94d6aa3957c", "sighting--affbd446-1ea2-4f31-9657-9104a41671be", "sighting--dfe4686d-4895-4d19-af96-9d5c563ada90", "sighting--7ce0d4c7-2406-493a-ac17-6fb5c4bc082e", "sighting--fe25a2ac-0c1b-4bbb-b778-f0a23a1af481", "sighting--7ddcee13-13ac-401a-936e-43ddb7685a98", "sighting--73d1e5ff-fdcb-432c-8ca8-ca7076f5c8cf", "sighting--029ce4c0-778c-4c91-8519-01c584167ad2", "sighting--9b4a710b-2e87-44c0-83e8-ff6aaa736776", "sighting--728d8b07-026c-42b7-b037-f3a99cb0848e", "sighting--8626fb7d-72c8-4287-9727-e07de0c21552", "sighting--21cf2492-6d27-49f4-afad-66df30bc2177", "sighting--fc90484f-abdf-4dd7-a217-6b8e1ec53f3c", "sighting--f1a79148-74f1-4711-8dde-7201802955e8", "sighting--be7d925c-5947-48ec-a8d2-571cf95a38fe", "sighting--358cda48-0867-4be1-91f9-8f18a332cd91", "sighting--2e83f55a-bee3-4b0c-9993-113ea1e1e3be", "sighting--f966ab3a-9ff2-4fad-be57-1ca6eef83e16", "sighting--7c0a7eb0-fccf-4b55-8669-3a6eadf8af6c", "sighting--db392d1c-10c5-4225-a7ed-76396cd72a79", "sighting--b9139a26-6efa-4502-a337-7214b4c9cc94", "sighting--a5ec65ba-db16-4198-87ee-1605fb32b68b", "sighting--d50fc1b7-3204-4f30-82b0-0cb8f809b498", "sighting--1f07a872-51b1-42be-a942-4f435f02c19a", "sighting--b7a4e687-c47d-418d-ae21-a191042994a8", "sighting--b6559cf6-dbf6-45f6-8c43-056414d75202", "sighting--1ee20007-728a-452a-8615-87dafb3fe0c4", "sighting--28ff37a3-f201-41ce-8cb5-9a6b1d9b4b1a", "sighting--ba0967c8-d56f-453b-b3c1-bd4ec43d104a", "sighting--56bf8c32-44db-44fd-b79d-b7befffe21c3", "sighting--3e36e223-b163-4988-8ec0-1d20c8b20366", "sighting--927adbf3-8e2c-4e1c-9ecd-0d2c1600e8d9", "sighting--e5c34e21-0748-453d-98f1-3227b19d622d", "sighting--1c8b1c0d-641b-483d-b8a7-15561e529897", "sighting--1d205b0e-6ce0-4113-8771-8e54b86675fb", "sighting--0fa78705-4324-4eda-8af9-a253ad2573b7", "sighting--c934e28f-605f-43a3-afb3-297ce7335d80", "sighting--1f1a435c-28e2-4ad4-8604-316345a9739a", "sighting--12141cf8-4f4b-40d6-a4bb-8c5ed17b7567", "sighting--6abf15b5-b21e-4852-9c75-87ec2418c715", "sighting--3245735b-77bb-40e7-b35c-d0349f831681", "sighting--f59d4187-461a-4c79-a044-3280fd3ba3ad", "sighting--56e9a42f-fa2a-4818-9686-529a60244400", "sighting--b52c1a12-1d18-4a9e-b397-814943bd1817", "sighting--e8d1589f-33d6-4f8e-98ba-ed61837817d4", "sighting--fc2175fa-e38a-4c25-88ad-81c4ddce1e65", "sighting--57e39dad-9066-46a3-b1a2-b1fb6c95f467", "sighting--3022a17a-ca04-4ac6-8f32-cfca36bdfe54", "sighting--eebec501-3290-459b-9ca6-371a4363964c", "sighting--8f1d3154-c2f9-4f34-867a-5b2fd9442024", "sighting--c14b8316-f4df-46f5-ba26-38422191dfbf", "sighting--900b1d86-298a-4208-b9f1-1c4f39d977ee", "sighting--61ab4096-e2fa-459d-89b2-6debb0d8a1c3", "sighting--c635bcf6-3837-4ea7-b1c6-618bc9512a8f", "sighting--70aba759-dd5a-4626-8823-aee2e1f90f40", "sighting--0e8f5bb1-930b-4078-8dac-b026731a602d", "sighting--5f804c88-28ce-4573-ada6-10d379c162b5", "sighting--94793fb1-a783-437f-a384-962a22986f87", "sighting--c739db98-c407-4018-93e4-987965412391", "sighting--b31c9a14-c119-432e-91c5-58be8131ca8c", "sighting--d4573083-95bf-4b8a-b2ed-d80292f7d3a5", "sighting--ac000051-07de-441f-885f-816e34228e5a", "sighting--6bc36adb-f80d-4af1-b939-df3dab0ba763", "sighting--d9bcdcc7-aa68-473f-a53d-c79049b7792c", "sighting--3a1067fe-75ed-451d-92b6-f287aebb395c", "sighting--070b57f9-3203-4857-a8a7-625dbd48ee5f", "sighting--6f9f5ac3-385d-481e-a6e8-fce0fe73b08b", "sighting--329e2c01-e399-4554-8b0a-748aa7b8326d", "sighting--3e368da6-510a-45b7-8d08-e023e8046bf0", "sighting--702231c1-abcc-442e-a099-c5cbbba8174f", "sighting--df7ae1e8-ad5d-466e-99cf-f9621e32e6e5", "sighting--cee36305-a41a-4e1e-86e9-af5c26bbfb8e", "sighting--d502dc89-d0d1-49f2-8b57-9f76a1710100", "sighting--ea517af0-ee45-4a73-904e-fb45ec06140b", "sighting--eea1bca8-840f-4767-b478-c9202b76c18d", "sighting--58fc64f3-8861-4558-9602-37988a8d6df2", "sighting--d96edb8d-7cd9-47b3-81a3-cbadcd02ef77", "sighting--69a71904-cbc0-4596-8705-4a387e3efa54", "sighting--29a56a8e-478d-4052-ad46-5e12ad1fd9af", "sighting--cdf76011-c46b-4f81-956d-cab8a33a85a2", "sighting--9cba8266-27f6-487c-aa75-cadcd29c8d4e", "sighting--8e41effd-6549-483b-bfc6-717ebc3aa41b", "sighting--73f456b0-2c7d-42b6-b28c-58da98522a65", "sighting--53508458-a2f0-4b5c-b281-2091d369787e", "sighting--3816a375-3cb7-41a7-aabd-82d19ffc2e39", "sighting--d4e592f3-91ad-4d68-a35c-a08a7e0ebbf0", "sighting--a71e5b78-e5d0-443c-87dd-82f8565c580a", "sighting--46c6b3d9-3157-44f0-a25e-165dd5e38cde", "sighting--0be1e3f8-66d4-47e2-b7a4-1ed2143c5ca5", "sighting--93667e51-91b3-4250-8d36-371a96cb8f63", "sighting--5da7f839-0d77-45c2-934b-dd8039dc97da", "sighting--fdec654d-6ffa-46da-957e-271a93e83336", "sighting--f916a445-00df-4a92-9d00-182f23b12a3a", "sighting--9f609c39-6551-4088-a8ad-6c9f0d89d918", "sighting--f8751913-1301-482e-bfa6-b279bc698d0a", "sighting--c34100bc-fc3a-473f-bb44-7ae3008bc400", "sighting--916e4776-b634-4716-a0a0-2ec4c0b335e4", "sighting--51ccdcde-551b-4f0f-914e-de0e696b8d5d", "sighting--a2620fb3-5636-4ec1-a986-52a53337c5ad", "sighting--53793023-b521-4bc3-9807-d74d327915d8", "sighting--cd30028d-225c-4b81-9222-4f2bd104ded8", "sighting--1aec7939-e789-4c42-807d-fb154a9cd10f", "sighting--10becab3-848f-47be-81b3-c6be976f2f2c", "sighting--c0c5ded7-6e20-4246-80c9-969c2f017e3c", "sighting--7b6e0b9b-8175-4eac-a73c-ddc19feb6341", "sighting--b01a5add-9abc-4581-b7ba-d5a33dd5704f", "sighting--ecb9b2d7-064d-4fe7-996f-fb9a0edde9eb", "sighting--d7003c43-d58a-4835-8c19-74944c2fc2ff", "sighting--f2bf2411-b945-4d4b-9849-5fde50799931", "sighting--3c36beef-41e6-4b2b-9805-721dd0d23e52", "sighting--d4a24a75-3ad4-46e3-b46a-ba823f76bef1", "sighting--8611e455-3b7b-4f50-9b21-6bbeb2b5929e", "sighting--96a30a0a-e5b7-42c6-9cca-4881fa0b3883", "sighting--6102cf5f-b7d1-48de-8f5b-1f8f322ea97e", "sighting--705ed2b2-3dd6-4885-b577-e1ef2361b14d", "sighting--dd8db275-17b2-4d35-b5fd-625be2ec813d", "sighting--f60f48f3-27af-4a32-82db-dd72410a6034", "sighting--5b7dacb2-8932-4698-a685-ae35ad5d5433", "sighting--93978e82-2335-49af-90e6-cc0f2e343a83", "sighting--38c12d17-c970-4b20-a979-47278f77fceb", "sighting--2415262b-6d15-4c59-9adc-4b1aba74cd8e", "sighting--e35bdb22-a934-46f6-9707-7d9aca8d559b", "sighting--901475af-e03f-4242-95d1-ffe352a27b76", "sighting--62069c7b-d314-443e-aa88-922cd64ba317", "sighting--653fc686-92a8-4d76-8a0e-fba783c9603b", "sighting--bd9c7c81-0b19-4c91-95de-32b28c2afd02", "sighting--e6c43cff-b3da-406c-95b8-a717a9eb40ff", "sighting--bcaf535a-d29f-4df5-8a74-9c20b4c63d6a", "sighting--1153e2d4-ac23-454d-bdaa-fd246ae7fb73", "sighting--9b19b7fd-f490-4c98-8391-7b2c012f7a13", "sighting--631a7651-517d-4afc-afa6-c05aea42dce4", "sighting--9d4e3cd5-b31d-4890-8cc8-0737bc34f133", "sighting--152224b3-3f1a-46db-b06b-f111b7228abf", "sighting--3412ef91-1e16-4752-8fa4-ecc8ee90061f", "sighting--1ca5d1c3-fcdd-464b-9bdc-3b2be7b0487f", "sighting--e5124b73-bdee-4e7c-89f2-e7caa046a24e", "sighting--b041e5eb-c370-46d6-899d-5f7c2a20a20f", "sighting--024d522e-0233-4620-8659-7bd763abdd48", "sighting--b94d90f6-236c-4ef7-af17-230bcbbb131a", "sighting--7a758352-dbf2-4a85-aa4a-351452d639fb", "sighting--59765852-fd39-4abb-9569-fc37814cf62d", "sighting--a15a5d7b-6782-4749-88b8-ccb2832439e5", "sighting--b5d91065-299e-4b02-9198-dd3ae5693a09", "sighting--c3c73513-b7d5-4113-9719-5a7c2c8aee70", "sighting--c76d15ea-f822-4781-9292-4614704a79a2", "sighting--22d0f0fe-2f58-4b7b-ab66-d09b3f535d3a", "sighting--409cb370-be21-4c72-9994-aa6d419e2a46", "sighting--67ec87ba-c098-46d8-805d-ff196ecd3fb0", "sighting--ab6bebfa-8829-4fbe-b6a4-41f7f79c2663", "sighting--56a2009d-7e57-4092-8167-da5e2a0bd30e", "sighting--e33fc0e9-304a-4f9f-b531-e114be1cd7aa", "sighting--ead57f19-ac8d-4d55-a36b-018dcb0d217c", "sighting--d0737c0c-0e7f-4666-bd85-3f619083f8a3", "sighting--b684eac8-c3c4-4967-8b42-8c555b117769", "sighting--a11ba027-3437-42cf-a3d7-5dfebc98eb63", "sighting--c014f2c9-8159-4f3d-84e8-85b78e180fd5", "sighting--d324bf37-a20a-4027-b755-ebd5493559ea", "sighting--3b159191-2cd1-43d4-a019-22a83e92b1ae", "sighting--3baedbe1-a6f4-4ead-ad9b-b359da9ea33e", "sighting--be52e378-1b46-4c27-9c0d-24c94dbec4cf", "sighting--acce320c-99e0-4d79-a149-48b3f3f70e6c", "sighting--7b785318-fa06-4f11-be7a-e035b4b5bd35", "sighting--fd1d2076-c789-49a9-8bb9-8c7ed297ce5e", "sighting--0a3eb6aa-7672-487c-b5cc-26444c217acd", "sighting--6a719be4-1b99-4943-91cc-3ed45e1932f7", "sighting--4d52e02c-7be9-40c5-9e4a-c8ca0ae23e24", "sighting--77da5252-e8b8-4d86-a4be-0e490718395b", "sighting--eb70dacb-ca33-4379-89a9-3caf78ca5358", "sighting--b98f02f4-50b9-4430-b291-1c064791711f", "sighting--87ff1b8c-bd7e-4248-8052-81ecc8a77342", "sighting--aa9bb0a7-707b-4596-8c61-a5d426cd4054", "sighting--aaf045c1-0171-499c-8f7e-7abcf4110223", "sighting--311c9b59-b328-4e13-95d6-0847d3ba83ab", "sighting--d73de4d6-7271-45d6-a55c-ff2730c32396", "sighting--704b2a0f-e1c2-4827-b93c-941e103e3381", "sighting--c2f0e34e-07ec-40b7-a8e4-ec7289696a3d", "sighting--25412056-1bde-4918-ab77-999a664bef67", "sighting--5605399b-0484-4c01-a9e2-20a205d6abb5", "sighting--f7fafb9b-4bc0-428b-8813-7af698718a70", "sighting--8392b4ea-2dee-40ad-9230-bc37e11958c6", "sighting--3ef4bd28-0da9-4062-9ef2-467c652b75ee", "sighting--70052696-37cd-41b0-a1b2-0f2e3ded0a2c", "sighting--c476a07b-d591-4207-b4dc-c34b385e5be5", "sighting--4bce42fe-43e9-426b-a0c6-93a91cb75933", "sighting--217672c8-7005-428b-8064-901ee2196fd6", "sighting--b7638b24-c612-477b-8905-5cceef35de70", "sighting--72f81323-1b7d-4826-a7e6-25a2b5db59a0", "sighting--6cce5e18-bd7d-49ae-91e7-3a2486526b94", "sighting--36420c0b-a068-44aa-aa7f-b7cf2f73f73d", "sighting--721b07b9-9e02-4560-b40f-b886919b9fe9", "sighting--dccf625b-d500-4173-a94f-801cf14c71df", "sighting--3b3ae2c8-355d-4a7f-860a-1222f85c6476", "sighting--801a5245-7606-48da-8e0b-184dec77398c", "sighting--a0e7cf01-eeb5-4005-ac34-73b6ee5c439c", "sighting--41813871-c4ba-45c1-9d57-b39648bc29a3", "sighting--a42acd3b-e7fe-40aa-a56a-7c97b197eafa", "sighting--4c569bf6-0b26-4432-a084-82053e6fdb09", "sighting--4a464832-dc84-4ee6-9e0a-b25560149a98", "sighting--ba8e1882-84c0-4e07-9ce3-da94314c8681", "sighting--315680ae-de27-4025-8321-dd5b4d62f686", "sighting--33ce3d6a-9724-4433-9bee-63a7f75271b9", "sighting--70a166b6-438d-4f30-88a6-8f5fb855dd84", "sighting--ee5fd3a4-808a-437e-9843-595b7950e8f7", "sighting--5cb9d952-25a9-459c-8e86-beb16f8f5083", "sighting--d9c7e3dd-1476-4503-8567-27d4fe6f37bc", "sighting--2ed44dcb-7826-46ec-86ad-b3ff6c2e70f1", "sighting--5da6727f-e9fe-4869-a4a3-502734055046", "sighting--2cefb2e2-f788-42cb-b593-cba3c37bf4bd", "sighting--94377528-d30b-4f36-b490-9070be82a26d", "sighting--1a47bbbf-a380-4f74-8416-b480d5f72a6b", "sighting--fac192b4-18c8-4439-b2ff-93546f326bb4", "sighting--f13e1f4b-f268-4bc2-a811-b83efeea7834", "sighting--fed4e9f5-49e1-437d-ae80-eeb1b3397095", "sighting--118933e1-6868-44b2-b495-95bb2d7c3f6a", "sighting--65182859-eef4-4988-aa9e-058500dd8b84", "sighting--1448e671-500e-4d5f-8b20-f8594eb6c33f", "sighting--e03db68c-1ff2-4da8-8243-ac2f28660433", "sighting--0e0d654e-4bc5-4760-9e36-4504891e58e0", "sighting--67dec07a-ea8c-4169-b399-99bd23042bb0", "sighting--3a929bba-4215-4f29-81d8-fbcb989149af", "sighting--af8a1b18-b0d4-4fce-9e22-d12161d72134", "sighting--920292e1-e57e-4158-9ac9-b9a7bf760f41", "sighting--5901fc2d-a87d-4112-9fb0-eaee6f555a5d", "sighting--f9dd52f7-76e4-4aba-b97e-9fa2eb71f3f0", "sighting--5a1c629b-72cc-4b45-ab0a-36567d4b86e0", "sighting--e91e4491-33c2-45d9-a5a4-0ade27fb8746", "sighting--4ea48ea9-3294-40dd-bd9d-b8e44697e36b", "sighting--a79fbfb7-38c4-44cd-8cde-49fe49b053b4", "sighting--9be87ffb-3f5f-4918-9d31-2a57f4677477", "sighting--51bd05ab-1e05-46ae-9352-4d3de26f43b5", "sighting--4b427013-2b89-40a3-93b6-1d47c08a6ccf", "sighting--a45cbf8f-276a-4dd9-a95a-31ccaef8823a", "sighting--991f5e96-21da-4891-9134-d0948fb200f6", "sighting--3d09d2c0-d8e0-4e06-9096-00b9ce04fd0a", "sighting--2b303d4f-2dc0-4e0b-b204-f3df609f27a7", "sighting--16e2e43c-7b37-4d5f-a7e7-2a46dc5111d3", "sighting--682281e6-cd85-473c-a2db-547ab3e89727", "sighting--d639cbd3-d9de-4c6f-8f86-89cd35b873df", "sighting--6017d1db-cf86-42a3-bd8c-daa7a2173257", "sighting--f3c4ef38-fea1-4b4e-819f-fd59d2809c08", "sighting--3bb4e7e3-f1dc-439d-b486-67967ddca5c2", "sighting--10768506-7113-4053-a00e-2983364a6478", "sighting--7c296b5e-0043-4da1-8875-2e53a2261501", "sighting--5dd75b12-bdc1-4532-8a4e-60a2796e2ed2", "sighting--230634da-93f6-4cdd-90b5-bd45f8ff18b4", "sighting--fd33cf70-81fe-484c-bc1a-de64f80afb5c", "sighting--a3fe3527-9412-496d-ae3d-70d456081552", "sighting--b862c5d5-e478-4e8e-b352-57ea6f35600e", "sighting--008637dc-5818-45ea-9a88-0ea7731a4b46", "sighting--4d9aaae6-64f1-42a4-9073-e4952bcba82a", "sighting--38ccdd65-ae28-4644-907f-dab03be4a1e4", "sighting--c6d686db-4757-4793-9e8f-81fb7c4c57d2", "sighting--2a719c63-1bdd-43e4-9357-203c738c5dc2", "sighting--9d4cd5e7-e969-4da8-bfe2-357f608f5b5a", "sighting--c19cf676-5b91-43d1-9845-4a0a00fd35cc", "sighting--b380d683-e22d-4b5c-a493-a26b4e64d581", "sighting--cb5627c0-f560-47e5-86b4-5fe0697e0939", "sighting--0593c412-a4ee-46bb-aa1b-b3d43377b597", "sighting--3fcb074d-a2d4-402e-84be-5d94481a1dac", "sighting--9cc1ee4e-d4ef-4fde-8998-d749cec4ca5c", "sighting--3005b818-c1e0-4f92-8225-027e6b459f2a", "sighting--495b66c5-7efd-4ee1-8c9a-6a964086e766", "sighting--7d4f3fe7-daa8-43b7-a3c8-b80448d91792", "sighting--81aaa3a4-bab4-4429-8f3c-3e008be22831", "sighting--9c9c0926-2e18-4492-8ee8-41167f10c4c7", "sighting--4fe2de09-b75d-4bd8-9d1b-44ac3b445639", "sighting--867dae66-0352-4bf5-93a6-06b35b52f605", "sighting--ccc9f12d-4a86-48d5-9bc6-ff8848f9408a", "sighting--cf099958-cff4-41d9-8796-ebb114565f9a", "sighting--17d0aaa4-04b7-4729-a659-e8fd5f5767f1", "sighting--45fa8661-f1ac-414a-928a-0c95a437f9fc", "sighting--9550a3fa-61e7-47bf-a8b5-9df0383e02ad", "sighting--570bde4a-b8bd-4a2d-a032-4eb725630552", "sighting--66a7b801-aa7e-4588-9872-a9d728a81a0e", "sighting--948b40c7-0ba8-4602-ba61-2cb64ae8bd42", "sighting--24bacd37-b35c-431d-8fd2-a06185a5d396", "sighting--58b54565-ad8b-40ce-91bb-e2d1e6a0dea3", "sighting--4b893af6-0b11-4150-8e1d-89d0abd8fd21", "sighting--a058c214-6fa3-4232-a4a8-33b5c2fd195c", "sighting--e787de3b-615b-433e-997a-31d4201649b1", "sighting--256d535a-e2cb-40ab-99c1-601dfc32616c", "sighting--eac458c9-89a6-44fd-b08c-7bf9827f0614", "sighting--dcf15c67-05f7-4867-a193-d884e3d4c98b", "sighting--24e4038a-49aa-4600-97ad-464a0651d596", "sighting--8ed337a6-04c7-45ff-a5dc-879cb82307b0", "sighting--2fce8893-deb5-43ca-8967-d4948c07e83a", "sighting--32f47d7e-c24a-4582-a109-9c0dc3341f42", "sighting--7c544649-0dbc-4787-8e69-dce7db51bdc2", "sighting--64064d4c-bb41-4787-bef7-d89dd1c53b75", "sighting--f5f870e5-197a-4563-baef-a686278a6a98", "sighting--3a1038d2-483f-4736-8c07-dc64f61ae99c", "sighting--5e373b2a-7b2b-4bc8-8398-1d5af6772c31", "sighting--b19b7574-7f19-4e38-afc1-f2b9071c028b", "sighting--8acb0b6c-31c9-4bf6-be63-effa8500da84", "sighting--5d65e86e-f924-4932-a24b-a27cc0fb7472", "sighting--9e50c281-23aa-4ee9-8e30-91617570d284", "sighting--305aa2f5-b999-4939-8e5c-9834f2c082b5", "sighting--ace157ba-e37a-4bb5-b3be-735cec7932dc", "sighting--11ca8d22-1364-4890-bf56-d95249e7d15b", "sighting--8680b0e9-39e3-495a-924a-bacc61fc3471", "sighting--8d7872a2-065c-4346-849f-d50724e8c1a3", "sighting--bf7d11f9-02b1-42fb-9cee-d3b73a575f45", "sighting--7e5427e3-1344-49f7-9381-6e49df911a97", "sighting--42786e2d-302b-4130-85d6-4b0d9c34734f", "sighting--b7622943-89a5-442d-a7a6-931d39176e33", "sighting--806a29ec-8691-474c-a872-3fbb9ace611c", "sighting--d338fe0a-24c9-40d3-84fd-ebd7904e566a", "sighting--92ab3dcc-7cbe-45eb-9d78-eee760e4235c", "sighting--36268385-d73a-47bf-8510-6dc9a9a3bc05", "sighting--8f2557cf-44f8-4457-afba-9aa3a5047feb", "sighting--60f11f52-4356-44c5-a61e-dd4a458fe6b5", "sighting--b640aa37-afbc-4f8c-94f8-220316e5dad0", "sighting--2e7f98a4-1c98-4baa-b546-b705a0eeb0ff", "sighting--709dd8b2-4750-45e8-b240-fdeedb6487a9", "sighting--be4fbb79-5bd9-4b16-a4ea-4e2e16034711", "sighting--7486a987-58aa-4c35-9a0c-095af7bff459", "sighting--aa8a774f-1a8e-4605-96a4-6f243c673ef5", "sighting--cbe0ea49-4985-462e-847c-523d3c7b9bfa", "sighting--e36bb98b-4b2e-4d7a-918a-8880f09eb20f", "sighting--802fcec7-cb7b-47c1-a16a-781a8a75c7d5", "sighting--702efcc2-416b-4f5f-9dc7-63517ca9b428", "sighting--b4d2a155-1860-4bc3-a0c4-0385a8312a13", "sighting--55ddfe4b-2e12-4d3c-a47b-da90e4fd02c4", "sighting--0c75924d-33f6-4474-9f8e-0058778550d8", "sighting--a728f8df-0170-4b6e-a5c7-96442439d5b9", "sighting--a9087234-8aae-4d25-bf9e-24ad60ccfed9", "sighting--31476bd5-6c48-4f5f-a740-8e531acd72df", "sighting--3f27e120-5e6c-40d9-a19b-de85e2cba09f", "sighting--bcc36878-a4fc-4525-b5dc-87547fb8b8d0", "sighting--e3160abc-e109-4f25-b4ff-3020330ec928", "sighting--0f4cb134-e39a-44e7-a53d-6a954ed27960", "sighting--a07be035-bc8a-40ab-8f99-59f840864dd3", "sighting--1e86b6cf-8934-4401-927d-d6fbb5fbc135", "sighting--551297db-c73f-4f0f-8e21-43d556eaba22", "sighting--1ac1fb84-54bb-42b0-a390-508ea4070b57", "sighting--a98d48ff-fd91-41eb-810a-cafe60979311", "sighting--1ce3106f-a5bb-49b9-b957-c24159199308", "sighting--7042e04a-f652-4f27-9b99-4240d5b82aad", "sighting--7a2e4120-4ab1-4435-ae35-7a68ef0c3856", "sighting--03fe4508-2c12-4d7f-9327-e570418e025d", "sighting--73b91b9f-fa7c-427a-a517-d8b37e64fcab", "sighting--66273ccc-301a-463f-b95d-e72380f45131", "sighting--c512f643-2e8f-4571-a0ad-9cdffce89da3", "sighting--9e67a763-6291-4995-bd36-5440f19d80a9", "sighting--2a190ec6-cb9c-4003-8d2d-7b3a9ce55907", "sighting--3cfc2b01-1e13-430b-8b4b-6a0d429c526a", "sighting--6587faf7-6bef-4543-bb4f-d178337da9d6", "sighting--f0f68050-a036-4e66-ac64-93e433ca7a85", "sighting--707ed233-8038-45dc-8e57-3da5a011cf74", "sighting--49f63b69-13ef-48ed-a0cd-4ab692b45aab", "sighting--957e1294-537c-4fa6-b180-3363f9a628d8", "sighting--3574e821-d691-4072-bef1-40c205c38d63", "sighting--9f8fd7cb-5d8a-44dd-a49c-7c93a4444b26", "sighting--939f69ef-a746-4006-a079-dc13771263b1", "sighting--04f0631c-edeb-4264-b5cf-17f742543138", "sighting--86b3f239-2a6b-403c-9e8c-b27ec8c0f7da", "sighting--b87e7e3c-8a8a-443a-818f-f808e3a263fa", "sighting--6545fbb6-9224-462d-aa28-2887cc1843ae", "sighting--f13e8603-ec61-4b26-832d-c83041a3062a", "sighting--c162bc6f-6b0e-4b09-8621-f20ae4245567", "sighting--31d6ee1c-0959-4bda-940f-d5cd9c4bcb0f", "sighting--15935def-fb34-440c-bb7a-41cdcac49310", "sighting--d2e5a6ee-34fa-4488-9cf3-dbf140ba7cdb", "sighting--748c6cf5-2648-4b7d-b705-f1c16938147d", "sighting--b420f882-d4e6-4e3f-a023-cc69fdd690fe", "sighting--e3af4f26-db6e-4f47-b20e-656efb8de285", "sighting--9e5aebf4-e780-444d-8633-45bdd9881e0d", "sighting--8b464012-0eb8-4c98-86b3-d83c759c57d7", "sighting--1da2b1be-8fa5-4f1b-97eb-977c9b7ea1ce", "sighting--15415146-2138-4443-8c2f-1649f8213b33", "sighting--54081f64-1663-4585-bff2-6f41de1922ea", "sighting--fefb9cf1-5c20-463e-897d-a6a2ba015654", "sighting--ebf9490d-7fbf-4c7f-9149-b117eda17907", "sighting--7f258f4b-d22d-4a0f-b596-ae9b43a701ca", "sighting--1725ae93-be94-4a4e-9f41-ae9e5681772c", "sighting--8ee4aa7b-880e-4bc0-9d3b-ed1ca19cf30b", "sighting--67c8c3dc-421d-442c-a1e6-3a85a8c62616", "sighting--d0ecf7e1-0e51-4d93-95a7-d2be236fc971", "sighting--4244e7a4-477c-4c4f-b52f-b4332a6cdb16", "sighting--a6adc1eb-6f93-4c68-be96-8ac63027395e", "sighting--f8d25baf-7088-42b1-9006-1e243e96640c", "sighting--6be177da-f875-4278-95ef-6972076ba4c5", "sighting--79ce90e4-2614-4d44-8d1c-690884fd130e", "sighting--68e89164-022a-4b64-9f58-7f893931a432", "sighting--0b9b1158-98a7-49b3-b539-c26757ce0155", "sighting--3f8fca78-3c28-4855-af12-30ff15a38e21", "sighting--f64c38c5-6a91-4ebd-b796-464e83da4778", "sighting--a7a88546-cf23-452d-9dcc-b4e49db7fee9", "sighting--3245a541-bb92-48d7-a5cd-4e47448161ed", "sighting--5807cc0a-44e8-4c00-88ce-9eed32b59b21", "sighting--c145e0e6-c493-4661-bc21-41b2ab607f04", "sighting--afa7178a-c8a6-43e7-98d9-576d21edc271", "sighting--a3b293dd-1a9d-4020-aee3-51f858b622d8", "sighting--791b419b-1536-4319-b638-3d60fa12a32f", "sighting--1c5c3f2d-ef7c-471a-8acf-c3b4375d5623", "sighting--3362b6c2-ed99-4b30-83ba-1a7acff70b3e", "sighting--6ca8b34a-8777-471b-b15d-9edd2c692de7", "sighting--639eba68-3431-4f2a-a5ab-8d1dbf1e28d6", "sighting--e17ecdbf-0abf-4214-a0d2-bf2d89c6ac41", "sighting--80165371-e81b-4e76-ae93-4760b9820086", "sighting--a4fa268c-38a0-4b2c-b485-430858000003", "sighting--c38ecaf3-6538-46d2-b015-216ab6d93b18", "sighting--a907bb4b-52e5-4e01-80f2-6b28900e6b92", "sighting--258dce2b-8758-4e10-b1af-d00359b38a49", "sighting--41107949-9cf4-4fa3-bfa4-1369f57c0b47", "sighting--72cd6e39-d495-4035-93ac-4b12a97f4973", "sighting--a2ae26d9-eb5e-416b-bba5-052e05bedd3a", "sighting--f93489d4-54f7-49fc-9e91-d8872a9b4ea7", "sighting--6432de07-8b89-4879-b776-0f7a3ec79bda", "sighting--aa0fecf9-435c-418d-8b9f-a77efc643623", "sighting--49166049-942e-4a72-b296-cd456debc6fc", "sighting--cd0746a8-aaae-474e-a92f-7ea9b82d30dd", "sighting--573f8c47-3165-4108-8820-fc0c4217b482", "sighting--a2e7affd-4472-4587-a76a-6f3e8f445e3b", "sighting--39342cc1-f625-40a5-9e7e-d0df58c1c238", "sighting--97115e56-27dc-439f-b6d1-7b3cd28fd7e9", "sighting--c64b111d-e70c-4489-9c8c-9cd6272ecd67", "sighting--d124f89e-7091-46c3-85f6-5e82d6747816", "sighting--0bce35eb-9c31-45df-9eb0-f595a73ffff9", "sighting--9c7d9729-0fa0-42e8-b43b-d1483e916f91", "sighting--dade2152-0d22-4f7c-954a-7aab232a4981", "sighting--d4a4f243-0858-4bba-88dc-5c67a3affe13", "sighting--bfd11749-fa23-4517-9bf0-dc2a005ee676", "sighting--9f18649a-5820-4e07-99ec-bd2525ee1a81", "sighting--31c9369f-4d63-4aeb-9658-d12635130683", "sighting--9271e67a-6b7f-445d-92ec-837c4efd4309", "sighting--09aed675-c415-4edd-9af2-6b1397a95e84", "sighting--969c7d97-ff76-4d50-b18b-9209b85b7b18", "sighting--c1e9bebe-b135-4c8a-8e5d-0b57b7f52575", "sighting--162f64eb-6051-4db4-8fe4-d522e57f98b3", "sighting--ea663fdc-0813-4040-97a2-ab319877e1c1", "sighting--aa412800-44fa-4fbe-8c97-5f6b5fb7e68c", "sighting--1e8bac69-4534-4e47-b650-92138dee09cb", "sighting--da50d061-d288-4c5e-9b14-e47d92c0f411", "sighting--355154ac-6e99-44f6-9caf-f1b908d210d4", "sighting--a81c45ad-95ac-4d2f-8985-54ceb7417fce", "sighting--2cdc50e5-a1a3-48e7-8031-0d45521feef1", "sighting--e148a751-937b-40ba-96ea-ce102251e464", "sighting--89d947db-afcf-4160-9425-7e523a75c853", "sighting--eb9c896c-1a78-466f-9d7e-b5dd234f8245", "sighting--84b703c3-f36d-4ffd-8ff7-7eb742d1bb3b", "sighting--8b10f5dc-1d26-4713-bfae-484a222d6c1f", "sighting--a1a814cf-aba6-43fd-b838-2bd8403a57e3", "sighting--3801130e-172e-40f5-88c2-2a7e8f40ad16", "sighting--271e7cb0-cbc5-42d4-ac20-e277bb4b11c8", "sighting--f054c72a-e93b-4f52-93e1-2dd6cff6a5ee", "sighting--a80c6d7b-f857-42e1-905d-f300eae226db", "sighting--9f902ecb-1b08-413e-b754-4c7bdd02e379", "sighting--7cb19cb1-2ccc-46be-95d6-45538d4c6821", "sighting--c5d99b7f-d52b-4111-959e-44f3ba9b35de", "sighting--f51bf4ec-375e-4d23-8f23-67d03c746f60", "sighting--c11b4c8d-e622-47bb-9c31-ffbacf82744d", "sighting--64361a25-c7d9-4bca-a767-7f4912a7b450", "sighting--2f7ae93c-f5e9-4f9e-b237-b3b69a510870", "sighting--f1d85e59-abaf-4c77-945f-73d451c9dad4", "sighting--ccbd4fbf-104f-44ed-a362-5da4933344dc", "sighting--f2a7120d-383f-4c05-8dd7-025a49bab66e", "sighting--7ee43239-5d74-4da9-8c6d-e32c0f2b7ee7", "sighting--cb415793-1b7c-413e-b251-88c12cee6b8e", "sighting--dc8eb693-7ab7-4c00-bd14-4d3e9eb369b1", "sighting--4da4f7dd-46f2-41cf-a4ad-361cd60a7f35", "sighting--897cbf9f-f586-4a1f-8560-8ef13cf07223", "sighting--517402b6-b38d-48fa-a89d-431f4c3860de", "sighting--08e777b4-71f7-496c-bb39-c790c91468f1", "sighting--fa5b9186-b9c6-4026-b161-972304bb61eb", "sighting--2732f6f3-1ab8-4f65-8ac6-36a95bb3cc1c", "sighting--17841393-fcd0-4942-847d-56e0cfb46797", "sighting--27a2f2a6-d252-448a-98c7-bb96e3ea7e83", "sighting--4ddffc5f-6947-41be-b4c6-cba72c2e79a8", "sighting--7f3ac221-6fab-40d6-931d-1ce9feb274d8", "sighting--fd7feac1-6a01-41a9-befa-6a0ac20bcd80", "sighting--bc5e3346-b021-4aab-9e10-53209bf9fb3e", "sighting--01df281c-1dfe-447c-ada6-1c0c8b12f78f", "sighting--3b23fede-fba0-4c54-8289-e4df2d4cc978", "sighting--7b1be37b-0e5f-4cfa-9a06-12645db5373f", "sighting--9ae7d1be-150e-4648-a592-82a98171407d", "sighting--3d9e59b8-ac42-4a97-b483-4ff6a47e33ea", "sighting--01ac597a-add8-4b25-a77c-e605ad769b6d", "sighting--25dd1721-d474-4306-9dc3-265af2149002", "sighting--506ce5ac-7cec-4c79-b512-5de8da6a9846", "sighting--b34b4ff6-f135-490e-a2af-5dd7ad4d6fc7", "sighting--4c42804c-dba3-4bab-a307-34790e33c46e", "sighting--82eb1c48-d575-4c7f-81ce-11ac4d1baef8", "sighting--96026c42-6aaa-4ef2-b33a-0c5ea4c10d34", "sighting--a8edd035-63b5-4a3c-bc66-c29e3992992d", "sighting--0891faf6-23e2-4392-8ed1-76046cf8e351", "sighting--4920ea07-57ff-438d-8cfa-dc75c93fc3cb", "sighting--2a9b752f-0330-48bb-aa2e-bcb963fbc488", "sighting--7d7aaebc-1070-4efe-a5e0-da39d4f2ecb2", "sighting--be0cd3f1-dc85-46be-8b66-772d46f3f1d1", "sighting--a01c7b9f-77ac-4a0d-9ce4-581b947144a9", "sighting--c24e32a3-2a78-4cde-99eb-f4ba6385a147", "sighting--a74b00cf-3fc4-4420-ae3c-056aed0c9b2f", "sighting--59b9ba86-a9cd-4644-bb81-53e0229881a7", "sighting--99eae043-1cfb-4363-85ac-282afa8508c4", "sighting--faaad49b-0105-4089-8769-d8076e9e1ced", "sighting--5961bde4-eeec-4f17-8652-b40e2ea23c50", "sighting--56b36267-5609-4704-9f5b-dca9a8a9b839", "sighting--12439a05-e22e-4473-8232-be2f905a3450", "sighting--9669206a-d274-421f-ae56-3fdf833b0235", "sighting--2cf7b844-8309-4674-b49c-a672870c33be", "sighting--4c19179d-6e02-4a80-89f4-a846fbbf502c", "sighting--b73e360d-1d63-4d9e-a46d-2ebf449a6d1f", "sighting--51330fd3-51c9-48c9-b686-56626dd0cc58", "sighting--7c484746-f44c-4136-ac9c-558779f5f624", "sighting--26c71aa2-9dd5-411d-8ff2-6921a4a3919d", "sighting--675c354b-e823-4035-868e-7c343db87ff5", "sighting--040f263d-b854-4d8f-8d69-b704e250c029", "sighting--d7916142-d7f8-49be-a02b-036cc4cccc7b", "sighting--2c1967fe-506a-4b44-bd14-5faf5636977e", "sighting--b349481d-cab3-4700-92fe-b26ec5952ce7", "sighting--5aaa0173-6a3d-4908-ba97-59607c10bc3e", "sighting--e3476c40-1cae-4a6f-93ef-c3f93aeffc32", "sighting--ef18bd53-3227-4588-8ea2-016b8a3b3fb8", "sighting--dff564f6-c5ce-46eb-9a91-9130807a491a", "sighting--1319be11-b84a-47c8-af16-a4f07e38111d", "sighting--6b729ce8-3ba2-4c59-83b1-48cde914da4d", "sighting--11e2bd67-f712-4640-8355-d4152a1f5d7b", "sighting--c5d26f97-72d4-45c8-9437-616f784d0804", "sighting--5047ae0a-2e96-44d5-9a4a-618d85627ecc", "sighting--c1bfa76e-cdcd-46d5-a0dc-01f4c4f1daab", "sighting--9fdd36b9-44ae-422a-b623-da044b1fb075", "sighting--9b6472fa-c6f0-48e3-b402-318fe6982969", "sighting--bc68495d-31b3-4305-a370-691ddaf6110d", "sighting--1c73bf08-2ff9-45a7-a774-0aa1c82dbb68", "sighting--7268b940-5433-4392-a4fe-b70380b91e5f", "sighting--d4b43707-744a-4ec6-86a4-2a38136944e7", "sighting--57c52c46-1343-44a4-a734-5ff83b70d03a", "sighting--400f330a-fcde-40ae-8170-b24223107ee3", "sighting--40e318df-7719-41bf-b9d1-51404715de0f", "sighting--e8e73a27-f67b-46f8-af73-e61369957139", "sighting--ad0c25f7-3eca-46b3-8fcd-31b2ca418220", "sighting--b0564a6c-2313-4948-8d65-76a2a62112c5", "sighting--ff55a26f-924a-4b76-b94f-df9694396720", "sighting--81f207b9-e147-43f4-97f9-fe5458f5c8fc", "sighting--c4eb1b5d-51d5-45b6-b57c-0c8560395c1e", "sighting--62881bd6-24a7-45fc-ad30-3fc6da3e4e50", "sighting--dc37bd5a-bbab-4dad-9fa5-001912c14af4", "sighting--8977dd42-4354-4d7a-a7cf-a1d6c7267dd8", "sighting--fab6b117-3098-49dd-9b3c-91e418056ef4", "sighting--1564ed54-9fb1-4149-b2da-381d4fbea3cd", "sighting--11d01c2b-03f1-41a1-8f9e-688f16313a1b", "sighting--8fbef90d-2f7d-4435-bfcc-3e9d1bccfd2e", "sighting--ae76fd5f-da42-4592-8ea7-5324d290bee0", "sighting--1a39feaf-25b5-4e8e-a205-ace37604f0be", "sighting--1001dc8d-7194-4557-9555-b56467a5247a", "sighting--fae762db-52b4-4c99-a356-5c547509157b", "sighting--d9cf124c-9946-40cf-84e2-9456a887de7c", "sighting--2d0d7cd3-e91e-4cd5-8024-870c6ecfa14e", "sighting--f0095aab-d3e8-4a1a-8d87-e1597c033b23", "sighting--19c2df40-bd1b-4af5-9611-d63629b72c15", "sighting--08adcdb7-3082-4b66-b648-d11a56faa8fb", "sighting--fb5ee245-792d-4a47-9359-8c336de9bc9d", "sighting--dc0e40c7-e329-4d86-9a37-3bde74fe5428", "sighting--4cd15d34-2fad-4084-a836-64bcf4195e43", "sighting--8249edf3-ff33-4f54-9f9b-5bd3e87c9731", "sighting--d198e0cb-06d6-483f-96df-42c46ea504c7", "sighting--2a35fbbb-616a-45e3-ab05-8ef1afa4d23f", "sighting--7ef57d08-912b-4a4d-9beb-6ea2932ca6fe", "sighting--5182e7fb-5a32-4b3b-9073-c5650aba32fb", "sighting--0e1d8967-da86-4af3-87b6-ed7c75926402", "sighting--df7f0e4a-5bf8-49c8-b012-3c9b9eba1046", "sighting--8e157366-edb5-4915-bd33-97e3ca1f8ffc", "sighting--43eb927e-7c5e-45a1-9011-860a22d86e21", "sighting--99ddb9cd-dbeb-4f10-b63c-0e1f154ad9ba", "sighting--b5765aeb-9c20-4b0b-acd0-6a5882530c60", "sighting--1547e383-ef1d-4d90-9416-58995f266362", "sighting--0cf847b2-2590-4464-a57f-b15dd4e71346", "sighting--5059e1cc-a4ac-4912-b132-6b5e6bfa0226", "sighting--d14f5ac7-1153-474b-8240-43b9ec4517bc", "sighting--2e8d4acc-b192-49b3-9f04-3b567987d204", "sighting--3f7d3dc1-5f0d-4280-ba09-51f2b586ed40", "sighting--2e2a86a5-c68b-4eb3-9ba5-c7233339aaa9", "sighting--b62a2c8d-2bd4-457f-9973-1d07779b6397", "sighting--8eef9f5c-1656-4bcb-b11b-2446145e66b6", "sighting--9ab780d7-7607-496e-bbe4-b617096ec44a", "sighting--377a34f0-1dcd-4a66-beb5-b27ed83836c9", "sighting--dde67de5-f9fb-431a-8bf5-1d5b9980cc23", "sighting--112c5b9d-dfe2-4559-9853-f935380bfc74", "sighting--32408b21-3936-404a-aff4-513d165a1848", "sighting--84b8b910-9671-4ea1-afbc-e5a48a996db8", "sighting--57657a5f-8540-439b-9ce6-9a488238aeb4", "sighting--d0dec323-4cd9-4f48-ac0e-5baaaec4a102", "sighting--c869f79d-8dd0-4088-81f5-6d2c799af36b", "sighting--765bf9c3-5293-4d4d-b1a3-d583879f1958", "sighting--78b05709-1f1e-48c6-9072-d8b438a4f63f", "sighting--25862864-3c25-402e-93c6-9557bddcbc6a", "sighting--6da49070-beb0-4564-ba09-b01b1aeaee7c", "sighting--6add7e8f-0eef-4de8-b922-d1b18c13ed5b", "sighting--897beabb-f378-48ba-937a-a2e0288745dd", "sighting--0ca0475e-449f-46d9-86c8-186ed8868712", "sighting--42511e05-9816-40bc-86e6-3c1b70221894", "sighting--e83c4434-87dd-4ceb-bd43-daa3e19d7361", "sighting--ffeb8eb1-19f4-4053-b45d-5f2319531922", "sighting--22ca545e-32c1-470d-ace1-aea232f81fb1", "sighting--a53b73fe-9723-49a2-91af-d4634fc01ab3", "sighting--4bb98d20-9f9a-4717-a69c-f4b197eecdb2", "sighting--3c6d9979-f447-4f03-902a-a7278c9c9ad6", "sighting--26c2af94-7275-4cbf-b611-0957fc5dd5b0", "sighting--ab176f37-3de9-41d4-abc2-24e8063b18a6", "sighting--5f66528e-55df-4075-ba00-56e0abb49c37", "sighting--3e6dafb8-a331-4f1b-ade2-92caa24ccf05", "sighting--0798adec-b166-4f1a-ac43-52608819ca48", "sighting--e7b3eb3d-4c2f-4c15-94d4-63355cc26fe0", "sighting--fef86432-2e6d-4e60-9e1b-3a062cd54788", "sighting--01836504-1ad4-4fde-b537-756f511ec8c3", "sighting--48924e1f-7cdd-40c0-952b-a033bfa11011", "sighting--a4c58e7e-a1aa-4431-b859-b7ca86050a78", "sighting--4dba6d70-3d9f-4ec7-964b-e7ed69dedbbe", "sighting--6e4687bd-5960-4404-8cda-92dcf7320c07", "sighting--28c4cc0b-b737-4c2b-a3a3-8cac540bae33", "sighting--5816bb76-e178-4ac9-9e90-324ec4c664b7", "sighting--d921ba6a-138e-427e-9ddc-969a281574f2", "sighting--0327bc75-61da-424b-99b3-d3be4d90b7b8", "sighting--f4cb41fe-33ac-42f7-966d-1d6b6b3c7677", "sighting--b49e36e2-1114-48d8-8a07-44cc5f64a7d8", "sighting--398bc4a5-acb1-4585-abaa-da2d4afe1a16", "sighting--1e41ddf4-bf92-401a-beaf-00735bd7d918", "sighting--a186bd22-9ec5-4d2e-939e-1556b6eac902", "sighting--4c21da81-875c-41c6-94a1-c10652846e35", "sighting--4d0715c3-f2c7-4bb6-9caa-52adb00933c8", "sighting--7040e3a0-d0ca-4360-8545-f0867b9458bd", "sighting--f2e58027-500a-42b5-b8c5-b039a9e0c09d", "sighting--255dcd38-c4f9-45b2-8563-ce0eac1dd3c6", "sighting--50b9c481-26da-4808-8648-9e20d3043294", "sighting--8a0c0a3d-7d56-47c7-a02c-2121dc0a73f1", "sighting--152fb2a8-6c9a-4f6a-93ea-c3461e0ebe01", "sighting--0442f174-7675-4326-9359-2ad71b17b795", "sighting--7b6df9d6-1719-4eac-b846-a746fe6754cf", "sighting--08a7026a-eacc-47b2-a57d-5dc87e3dccdb", "sighting--75ebdfa8-d596-4e9e-8c6c-ee9b2e64afb4", "sighting--6ca4cdf5-5ed5-4149-9d92-ad9861b622bf", "sighting--a8ff6b68-425c-43fc-b5a5-cdcac31d7068", "sighting--bc1f05a1-a1c2-44cc-a926-17f9d51c4e2e", "sighting--bcce24c1-c0e8-4875-8720-3e2a7dac50ec", "sighting--f29a18c7-c000-454b-86e9-1f8c43d779d3", "sighting--dabbcb77-1d48-4446-a370-a36903df16f5", "sighting--879e8d67-630d-4d4f-86c0-9587caca2b72", "sighting--c38516b6-7465-4fb2-9589-cac66f58d292", "sighting--3adde3af-cd17-4f36-b3b5-7777bb5fe285", "sighting--100b71c6-3746-4bbb-b550-cc4aaad9eae2", "sighting--41c3ffec-acb9-4bf1-a608-9b0481b53a16", "sighting--91f373e5-46db-461e-b34a-92ff21b903e9", "sighting--9f37d472-349a-4891-882f-396269b700be", "sighting--e2040dbd-438e-4b76-b204-845fee6f7d97", "sighting--d043850a-4995-4dbf-b580-aca938be82b5", "sighting--a57fc5d4-70f2-4c0e-83c2-f97230dc0cc3", "sighting--194ed78b-524a-48d7-b195-640cd2d045e9", "sighting--b61a9099-e022-4b57-8c3b-7c2f60620a94", "sighting--68fe2656-4099-4fdc-b52d-f6ea4a5f405e", "sighting--400d6190-0ca6-487a-b56e-6e7f601ded11", "sighting--cfa310ae-4187-4191-9a70-68bfffa1d66f", "sighting--cafdd7de-acf2-4ed8-81b2-a9d59ddd8988", "sighting--99e1acd7-ede8-4253-82d1-1e90aa6272c8", "sighting--432b5fb6-907a-4b6f-82d3-9c2fc8d5270a", "sighting--6f19fe44-bcb3-433b-954c-c850f862295b", "sighting--d0502d10-f625-4b6c-ab6f-2ec06615eace", "sighting--7513e38d-7410-4875-b4d5-fe08f6a3949f", "sighting--14fa202d-e194-4385-bddb-39717b420925", "sighting--af6ff239-25fc-478f-9aac-1542918ed901", "sighting--9c909c9d-5332-4af0-ae88-896194e15720", "sighting--ad494250-94f8-4192-b646-0fb1f98eda47", "sighting--4205ec22-72ba-4cfc-b8a4-e1a4af5f14f1", "sighting--91d89b9e-3101-4a81-9dd1-6987169a926c", "sighting--eeb80c0d-4871-4089-9352-56a2ef628f0e", "sighting--169243d1-f1ab-477a-ba23-24eeded28c5d", "sighting--6c0cc1fc-2d07-4d35-a0d2-db4d4de9bff4", "sighting--d9db8949-e3c9-4979-b520-5b7029c2ae6b", "sighting--dcd6c983-185c-4f3f-a01f-3057308c4ffb", "sighting--cc683f49-1f17-40be-8fd8-2dadc21f52a5", "sighting--263c8caf-1c7a-49c5-92e3-50589990f5d7", "sighting--4b05665e-3200-4a87-81c0-4c4b31e031c6", "sighting--62d21e4f-86fa-4cd4-a5e4-1623cfce19a1", "sighting--a2a3efc6-5753-4001-ab2c-e911f1d0f471", "sighting--547bd1af-f36c-4471-9865-07dc126e4c8f", "sighting--2432aeb5-57c6-4edd-9a4c-1a2b1f2fb013", "sighting--7855ca73-f309-4374-9a7c-471a2a2bb870", "sighting--ef1cd69a-8378-46dd-84e8-12163387574f", "sighting--27094998-1f5e-47af-9c4c-35b9ab7f67ab", "sighting--0b71472a-b456-43a4-bc70-3c0df7abc275", "sighting--2ac3c893-264d-4afc-bbe4-41e91352a675", "sighting--14c5bffd-d1d7-4824-9104-897e00b06408", "sighting--9e3dad74-c182-4b5a-86f3-56298cefe664", "sighting--a743be3f-81ef-487a-bf7f-ca1e39d7354e", "sighting--5397c743-245f-4715-b772-7681bd1e127d", "sighting--1525ff76-b135-4086-9184-555803f5700b", "sighting--ab8672ef-e7bd-4421-83e5-c1553128831d", "sighting--29cd5dd4-ff6e-4b2c-aa4d-b1779e531200", "sighting--17fce489-1a1d-412a-ae60-40ada64edcd1", "sighting--07579294-fd29-4ef6-b396-05fc324e1d16", "sighting--28901396-6782-44f3-ac61-3922a9c6171a", "sighting--09f21a0a-fdf0-4fff-b226-5026a8de435b", "sighting--3da5f777-7988-4b1a-8b33-89e8918aff31", "sighting--742d9a03-2d4f-4348-8fbc-3217b08e94be", "sighting--fc65c868-0164-4256-960c-ee1a29779dc0", "sighting--256a496e-be5d-44f2-8536-3d2209554249", "sighting--e5e2eef8-b0a6-4156-953a-5cc02577710d", "sighting--8b5a74d6-dc26-430f-b61a-0efd1090c87e", "sighting--47910ad1-9fc1-4e15-a511-0bfd3e5c9c26", "sighting--c7147e47-4537-4a6e-8d7e-b13dd2d2ae35", "sighting--91198dcf-a636-4b27-9419-777ce3436095", "sighting--8150ae73-b29b-4452-b1df-74c38fc70b8f", "sighting--d380cca5-18b8-4847-8059-cf36fae99a4a", "sighting--073592c0-ec80-4400-840f-1bead8aab390", "sighting--d7359068-a0b5-4eaf-8656-204e15ace122", "sighting--69d270f7-e76e-4fe8-8063-b91a606bf185", "sighting--42d37f16-91b8-4ded-8d0e-83b72787b6b8", "sighting--f5dfe3db-760a-4572-806a-33b070a12cd6", "sighting--ac21bca4-923c-4963-96c5-405a5b7aa036", "sighting--95b415b3-2cf0-44b2-aa66-ee22bbf6c4c4", "sighting--d3256404-3a07-4e25-ab68-040431f58e21", "sighting--1de9e4af-a780-4ddf-9665-dc00613e71ed", "sighting--e154d9f3-6b26-472d-9742-d346606e68f9", "sighting--b0806118-e599-45ea-b40c-1e6cea907abe", "sighting--4de0cffb-bacc-48ea-950e-2a95d879d471", "sighting--2a5bea3f-c000-410e-b36d-c3f50cc54196", "sighting--67c4651f-848c-40a3-97fc-b82f063c69b7", "sighting--5f10017b-db3c-46f3-89a9-de73403fa26b", "sighting--4e1c84c1-92bf-4d94-a1f5-17ec15925944", "sighting--2a8da615-1a7b-4a5c-a6ba-47b2324b3345", "sighting--fc6c0c44-66e4-4ca5-a214-6160f7a936dd", "sighting--479bea3a-d311-4f02-97ae-eed2292786a3", "sighting--e8907533-957e-4df2-a431-94c5824bf9f4", "sighting--c3657dbf-b1e5-4f43-940e-76d1b1d8bb6f", "sighting--81c84ddf-7528-4d48-801b-45d6dd353ce5", "sighting--f9152437-38f1-48f3-a064-d9fc12c3499c", "sighting--0f0759e6-d6eb-4909-84dd-1fde7d817119", "sighting--9c7e0de3-aa41-472b-bbc6-6cfa1acdcb3b", "sighting--fa07c9c5-b896-4435-8efb-11abf2ca2d3b", "sighting--d7fafc40-334b-4e36-99b0-de332cc2f266", "sighting--27f71c73-60de-436d-ae5c-2b28785e918f", "sighting--89d1b8d2-a518-4ba9-a84a-9440a633e588", "sighting--a612ed0e-cb05-4b97-a837-69817c5bbed9", "sighting--852a0eb1-02dd-4ae6-9c62-1e2047e5f27b", "sighting--c2646957-59e0-4283-9c38-d39c16a5db90", "sighting--e1a75c70-bfd1-4730-82b0-d11e9c7567b7", "sighting--6a52d1fe-6a55-4fc8-a899-a38b73bf0b2b", "sighting--01d7db74-b63a-4797-8035-636a6417d646", "sighting--fc98863e-8275-4193-918b-a565e096b84d", "sighting--b996ec7d-65e9-4527-b08f-8e9de031b7ba", "sighting--87b9c5cf-65db-4b21-a595-f8e30f665a7b", "sighting--d019c077-fb5b-4811-a413-0b7153a60cd8", "sighting--363ebf8c-592f-4dd5-8c08-02191272ffe1", "sighting--08852b32-8098-4b94-bc32-a38e2d9708e1", "sighting--137f295f-bc14-4d80-8fab-4475501e74f7", "sighting--4821c814-c892-4f07-ae6d-b7d5b4490882", "sighting--594b2a15-400f-421f-ac6c-891b130d798d", "sighting--35c94bac-0b3e-4750-bb06-e32bc87bab9d", "sighting--269a7202-132e-43d5-afc5-95ddd97b6923", "sighting--a844a961-c0fc-4674-87a4-18191095bdde", "sighting--0a5650fc-4a92-4183-9290-38428cd5e5b0", "sighting--e75dac67-ff07-4530-bdbe-d7eb8776a9f7", "sighting--c60607f0-331f-4f38-9ed9-aaca5fb7a6d6", "sighting--a0d8881e-3c7f-4d0c-9b63-d134f57341dd", "sighting--0e369b69-0168-4263-8f17-70d9b9b0639d", "sighting--2ac27867-982b-4a84-b29e-2eb47e8bd18a", "sighting--68dcb693-2a55-44f9-a19b-6f2b604094c2", "sighting--93dca0af-22b5-4415-9402-73a2cec0c15f", "sighting--1e0b677b-94c6-42ea-8e62-b273278f9170", "sighting--9398569a-acea-40bf-ac97-8d9e220013c5", "sighting--597eb8de-c055-49a0-8422-87da7abc89e1", "sighting--b8420335-0cfb-4a48-8c89-626ea36450de", "sighting--5c22da08-cfca-4e0b-b640-c9424ee83ac6", "sighting--76d176bc-f75c-412a-876a-1c71c2f31b27", "sighting--4795eb0c-19cd-4a70-bc82-b2401c2e99eb", "sighting--1bf1d848-ad08-452d-b9a5-17af070da267", "sighting--02ac41cc-3422-4ee7-b8ee-bdb519843c78", "sighting--c16d5b1d-7354-4dfb-9c58-4d816ce43c7d", "sighting--b9f3f515-285f-41f4-9e54-0a59ea64de1e", "sighting--8775374a-7f26-4545-8e7a-7516725670f4", "sighting--66e63f59-1e78-450b-9ba1-0accb3a0ca87", "sighting--e9721e4c-42e9-4a21-a8ad-758aa5e25e42", "sighting--4c324901-cd0a-4eb4-9a6e-7ed2469a9cca", "sighting--aea388c3-5685-4c28-921b-320a25e49c26", "sighting--15f203dc-3660-4907-bd25-f0d88a00ac77", "sighting--5bab0f76-ddf7-45b2-ada8-7597160cd7da", "sighting--10be26aa-32fd-44ae-a271-69c0651c5bb4", "sighting--7acfe984-4480-408c-8bbe-538242c82ebf", "sighting--ea452030-1e13-4cb8-89d0-218bc492bbc3", "sighting--3f1485a6-9c07-46b9-b785-53000d8f5ca7", "sighting--8eb0aec8-97ac-4fd9-aa57-c8db86a424c1", "sighting--fccde581-7631-4fc2-ab92-05c9cec173fb", "sighting--1b4fc7ea-68b8-477c-8ace-6d2981c59d9d", "sighting--28f8bdb5-987e-4035-9175-a8bc9ff59837", "sighting--2bc32236-e7d4-4316-be04-49213077a36d", "sighting--a0664955-1087-4f33-880c-9ac823957533", "sighting--3e3cc233-ab23-4c78-8bff-e36367675568", "sighting--596314ad-78c4-42ea-9484-b043890a1fc6", "sighting--cd878c5b-1b49-4470-854a-738ef2270cc4", "sighting--ef31ec2b-2db8-4541-9882-7bb1e22077e5", "sighting--618e8455-37c7-4fcd-8438-4f445079504f", "sighting--db7b1523-eb09-4359-b6fe-d655f49d0ce8", "sighting--f520fcec-eb19-40c1-aba6-b8d3e72415d5", "sighting--3af96721-7e81-407c-b9a2-1a91451ed5e5", "sighting--67b3bd89-71b1-4a08-ad65-8fca2a2eb6b8", "sighting--2b87ab54-429e-4a84-87b4-dd58e5b3e096", "sighting--fd304c61-a1cb-490e-880b-068a0414bb6f", "sighting--ab3a2a9e-9047-41e4-a118-ce96e7823ce1", "sighting--7c05c13c-011a-4212-a660-775f1fc02a23", "sighting--622cdbd9-3384-4cfe-b757-bd4889271dd1", "sighting--f9eafccb-3c9a-4985-969a-7902ed773fb4", "sighting--10497480-e621-43ca-8d91-d474359b18f0", "sighting--977296fb-dafa-40da-b589-edde1be409a8", "sighting--cc288e59-5612-4597-9891-dfc911ccc117", "sighting--22f1fe13-5429-43e5-a1cc-8397c1372a0a", "sighting--af63f92a-9bee-4114-b244-5db38b911aef", "sighting--beab5f26-f7c2-4db1-a102-788aefc81baa", "sighting--2545f23f-5b2b-4691-8ff6-f73ea6c56279", "sighting--15edd21d-539c-4f83-a3f3-ea18819c038f", "sighting--8085ec41-dc18-46b1-88c7-e9284d9f51e4", "sighting--bb12a704-b3ba-4e80-966e-865a8b650bdc", "sighting--7fbaf23e-ab3d-465e-bb63-aa59139503bf", "sighting--dfb0e5a1-9e3b-4c87-9ff7-be4c73deccd2", "sighting--0897972b-9364-4b05-94dc-c72731fc87bc", "sighting--f5436669-7bf3-4a24-b239-1abe6bfd5e0d", "sighting--05303ae9-fc98-4e1d-b815-dd0efd007661", "sighting--e657ef42-a8b1-4f83-ae41-d2b51a6394c4", "sighting--10599175-98bc-4477-b371-41577177d36a", "sighting--989efc0d-df52-4a84-9b9b-349530745416", "sighting--edb250db-549f-4ae9-a713-a7b31ebfba42", "sighting--af507e92-776b-4bd1-9b4b-50b7e5793c0a", "sighting--6383a5d5-748e-439b-b7ec-e71219916866", "sighting--4705f9d4-6b65-4c01-a04c-75e4a2512807", "sighting--1739a00d-be96-4163-b06c-97a2f0fe656a", "sighting--85336cb5-3af8-4bb0-aeb4-bbd184ef7ace", "sighting--76b9d734-3d2a-4b53-9607-8a900ea6aa23", "sighting--9ca97e78-82f6-4c7b-b3cb-163a83de84a9", "sighting--6d210eb9-a504-4bd8-94a5-16949a7a186f", "sighting--6cadcfe4-2732-4621-aa64-e5a77c737d14", "sighting--6181e06c-57c4-418d-9b60-8f184f258481", "sighting--7498d272-be15-494e-9008-96ff8cd1d3bf", "sighting--ee53e963-7eec-4e81-9030-ebe25cb4ed47", "sighting--06d1ac58-3675-4f61-a890-4b8941ba9323", "sighting--3eb65b0d-e2c2-43c3-9d26-b7a3d75521c0", "sighting--320ae6bc-6b34-43b4-b08b-3ae3134dc181", "sighting--11d9a685-4c8f-44ff-bc95-0a6e94ad00ad", "sighting--522ad8dd-3f2c-492a-8c32-f9663bc7aa14", "sighting--93f68c4a-54c5-43cc-a209-b1d4fe33334a", "sighting--f515762b-a9cc-4c5f-939e-7c813e46f571", "sighting--08a96568-56eb-43b9-8952-1e8f5c5816a5", "sighting--a7295344-a9f0-449b-8e93-2ee339f5a7cf", "sighting--ae621980-95d2-4c75-b38d-c17cd907f822", "sighting--a885d540-e76f-430c-b001-09b279701334", "sighting--aafc14e1-cfd8-4df9-b531-181179ac6938", "sighting--44518ca9-797f-4a05-ad3a-ebb2424a76a7", "sighting--1a5081f0-b49a-4b5c-9422-0324a1eda137", "sighting--1f743b37-f626-4d25-a3ab-2a49682b89b5", "sighting--ab9b8529-3da7-45e2-9e12-d7056f23ad48", "sighting--2893655b-b4e8-4ca9-89b8-7fc46e43aa3d", "sighting--2546a1ae-5c61-4f79-a5a8-b53b20a8f820", "sighting--a41f8c30-6911-4bae-8f44-a75ce7a3f0c7", "sighting--94548eb1-ef26-4bfc-a87c-cf0615efe6cf", "sighting--ec6c9ef2-44e9-4558-b8a9-bfaeab638969", "sighting--553e68e6-0a26-4958-a2fa-569d17acc6ab", "sighting--ac3f1b69-f9a2-4bd4-8934-4b90ee614152", "sighting--4cbdf209-2ba5-4025-ad63-40415be45f5f", "sighting--08820f05-5814-41b5-871e-2b52992c8ad5", "sighting--47e415f9-6edb-46ee-b1ff-5345e76d30ef", "sighting--e043c63d-4162-4ea1-b71b-c1c40935cbf0", "sighting--a09e249e-4b9e-48d7-b193-494b564e04df", "sighting--954c57fb-35ba-46ce-bf89-2c710c053532", "sighting--600c98c9-dad5-4e27-b331-d64e154f45a9", "sighting--2b17ec6d-3137-44fe-97c7-8c178e7074d2", "sighting--50e1e8a3-16f8-47dd-8a18-9f4c51110481", "sighting--35a2fd06-50dd-4285-809d-588a4d06f4b5", "sighting--c6bc0b3d-6122-4e48-b630-3c56f299bb97", "sighting--88049135-a79b-416e-b8ae-9bdab1fb1bcd", "sighting--8156aa2f-2189-45d3-9121-11dc3f8d79fd", "sighting--afd5d670-82e0-490c-9787-c978567d4236", "sighting--9ecbecb1-1d3c-4736-a85d-ad686da23ebf", "sighting--a9e9f6e0-080f-4f92-a740-f3d956447688", "sighting--0f6cbabc-a492-4273-8c32-e61f9544dfd6", "sighting--67e607ce-e7a2-48c3-adaf-9053b869f03f", "sighting--57997c14-9798-4600-8b64-239d93eb5bad", "sighting--2a442112-e26d-4fee-ab64-9c022229041e", "sighting--4a425261-9458-4ace-aa21-fac463e89eba", "sighting--0e045421-6920-40c6-bc08-26689d14a595", "sighting--dfb824c4-e69f-4507-ab02-03c666ea10e5", "sighting--f5b0c20d-9805-4eb2-a813-a22d3cef04ba", "sighting--302ac424-532e-40fb-8a3e-030b86dc64ec", "sighting--e604b068-60fc-4986-8b00-ffea09ed05cc", "sighting--c34683c8-0acb-497d-b379-c16c9889238e", "sighting--0f118573-4083-48c3-ad5f-30ee2f4e177a", "sighting--f7f26685-2680-4f41-99df-531c0b29b1fd", "sighting--515a6dcf-a023-44c6-8356-702a5e3f89ee", "sighting--e74493b2-0c02-405d-ba48-cca67b96fa0a", "sighting--530e373b-53ef-46b2-8be4-900939f944d6", "sighting--20ec8b59-bb82-45da-9d60-0d28facc17c5", "sighting--a8e4c7a3-eab8-4323-9016-dda6c9b4049b", "sighting--d66a6109-ddd9-4653-8f2c-3f1c22d20944", "sighting--acbe515b-45d5-43fc-96c5-1793d9ded69a", "sighting--1b95f9e8-b156-4ca6-a864-25b234bf563f", "sighting--0382d585-2e26-4b41-a37c-b31b2e4bb4dd", "sighting--e9609631-a3cc-4390-9164-8a175e46ca7a", "sighting--e732a953-5039-434f-b50b-fabaf7ec298f", "sighting--d9c7c8d2-4090-4840-93b2-11f9630b9920", "sighting--02c2d83a-4bfa-4b98-aea0-3fa519a34290", "sighting--4bae6002-3566-4f8d-bfd3-d4ebe3a3f554", "sighting--7bbe6c83-5776-41d9-bdbf-0ba8bb2eab19", "sighting--63fb233d-1eef-4f1c-b79a-e313f9d567a7", "sighting--d975171e-7327-4f2f-bf02-365a39f7eb5d", "sighting--65519499-14cc-46da-942e-680e2ccae87c", "sighting--eed09b2c-4c5b-43e8-a92e-70178f0b585d", "sighting--68ac4b67-d1fd-4797-a43f-c9616ab12db1", "sighting--7aa50e6c-c344-4b4a-b1ae-acbd03196901", "sighting--28b501de-5e96-4ac4-90f5-20017f5e2a9b", "sighting--b5b5745f-4de3-467a-bf12-1b10384d153c", "sighting--245d6fdb-2608-4d7e-bfb6-d6ee1d6ddee7", "sighting--d97126d3-f31f-4ce4-a5ef-ab907780622d", "sighting--511f8cf3-11ee-44a7-a146-595f4e884ed8", "sighting--11d40d62-33d9-492a-ab25-70abfda13931", "sighting--9f68553b-7333-4db2-a8cf-f81dcc4cd4c0", "sighting--7e563cf6-33d4-4a1a-98f9-83dc07bb54da", "sighting--40532b08-def1-4291-a709-376b3c170a4e", "sighting--049da352-b65e-41cd-b37f-cf257ae12b43", "sighting--32616d37-66ba-4ee1-aaf1-a038d1c33cda", "sighting--8b1171d0-aa76-46a4-89e9-e796833e4ca7", "sighting--33e82d94-0b84-46a9-9c98-20d6bc8fbc49", "sighting--a49fff6c-36fe-468c-9e28-395a536ada8b", "sighting--866a6de3-75a4-47f2-9b4f-b615a5502e45", "sighting--afb945b5-2ef2-4266-9025-ba080cdde751", "sighting--38279bcd-d58b-4758-95fa-69771823edab", "sighting--27f0ea3c-d507-4940-9697-90e3d828e866", "sighting--9f7dd6fc-aa42-4f95-a62e-c03e47bf7771", "sighting--6b3e47b3-b503-4d2e-ad12-c3a636160664", "sighting--d69acc4f-bc67-4e5b-90fa-69d4964a2314", "sighting--b8d722cb-04a9-491e-9621-2b8177871ec7", "sighting--a792236b-24df-4deb-b152-3ab10acbf3b6", "sighting--5928254b-17c7-439b-a7af-634c063a3a3f", "sighting--c2cb7086-51b6-40b8-afd6-f3d13b01009c", "sighting--b54ff217-9302-4ef8-8558-b47f1478ead4", "sighting--650840d7-103f-4602-9ee5-9072501d216b", "sighting--bdc12d8c-fe13-4a65-811f-e8304f992d92", "sighting--8124b4f9-8816-4509-a469-c7576b55e6b5", "sighting--d5384a18-71b2-464b-880e-215124aa8412", "sighting--4ed023c4-cbca-4ea6-8131-ee80022b5563", "sighting--296b5184-3e7a-41c2-bf08-7ac64e6fa32d", "sighting--b85c8ace-26a3-45e2-b22f-29bcd3736ad3", "sighting--cc36ae23-a0d8-4da7-882b-78683dd9be5d", "sighting--c240d582-790b-4e2b-8b6e-3467971390ac", "sighting--f1ebff6e-9955-4c17-a8a4-c8b3c63a0db3", "sighting--e15684fa-112d-4a34-be57-d886733cc34e", "sighting--796e1c5a-ffa6-420b-a66e-d224618dd91c", "sighting--aeaae4a7-a021-4b98-8c87-601c7a2a2e40", "sighting--016ef144-ebd5-4df9-82d5-582ca131f716", "sighting--cc6805f9-a98b-40fc-9732-f8b8c1a5cf80", "sighting--950c71e7-26f7-4a14-9fed-09d93121bfeb", "sighting--9c90ccf6-40ec-450a-b17b-61d4100ee3d1", "sighting--4c1fd18f-c0f1-4a53-b28b-c3168fb7c077", "sighting--2f20b58a-a421-49f8-b0f5-0a723a2745e8", "sighting--fc4162d1-4480-4544-8349-37ab3e5e7097", "sighting--5d0dbd3a-a2e7-4919-bf1a-1f91ab5a82af", "sighting--c167c097-c5d5-42aa-bc96-a876efdf624d", "sighting--36b88f68-4900-42f3-8d56-885c861d7247", "sighting--3ed76ed2-79f6-48f8-896a-8bb647e1d7dd", "sighting--0f3990ab-76b0-45d0-a468-1acf6c537924", "sighting--33e4c656-2d7c-44be-966e-cf20b4547e4d", "sighting--97ad5afb-bcec-4ac2-ad23-93148c4ca890", "sighting--f68f8742-5851-4171-b24b-61f2f55ee40e", "sighting--70da294a-2beb-4a26-98e1-b21107810853", "sighting--41ead81a-ce08-4408-aea2-e4825a1d2281", "sighting--44ebab36-5335-4853-b3af-fa9ea4ed9679", "sighting--0da2d46c-4b18-4626-920c-cbc541ad1330", "sighting--0d1f5330-2485-4d10-b414-0681c904df82", "sighting--296cf56f-d894-433c-9068-e990a6cbc397", "sighting--9fe37d76-41a3-47d8-9f8f-a37e5616c605", "sighting--0fd8741c-ab0e-4215-880a-e9e332730476", "sighting--e560887c-d3a5-4d8e-a555-659d0403d783", "sighting--60776feb-9e04-4abf-af68-6789037256a2", "sighting--4bc78955-274c-437e-a219-62175ad29a48", "sighting--0b08fec6-ede4-4e91-8a48-808ceb2fefa6", "sighting--85f024df-222d-40df-9b46-9b79a264b5a3", "sighting--df15342d-dc1b-4ddd-9931-8e435d1545fe", "sighting--c36dcb5d-efea-4440-9f78-6ff19fabc612", "sighting--95b1ea80-f385-472c-b82f-c6a39ade71aa", "sighting--6d66c5ea-812f-45cc-bc08-c94d80c18196", "sighting--111c0441-baa2-4245-a508-7e8c421fe895", "sighting--b921f33d-45ed-4983-9e28-ee526a141530", "sighting--336b7a6c-071f-4545-aa3e-9ba915716521", "sighting--3e8e2727-cbc9-4e6f-8e41-18ac1585a293", "sighting--4f6f9db1-2439-4ce5-a773-3bc32c25fe9f", "sighting--8d784960-9ac4-444d-b1ca-1e6346e83e46", "sighting--10ad1c2a-a841-48cd-9478-fc7d80f211c1", "sighting--cfdd2a07-bfed-4b4d-b34f-10b56f4f1950", "sighting--e24f8d33-0add-440e-9d29-fbeb50fb1026", "sighting--93587075-135f-4f0c-823c-8eac37cd01dc", "sighting--72bcc34d-bb10-447a-ad91-4c5c7958bc5b", "sighting--bb91ad60-41be-4d5e-b5c0-028e53aef054", "sighting--6561406b-ea27-46a6-bd59-d8f8c3291f5d", "sighting--e3f6babc-3dae-4341-8a3c-00112e32a424", "sighting--677ef871-2df7-4a0c-aae4-318afcee3ee2", "sighting--fc8c6539-5dc7-4a5a-a7fb-cf74c155c767", "sighting--7c2207ee-d1e6-4216-8a33-5f9d95581c14", "sighting--d62e5b5f-da29-4abf-9304-68e96aa78a71", "sighting--18d7c356-2535-488b-a5af-02e1771af9c2", "sighting--c95a8711-5626-479a-8a3a-d18ea57d7298", "sighting--3adcede8-7ed7-47df-8e71-d72f22a3e3e1", "sighting--8ff1c07c-42f4-460d-aae4-83c17d18e4bd", "sighting--0ec31220-a4b5-49b3-848c-3225d65beae5", "sighting--1c8c3d39-b4eb-41fb-b210-abf2e0f8f604", "sighting--e365e503-4530-495b-8c0c-b706a1c1068a", "sighting--2c1fe8d0-40c4-42d6-bbd4-6a04f0edc8a7", "sighting--b56896bd-ca42-449a-b346-b191ed9cb84f", "sighting--6b70a3e8-830b-434b-9305-052b18368517", "sighting--110f9be5-71b2-4411-8015-b5c26d5c10ff", "sighting--15885d67-5fff-4b83-8f05-53d2f848e4f3", "sighting--6d6cd9a8-6fea-4c0d-b2d5-6e2df767a59b", "sighting--b54b6f49-dff0-42f4-bfec-9840818cf774", "sighting--edff94ac-3b1c-4577-8f7e-7b996952ddf6", "sighting--9f76cfef-b165-411e-abc2-e402bd29461e", "sighting--f30d08d3-a12c-454d-a023-fdb85beb3dd5", "sighting--44b4492f-9f34-46b0-8d97-969a76f56f1e", "sighting--f5ee051e-071a-4d60-b8f2-3ddb14dfb782", "sighting--022fe175-7816-4be2-b351-e1b4bf054a1b", "sighting--8516d05a-4a30-4d3f-9f00-00ac5283da6f", "sighting--1d51ac6a-7da9-41e7-81ef-66a350d67a15", "sighting--d5f2e0bd-2f03-4884-a4c9-ed8fdc912498", "sighting--9abe42d6-9f24-4cbe-837b-4213892bf93f", "sighting--a4c28b23-89b8-4950-8a30-0b87c98cf296", "sighting--5b84e78c-c945-4982-acdf-e722ec934b14", "sighting--81723fd7-eb9f-488d-9ddc-aeddd88157b2", "sighting--ed4a9b82-0529-4b69-a9c2-d164ad265b39", "sighting--dbd3dbad-b5fa-40d2-946c-fb6a758422e7", "sighting--39464b7d-e5b7-4785-bf9e-046d850dfc25", "sighting--57876071-999b-4332-b228-ca9484c71727", "sighting--bda6ed0e-dd93-4f04-bafd-41079d7fb1e2", "sighting--0f530f03-5f52-4f45-8fc4-dcbbc4a663d9", "sighting--d50e4d77-7fbf-4036-83ba-6eea7b02ed2f", "sighting--1bf5a707-b636-4db6-8a74-612016dae957", "sighting--fd910952-6f68-4fea-9c0a-104611c58efb", "sighting--5ad50093-4081-4ba0-945a-e02c3bfe69b7", "sighting--68f5808d-4980-4e16-931b-18515539447d", "sighting--0cfc9658-be92-42ea-8149-755d87315d06", "sighting--1dc5cd1b-8841-4357-a301-577f682a8b1e", "sighting--fae27d5b-a35d-4552-90b2-f5f853799674", "sighting--55551dcc-d42b-4624-b453-8f3944a4c18b", "sighting--62b6b359-aaaa-42a5-b413-99fe3c014cef", "sighting--8318aaea-0363-43df-8f70-3a21911a4874", "sighting--0c2cedbb-f268-4fdb-b2f3-8bb2e0ce8f69", "sighting--c53bc0d9-a938-4e8d-abab-ab56c608aa2c", "sighting--08324b4c-9ed2-4745-900e-bf64f7e7405f", "sighting--484789b7-0efb-4330-a7c8-f0994dc0f405", "sighting--9396ccef-688c-403e-ba26-b3432a7fca7b", "sighting--851d1de5-e748-40ee-8c4b-efcaccc806e9", "sighting--60737207-7cad-4396-ad53-8b4e3fe6cd47", "sighting--9bca7c40-556c-4500-876d-cae2430bdf8a", "sighting--5992b12c-cac3-42e7-9cc5-bfeca7f067bc", "sighting--c02eb492-9d1a-4275-a612-51202a01d5f3", "sighting--4a08917a-7d2d-41f7-9c91-ae36c72651e3", "sighting--92a36efa-6de6-40c8-83f3-841d4911b85a", "sighting--2e380e75-6663-4fcc-86f6-b07addf28263", "sighting--741a426f-ed8d-47e6-9189-9ba7da67eb36", "sighting--104542b5-15a1-4e26-910f-14ffea5aec82", "sighting--cb235832-1382-4a31-bb6d-9ae479268220", "sighting--44298e0f-c62f-4b7b-a8e3-e65dc4234d18", "sighting--caa35521-ab69-4c61-848a-bdbc132a4b6f", "sighting--b6b18fca-3efb-4ad8-8fe5-c6cf59715ae1", "sighting--c691230c-e169-4041-84ab-656ab219e45b", "sighting--6b11e55c-f541-4d09-ada8-102174ddb2b4", "sighting--60d0a609-3730-409f-affa-3225b6657f60", "sighting--e0ef49f4-d63d-4d54-9b97-2ff80d8d6fee", "sighting--0781867f-c5bc-4e33-b04d-6d2575581bed", "sighting--35b721b0-9b44-4ef3-84b4-9bcf7b94ad47", "sighting--461409c8-2fa7-4096-b80d-71ce8bdb11fe", "sighting--881f03f6-15de-42d9-b21f-c17239c7ecd9", "sighting--f7274fff-3887-4dce-974d-34b0f555a3ed", "sighting--382ee91f-b0b5-4a72-9a07-3d27c338ce51", "sighting--93606b51-04ff-4ed4-be31-59b1497616be", "sighting--cd66a6e7-a7b1-4f7d-986d-4d3097b972d9", "sighting--e24834b5-e559-4cc8-8419-d36d20f04371", "sighting--3c615ec4-eefb-4be0-8868-12e8216faeae", "sighting--e52ca121-075c-4735-b19d-a867f4f688e5", "sighting--3830625e-2aa6-4b33-a826-69762f2e8c47", "sighting--3dafb1c7-6ef0-4fd4-99a4-5ae2a4539635", "sighting--f687f1bc-5056-419e-89bd-cbf876850067", "sighting--6cd6be53-98ab-4ab8-aaf6-290beb646a8a", "sighting--0533d15e-3517-44fc-8e28-f3c8c3e4a8ab", "sighting--869d0c5a-57b4-4733-a95e-b985d2f5c9dd", "sighting--c56eb5b5-4791-4dc2-ae5f-3db388c568c2", "sighting--6ac40678-0052-474f-87a5-c09a1560e1ee", "sighting--b52e0047-ce54-4325-9eed-3156eb7d8849", "sighting--1d372f82-5cfb-43f5-8d92-97098d72af7e", "sighting--2b7c9a58-6d36-4105-b2a4-7dff0dd5b6e3", "sighting--96a2841b-ca1d-4759-8cd1-61cf663437f3", "sighting--5ec7af59-1c50-4eac-a7d1-9a09df7941d1", "sighting--f9f3c52c-3689-45fd-90bd-141dd7221952", "sighting--4453c589-459c-46ea-897f-4aeefb51dd4f", "sighting--1a6c7a4f-ddd7-4604-8e13-4f3ecd44a53c", "sighting--33010b2a-73c9-4ba5-ac16-e16080f9bcd7", "sighting--03d4f341-038d-46db-b7d1-2a64f46f7bfa", "sighting--0281b89e-a832-4254-b892-73719a81e894", "sighting--a2acff71-c148-41b4-975a-cc0f0cb1e95b", "sighting--31c10fcf-53bc-4dae-a654-8db6079c5fb8", "sighting--81bd919d-7b07-411e-b770-cffde7b7e51f", "sighting--4c5ff1d8-1d4d-477f-9392-161c63583155", "sighting--1b6e2c17-33a9-463c-a068-81325f968ff1", "sighting--62cfb043-4a96-4f33-9e28-63a60f871dd9", "sighting--4de44ff2-45ff-4d9a-bb87-0213480b6a84", "sighting--78bb52a3-1333-4229-8dd1-9c5c5cf2bca1", "sighting--54bc4b79-1031-4fce-95df-e87aaa483f60", "sighting--7eb11fc8-0dff-4df3-af74-f85d4b626e8d", "sighting--067654ba-3b56-4e14-b049-d2d5ab95fe0b", "sighting--9bba6a67-96eb-4f0d-9b63-2e165ef6734b", "sighting--2b58873c-68a1-4a8b-8ddf-032b9e751013", "sighting--4a69712e-83b7-452f-b805-d9c8c0ff7f20", "sighting--c0b70111-945e-4b3a-ba15-b805cbfe594a", "sighting--6b15e5d3-9516-4954-92b3-2b51804a2fd3", "sighting--1a281fde-1e92-4592-84e5-1bbabfcd2211", "sighting--85bd097a-e8e3-43b1-b0be-7999123b8303", "sighting--05b9a19c-f259-4a3f-93fe-dff6d2092889", "sighting--1efde554-2fb9-4379-8411-a48d35da1a28", "sighting--2a2170f9-8016-4f5a-bfd9-90d33a13b281", "sighting--8bdd018c-e431-42b6-adf3-e8c1ea4d3974", "sighting--8e0abf99-2e75-45a8-b3f1-64544dbfdab3", "sighting--0ce71b18-f855-4e5c-87d1-76d931d98695", "sighting--e8577604-8566-4557-a53e-3d9b5b93f6af", "sighting--049ba7bc-2036-485b-b31e-ea3dd9093bf7", "sighting--d1bbee2b-7a90-456b-bb5f-b9a1568e74e1", "sighting--b0be69f0-389b-4ec2-9147-c6bc36010360", "sighting--9287e3ee-96fb-46c6-80bd-5acba16cacfd", "sighting--8b482416-6322-4b0b-a994-a2f3bf4ea4ea", "sighting--8771f9ea-53cb-4d77-b4de-873a53b82eb8", "sighting--86224632-2fa5-4073-9320-c19fa8edd013", "sighting--8ff8f6d2-1f12-4ba0-ab58-b66ffc3f6571", "sighting--269533b1-2be8-4622-93d5-2663caca472e", "sighting--3ec5aede-375d-4498-89e6-b8c6bd78de28", "sighting--75366403-1101-4518-a775-70565b0f1337", "sighting--03686e8b-deb1-4aff-9a70-c6c007ddc2e2", "sighting--eebb2544-15aa-4af5-9ce5-026cd799267c", "sighting--29b04d27-5f65-4b18-bdf1-874495a5c4af", "sighting--bf7770a7-5bac-4203-930b-2f8c104d6135", "sighting--ed21ad4f-09e1-486c-b814-efe39f974888", "sighting--bf68e7b5-4ea7-495f-be8e-1108fea8d088", "sighting--9e1aa664-f5a8-4753-9015-e7d9dfa04a33", "sighting--0f939f30-8141-44a1-bf0e-05e880b0db53", "sighting--b8b30f9f-8b7a-470d-9006-5d427dc75f8b", "sighting--5fa6a322-256e-4eec-be65-3d4006123fa4", "sighting--a4d90b28-6c3f-4197-8de1-95d3e996928f", "sighting--2264817c-b066-4e4b-ae4f-fb71bd7b7052", "sighting--d5775475-29e9-4d62-b92e-69905f4ecd74", "sighting--cb5bd5a5-a243-44cf-ace6-4dca4c16d807", "sighting--a50178e4-619e-4020-bba3-8c8009067b21", "sighting--05a996de-524d-4416-9fcc-fd06dcada98d", "sighting--b0e65072-f4c8-4879-a613-c9e87674559e", "sighting--dd361a8d-5665-4acc-91b7-4946f28ad7c1", "sighting--8b6903db-89bb-4736-822c-b7234683b3a8", "sighting--7bc8105a-4bfb-44f2-9192-08ca1454ae4a", "sighting--79da699f-8ba2-4a0b-a978-d77a06e3080f", "sighting--67f8244e-c084-460f-990c-f92c93d53638", "sighting--a66cde6a-9361-49f7-aaf8-88d780469d60", "sighting--1b5f86cb-921a-4723-835a-ff860549f295", "sighting--e0ac6c51-0b7f-4671-9e3f-ae8704e4a1d1", "sighting--c337777f-f72b-4627-9a52-93af61b9bc86", "sighting--d5a6bf4f-1bd7-417b-9910-5fb99d670608", "sighting--dd1658b5-1cb9-43ea-87ab-d06cdd264fc7", "sighting--2b3e19d3-0651-4e8d-9f4a-6f957721949b", "sighting--5a19c604-f17f-41b5-828b-c2764bf70bf1", "sighting--5f4c1d57-622d-4cdc-9711-f3970ccc928d", "sighting--fe472db3-61b5-40c4-bdad-94163d9ba151", "sighting--7e462d73-f926-4c1a-ae75-f047ced0ebd9", "sighting--f8a398d5-a549-47cf-9e2c-36ab7b9c4982", "sighting--31b560ad-25b7-4e30-9f8a-cafb0ef2a105", "sighting--02035a08-03ef-43b6-9ef0-4d05a488cb08", "sighting--399f12e1-ea96-4e1d-bdba-394b239bf286", "sighting--7061040b-cf02-40b7-b21a-4c2b7f579626", "sighting--16d78c50-38af-4f8e-9899-499cbcff1486", "sighting--c14576fd-941e-4c4b-b5e9-65e41542959e", "sighting--62412056-22e2-47a6-ad1b-3a511dc54a6a", "sighting--ca596a07-7c53-4f93-8c32-15f8f9bc2d43", "sighting--f0d33f6e-c4b5-4ec6-8706-e488372c41e2", "sighting--e1d41ec4-5ef6-49a2-a5d4-820042cd8eec", "sighting--46ceba3e-2346-4ddf-ba43-6d7235d2767f", "sighting--857341ff-a435-48e9-bba7-16c89b241537", "sighting--1b1d4b9b-f324-493e-bcdc-dab56a961508", "sighting--fb3a620d-0e03-4904-8b01-61e9c5685998", "sighting--3a05c17e-25dc-4290-96e5-2ab90cd58b9f", "sighting--4c8c1a66-817d-4e20-8970-aacc480dd199", "sighting--8c7db0d3-9767-465b-bcbc-f3b4f0c55bf9", "sighting--ceacfb9f-7162-46d8-9681-d6a01096bc46", "sighting--88b6f9f7-e1d4-4e3e-a57c-2a8a2fabe877", "sighting--49d923c4-7908-42b8-9305-b67c122ea113", "sighting--0e5b578e-10de-470d-b77a-3f40ada06469", "sighting--1701da18-a26b-409b-b4c6-cfdc8a2b3757", "sighting--b1a8a089-dc10-42a3-b6f9-c3d1533371d1", "sighting--b2c43a9e-4fe2-4558-b683-2ede299fd16b", "sighting--328024c9-4029-40a9-b843-84f683c6b8c9", "sighting--afd222f1-bb2d-4430-be8c-5aeb3e5ef44e", "sighting--347370f4-810b-42f5-82f9-d4a8ac22974a", "sighting--095c4a4d-bebb-4e07-91ac-e91789a36a54", "sighting--ed6a375b-8dca-4b25-97f1-5f11abf34d46", "sighting--cbbe8de8-19a2-4e81-b632-935a45a9b4bb", "sighting--290a0ad8-71d0-4a69-aba1-83e907d8ea81", "sighting--7e9b48dd-3acd-4678-8eee-25354332057d", "sighting--6eb01594-1e63-4138-9707-1a8d22cdc1bf", "sighting--a9cc99bf-106c-4e1c-9c78-d727c8bada69", "sighting--f1777dcf-bb52-4df9-8a8f-23084e98652e", "sighting--49a58526-a415-4c61-a314-9170d7c235c7", "sighting--93dc9998-d558-4638-a902-e71e7949ca5d", "sighting--b629d857-8ec2-4599-bd73-48d04d7cb4a2", "sighting--385e1b21-c335-4061-865c-a8fa94bfb6b0", "sighting--edceffd3-f096-4f05-8516-f8220f1e11dc", "sighting--c54aacee-4afc-4f32-a29e-550c3b343330", "sighting--2d117e0a-058d-417a-8562-be1adc20a554", "sighting--46da65d9-61eb-4281-957a-d57a30aeff38", "sighting--993031bc-9a17-44a4-a213-fab0e2b589e8", "sighting--d0d71c8d-24a8-4a1e-b964-d27a9c218308", "sighting--0eebca27-8642-431a-b1b3-60154fa46bc8", "sighting--af513612-338e-4ff7-83ae-20a91f49b32d", "sighting--5a7e5e1d-ef5d-4891-8205-faa68a08e5c5", "sighting--8e372eb1-a083-4b7f-952f-2a2f25b6e2b1", "sighting--c984633e-c01e-4996-9aa7-0c0cdf86783f", "sighting--79169d37-1de2-49bd-923d-59275be6ff2b", "sighting--a5ac3ba8-0e09-4500-9074-03bca5ed375a", "sighting--55385797-e641-4fb5-8ee9-d827cdc4e13c", "sighting--b5f63883-3923-4b25-9453-0c58d1cfbcc1", "sighting--0bd337ec-142b-4952-815d-93082230aab6", "sighting--19b1d912-f904-4ba4-a7d8-1ac0e828d9bd", "sighting--2ae0196a-9d1e-4661-b16e-16c726a82a97", "sighting--e96b623b-d0c1-479c-add5-0919f8275fe8", "sighting--2e0f1a00-3b7a-4cf3-8d9f-c30547ed136f", "sighting--b50f6adb-eac3-423f-b294-a5e89dbcde39", "sighting--b62f12e7-65f1-4a40-834c-bc635a888e27", "sighting--2aa29423-f156-4ef8-b104-9b18b3c884f7", "sighting--7b6bce94-5709-4f06-88d3-f2b33d8096f7", "sighting--3cc6a6e8-22a2-4eab-96c6-5574cf104f45", "sighting--0abae88c-d773-4c4c-a244-7e94f9ddebd1", "sighting--86a71c8b-b980-4aec-b0b4-fbf359adaab7", "sighting--3aaf02b6-3d7b-4974-817d-9aad50ca3985", "sighting--b3b4e5ea-b9f3-42ff-b077-bccf64535578", "sighting--ad3d3b17-0eeb-4da9-90a2-b9729c869e8b", "sighting--c1e304d3-800e-417a-940c-07479d0b85af", "sighting--9a0a1b04-ef81-4dda-a7d9-d228042a33aa", "sighting--30b74330-b3dd-45d8-9bcb-c371a6091820", "sighting--d0dca34c-bce4-4e78-bebd-e6191adee306", "sighting--eeeac075-875f-482e-9f44-379b0815bf24", "sighting--4db4a683-7654-4598-8467-daa83a4d7000", "sighting--50e27f61-9559-47ad-9bf8-085808681b8f", "sighting--6fe0907b-b48f-421b-b2f1-3a7fe37c4850", "sighting--c3df9f36-6c71-4130-b24e-665c73418327", "sighting--cece2002-d48f-49d7-b545-e041911eceaf", "sighting--5dd97d25-3b05-48b7-abe1-c3cfd63bd5dd", "sighting--912f92f2-4a7c-4803-8ca7-4457e851741d", "sighting--49767141-fcf4-42e3-9e2e-902722bc2a41", "sighting--f741b1b5-c212-462b-b839-4d111132e1de", "sighting--e3c80bcc-0855-48dc-b632-a555add3152b", "sighting--7d4e4147-ae58-4d3b-9889-16c466c9ca4f", "sighting--27fb0625-646a-46ba-aaa1-cdb8be0b1fe8", "sighting--cef0aca1-10b1-41fc-a3e3-d8e51873d0d5", "sighting--8d9ace30-a356-486d-8d5c-3c25196bc1b4", "sighting--06a8a219-0fae-4ce1-be43-1e7caed5ef6f", "sighting--d59b4fbe-b3fd-4e6e-bfc6-de76330541a0", "sighting--16c9d7ea-cdb8-4b0a-a4c7-163dbb767a3c", "sighting--2ed1ea0f-0f1e-4e48-b346-fbc74cb1be2f", "sighting--7bfa3005-adda-4478-b8e8-15266e60a41f", "sighting--ce549a27-82fd-4f95-ad8b-9befc771317c", "sighting--8bc6c3e4-da52-4961-a629-7cebfa43f612", "sighting--ae5e4426-a1cd-44ca-8fec-e65088d85180", "sighting--759e5ac2-e971-4b33-b0ed-3edf3ac8ac2e", "sighting--d705aa72-1786-4b28-b66e-4d5d378d23c1", "sighting--a0d64f2d-de70-46f2-9173-d544926f7af8", "sighting--5abfdd1d-f94f-459f-b9dd-8423466aa3b6", "sighting--026b3a93-5cc8-4c45-8e12-8f799acc21de", "sighting--c9143de4-67bf-4392-bb7b-3efb7cbfe0b7", "sighting--b16dc369-f7f5-4cff-bbed-2c16934ce387", "sighting--70187f1a-f8aa-47e5-ad42-6291ebb2cc7e", "sighting--0292e0f8-a14f-426d-9e13-4699376fcd9e", "sighting--f061e8a8-5402-418b-8889-51bb784cefc9", "sighting--f5ea9811-5b7d-4ca2-ace2-76a6ce46e1bb", "sighting--e821fe16-5632-4f7b-aa4a-db475707d9b1", "sighting--941cb18f-87d7-4397-8a99-f12a1358d366", "sighting--92ca31f0-3000-4add-8257-2ec9828f947d", "sighting--68f3717c-453c-40d8-b929-34f28f97cf57", "sighting--ece4c3bc-4711-4717-bffd-f166b65eaa97", "sighting--a857b8e0-8911-4860-b51f-86dc705198aa", "sighting--b78775e8-9764-47ed-81e8-bca9f48c53f8", "sighting--330adfe5-20f6-4e50-8e98-a70245be4f8a", "sighting--c6a3a70b-db8c-474b-86d3-99e75d1bd42d", "sighting--ac783d4f-aaa9-4522-ab23-cdbefca33f1b", "sighting--d0bbbefe-18c5-45d5-865d-78e9e290f6ce", "sighting--74d00cd5-990f-4cb6-88d8-9b6567c97fc2", "sighting--c30c3cc5-2892-4892-bf76-7be4f368cc84", "sighting--2e378a06-189a-4e41-82cd-ddc02144daf8", "sighting--cbbb5326-0ea4-4555-b2ec-323c32a4cb8b", "sighting--7d4279cf-3bd0-4b27-b446-ba07c1e0e54b", "sighting--902986bb-a56b-4862-bb4d-846bb9d6319c", "sighting--742da6b8-9ad3-4708-8b30-a912924b274b", "sighting--73623b82-54e4-453f-a8b6-f190744ed62b", "sighting--b9b58702-61cc-4b72-a510-a7be5270140a", "sighting--9e3d7445-381a-4854-80db-f62fec88d5d7", "sighting--c8cfad30-9da5-44be-a75b-efc642c2a37b", "sighting--08597069-b869-4888-a7c8-413b324c0950", "sighting--8e46578f-b3a0-47de-a724-aaf2721fc2f8", "sighting--7fb6597c-78f6-46f9-822f-fae35b5582cb", "sighting--5b023d35-30bf-4710-a6cc-9a65cc08d101", "sighting--d84172e1-a128-4f00-8499-97a53bc752c5", "sighting--1e322d61-fbf5-4a6a-9f13-a40eca783385", "sighting--9b97b2dd-b85d-41b0-b8e5-d765162b10cb", "sighting--07137bca-a95e-468b-a674-fe9117289b13", "sighting--dc1f7253-0263-4b9f-b03d-42e10021bfd3", "sighting--04334495-8c99-44a1-aca3-ee042dbacddd", "sighting--44872412-3408-428d-b00e-b45f6f120fd4", "sighting--5fa6b5c9-81ec-4668-b3e4-de375e4b8072", "sighting--e011584d-9ecc-4e86-ac0b-b3b22cae9c4f", "sighting--d974510a-687a-417a-a9a6-4c9901539fd3", "sighting--0f71f621-438d-4ac6-aba6-33e329391bf4", "sighting--c3a51e7f-7b35-42c2-811f-f06f89020049", "sighting--03136311-8d19-42ed-8b74-b1040d483ece", "sighting--ac1b9bef-2a5f-4e48-bfb2-75f379582641", "sighting--9a3e3551-de93-4639-a138-615389629020", "sighting--9514b2f0-710a-4423-8540-6ad10cb95835", "sighting--9c79e381-3278-4399-8f7c-e1f03f79a63a", "sighting--57e5b8bb-f85b-4411-b0e6-cf2b87c69392", "sighting--04520c73-e94a-470c-855f-957d1042bb9f", "sighting--aaba9498-dda9-490b-9cae-9f5f72e0f31a", "sighting--c45d2a0e-60e4-48f8-8e32-f32b02c2912f", "sighting--e37e7ca8-781b-4fb8-81b9-a85fa29cf36b", "sighting--39b1c47a-5e85-417c-a1fd-8e141f03f5bd", "sighting--4ad52d75-18d5-453c-a3da-f2d7be9a36b9", "sighting--fe3d667e-fa29-40c7-9b3e-4da85cc27070", "sighting--a430639b-d0c1-4859-acc3-76b005f8974f", "sighting--8f2da20e-e11d-4eb9-a259-0c61aa13933f", "sighting--b0f376b4-b6a4-4397-ba80-3902a0af871f", "sighting--95dddd8a-3085-4391-8abc-b6b2802cd881", "sighting--6acdf552-9018-4d11-8544-4a11be385bbc", "sighting--edcaa7fd-bee3-4d3d-a0f4-04cc115321d8", "sighting--a9008cad-a08a-49cc-9628-469b04d870d9", "sighting--e5b2d546-e491-4543-9ce3-52d6f7e29292", "sighting--7dc87872-ba55-4223-9174-2824210a93f9", "sighting--92a09f36-909c-45b9-8fac-954cf7d5a20c", "sighting--2bf8f6cb-6a4b-4ce4-84fd-09d13a420029", "sighting--71b2e0fa-ff90-4d01-9af7-539a75caab68", "sighting--a79b088c-15e9-4b48-8318-d7643014f569", "sighting--674fff62-30b7-4b1c-b6aa-6a9d14539891", "sighting--de21253b-4d11-4f35-9c09-0b2cbca5e581", "sighting--63561058-bcc9-4aa0-b8eb-c52c224e599c", "sighting--af1bc178-95b4-4f8e-9ba4-cda2c8e90613", "sighting--0ed116f4-e6ad-4851-b3e6-d52350f70082", "sighting--af1f0916-e31c-46b8-81c2-3b621a273366", "sighting--41fb5577-207c-4d69-8580-651543a1f667", "sighting--d3ce62ef-75c9-40f5-97a1-c82d7df4f8d4", "sighting--a4992bfc-ea88-43fd-a8d5-3017ede6b76f", "sighting--803c24e8-88bd-4780-a12a-2964ebaea53f", "sighting--3b9e7c8c-4add-42ba-8c73-bb6ada67d5e0", "sighting--1ad7e6f7-21c7-4c18-ac62-7563122bd2ad", "sighting--6a549372-12b7-4721-b7d4-0b152023cd5a", "sighting--48484c10-9431-4448-a281-869a926f4aa0", "sighting--b18287de-9316-4a57-a3da-4b15407d8245", "sighting--4bbf4502-0523-42cc-8c7f-9a8cc536ed2a", "sighting--f70d7b52-ac14-47a5-a3bb-fe4c96a194c5", "sighting--485112b2-34af-46ca-89a4-3ef2b1254df3", "sighting--d8a4fb53-947a-4f1f-9597-17f4fe4aeb6d", "sighting--afc090e2-df51-430c-ac5e-26df9e9cb882", "sighting--b4e84a12-e03b-4fbd-bc0b-cf6b3aa54d34", "sighting--16c3c1b4-ff04-421b-b14d-10f9dfca00ab", "sighting--7c8e11a5-24ee-474c-9891-ecdecd010209", "sighting--5822ea5e-b2f9-442f-9e73-b433594fa56b", "sighting--20b5673b-b783-4cf6-8193-5373e6846c61", "sighting--07271ab8-4ae2-4f01-b675-debf8be8e7e3", "sighting--c527e9a0-c4f3-49f1-8c41-da044187adb3", "sighting--3e340b39-3aea-4f45-8aa3-ca782873b660", "sighting--3c338e81-e2e4-4040-ac8a-7c2f75ef7bd2", "sighting--1846481f-dd64-46bf-a10e-510822f8dffb", "sighting--368aee20-a5ff-4f5a-a519-42e121e4490e", "sighting--95e3c200-9b21-464d-b18b-f6e33f1e7370", "sighting--fe914c04-3193-4485-9b16-aa5fd6ac94df", "sighting--adc92d75-97db-46ff-8485-9ba567b4b24c", "sighting--5162bcd7-7870-4dff-bb77-cad6298c4814", "sighting--60ad2219-c51c-4e8c-a581-ae7995e2df85", "sighting--3bb07ef7-42d5-45b3-ad07-ba0a4f470861", "sighting--32306496-1f42-48cd-9f35-cd1303847cb5", "sighting--25796ccf-24c6-4172-9542-d6f25a1b7a89", "sighting--3ce21cd6-93fa-4bcb-a6d7-21fa1b8329cf", "sighting--70b4f01f-384f-4b91-9f75-b3c8b9654164", "sighting--1bb62362-2cff-4816-ab07-ffee90582917", "sighting--e361d249-4c58-4640-b59a-c7de63ee1d8f", "sighting--2f04c96a-8f5c-485c-bb3f-0a15c7a68cbd", "sighting--97717544-270a-4bf6-9ad0-a7ce3721c342", "sighting--91d58d6e-1f73-4a13-872e-cc2c1714826c", "sighting--9b767d2d-15c9-4dc2-bc19-2e4abe877088", "sighting--6b3d050f-56d3-422d-bd19-b4003dd1a755", "sighting--d70d6df6-5651-449c-8bfd-5d88c9845866", "sighting--c198f4c8-e849-4c53-b71c-e617f7b79561", "sighting--b0eacd24-b6fc-4991-bb34-72935812786d", "sighting--92fc7fc9-390e-48f1-a36f-7bc1ad8dc45c", "sighting--8f668339-84c5-4659-981f-01cd8ee75005", "sighting--6db02645-0bc8-4468-b8df-8254dbaa1aeb", "sighting--4c368e34-3853-4c0c-97f9-c6f31ccaf16f", "sighting--48b0027a-cde3-4cc5-a3d6-ac25f6cbef01", "sighting--e4ae834c-12d8-43b1-9cf7-94a139ff1426", "sighting--ad2b62a0-d4c0-49f8-9076-f534a05022ad", "sighting--4edd9483-db79-43f7-9997-b6c89388a562", "sighting--1eaa63b1-c7b4-4e02-8a0e-5be3b6547967", "sighting--316f802f-f850-4aec-8557-be052660e530", "sighting--caf93d13-aaf8-4c5c-8e81-82cb4cf0fee2", "sighting--36909460-8d7e-44c8-9eec-f1759d10c231", "sighting--2e2cccc0-ef35-42d9-89bd-66c89f645794", "sighting--bf683c30-6629-4d69-a151-6d56647dd294", "sighting--90d182af-c328-4435-8da0-9cc5e0acd029", "sighting--d4e9765d-4af1-4c71-8c08-49828739342e", "sighting--e1cd7bcb-68a3-405c-b648-315e14f1e147", "sighting--43bf7e8b-b0a0-4ba3-aee3-942f270c0f39", "sighting--7223da1a-b1ad-49f6-973e-cf41b839682c", "sighting--ecf9244e-1288-4c6f-ad0e-b1b476aaa2ba", "sighting--c9d75d9a-be48-438c-b346-40bfa39bd2ec", "sighting--6fd0fb7c-759d-409d-9a03-1dc2f5daafe4", "sighting--5bb37aa1-da21-4608-86db-e692d9462fee", "sighting--68199b5a-4900-4bcb-a74b-27d85d1f8818", "sighting--91ee57b3-a581-4577-be8f-b1bd4e42eb8d", "sighting--83b210f6-8e1d-47bf-9903-95b9a0293f75", "sighting--b3bac948-ca10-400a-aca2-d88d0682b7d9", "sighting--d91e38d8-99ab-41e3-98df-f2a8ddea10d7", "sighting--b1363022-23dd-41f3-b5bf-875e24c8b096", "sighting--9eb9afe7-2d79-4906-a72c-254ee8935430", "sighting--cde9b0f0-9048-4d61-9136-53bae02461da", "sighting--0c48ee7f-54b6-4e0b-bffe-12e8d0baa324", "sighting--d2c2f96d-4d5f-47ac-a57c-aafe300c13be", "sighting--bacc2549-5ba7-4d50-9429-9c21996f93e8", "sighting--4dee42a2-4222-401d-8882-828b2e2ea276", "sighting--51ca31f8-8bb0-4f7e-b06b-bff7fb797d9b", "sighting--720d7b9e-ff4b-42df-a666-24ec30580a40", "sighting--f62c5690-771a-4028-b575-79eceaefbc83", "sighting--26a96a56-bcb7-46df-a01b-b6b397867268", "sighting--cac70b63-8d40-4850-bd17-1dc06754a66d", "sighting--8640c49d-e26b-4a36-abc9-5adf2f44446d", "sighting--2b0acdee-e77c-4a3c-8618-bc3d452f4d3a", "sighting--a73fc6aa-4a9f-4477-abb0-bf6e754f9af0", "sighting--33d894b1-330a-4068-84ec-ccc928f56ba0", "sighting--29264aec-f3ba-4563-add2-85e5204cc440", "sighting--e10e326c-c3ac-4ac7-a8d8-d4a21ba92eca", "sighting--18941265-720a-4cc9-ae51-08b755e6b673", "sighting--3d9cfc36-6afc-4d41-a0e2-b02a11d5ca05", "sighting--7c4feadf-c3c3-4867-90d1-848eb39c4507", "sighting--d0b63cd0-3077-4655-a108-e2d1abf12de3", "sighting--ab75896f-f697-4448-88c7-bfb0008b1ddc", "sighting--7b432c9d-8792-470f-92fa-5aad0f4bf7be", "sighting--7ba47eb2-9a86-4eec-82e1-4d2e175394f2", "sighting--f17221a8-286c-47fc-9e03-48491fc27d85", "sighting--1da3cf82-7de7-436b-8a82-bb546e82683f", "sighting--68da3cf9-f1bc-4b6d-a0da-a865652ad259", "sighting--7171f483-a649-42cd-8f2d-7ba173f87ec8", "sighting--67cab94b-cd08-4b67-8fa4-6b05a258d95a", "sighting--7d97cf5c-8e05-4748-baf5-e426d1ea7206", "sighting--5338f5cc-0133-41d4-ba6a-e426e4692ef3", "sighting--e51879de-f5b8-4e90-bfac-68ce84a459c6", "sighting--c74b920d-1b4f-4bfe-9276-f1ae3481c3c0", "sighting--66cb3e0e-a9be-4ceb-8f5c-c3f140a13723", "sighting--1c5b87e7-6088-4dde-ad14-68087d437cc0", "sighting--fc0a7df5-7c98-43a1-8997-361705c1a9ad", "sighting--5b1f9031-50fb-4144-a101-b6dde0099dcd", "sighting--a892cc9b-5a9f-4c39-aba2-885b695b549a", "sighting--cb77cd3f-f77f-42be-a405-5bcf09bd0392", "sighting--afc3d45e-61f7-4558-8364-ba7e2665ee35", "sighting--313cd098-f118-4d36-9898-3e61d252baa9", "sighting--c8381f8e-e732-4e71-a015-9f5400cfe55d", "sighting--96e23620-edb4-43e2-9d4f-87998bfd80f9", "sighting--89b79819-0a90-4848-ac73-961aad20ff99", "sighting--d4b22500-affa-4634-9e06-47e1b3aba680", "sighting--cc300ab9-5c53-4a6a-b9bc-9725ce4fbcff", "sighting--b02e9678-25b3-47d6-a8e3-510f389bc668", "sighting--67ab4038-1ab5-46c4-8486-2671150f6d09", "sighting--0c0bb557-2055-41d4-ada4-b737b28f5a38", "sighting--c966ecda-b1dc-4676-89f7-a90cfda0265b", "sighting--6fa81e9b-33e5-42e1-b2cd-a1c58fc1ebea", "sighting--a326c10a-9c45-459a-99c3-d33253297477", "sighting--51779dcd-687e-43c4-8323-9034f43647af", "sighting--af10dbe3-3566-4a8c-8a50-d9f3e87467c8", "sighting--9832c7a8-8c79-4427-b346-3ba07eb5a3d3", "sighting--81c77951-d7cf-4145-a39c-fb0f84888f95", "sighting--41c85d1b-1420-4d23-8aa2-9fada17320ee", "sighting--bc478a0f-448a-4133-992d-ae9c28dbbdcd", "sighting--7607b974-76d7-4c2b-84a5-35a2d16c6a79", "sighting--93f351d8-d8f4-485f-8475-98b1206220c4", "sighting--30f07ef1-ea0a-4e8f-946c-5a8bb9b4263a", "sighting--6675a8e9-9d27-49a5-95fa-3e9376921238", "sighting--6ebd97c4-3b33-4007-b37c-03ade61215ce", "sighting--0c000b08-bc0e-4e55-8fdb-ae3e6c344eb0", "sighting--84efa56b-596b-4ded-8ec7-5ad58d7dc223", "sighting--6cb2f821-f938-49f0-95f3-03fd419c29f1", "sighting--6e946fb3-220d-4f75-bbc4-aa56ea3107d4", "sighting--955c0587-6d72-4fb6-84d8-94378250481a", "sighting--10f3b69e-e890-46c4-ba54-bde09fda3711", "sighting--696f1866-1599-4459-bd19-d0ee85af346d", "sighting--a2136661-3ffc-47bb-a9fb-eceda1321577", "sighting--fc7b4f44-cd4b-4ce3-b5a1-625416059249", "sighting--f38634d7-13e9-49e2-9e90-a88cb07610b5", "sighting--ae03e31a-ba48-43a8-befd-e9196ba3cbca", "sighting--25f74dd9-7289-4a36-ab93-d6333fc6cc01", "sighting--e5e90426-0980-4e3f-8912-1c840ccad291", "sighting--d7a6a0d7-10db-424c-86dd-fc711fbc3a35", "sighting--547c6dd8-f345-4f29-9d68-dfa70b7154c2", "sighting--cbf7d4f1-ab5d-4282-890a-9ef8f71851cf", "sighting--a144e1bc-d823-4a71-8c5c-f77c5176d75d", "sighting--8c01d618-f7df-4b18-86b1-1d7e3d5434ab", "sighting--6e95e2b3-2e3d-4089-b405-a5e4102f6f62", "sighting--4b3224c1-b89a-43ea-a229-a9d47502dbc1", "sighting--1303f992-be27-4bbf-bfb7-d4b5a946581e", "sighting--a06c1689-10d5-472b-8aae-a3fc5aa6363f", "sighting--7f9b3eb4-5fb9-404f-8aa3-2af2dbbdcc1d", "sighting--fff6eeac-79d2-46ad-a2bd-22d630d39100", "sighting--f248993f-e9eb-4c77-9e28-63f3c98ca175", "sighting--21a26d2c-1a8c-4fec-8fc6-1794b36cff10", "sighting--71ddc420-8b03-461f-9532-a345e8ef8640", "sighting--544324e4-6e39-44e8-9e2e-7646305e09e3", "sighting--93068d26-bc06-4f66-8826-1a911171644a", "sighting--c6248d8f-e06d-4539-90e6-ed4a2162bca9", "sighting--440dc71a-b3d6-45f9-84f2-fdb7db7abb5a", "sighting--ccf6a88e-f922-4b6f-8dac-2f98cecd1b25", "sighting--00c34334-6aa7-47fa-9697-767a530a496d", "sighting--4ce4ef03-1920-4779-a3e5-567e38af2d90", "sighting--54c6c8e4-5468-47f7-9e10-461f568d6d54", "sighting--81588361-773f-4975-8ede-920181c24e85", "sighting--b093a3e5-d5f0-4471-a537-81ff7565510d", "sighting--c7cc0798-323e-4319-a41c-4cf6cd50cec3", "sighting--d13bd5ba-eb45-45af-b660-dd60b9f65c01", "sighting--6e077ea4-1272-4153-801d-5ea135a6cc29", "sighting--56089fd7-3056-464c-99b1-0c25a51a0331", "sighting--198b2a5c-0aaa-4a2c-9b3e-21ad81b6cec0", "sighting--d3f91c01-2ac5-4e67-be77-0f6dc367b168", "sighting--b8a6787b-0e4a-4862-b90b-082f21ba9944", "sighting--b1d6ae4d-b50f-4041-9f27-a29aca002d5f", "sighting--6011540c-fb06-433d-9f81-00efeb5696c0", "sighting--55d85c09-354b-484b-b21f-37d5d8822163", "sighting--1430a2fc-9c7e-47b7-881a-fd460e8a9918", "sighting--632f3ec6-e184-4be8-b0c2-8dfc09f49d29", "sighting--0c27f7c5-9af2-42f1-ad42-998a9f95f561", "sighting--4798968a-701c-42a8-9588-dcd9535bc7f8", "sighting--0b47ebcd-8feb-4e0b-a526-eb7528ceb1f4", "sighting--e3f13ef1-0d23-4893-8308-ed73a31cec23", "sighting--5d70f32a-9c09-466f-91a8-ca055ec1d968", "sighting--20754a14-7c71-4956-a1bf-708f1b939163", "sighting--d7085f08-ab02-4b27-8822-e8eb01bde772", "sighting--0639aa8a-e02a-4860-a1e3-9b9653e26848", "sighting--ae1a5eed-d4ff-42bc-8c8e-74927ec7196b", "sighting--7a1842d4-aefb-4b70-9343-6c750aedf813", "sighting--d6bdc955-8642-42e6-9e8c-9c1cccc0fbc5", "sighting--83f1df20-7cda-4d90-a15e-61ae38b40bbb", "sighting--af8d40b9-0155-4c93-a837-bde9f4de816c", "sighting--80ca063f-215b-4aa4-a19f-3ba8d3516402", "sighting--71659efe-1845-4dae-8fbd-25ff7f84fb6d", "sighting--4d9571ae-ab6c-47cb-96bf-b5a2e1074f2b", "sighting--932e7f3e-dc0a-420d-84ba-e44eb4eebdec", "sighting--44df9f22-d80f-4004-ab07-0c1556b39d79", "sighting--a7e8b5e8-ed0b-4029-b6f9-a8db84dee1b3", "sighting--a77867f8-174b-4b61-a326-88d53088c2ba", "sighting--4f66365d-601f-49e9-af10-bb45d7a4357a", "sighting--f0d429c5-60f3-43d6-b4a0-b82702c9e634", "sighting--b46d8c59-14d6-489d-a581-77538aa0b1c0", "sighting--937c65f6-20b2-483c-a804-6fe1462c9e98", "sighting--83a52780-4dae-49e5-a21c-2d3f36c1d401", "sighting--9d6955fb-69a3-41be-b06d-f0d2a4b06119", "sighting--c6f6e1d1-bf33-47a9-b609-8e82753f0fc3", "sighting--c85db0d1-de80-43e0-9ae5-bc228adf1954", "sighting--28ef72d6-2c44-4b78-af84-a1f5e56722c7", "sighting--e277f7be-e830-44cb-a37d-861f2cfd377f", "sighting--695b799c-a639-41c1-9f47-aa406da3286e", "sighting--b3671624-fce9-42ff-b877-5820aa3e7748", "sighting--f3b0069f-2bf7-4c4c-8c2d-da47ae01e7d1", "sighting--32c5dab2-a1bf-4fd5-8d25-b555de6cc330", "sighting--69734eb8-fff8-4358-873c-8236d1c34af8", "sighting--85b550a6-d0e3-4384-818b-a546a5857135", "sighting--06d22783-9d55-4578-a068-281f0ca4e266", "sighting--28469362-a0be-4ed0-aa20-51e46ee5e52b", "sighting--d6ec1178-eb9f-4d68-a651-45f90241a43c", "sighting--4a4ddf35-6e0c-4771-b1b1-f92f07ff86e1", "sighting--334c0bb0-0e91-4eef-9bbb-51c026920964", "sighting--3de613d2-b5b4-4d1b-9d00-75b771409f42", "sighting--ef1acb05-6946-493d-93d2-875c557d2968", "sighting--c6add30c-2a52-4c01-aa5e-16726900ed54", "sighting--ed37c32f-8f8b-4abf-8e5c-5c5860451f3b", "sighting--128f3f63-ebd5-4387-8b73-84a26616baca", "sighting--a3ed3420-4bb6-4636-be5a-b987b5636c1a", "sighting--34c49f24-6624-47de-a4e4-ec22da383bad", "sighting--753d9667-dac4-439e-a096-88fb8e0ad39b", "sighting--a82882b6-c905-4129-8908-be0ab6537f8b", "sighting--ee17aa7c-fcaa-44f1-ac47-c09503cc219c", "sighting--5f39ce01-6d0e-44ee-8ea0-6d80b9749655", "sighting--fd11699d-2c86-42ea-ba7d-0c90117ef63a", "sighting--bb677430-09e1-47c4-a2e1-166684b617e6", "sighting--66fa0512-bef9-402f-8088-11712e6c3794", "sighting--f0acb42c-3274-4c91-8f19-c6067783dbf8", "sighting--59e3db9b-0f57-401d-bd35-f9afa26b5a17", "sighting--d2aafca5-78ef-42fe-b7c7-f63a3f08d57e", "sighting--a6bc82ad-7c27-4d14-a396-4a4409574449", "sighting--26cf852e-bbca-4613-913d-f6f20d62f7f1", "sighting--16f00415-a27e-4ba0-9cda-79201e0f957e", "sighting--2fb4d9c4-e5a3-4a20-bb59-2ff5cffd5d95", "sighting--dd36d771-fdc2-45d3-80ee-d564b82f4743", "sighting--071babd3-65cd-493a-9f10-b3d1c07aa2e7", "sighting--cae4a1f5-1d7b-4627-b7f8-0ddb520384c8", "sighting--72530379-c179-40fb-9f78-78c36d051c23", "sighting--a60e9e20-ea5f-48dd-8558-cbd91a7f0c92", "sighting--d1558657-cfad-4892-89b4-bd94364f5d62", "sighting--91c317b7-8e61-4261-be0b-b5aa8fc4a832", "sighting--acf62bdc-7dfd-404b-8ce6-42055be7acbf", "sighting--6769de31-edee-4e37-be67-711f070b7e3c", "sighting--5c0e8296-7ded-48af-b4ca-14b2f2455b9b", "sighting--c984911d-4c74-4124-ad95-05414d104b3a", "sighting--9bfcb69c-8f74-4200-931e-0796a5cd0e5b", "sighting--e0b941ae-5135-4da1-80db-03af45a25637", "sighting--4b5074fd-1c34-4b31-8efa-161e1260ce6b", "sighting--4eac0315-6af9-42df-ad84-d5e53176b5ec", "sighting--d3719405-db18-4daa-b424-e34758726ee2", "sighting--e8bd762b-85e7-4c97-a327-71fd19499534", "sighting--a88535bc-cf4d-4102-a354-f9112b419180", "sighting--8887db10-e8b2-4ee7-8108-03fecca971c9", "sighting--4a541772-1328-4412-a8cd-d57f4811b870", "sighting--f3bce0a2-8211-4197-a813-892579671ed2", "sighting--dbce4895-0ec2-413f-9513-1b5ba2c9021f", "sighting--9f4d83e8-9b17-4b8f-b08a-d75eff31407c", "sighting--1a191631-ca35-4c6a-8c93-8fe4f1c66367", "sighting--c29f1bc9-3f36-42d6-b9da-e1dc0478c21b", "sighting--526729f2-06c6-40bf-9400-687f70e7061f", "sighting--49e25ac2-f6b0-4308-9d19-0aaca8aa5f0a", "sighting--8d613473-ccb6-4b98-96e5-ff14cb127574", "sighting--6d4dbff3-8959-4d32-836a-0245cc47d4f8", "sighting--e61e4f75-2386-4ee7-8e4e-daf716578ce7", "sighting--73829920-4d11-4eef-b0b4-2e8ff3403474", "sighting--c61384b5-4aa6-4d44-b497-4f8808d1f14c", "sighting--2fc63c1c-934c-4172-bf5c-9384bd8e43be", "sighting--814f986e-9736-4230-9b4d-126f08b7ad71", "sighting--b88f1ea7-cb85-4c20-b84b-7d4c7a3277a2", "sighting--3dd29538-76be-453f-8c3a-7b7a184c5ecf", "sighting--684cf5fb-6b0c-4030-a080-d15c5eb46376", "sighting--23808fa1-b783-4509-9eb5-180771c370c7", "sighting--ef10a39a-1ddc-4d33-a074-dd977bd72bae", "sighting--5f81a948-6c4e-48b0-80c7-37893dc24147", "sighting--cd5fa913-3b67-4606-a163-2798eb1ee425", "sighting--2f4bb6c5-2977-44e1-bc07-927d250e5c5f", "sighting--219c09cf-f601-48c4-a1e8-bb8a7cb5d56f", "sighting--cb45a6aa-c035-45ae-913d-a6a1217f0fbd", "sighting--f191b271-a9d2-49e3-8f66-7b6d979bd9d2", "sighting--c68ffc5e-ab7e-487e-b5c2-d64183508660", "sighting--ce94f8a2-17cd-4a77-a434-1467eb6384d3", "sighting--2b9bfb0c-b7b5-4804-9d6b-44aeca22e0d4", "sighting--eda6e251-c8dd-40a9-aca2-32ff454ed07c", "sighting--fa40a79c-a64a-4007-a3d7-5c848ec513ee", "sighting--c98b0a8d-f262-48d4-a82b-7818e4732c25", "sighting--1e4ae812-8b85-45c4-8da5-20900088de0a", "sighting--c7f1b4f8-73f8-4b81-8b87-0454260e9fd1", "sighting--d57af594-d47a-4e60-af75-e0838dcd17bf", "sighting--f0fda22a-4c6d-48dd-9b48-73313072e79f", "sighting--4ce2f8c2-7b01-4c0d-8dd0-efe80df0e209", "sighting--be0d03a4-ee94-43b0-8956-f555c6aa2478", "sighting--04d5197b-20ea-4152-b835-7a6cba10dadc", "sighting--f11a9baf-c0c4-454b-b9c0-1f64f4e6530b", "sighting--7d7e24ed-6c95-499b-9698-97899654de09", "sighting--2250e3fa-6d1c-448f-85a6-3f271cb94ee9", "sighting--b295ec1a-c587-4533-b1a0-2c37eefdddab", "sighting--ddc3c413-8b60-49d2-9f4d-e9db2c88038b", "sighting--db20592c-5954-4c4b-b567-4e37cfe9cf90", "sighting--84541f8a-6e09-44d0-aa6d-97203e3d0d92", "sighting--b556daae-696d-4c3c-a13d-8516cf751e3b", "sighting--13f29044-495e-4229-9004-64e1dd6264a2", "sighting--03392bce-60dd-4b62-b989-2a4211b1c054", "sighting--18dfe9af-8fea-451e-84d7-efa2da524a0b", "sighting--eae420fe-a042-4d5d-81c2-a1a6c80835ec", "sighting--bbc009c8-fc55-4abd-971b-a0a5ee85ac44", "sighting--784492d3-76a1-46a1-845c-40754d31d872", "sighting--5e51dd04-708f-40ed-8904-d2a49af7b5be", "sighting--40bf64a7-1c40-4ee0-8f24-9b1c17cb9fbd", "sighting--6e8442d1-a6c1-4ff3-9202-ae0f8cd2950b", "sighting--7da9669e-ecbe-4437-a8b2-9f578a3eabeb", "sighting--60168931-076a-4cc9-a028-874742e7a924", "sighting--20d0727a-e511-4822-b9f7-6ac741a423ec", "sighting--920e8add-2ba0-4c96-9672-306dccda327a", "sighting--737d4093-b719-469d-8dde-a0ea255150bc", "sighting--ad85641e-7998-43c0-aa44-b253eca59705", "sighting--7613a583-21e1-45dc-bac5-94bf0ea53c47", "sighting--697048eb-629f-429c-9fea-df3da7569d6c", "sighting--58340a2a-fd56-4c0e-b868-90673a23366b", "sighting--9fe0fce0-fce8-4d37-a319-c3d26c4d17ca", "sighting--f5523679-cfd8-4a93-8be1-d79e1a661f44", "sighting--8c610e69-8414-40d8-b14d-c7dce8c6f64f", "sighting--0e62df98-ac73-4cd7-9a33-14fa0c67fae3", "sighting--862132da-17dc-41dd-a873-a8ed6b4d471f", "sighting--8e1a4910-09d1-4c8b-afe2-d094de22d111", "sighting--30c1497b-a0a2-476e-befc-8828d682671e", "sighting--cecd6503-758f-49d0-88d7-4e70e3373063", "sighting--e4cf7f0f-9d61-4512-b73f-ae864e020f42", "sighting--77d97546-062d-4ffd-a371-ab9913b63e89", "sighting--55fc0cb7-69c4-43d2-a47f-d7b2226b98c9", "sighting--c1eef198-0e87-40b8-9ca0-60adec90a1de", "sighting--9184d1a9-6909-4b5b-acd9-c223d6b43ea3", "sighting--d7cb1e6f-3709-46bc-b673-33c337212274", "sighting--873c559a-6da6-4b05-9416-6299847b6b5f", "sighting--f1a0da58-8080-43b2-9089-fa50f59b78b9", "sighting--b3c12694-ea86-4b6b-96b9-b995555a131b", "sighting--6bb2bbf2-33e9-4f9e-aaf6-e1db1947517a", "sighting--3377fa92-a425-4acb-af77-afab883aacda", "sighting--6e5a0779-71ad-40da-8bc1-9907394dca1b", "sighting--1143841e-1a00-4f39-8619-88e7e9b30f0d", "sighting--767b5e3d-531a-4b49-8035-a08d3a2a75a7", "sighting--d86797eb-0a17-4a35-9391-7a112fa257f9", "sighting--1b3f475b-b69e-40ab-9605-c296c44045bf", "sighting--3512dd57-73f0-402a-8f8f-2f0affcda4e1", "sighting--e6784fa8-a903-4f07-be71-905f26fd3e15", "sighting--ae114057-acba-4903-b81b-3d51530e541f", "sighting--c16f2118-0f9b-43b6-810a-19019bd167ef", "sighting--2ca791e0-3fea-4f99-85c5-1a4a3e5c88d2", "sighting--01d53071-12bc-4de7-9835-492131e5745f", "sighting--ef4a48db-b53c-4797-9ac6-13954b5356cf", "sighting--3523373a-c6bf-4922-864c-b8bb0f0dfa68", "sighting--9e0ec921-e056-4be6-ace2-2aed5fe39c69", "sighting--8ce6d32f-25a8-4f08-871e-09c6da3844c2", "sighting--5bc5f15b-4a8c-4560-b183-1b302613debf", "sighting--57b7beb0-10e5-461a-8e34-d3e467e65332", "sighting--b1730319-66e9-45d5-a687-e5fafde6d4aa", "sighting--809eca4e-55fa-488e-b165-d79b3f641dd0", "sighting--62e34adf-36e6-4a7a-b378-ea0689ce89a7", "sighting--20478260-a3c8-4428-ac8e-e4f13b8d3677", "sighting--9468bbfb-4f25-4343-8d66-6a8ffd52159c", "sighting--7cd227bf-1364-4ba2-85a9-3e89568b2726", "sighting--81c7f99d-34bf-41d6-bb96-307ac257c401", "sighting--200a5015-cdbc-46fd-abed-c20bb72d7617", "sighting--1c6d4c66-a6e2-4a6f-b837-9b80a86d9435", "sighting--f217ac89-d069-4f60-9933-77f10542a53d", "sighting--c0cb0456-309a-435d-8312-81205aaf5683", "sighting--10669647-c9b6-41e0-b038-b262f31b904b", "sighting--cead1e57-8b30-4e91-b7b0-27ba37c5c9cd", "sighting--3360436d-27b5-4b52-abf1-c8925b295001", "sighting--73634d7c-3d91-409e-b917-aa46c956435a", "sighting--0e0c62e3-24f3-4af4-ac9f-a35a11c72e3c", "sighting--cab3ef2e-1b17-4475-a166-7142d4f30536", "sighting--4469b216-ce77-42dd-a44e-9927fdb6650f", "sighting--e28db1ec-9e73-4717-8be8-9d7f2ff75409", "sighting--5ed77624-d739-4366-b05b-e192035956f2", "sighting--47e7eb0c-6bf1-4432-9132-01d805db5a0b", "sighting--b0e50a10-d4f3-452a-b2b4-d159433355cb", "sighting--9be60f27-bd0b-484f-9aeb-98f5368ac2c8", "sighting--95406670-7c8a-4348-be4e-d2b9d85c194d", "sighting--db96accd-7d36-4ac2-8d40-f47f66a48fb2", "sighting--394ceff0-a3bb-4f6b-b633-d58fd3ab0953", "sighting--bbdfc627-f50c-4fb7-a08b-88258c4ba76f", "sighting--a442cc79-9bdd-4ccf-b1be-31dedb7a25d9", "sighting--cd68afa9-ba7f-4740-838f-b1f2948650f4", "sighting--476bf516-95b4-4e95-8c80-0936f87b7061", "sighting--58f3b632-9dc3-427d-b15c-642914a70aa0", "sighting--930791ea-a65b-41b2-88e9-237977984c43", "sighting--f1c1c319-0a2a-4b20-8562-02e21c96ec96", "sighting--1082e717-47e9-40d3-9586-a48fb28e83a3", "sighting--3d0d1d33-f7b7-4140-af32-8f613f37a0dc", "sighting--608433fd-402e-4eba-827b-38d280126231", "sighting--2f796e0e-ca50-4fe1-964c-d310ffe83fae", "sighting--c9f733b7-6e2a-47c2-8594-f430f480dd34", "sighting--aca336b7-63a6-494e-b08a-8c2b93a0fa74", "sighting--38d482e3-5458-4d00-a907-bf02faf9d488", "sighting--d1569b48-d905-4c83-bbd4-85373582085d", "sighting--0c8135f6-44aa-4d69-9729-91a304703c12", "sighting--a30a8343-6097-4aec-92fe-34b11fdcb878", "sighting--ae44cc72-6c06-4080-a0d0-ff1d3425fe60", "sighting--bb2531d7-18ba-4494-83bb-f8400c566b35", "sighting--37efbcd4-f4ef-4538-9227-128e480c606c", "sighting--a01a1771-a713-430d-b682-80e9073751e8", "sighting--7c65adfe-993e-4c88-8995-23f6ab8cc031", "sighting--7a1ad1d3-e7f3-426b-a056-6fb57760fe15", "sighting--ca55f243-4280-4d89-801c-be0f2f1c4ea6", "sighting--ec492713-6adf-43bb-95a8-d827875e06e6", "sighting--023c845b-fc32-453d-a6b2-8d6fc35233ec", "sighting--0ca302ec-95d6-4ded-8121-3a9455461e6c", "sighting--375b4b53-ec6c-41bb-a59c-2a09e897b273", "sighting--4c154402-9ef8-4361-b61a-1016148307e3", "sighting--a96cc0c5-f858-4a83-b500-a55e972a4a29", "sighting--e6bbcbc9-2bad-4dd5-980c-bba9f9055513", "sighting--9178edce-8bab-409c-a30a-736e6c3e9198", "sighting--0401c8d9-2695-4129-830d-9e69f696c253", "sighting--9650758f-9342-4f2f-97b9-447a82b6b1d8", "sighting--648f200c-4734-49fc-ba38-f6a5fe4c3fe6", "sighting--30e439c6-1479-49e5-8bd3-e174e227cd70", "sighting--71577286-4f21-40ef-8050-00aebc8456f7", "sighting--943a3876-d390-49e0-a8dd-49bdb8e677f6", "sighting--5659634c-1ae7-4776-a1bc-8e7831db33cb", "sighting--0a19f1fc-e765-44c2-aa8e-cddaa904e43e", "sighting--cb05bf92-ae8f-46b8-a441-59f7aa495410", "sighting--03e02e64-71d5-4ce0-8124-45c7ba6b5e00", "sighting--12045d25-3371-45b0-ad64-374ffb7c6d33", "sighting--31a4d57e-cc6e-47b4-a323-706fed4682d8", "sighting--7d237e83-cba7-40ef-a859-dd0243b786fc", "sighting--1f96919d-448b-473b-af82-03e47a1ac3cc", "sighting--b9c2157d-ff3a-426e-bc09-98d3bc5cd723", "sighting--e288f948-e974-48e1-9dc6-2bd09b49aacc", "sighting--f59f8d99-d30b-4fb8-9717-a5dd16fa30b7", "sighting--3354fc99-035f-4630-a8a1-79fb6e0a4118", "sighting--06b06a16-6167-4a3c-91ff-d51eadf6921f", "sighting--b0f77153-9a66-4da2-9769-001f89d5bb24", "sighting--1f29bfec-d91d-4fb9-a616-a1ff72cf45a7", "sighting--ceb2ba37-b835-47de-b39c-56440ee9c3d6", "sighting--710b1d18-adca-4fa3-8f25-5c1df0dd3de7", "sighting--8166330c-2dbf-4bb4-b159-f50b9bfe5084", "sighting--68f3f32e-e20e-43dc-8ed3-da21621e6ceb", "sighting--0157224a-de28-4ce9-85b3-f8ea34c27f67", "sighting--9f57adf6-7b8f-436f-bdbe-4642d3427b5b", "sighting--e24945f9-d2ff-4459-bdb7-58a739e265bb", "sighting--1b2c9b1d-e0bd-40db-86ef-54f2db5a597f", "sighting--5c2e81fd-2832-4b37-8106-d051d791ad39", "sighting--c0cdfde1-d2de-4c4f-8728-1c3476c88e90", "sighting--3f0cd4c2-1d21-4d0b-b848-d14d69f6d24d", "sighting--9a4f2a1b-d1d4-46e3-80da-e27c3a516c8c", "sighting--6cb86d66-e2db-4af2-9e55-0a4e5072787d", "sighting--a02e7ab6-8870-4406-bd2b-987d0c2d1f9b", "sighting--b43ad7db-c2fd-4105-8ed2-e2e2bfaf82be", "sighting--7b7e5fb5-a8ac-4ca3-bf5c-6e3998070eba", "sighting--d041b678-0df1-48eb-bcad-218190abab9d", "sighting--6b2f9322-d6bd-4b88-a4ae-b399b3b981ac", "sighting--3258457e-4fe4-405c-9d0f-85943ad9f9c9", "sighting--841ea2a4-08c2-4fcb-92d1-8636ecc024ee", "sighting--e7fe8fbb-e74f-43e0-bb36-37e886b2e28f", "sighting--fde0c5c1-a98a-4607-a137-05960eb17a79", "sighting--69581aae-d62f-4154-ac74-7937eba515c1", "sighting--b689f116-9180-4367-be25-3eb42982b054", "sighting--5fa90f7b-d266-4c82-9dda-b1858d8cbcce", "sighting--8db1d40f-77b3-4436-ac1e-a8247632bdb4", "sighting--c66d8138-599d-4973-a93c-9fc06e1ffef5", "sighting--a4128c83-0d5a-4219-912c-7c7741f5d5ec", "sighting--f5d347ae-6f38-49a2-9701-2d96c1ffa26a", "sighting--521b9f5b-4fd3-458b-ab71-e0ae06f9f2eb", "sighting--32733fd1-4a1d-423d-bed0-ebfd816863b6", "sighting--f56b4381-427a-4236-aaa1-b2b60e4c4130", "sighting--ba51d639-c4dc-4adc-a25f-9d6ae3aa9c0e", "sighting--39330ba2-d00f-4859-9c48-d965d8682dc0", "sighting--c1ca07da-5225-4669-8b84-3e0cdd8f1da3", "sighting--6f31daee-132b-4a59-963b-9e6cdf78575d", "sighting--9f99ea85-8627-4bf4-bf9c-e35913c80055", "sighting--4e062bc6-af6f-405e-a9ea-0c2f5b0b194e", "sighting--6da43837-61ab-4790-a7e5-2a6e560c6625", "sighting--b0c0484c-bc09-468d-9a75-c32e6126f501", "sighting--2b7463a0-d3dd-4822-9e56-c34248032724", "sighting--2729c7ca-dd5b-4999-9cf8-2c5c37e36e26", "sighting--4e0952d8-53c3-48f2-a8a6-4783a06ab8e0", "sighting--ecab65c1-9ad0-4d4c-be2a-e01ae9314bdf", "sighting--f6dcbc41-d5da-4048-94d7-d353de1ecad8", "sighting--8ae4520b-1172-4552-a42b-8ce822ab34bd", "sighting--9c8dbcf3-2cb0-49be-9736-204bedc22af1", "sighting--3fabe0cf-7e4a-4748-b4ef-ad788ab41977", "sighting--e28f5105-e463-4f09-9957-c7f30770d524", "sighting--1992ba31-9c23-4cb7-a72a-558fa80c37fb", "sighting--aa1a0ea9-3489-4110-aff3-25cc65799dea", "sighting--e8a1f1bd-9884-4c21-9adf-8cbbec1b5012", "sighting--09bdd4c4-6602-4f46-8928-d2bbd370405a", "sighting--a3a98b5b-6d17-4140-9934-6d6e00677459", "sighting--f4cb413a-3913-451c-8861-2bb874076f9e", "sighting--ff7071fb-f26f-4f05-bf9f-b47e8be3f445", "sighting--96fe7e72-58e4-49b4-9348-140263ec2c2d", "sighting--a59fbf34-3340-45a2-ab91-fc87f3d86e9f", "sighting--5a879753-d581-4efa-bd37-d53a09c77a05", "sighting--2a886e6e-e4b9-48cc-ab11-1689b9239300", "sighting--d58a94ac-8af3-403c-9e64-d1c9595000dd", "sighting--92aa828f-76da-4e76-b513-4520428b0189", "sighting--973c8214-92f9-4a3a-bdc1-218eb7b15a78", "sighting--3b57dd78-5ebc-4629-8062-bbf30e89a98e", "sighting--4a937a61-c8c9-47e3-bfb8-92fc17e3e5b6", "sighting--22103d0a-c856-480b-9271-bc653eb21ece", "sighting--545de44b-066a-4542-aa22-24630b3adae5", "sighting--f01ef033-9437-4b1e-a56f-7d91fc9f80d4", "sighting--2d17eaf3-ef67-46c0-a570-b17f914967bb", "sighting--d544655b-c94e-41a2-b233-fbedf6fc3764", "sighting--422ab5d9-cdc8-432d-a6b8-0262f48edcb0", "sighting--43570294-7236-446e-9d37-ab2cab44e1d6", "sighting--65e375e8-44ad-4132-891b-0b7ff5541dd9", "sighting--ab1a7191-1561-4932-9000-eb4753b2885f", "sighting--76adc520-8d42-4de6-a4c3-dd64e5dff1c0", "sighting--83257596-4519-4b2b-8bca-250d9cca9793", "sighting--6b835c7a-9d6f-49da-8d49-bedec66d446f", "sighting--5fc2223e-2b20-4560-8376-10ddf1dfa2db", "sighting--19aa66f1-f2a6-463c-a07d-07b23fdcff0c", "sighting--43967e10-76ee-4776-8170-1a2781dc42c9", "sighting--1b7093b0-ca66-4885-ad86-09210272c635", "sighting--a44ebc1f-0f09-43a9-8dd9-520ff2660777", "sighting--b6802eb7-56e9-4f37-957a-56491a33e9fb", "sighting--0ae1a356-9c6a-4352-8cb0-694ff070fe56", "sighting--09116ac2-61a4-408a-8969-977366517e7d", "sighting--a3f686ed-0695-4668-a78b-f9ff4452a792", "sighting--f4ba00c6-9947-45e2-8649-0e323cd1c438", "sighting--a0acbc9a-92fb-4f8f-8e02-03d7d0e68a5f", "sighting--5d0cde4c-d1c1-4caa-abbf-b9d4696c8efb", "sighting--f2bc2f76-9607-429f-9a4a-bc8e0e42bb4e", "sighting--ce01c582-8db5-4b06-995f-bc8408e591df", "sighting--f19cb308-df71-4489-86a1-894d81054df3", "sighting--220c6d64-c0e5-47f3-ba26-1a87753e24ed", "sighting--9114e638-c34f-481d-9797-a73331951639", "sighting--32cf8b25-4417-4df2-8075-cc29f7af4526", "sighting--19237e39-fbe3-4eae-8f42-8b3708b4ce9d", "sighting--2737f63e-3ca9-457d-94ea-e60485d72c99", "sighting--29de75ce-da0d-49b3-8451-78da20dce9b9", "sighting--fec89d81-8614-4e30-83aa-0cdf3b6bd923", "sighting--c0370ee7-2ef3-45af-8268-8e4a03145f58", "sighting--b2850c4a-9097-4f7c-8739-422b09fc4dd2", "sighting--314ac097-03df-46fb-b2fa-43d310679ca0", "sighting--51ee8f9c-2cc7-4763-a49a-f2d648a7b949", "sighting--a587d3dc-3de9-4025-87ba-736c0572c475", "sighting--79d49ef8-b2a8-4c95-8902-a1ba49b0957b", "sighting--5293b5e6-2fec-4295-937e-a668b1ca5867", "sighting--dff737ca-868d-4ad6-b0aa-3ccff179e158", "sighting--b7a7e66a-c1bd-42c0-97ec-217b7af11888", "sighting--4948fca1-edae-4cf8-a31e-ca9af8077f91", "sighting--0cfe5e6d-296e-4ba9-86e7-5a82b7c192d3", "sighting--e536e64d-e6fd-4849-82ab-a5b345a86d00", "sighting--4336633e-780e-4b73-be55-b317a31d15a0", "sighting--c74028da-9011-4575-9d1e-cdad3e26da4f", "sighting--fd7ca64e-fd34-412b-9bbb-9bcbc9ebd981", "sighting--95f59bd9-4523-4fd2-962c-4f757eadadcc", "sighting--d0ec89da-73a5-4263-9c8e-7ae5857a4e2d", "sighting--04da2223-e1b8-4bf2-9e47-db1f922500ec", "sighting--926465eb-bbe8-4bac-8c20-3231482c66ec", "sighting--3ef36c96-661c-4d99-85ff-425e46b9ccd5", "sighting--e54e5f4a-eb32-4678-be48-2e5e133601bc", "sighting--3e2aac4f-510a-4173-9dca-ef10d7afb414", "sighting--3e7717c7-4181-4b16-bda9-093b12c5df90", "sighting--cdcd4f14-429c-4662-a846-dc1c3015d319", "sighting--b95948a2-4100-40fc-818f-305a758cf590", "sighting--f712f74d-c6d6-4850-bda4-7a3b5ab5008e", "sighting--30374a33-9dae-4320-b4d9-14af090d11a6", "sighting--075b1a4f-d240-45a4-95fa-abc53edf730f", "sighting--92944ee0-d930-4464-88da-e230c3eab4a0", "sighting--0fb81fa2-834e-4dd6-a56b-fa2941f9f785", "sighting--078a850f-040d-44e3-bb2b-22281eda0cd6", "sighting--0c0fd425-2512-48f5-bc93-fc6d037403f2", "sighting--c7bd6675-1c14-4d28-920c-7526d5b06e6e", "sighting--9caf2f61-a2af-4047-acd8-16bb8fcede6e", "sighting--cda43184-93ce-492d-8891-728158e864a7", "sighting--8aa98dca-9862-44db-8488-1c7e32a053fc", "sighting--6de47c0e-ed53-44de-917b-3eaa31429dc1", "sighting--f289e68d-5e8a-4fef-a6bd-e0f863fb5e6c", "sighting--54bc02fc-d12e-4088-b9f9-77dfea3a756d", "sighting--0b5d1de8-647c-4a09-af73-8304fc142985", "sighting--c90af232-ba31-41fd-8f15-44a034871fd7", "sighting--80984ef5-e4e7-4254-88d4-872aea6d2860", "sighting--932c2711-1279-4d62-8481-0b14d9f5af92", "sighting--49703373-a4f0-4f0c-964b-76e059b8d116", "sighting--6792ab49-36a9-4eb2-8081-8b393d6d8bbe", "sighting--9c0850db-17bc-4500-a581-4b78a9b425be", "sighting--984f1712-e36f-4bae-986e-e3a54a26d0bf", "sighting--452b8eed-d0f4-4481-abc1-ec8ee1f1ebe9", "sighting--a1940e70-2774-405e-808f-f7c4e4148e4f", "sighting--98512f06-225b-48ae-be5f-6fe74a58c759", "sighting--e6d9b036-5c99-4396-929f-683628bebb00", "sighting--fb5a6beb-5489-47df-94bc-f3b8090f8e45", "sighting--c49b801d-895c-45bc-9d11-cd0337459b99", "sighting--17d54ba4-5d4d-4968-8b0c-94077faccba1", "sighting--39b8692b-aeb6-479a-ad5f-63a0210ad1d0", "sighting--4bc6d55c-a48f-4763-aef2-4ebf080a4da1", "sighting--ae54c794-48e0-4885-b999-04195bba3791", "sighting--89168eea-8b5e-4a7b-bc34-869085c42ecf", "sighting--0763b3fa-4f7a-48bf-9ec4-bf718ee72d44", "sighting--2c9b3333-55e9-4daa-9ced-0b6b0d18f614", "sighting--20dcdd20-64b0-438d-8365-69e819c30ce7", "sighting--01922dbf-cd3b-40a2-94d9-b029290150ac", "sighting--4b5c50ce-e2fb-42bb-87e1-57a669abfc61", "sighting--1f114ce2-5274-4439-8c70-a37a05de70f3", "sighting--c7b2db03-515c-43d6-ba00-c2b5c9b5321f", "sighting--61ca39a5-035f-4fcb-832b-3f896367f826", "sighting--4368e919-12b9-4d9a-bab6-ec8f84b67cfb", "sighting--65c18243-a50f-497e-8f2c-3e1676339d8b", "sighting--a5adee7a-6e3b-4862-a485-9a3f1e5eeb86", "sighting--702121cf-e0d8-4054-a2bc-c3ee66cadbfb", "sighting--ca7c9300-fe97-49ec-94e3-bb48ec3b0691", "sighting--a61e21f6-2b69-40ae-819a-445d20c3043f", "sighting--80ee89e2-d60d-4c91-8ab1-519583ae8e1a", "sighting--012b56e1-a40a-414f-be98-ef885b917336", "sighting--cca61d81-a2d0-4640-a19b-03999bcc4ec2", "sighting--fc85b11d-6cf8-41b2-b2d9-c5e8dabcb79d", "sighting--5e14db16-8ea2-4254-a88e-8b151eae74c0", "sighting--b869df85-a506-4d01-b175-88fbfa3a4ca3", "sighting--beb12cd5-2176-4a80-8650-396e563502cc", "sighting--09fd4314-f3a5-4a7f-8110-9f1c3d1804bb", "sighting--023e635d-0a53-4809-8c7f-0392bd6be79d", "sighting--ba449e51-a535-410f-8b4b-6867ccf16580", "sighting--d94e8103-9d14-43ab-8703-b995ce54cd67", "sighting--53bfaef4-3582-4325-b414-01c302a61e57", "sighting--2bb1993d-8030-4a3d-86f6-47e55ffbc3f4", "sighting--1cc392e3-57e2-4049-b2b9-ed766c84af8d", "sighting--2b6c4706-90b8-41c3-823e-1105ebb77360", "sighting--2f60c55d-4a4d-40ba-9a61-4fd0799379b9", "sighting--9aa619a6-699d-447d-814b-16414a696781", "sighting--d7aabd0b-5621-48d6-80fc-f4d7e9830cad", "sighting--553d6241-9cf8-47a1-bdc8-c26f5f94c688", "sighting--340de71b-afc8-4668-b6e3-1c621fb4065d", "sighting--0d995b12-f32a-434f-b5b5-0b450cbdccc3", "sighting--65b43c4e-fc14-4cc8-99d5-ebac1afecf6c", "sighting--be4ee177-0836-40b3-b55f-14e547c3973f", "sighting--8f5cfb57-d919-40fe-8a27-2f6ba925076c", "sighting--9337d919-f180-4a51-9597-27fb224dd0ca", "sighting--fdb87857-20ed-4d6f-b2c4-b15df4eff114", "sighting--ded266ae-adac-4c94-bf79-0a966c59d599", "sighting--a5b134e6-fcb7-4c50-8123-997198826b6f", "sighting--33e56c59-5342-4bad-9b76-9199325b4e9f", "sighting--cf03def0-482d-466e-bfe6-2f0fb6225d16", "sighting--97884eb5-3734-466f-990f-0307d2cbe40a", "sighting--78ea2aff-db95-4617-a03a-d0d73383c33d", "sighting--a1d2b1e7-efd6-43e0-acdd-3502df698dc3", "sighting--0b308aab-159e-4d4d-9a1d-0829bdd2b7e8", "sighting--46c6b14b-4fbc-4b0f-b85a-109166b16ede", "sighting--45db6d6e-81ea-4b8b-b0a8-918596ea9e56", "sighting--25605f8e-32e8-4f4a-aca6-273a72cfe965", "sighting--6a538fe8-06a2-4a8a-bb7b-9519f811e22e", "sighting--e7f68cb3-8223-4244-b0c6-60bcddce7194", "sighting--8f9e2905-cb33-439b-9425-2188c5f1532c", "sighting--d9929667-5c12-4e87-bc2f-24dfcd89ed7a", "sighting--060a4564-21f5-4317-a6cd-b8f4f55a2386", "sighting--703060b9-98f3-4296-9c3e-60c7aabe08c2", "sighting--c84292a8-5add-40f1-9125-6221784df072", "sighting--5b41a79d-3479-478f-9bbb-264e750e875c", "sighting--d864357b-9145-4fda-b4ca-3b9231709624", "sighting--73cde6aa-feb5-4c15-ad86-84b7edf6efdb", "sighting--684b89e8-0ffd-4977-8883-7e7ada96d92a", "sighting--16194f6a-e2bd-4ca0-a640-17be8f9b3cd3", "sighting--13cd6e19-d553-47a3-9ebc-036600d08151", "sighting--d5d81e41-cda0-4c90-a3ac-32b7fa027c1e", "sighting--7f274774-9a47-4d54-ab1f-3e45e38e17af", "sighting--5412fcf1-4d03-4ac0-87a2-ea7469590ede", "sighting--2244b99d-e51d-4f4f-97d8-dc5b3d89231e", "sighting--a14edd80-8a6a-4aa5-9126-2fb08909b80c", "sighting--016578a0-83fa-479c-9a43-d38be9c6d28d", "sighting--c7670226-253d-405d-9665-621b3abd4a55", "sighting--4034971c-acb1-45f8-8426-9970c675247f", "sighting--2d19d598-cfda-417b-bb0b-be1634229f50", "sighting--59a428e5-e68b-4ed8-b27e-fd95a929e4d7", "sighting--428bb71d-c8c4-4c67-8ff7-93782ac4f36b", "sighting--d0a726af-db71-4927-b99c-62645e0644fd", "sighting--1b247dde-d9d7-4b1a-ab4b-99491dd14e03", "sighting--32d9c838-4052-4d0d-bddf-4eae2864e549", "sighting--1190f9ee-0de5-4fef-b302-7f7b0d932385", "sighting--ae17e167-f50f-4d05-ac94-2218c2bd3c7e", "sighting--54c87155-254d-4dbe-a566-9302d85c1a90", "sighting--f688bf31-28e8-4252-8864-ad8b6167e01d", "sighting--d2b7007d-6ea5-4fde-b69c-921e24f1a863", "sighting--f90ca984-3c43-4dec-bb4f-c2ae5458f66c", "sighting--8f0496ec-ad01-4ed4-b987-aba99d5ac7ff", "sighting--a4a9d1b1-d236-488b-a64c-63a60a4fc2c8", "sighting--bcfb0a07-eae7-4d0e-b949-a3160439a559", "sighting--8f3c86cc-c306-48c3-af06-bd9aab909cfb", "sighting--d53c8801-0f7b-4c21-8658-f5bb5312298d", "sighting--f41ef1ac-1f46-40fb-b8b5-c44d6ef81b9b", "sighting--72153ea6-cc09-4c41-bd41-c07c4b453111", "sighting--45e4e193-b360-421c-a7c4-6a37788171f7", "sighting--810fb2fc-ab3e-40dd-a733-52dd803b09e5", "sighting--70b72937-537f-497c-a0a9-1721adb7ec81", "sighting--4a9592f6-3fd0-444a-96aa-7bc5f23e0239", "sighting--c18bb669-ff97-4bfe-8685-5c27dde1b4d7", "sighting--047757a2-002e-43fc-8eb3-ff67fae66c4a", "sighting--573d6100-e988-41d3-abd6-f384013295da", "sighting--744b6e64-e094-4c98-b329-30ec48092fb7", "sighting--5206ce94-b143-48cc-b1bd-670d063dfcc3", "sighting--a12f1684-8c36-47c5-ba10-3fc9f0934b6a", "sighting--bf7a6746-529e-4550-8aa3-ea517f9a127a", "sighting--4b528b22-a02a-4a8c-a3ab-b78297098d07", "sighting--31644e5b-b299-4231-9611-28e2ca682664", "sighting--4105d869-2227-45a1-b07f-f2f94a0e9c8f", "sighting--81afb192-af68-4ec9-b3e5-fe55ccddcecb", "sighting--5fb5d397-d047-4832-851a-5730ad3f7abe", "sighting--dc32833c-8d9f-436e-a36b-0491034853f1", "sighting--b6349ba1-b12b-4044-992b-433edb16df54", "sighting--f32cbcaf-e908-483e-bd73-90d105d42396", "sighting--dd7e280e-0db6-436e-a465-8b10ebcb2617", "sighting--7e1d73af-81ce-4c22-8b15-f67f9413ff4a", "sighting--4a96b4ae-b9e0-4253-a3f2-542a85374f08", "sighting--e18284ca-519b-4844-9c30-aa9e6ebd4f54", "sighting--68b7a389-f97c-4cd8-8dfd-f7b6d5aeec19", "sighting--d4764062-8fd5-4066-8d1e-89b723b3953f", "sighting--a0658aa0-e142-48af-9256-dac58e9ccf65", "sighting--274d793e-4ff9-402c-9b6b-aa57c0c35ab5", "sighting--3b83ec1f-f1ac-4f4f-b6df-ed562e2e4f4f", "sighting--8d5c46f3-1908-4209-b570-7d5425d89b1d", "sighting--82701dd2-defd-41e4-a57f-f810cf167a51", "sighting--0bc4dd31-dc8f-4624-be42-9f778f2c7453", "sighting--8078e994-71e9-4ce4-b8d8-5029c6816d30", "sighting--4d5e58ee-9ecb-4a45-ad94-d92ef34db2f4", "sighting--c70e581d-bdcc-476d-a108-70ec56705802", "sighting--901511f6-2a13-453c-8a1d-6ddf992e9e9b", "sighting--5b2b87c8-ecb6-43b8-a332-b68daad9cef1", "sighting--78c86e33-6527-46c7-99ba-03a41e40b73e", "sighting--eac603db-4625-43db-9645-ac49000ea4dc", "sighting--a0541b90-1d2e-4ea9-8e03-ee8261760b30", "sighting--c0b168d1-fa2e-40f2-807e-660d7a1bd2ea", "sighting--4354efd6-af3a-4ff4-8763-136a36b15e6b", "sighting--84b64cf5-7a1a-48ea-8980-d0f0968e1bd7", "sighting--ce13ca2f-3898-47b2-a59b-e3abf2fc5d58", "sighting--adb0bb0e-6b5f-41d0-acaf-1c1780e876e3", "sighting--80b189a7-0274-4b8b-87cd-79606e0f352f", "sighting--c0db6fd2-942d-413c-bf0c-6b46af81047c", "sighting--88289138-b60f-40f2-bfb5-89b5b91bdd6d", "sighting--17ab948b-8442-4d48-b9b9-2461e14b0d1c", "sighting--6cc2d9a7-2920-42bb-99be-72d86b0d87d4", "sighting--c1af92d3-86b1-41a8-bf67-fa3ba35f4053", "sighting--43fc96ec-82de-4319-9db3-78f811edb705", "sighting--2e59bc58-d235-449c-afb9-edaf683dc905", "sighting--2290302c-b00a-44c6-b06b-e77b88589943", "sighting--b690ceb1-eecf-4ae4-a209-34108c3549e7", "sighting--a99a59b9-d595-492b-a680-30589982768f", "sighting--b6449f8b-b990-46c0-b7ba-fbda7fb87597", "sighting--4e427404-8ed0-49bc-b0b9-ec92fb78a19f", "sighting--b07727b1-3561-4f3f-8347-e8e7cb441175", "sighting--9e53d5ee-968c-4bfc-a728-570c1d8c52a9", "sighting--a4b3614e-5fe0-440f-bb3e-f7e333a2e5af", "sighting--3d3278f4-134e-4689-a6e9-5dff9174623c", "sighting--769256b9-a8ed-44ca-b902-a699775928b9", "sighting--107728f6-51f8-40f7-84cd-f071ac0a497b", "sighting--9fb18677-080f-4b6b-8cb6-3bdcef2aade1", "sighting--44ff12b1-f54f-4837-bf42-f4de260e44c1", "sighting--8cd407ac-7066-4396-840d-60d0dea3fc98", "sighting--079ec003-f39e-4848-a1be-bf1009778271", "sighting--9d70999c-7d91-4ed3-b027-9092c6c92c09", "sighting--1a8b4d9e-c867-4544-af65-e74c293edd61", "sighting--dbb711f4-277b-4cf1-8c0e-4c2fee2f2ef8", "sighting--a4bcbed9-412a-491c-bba5-dd88a43cb550", "sighting--80567107-2631-4dab-9587-1092d1dfef36", "sighting--4913d6b8-18c4-4698-adf4-082e1d2e4dcd", "sighting--45992a1c-7fce-4659-a083-88ac0969ae76", "sighting--7b87029a-6cb9-4aa1-9407-67b0c11b2f4a", "sighting--91f635d8-76ec-4fdb-9c1c-170990c675ad", "sighting--927fbf1f-1e35-4f4c-b16d-f723ef5133fa", "sighting--6a728216-59b9-462f-9c97-e27b23852816", "sighting--726cb630-d556-4bf9-925b-3759c1cff0ec", "sighting--1211574b-0c01-422c-96a7-4f8a6503f5ca", "sighting--4a1d1237-be7f-4d9a-b538-caebc87bb593", "sighting--247015b4-714c-4d76-99b1-13c7d804d109", "sighting--c7865bb9-eecb-4ae8-8521-a9cb83839bcb", "sighting--8fb0f845-f838-4894-acb3-c28b6d51df86", "sighting--774ff1dd-fdf7-4570-ac61-7a666d73136d", "sighting--999f0fc2-f55c-44ae-915b-6f9b36a7dcaa", "sighting--b090a8af-a010-4782-b9ff-412a6b4ca4af", "sighting--5b12f3c5-cde5-4818-a857-aad3825e2231", "sighting--027f2891-b667-4aa7-b14c-c9c35ebe7f24", "sighting--994cf8c6-25cb-443e-8c17-f659c5e10290", "sighting--82367e68-6f4d-4e28-9bc2-874bba5884eb", "sighting--31a4df77-7d14-43fa-8dd7-4aeb43f46592", "sighting--4eac48ab-66f7-465f-bb05-1d4e534baf7d", "sighting--e17d6675-ce7d-4a01-a615-50d0e5a6fb0b", "sighting--38d48652-612a-4b54-8dfd-8057031a173a", "sighting--d02a2ade-2941-44cc-8544-9fcb3c80e97e", "sighting--267c82ee-e503-405f-9f50-56970600f4c6", "sighting--782da198-6e0a-47fb-b32c-4f79ed5761bb", "sighting--0e01f6e8-8ed0-405b-a928-d123bc653ca4", "sighting--e09679c1-f442-420a-90bd-1e5abce64cca", "sighting--b22e1bd7-5039-4477-91e6-7ebab3147963", "sighting--298327fb-4dd8-4ee6-bafd-576b8ffa934e", "sighting--b82f8f22-e98f-46ad-87e8-cdb06fb54dd2", "sighting--8d249bb9-7d01-440a-b154-b7692392b380", "sighting--b19d233e-4519-4f5e-b247-d0e315a1dc4b", "sighting--b67a12e7-e599-4563-bdaf-c0c7a31560bb", "sighting--a70b5f17-95b1-466b-82cc-bdecc4f6e881", "sighting--592a4e36-7c8c-4222-b036-ac56f774095e", "sighting--f3547215-af19-49d4-bb17-8062d5a45815", "sighting--fb71b08f-5082-4f7f-8990-ac632fe9768b", "sighting--cd23018c-e771-48af-b3fe-ab6a58094353", "sighting--7e57fbc8-2d95-4194-9bf1-769ab575a8c6", "sighting--440d09f5-ce9d-4f5e-84e5-5d17142a12ca", "sighting--fe944419-d0c4-4e25-839b-a30cd7c6b93c", "sighting--46161aa1-6048-4d1b-ac77-9de083811c24", "sighting--7bd31aae-56a7-4a65-8188-39e5d23f6675", "sighting--1afc08b1-e3ec-47b0-a649-03042161d2c1", "sighting--2631cdc7-427d-4f4c-acad-c1a293b8bd3e", "sighting--6cadfe35-0eeb-49fd-b353-078137f9b0a9", "sighting--86a37c38-f630-4155-9ac3-9e3ee4550f48", "sighting--9315fae4-6025-4a32-9d1c-0f7816086aac", "sighting--3aeb67af-7199-4fed-b10b-fc9e38f5c6b1", "sighting--e95c5e07-6651-4dfe-afa0-6ae60f22d24a", "sighting--dc829777-84b6-46a9-b9f9-df8ae3bf67e5", "sighting--9819f586-da15-4325-8916-f46b41d4391c", "sighting--021cab40-210d-431a-b32c-9478f723206e", "sighting--693d52a5-7860-4922-964e-03e0c083c1aa", "sighting--cae80a66-01e7-445f-b010-ebef813de185", "sighting--db29f6dd-eea4-4d2c-a88e-8f64c0619e49", "sighting--02bd1e9d-acd7-4d2f-ad21-0f3135f78d53", "sighting--c3441425-0fb2-4ea7-a1e2-db33ff0168d7", "sighting--4f97a57e-8ac9-4a46-894f-61bde57ed542", "sighting--96936424-e3d7-4596-9037-14defd8d1ae2", "sighting--a9e5084e-2069-4af7-9126-a7572a11561e", "sighting--529856fa-aa6b-458d-b5f8-2253073e01f0", "sighting--19940577-b459-41ae-b84d-793ee08a4cb9", "sighting--616a4b8c-767a-4e41-8529-d0052e270970", "sighting--1de5dc32-73fb-4ca7-afbe-ec9d230950cc", "sighting--708936f2-9005-44e3-baf8-7d8600ca786f", "sighting--d0fc80b1-fdbe-470a-90dc-427a01f78ddc", "sighting--b7b8cbbf-22f6-4ca1-be5f-143b24c0d21e", "sighting--13abbe4a-ca87-4e97-a719-d01a5cee8e13", "sighting--3a5cc648-6cd9-454e-9bb1-e9817adb06fa", "sighting--37c4f926-9386-4404-bd09-428c91a26f79", "sighting--2c5112c5-2e18-484a-9cc9-7339b0a25fae", "sighting--eb6265c7-645d-42bc-8ffc-640106695aeb", "sighting--73f7925a-144c-4ede-a9d8-09ceb8c67e2f", "sighting--510c15e9-af48-47fc-b6ac-a236a1601ef3", "sighting--6f9255d0-af7a-42b3-b6c0-7d7e52f841af", "sighting--c0d89ad5-99e7-4984-a275-df4efe4c78ee", "sighting--2c97c088-a538-4dc3-981a-6db0ed93766a", "sighting--d03e0d0e-b89a-4714-bb49-857be07a1934", "sighting--86fef009-0685-40b3-9eea-9b8a5d168e54", "sighting--65827299-b133-48e3-8a13-144320199138", "sighting--f06fdc22-faf9-45d7-9ee6-4e208e3f8354", "sighting--c4dc2d28-65df-4b57-99ce-0d455d976a37", "sighting--3df86344-40d0-460a-8368-f447fe541ceb", "sighting--16a40f33-6ed5-4e36-b2e4-6d5d6a49a39b", "sighting--788dbc3a-31b2-43c0-8716-79479b9d09e2", "sighting--f2c37a76-c6af-45b1-ba8d-310428cbe8c0", "sighting--13941f6b-89f9-41de-9c4a-4a0f6c5c7f1b", "sighting--aab86ec6-764b-4258-ac44-847fb238429f", "sighting--58cdeeb6-1e6c-463c-bff3-58ce195d7176", "sighting--bbfb2f5e-cc08-482d-94f8-7fa3545a0c2e", "sighting--e85a5695-0781-4e07-960a-437d074f3d91", "sighting--c42634de-835c-43b4-85f8-d509bf8b7063", "sighting--6143a0ce-2e83-4c4a-9087-eabd5b186359", "sighting--fca9ddae-e59e-45ae-a398-ec067503460f", "sighting--5b7263f1-432e-4b23-887b-e40d1e3dc3cc", "sighting--a7b73370-0c1e-4be7-9b15-fa1738fc65ea", "sighting--e2104e4d-e793-4802-bc6d-e5418d0c3a27", "sighting--547bf1c1-c242-4643-a5a9-f14f2d5a41fd", "sighting--f953ea95-27f7-44fa-bc53-43012be1897f", "sighting--f4357108-2406-4160-9fc7-cc81d8f71b3c", "sighting--78f1c217-efb4-4b8a-a8b9-0d7acd964303", "sighting--a9bd5821-a6c9-46da-813f-2a3cef6abd45", "sighting--c56f5bd0-68c9-4de5-92f8-9a7ad7f9a7de", "sighting--8f6cb683-b36d-4578-a356-b1a7ca8b73fa", "sighting--5b8bbd15-6d8c-4f4b-bb66-f2ee47adf4c7", "sighting--c6e4c1c2-875a-46eb-a96f-7bd6eccb509d", "sighting--b82108be-2380-4106-b7ac-855847b58d33", "sighting--13171b7a-9e10-464d-aa27-19d8a4dc47f4", "sighting--db2244b2-72ce-415a-bc8e-2e3ce0d0a1cd", "sighting--cf4a6b63-c70b-4418-8d44-82cdf76993b2", "sighting--4c57b963-f438-49ad-8f74-0b01c4831978", "sighting--cab9e764-2354-42e3-9944-dd778598defc", "sighting--2e8ce3f5-6e19-4558-a838-89b2b09f21fc", "sighting--f34f135d-bf55-4f50-9915-d7d104f37e2d", "sighting--3cfea5ef-eb43-48e0-bf3e-99931a85a956", "sighting--04250116-2d6a-4439-8268-e0340aae3361", "sighting--57b78fbf-cc39-4e79-a648-2d63a4d4660a", "sighting--d4bd180b-0fd4-4c0a-a6a5-2b273bb7dd2c", "sighting--7192fb60-e530-4fd3-82d3-7ea6c6681c16", "sighting--65d49196-c72e-4b65-a1f3-17ccef247eb4", "sighting--51023578-c70f-46dc-8f74-873f8710e0cc", "sighting--b27bd772-256c-4b31-ba9d-a162922e59ee", "sighting--ccbfcc25-d52b-4f01-b21c-dd29f537f90c", "sighting--1a256b2e-3514-41dc-a673-11a9c6439fda", "sighting--b02b1935-99bd-4f3f-8390-96027894c97c", "sighting--6d8c52be-c142-49ee-a075-657480aaa9a1", "sighting--972ded0e-8b78-411e-8e34-f9647bcd3283", "sighting--862001ad-0bd6-44c0-9db4-51bc0118e626", "sighting--c22e8a2e-f0da-4fb3-b926-d36bd96933af", "sighting--e64162dd-047a-4267-b1c1-3fb915dbdc02", "sighting--3465cfbc-fa13-434f-8895-536fe3b49099", "sighting--8cc41ee4-c59c-4e4d-adfd-fb824a3986f0", "sighting--e1321149-563e-4225-916b-a621cf98b854", "sighting--4d087f68-b360-4414-8ac2-bccff23da756", "sighting--3ad60841-85f8-43b6-8ceb-387807ca4e21", "sighting--b667e74b-edc4-4484-8069-16b78250c23f", "sighting--81dce29a-c97b-453f-a3bc-96c241b3349a", "sighting--8b723b14-593f-44ad-97c9-87282484547a", "sighting--39c0f34d-9f79-46d0-a369-926fbad19049", "sighting--f3f4b3d6-168c-4d08-a4d6-1af29b8cc76b", "sighting--a87c50bf-a9a6-4e4d-b3d5-774c6086f886", "sighting--ccacef6a-3a74-409c-b88c-5582c492c86a", "sighting--d42db596-9a06-4975-9568-e4fc518cdd04", "sighting--077a4743-7eb8-48c5-a8a7-507cd1cfc47a", "sighting--3fdcdcdf-7203-488f-882a-f2ea33ee3218", "sighting--00df0f5b-5292-464b-9c57-50c279c6db79", "sighting--bb0ea092-3ab1-4c33-91ef-9c6ec1cfc704", "sighting--771621b7-c5f4-419d-96a8-1c754da2f0f6", "sighting--677e8331-9a90-4977-b409-e7800a3b5786", "sighting--b75bb077-028b-4714-993e-31d319d7b278", "sighting--1e0e52bb-3e3a-4937-b742-de4cf21036a3", "sighting--53d456ac-a114-4c55-a5b5-7aad4c4fea0c", "sighting--2cc224ea-5996-4aec-a00f-6a2806230f10", "sighting--5b5bc816-aeb6-4abc-be60-e5798af526d2", "sighting--f783d3ba-4da9-4b6b-bc9a-362295d8e06f", "sighting--ad15d2c2-5c16-4d4a-af2d-4c1c179d6fd5", "sighting--d0b721b2-85bf-4e72-8646-5b0f2c35893e", "sighting--e252d9ed-5065-4cd3-9c9a-6e5977eac65a", "sighting--97e65f3a-b0c5-4c62-b44f-27932ec2c6dd", "sighting--21e64365-daa5-462b-a3af-2d64b2982f79", "sighting--83c1870f-8353-4f2c-83ee-3fb81e4f25af", "sighting--6010761c-492f-40ee-8bb2-91244b105393", "sighting--4c80490a-4918-491f-a428-14aa2de635a1", "sighting--b27a48c4-343b-4699-aab3-62dc9f082088", "sighting--c4b4e402-9258-479e-8d17-42141db7c250", "sighting--9ba2edcd-0699-4ffa-81a4-3877dd662768", "sighting--6c792713-f5b2-4044-9197-df0a4d305b15", "sighting--e04aeb79-0014-461c-b917-32fc2b87a042", "sighting--2b8ce527-586f-4f82-b864-5c0d155eadc5", "sighting--f8eaa483-64e9-4b9c-a63b-18df36c9042b", "sighting--79e0cbb9-54e1-4b93-8c03-168b4189fd73", "sighting--4925dbb0-9bde-47fa-81e1-2cd433456913", "sighting--2e1a0a46-9acc-4bf7-9cf3-e027c65f9797", "sighting--c68839c3-66f6-41c5-9795-d5a32304761b", "sighting--656bf0c9-d298-4b48-bbf9-8607614f409d", "sighting--5a6f01ff-9a08-4e91-a528-b89a9cc17c96", "sighting--9c42d5bd-9294-44ec-b15b-09572a62fda4", "sighting--6271a8a4-b106-4b5b-b1bb-48dff04c0073", "sighting--361468cc-8d42-489a-9f02-340465a706a0", "sighting--2005987e-2cf5-419e-8f67-de107d76f054", "sighting--b0a1e99c-f7f4-4a7c-ae4e-d2dccb2bd6c3", "sighting--a06bc49f-fdd6-46c2-a0fc-b234049da333", "sighting--42e93cd5-ef58-472e-8d90-45e937e361fa", "sighting--78cbc706-0b5f-4405-94e3-8e9354c4c47b", "sighting--4673730e-12ae-4730-b774-112d43f895e6", "sighting--bed38ddf-b1a7-4030-ac18-ca0d994c3c25", "sighting--2212d93d-70d0-4703-a661-14a3df74b600", "sighting--2a1741bd-106c-43ea-925f-81ebde629803", "sighting--6d455ea2-0c7c-490e-8db5-78456f120f04", "sighting--eebc7f0b-57c6-4122-937a-ba21ca16f523", "sighting--659579e2-821d-4a12-9c02-bfd6654b78c9", "sighting--f92dab15-938b-493d-9a98-fcc7b578c747", "sighting--f904155f-dc10-432f-bf01-a6a228594e3f", "sighting--3f9dcc56-7a97-44de-ba8a-34e3851ec13f", "sighting--e5c81eaa-85ff-4e98-9b42-8e07d38023d8", "sighting--0515b87c-e2fe-4d63-9a15-08b294b64cc9", "sighting--df132b50-cacf-4896-8eaa-e2253a93fb6d", "sighting--5be74788-9718-41ae-a95d-12b44e43162c", "sighting--dbe79195-70ff-4c76-a30b-7c97a9c475a4", "sighting--d28a85a7-06af-484c-9f7c-4b95a0824211", "sighting--fcbc55d1-0c13-4aa5-8ba2-41b64ad318e2", "sighting--8adf492e-2bcb-4ef9-af08-2f68c7cb220f", "sighting--b1301236-b5e7-4f59-b7e6-5e5140298d63", "sighting--67074d4a-1f7b-45ee-8bbe-b67a5d361b62", "sighting--8db06b0c-5ffd-4292-9abb-4a3a98efc6f6", "sighting--dfdf258e-f250-4086-bf89-659f62b998e0", "sighting--85f75853-2380-4ad7-94fd-06757c935859", "sighting--8e08e984-88e0-4234-ab3a-16830350cad4", "sighting--df76cfe6-40a6-4877-bb72-753033eb2974", "sighting--1134f618-51c7-4432-8de9-85abeaf482df", "sighting--7f68623e-6bde-4b2d-b4bf-fabe24f0e772", "sighting--f3d8a4c6-070c-47a4-bcad-5dd20424a5f1", "sighting--a256aaa0-6e95-4295-bfd9-80b9c2544e15", "sighting--aac78dae-64fa-42a4-b8d4-f3f735b7320f", "sighting--dec39f0c-9a58-4d02-aa64-5cf859ef97e8", "sighting--06908180-b0d0-495f-8300-83adf7766bc4", "sighting--bf295e66-4e02-4d8c-95e5-90e3f8c595b9", "sighting--479ab60a-15ca-4d2f-a176-569183a397b8", "sighting--13e13e4a-bf8c-48d0-a901-a386ef96bd12", "sighting--83d67712-96c3-463a-b552-4c407bffcaf2", "sighting--44570341-0592-4988-a550-464c37e3e032", "sighting--74969f23-ee49-47c5-b674-94671496942a", "sighting--b5bc9fd4-b6af-4d8c-90af-e6eeb52d4040", "sighting--46576250-b655-48f8-b7b5-a9e054f73bdf", "sighting--2b462656-baa6-4b5a-a482-9b428dc1eddb", "sighting--da2313b9-e5d7-48bb-a20d-127876bd3310", "sighting--14754ab1-d40e-4c02-b297-bf9a98c17f0b", "sighting--cca303c5-152e-4ead-960b-0bad9980c62b", "sighting--1a3f6086-ee82-44f7-9f00-c8fa78f89062", "sighting--8452178e-a509-4595-b948-f1acfa290b2e", "sighting--7279f5fe-46af-41fd-978c-5779d20ce042", "sighting--f28bfe00-e04b-4839-95ab-5a74943a0b8e", "sighting--5ad3a896-3eeb-4147-bb38-e4f8aec1fc88", "sighting--b556510b-e026-42e9-987a-41ababa74e70", "sighting--2684a1c8-a6e0-428c-a869-384e829ebbe2", "sighting--8263477a-598a-45ef-a1f2-9769c97216cb", "sighting--1b5b85cd-7f6b-439f-a27c-51473bbecc2e", "sighting--d3fbc982-f844-4a5f-bc68-83542ec60127", "sighting--06c93fa8-ca0b-40ce-9728-f43a67e14c4f", "sighting--eca0fc53-b4be-4633-bea8-ed0e8884f686", "sighting--b74439ea-d83f-4ef7-81b7-7d8c0f3ecd18", "sighting--a059d587-6a6d-40e7-8531-7a5fd454b0df", "sighting--9cc353df-a02d-4cb0-8b00-fa696e2c2cbc", "sighting--36bc1014-2946-4b48-850c-9e8746602ab6", "sighting--0aadfe7b-0590-4f45-b5cf-6c07023286d4", "sighting--449a3164-52da-4c1a-8028-d74d40fafb36", "sighting--d053092b-3e31-4752-830b-622485e42d21", "sighting--3727172b-b6d7-444b-ac32-3903ce0e7b39", "sighting--61ce04e1-c541-477f-aa0a-95bf33ca3bad", "sighting--049e3f60-4247-496a-a1ab-6cc1ced7c53e", "sighting--fe9c7c6c-96e0-4085-8e31-ff0e21847ccd", "sighting--9be28c58-232e-479e-ae0f-dc49087fdb13", "sighting--a5a8a380-ac6c-45f2-9478-3dfa150413a0", "sighting--d1f639ee-d736-4b46-9ba8-d1f92967150c", "sighting--475be164-5460-47e4-b459-46825886214a", "sighting--b2b85a31-1fbc-42bb-8102-54f7d93cbd49", "sighting--e4b13a17-b4c3-4335-80f4-8cc246f609eb", "sighting--7b0052d1-d15a-4213-abee-05e4d970f207", "sighting--86d4d7fc-74c6-45ed-8368-a0bb7960721c", "sighting--0e1e9ff0-1fa6-4c0a-bc66-b0cdcd9494a3", "sighting--7f1876d6-28dc-4012-93f1-0aac9f2d7739", "sighting--91b4a517-0dbd-428d-9693-9d45cb4f6a59", "sighting--a3c0309f-ad9b-439f-b3f4-d267d1100ae6", "sighting--d98efe2b-0767-4148-b71c-db60780ece11", "sighting--00aaee3e-5d0b-46b2-bdb5-8f88d3860425", "sighting--56f608f6-294a-4041-b18c-c3b51b88837a", "sighting--77312375-70d1-40ba-bf21-a76da6848b34", "sighting--dedb58ef-622e-4e48-9b17-8837f15eb2dc", "sighting--57fcd073-60cc-4422-a2df-81fbf6abc295", "sighting--c8ff64fc-d6d4-445d-a407-ec9f3f628fb4", "sighting--fb821172-bec0-4b31-96a7-cb3d9e5c248e", "sighting--9d02ed22-7b51-4e32-bd2f-798c6493c039", "sighting--83e0d0ff-dfdf-4d9e-befb-0f0e5ea563b0", "sighting--ab2ab443-efa1-47d4-82dd-0ae372379444", "sighting--8454725b-3ff9-4298-82c3-d5b9c529a700", "sighting--b7c598f8-64e6-4290-b809-509893a70d56", "sighting--258db2dd-0253-40d8-b8c5-ef39ca1c85fc", "sighting--ee4d1abf-33c2-4430-85fe-6291ee1b4c1a", "sighting--33a16872-0656-40f9-9402-c16185da0a2a", "sighting--191c32b0-12aa-493a-9db0-cde8e49d61df", "sighting--3b7a4efe-afb0-4c62-9ad9-fe36343019cd", "sighting--8375a6de-ca78-4078-92bd-7997d1b2dcb1", "sighting--43462f85-c913-40d9-b634-004527deaec1", "sighting--bc502843-b2b4-4967-a957-1931b48c9c5e", "sighting--e821ace4-cb04-47a0-a8ac-1af3d5ce9f5b", "sighting--66582b59-ed9f-4196-a044-21f5efc965ba", "sighting--24fa6127-f11c-4020-85f5-9b5bec15d4bb", "sighting--681d90c2-f2bf-4e2a-aaf0-117e9c216eb1", "sighting--b7c145ff-e751-4a6a-8850-1524616ea1ab", "sighting--8c8c4dbe-94b7-44a2-951c-27fed764ccf0", "sighting--3f9d4b23-8876-424e-be90-1d87e04ad2bc", "sighting--10138069-7638-44df-8e92-3bff140376b5", "sighting--34d2483e-621d-4c0b-a0b4-ff81a65898b7", "sighting--71d0f70c-03bd-431a-bf68-2cd0aba7ac56", "sighting--27f62e07-cf88-420a-9f54-4385200a764e", "sighting--96d0b12a-b12a-4428-8b83-66c0b909c830", "sighting--73012039-17c1-4f53-a62a-1becae213e38", "sighting--a80dda75-eace-42a6-830d-25412081deb6", "sighting--508ebccf-f833-4b50-9c1c-bd28ec62bfd2", "sighting--c4276bd8-c692-409e-97bb-65eaa9ca4f78", "sighting--611ccdd5-4fb9-402d-86c1-eb881a27bcce", "sighting--c91f76cc-57b6-4348-bbeb-c78ca1d07415", "sighting--db2d5601-a665-44e0-97a3-50c7afa3abc0", "sighting--2660dac5-89a9-4aec-afdf-fe3c5ec35932", "sighting--a71ab3a2-1045-40ab-ba26-684bec94df54", "sighting--dd23a687-e2cf-45b7-96cb-18e7dc72e3b7", "sighting--3aa1dbc5-815c-470d-8a5d-1732e376d05f", "sighting--7fd581eb-ffad-45c4-9f45-d9dccc4c10d5", "sighting--384463b4-fb97-46b2-8dc6-95c40108e6ad", "sighting--454ee23b-3278-40bd-91c5-8e8fd2e9036d", "sighting--d913dd82-96f4-474c-b500-009caac2accb", "sighting--89aac5a5-3434-4e3b-bf59-c4f3ddc8b104", "sighting--ff2b4636-1548-4646-a836-32232554e03c", "sighting--cd5a27dc-7375-470e-842a-c521eb0f1ce0", "sighting--1b98a6d6-757a-4696-9e63-63278c8bdbe0", "sighting--beef0594-6b38-4adf-ba0a-22dfaadffb15", "sighting--cb65082f-a999-422e-9c7d-a67db8a6b279", "sighting--b8292c70-59e5-4561-8fe8-d29e5b34dc65", "sighting--6d963680-b957-4de5-8ce5-be1cd764afc6", "sighting--dcc45057-4547-4d5b-8c39-2f32ed5b64c3", "sighting--ea9f333a-ad75-4dfc-9ae5-a5c9bb60ce00", "sighting--75bfa930-5f80-47db-92f3-b9e0fece276d", "sighting--53831753-2d1f-409d-aa80-1d66d930f49b", "sighting--526427f0-b311-432e-9b6a-33b4cccfade6", "sighting--bc1d1234-d419-40ea-ae61-d843f749b791", "sighting--0c984af4-eec1-4d0d-b2c8-95a9897499ec", "sighting--47c44c10-9f06-42c1-aba9-5adf67ade6d3", "sighting--bb43ecde-5d66-4789-a3d3-6eda8567e027", "sighting--2855cab7-2b62-4e38-b641-e826e5ca6e2d", "sighting--c60dfc54-81f8-4ac9-a086-acb317347421", "sighting--714fd7ab-d5c6-4935-bd3d-9ecbe863640c", "sighting--97e88b0f-ca3e-4b73-903a-61062cf4346c", "sighting--36079bcc-d3c7-4c97-9dd9-ac50ebcce7f8", "sighting--0c2b9ac0-1fe0-4dd6-aacc-a3497a12db23", "sighting--c99d92e6-7dfc-472f-b758-29519d751ad4", "sighting--00f73817-f6b7-400b-91af-a31d112abc07", "sighting--57f3f816-b289-4666-a998-ef3dd7be5b30", "sighting--53ce2a43-356c-47c0-a524-60b6a2dbd911", "sighting--23b48aa4-171b-4173-9549-647384f84964", "sighting--f2c060cc-cdb8-4413-9a7a-934257dd45fe", "sighting--7870fa7c-2d08-4fd9-ad4a-c14f5f167504", "sighting--d8bbaf11-5703-4981-9226-51fd99849fd0", "sighting--ec301552-8056-43c7-9f5a-7470282417e5", "sighting--87c5c1f2-2a96-412a-b7d3-ec42cd0765b1", "sighting--d5e245e4-fe80-41db-b47e-8b4f71183a62", "sighting--285f835e-2a02-4667-ac2a-8133cb9e89bd", "sighting--92cb8897-1dd5-4a84-9180-486af9abef7d", "sighting--ae94f473-f9b1-401e-af2a-d4f2398f5000", "sighting--d5bdda20-70e7-47d8-97aa-3b1dffce4e3a", "sighting--b3d6a68a-9c26-48d2-aeea-4a0b4e630f88", "sighting--581abca9-31f0-4dfa-8713-63a2ec408e74", "sighting--74b75509-4195-4462-b53c-b6fc8d5dabce", "sighting--eedc9eee-d488-4cfa-80ca-06997afcb280", "sighting--c686fec5-068f-4d14-be88-013ccbe93b89", "sighting--2958ae6d-b75a-4c39-8ffb-ce3e2c2878c3", "sighting--c5a21145-8933-4bd5-a14c-65b60d49fdea", "sighting--48937a8f-b2e9-4add-80e3-a1b4110b0089", "sighting--0ebaadca-46f8-4613-9510-4cf3d62ef723", "sighting--951a8827-1f22-4584-bf9d-4db48cbd264a", "sighting--283f19c3-a389-49ce-ab49-5071d37d0380", "sighting--c8ea9a70-c6f8-4ba3-ac3c-e8afcacd9e10", "sighting--10e30e69-301b-4db8-989e-538c9ec39da6", "sighting--b6d3dfd0-7bfd-4523-9768-de30659ec7df", "sighting--c25ffb99-8379-4854-b6ac-d52528f0d43c", "sighting--131197e7-e4d1-4540-90c6-8618d393ef07", "sighting--3a8e366c-5972-474d-9e17-dc31faa5e0a7", "sighting--76a12b35-c541-4b55-bb06-60b8c79b9d5d", "sighting--306aa68b-41fe-4e81-ae0e-27f2dad8fb24", "sighting--25351990-8508-45f7-acd8-141fe844e621", "sighting--3adeb808-0ca0-406a-b608-f277c05928b2", "sighting--8de72bd3-11f6-4b70-b4de-4150c22609af", "sighting--624e4ce1-245d-4659-8aaf-5759af1b6daa", "sighting--0700ae2b-7804-4dd2-a6e9-ffc7037eca46", "sighting--1da7af91-4eec-403b-9f6f-42f60e91b4bb", "sighting--7adad76a-5372-4136-84a5-f8056b505e3e", "sighting--625b5bd0-faf7-418e-a61b-a31f3e11e338", "sighting--7ee3c1f8-c6c2-4edf-a395-719e38ffdb27", "sighting--d90073c7-6284-48bd-bde0-44bcaa5f6cdd", "sighting--12a29f8c-9cd2-453f-95e5-2e325c5bf521", "sighting--b2e7a7a1-b3fc-479e-a3b4-0fca62441010", "sighting--31d115e7-5afe-414a-b089-69dba6672554", "sighting--da17a298-0b31-47c1-b417-8e85608c2adb", "sighting--82bf3ca0-fed0-4a9c-bbb7-2a9d3da0c076", "sighting--6d306195-a153-41bf-954d-8265b8507021", "sighting--106a97a6-3998-4865-930d-143c3e90f17e", "sighting--13f284dc-5c01-47b1-827b-939f37355706", "sighting--6b1b898c-f25b-4e71-a30d-ac8941970324", "sighting--7cc54d50-ff50-4612-8f65-f5d384102fee", "sighting--cd59af8d-3454-49e6-b6f0-20caf8c7c50c", "sighting--4ea3d1f6-b7cd-4244-88aa-681232e2ed06", "sighting--3d964281-fdc9-4515-8ca8-0fb7d2e18534", "sighting--f4a3f033-da4d-4c43-b566-770e63162afb", "sighting--8e2ac8df-6ac4-4616-941d-0f4243a10cb0", "sighting--51a5029a-0b5d-4149-abb9-86b758c1db95", "sighting--a037dd6b-c3d4-4cb7-b757-a861114ce2e9", "sighting--0592b8e4-b215-43cb-9431-1669aedbe1c7", "sighting--7c353649-a16e-4a21-b052-0d575a8f0ef1", "sighting--f8d33ac5-0a5c-4084-8adf-692f3230d21d", "sighting--d791d1c6-c438-444b-89a1-84099bbc1022", "sighting--908a1fb9-1c73-4cac-bb38-075b5aa9b9c8", "sighting--88fa877f-bfb8-4f61-bc17-f463cbabbea1", "sighting--e1c65d2b-d428-4f77-9fba-5766c4b31ac1", "sighting--2219bb2d-7436-4bae-b3ec-bb02d64e6390", "sighting--1f21cebe-2b02-4b3f-bed0-7b2672c0c2d7", "sighting--10241c2f-385c-4e30-8c9a-a51343f83209", "sighting--a3d70323-3997-423d-beed-998a87e0160a", "sighting--6cd0e018-b4b8-4e17-ac03-b418cc9c46f6", "sighting--a812720f-e8e0-4ea8-85e5-0b84d2b94832", "sighting--026c3c84-00ef-4173-8540-49e1cd02665d", "sighting--82036f08-140d-4c4f-bbb4-7281e5d7f5ef", "sighting--352a1d3e-666d-41c4-818b-e98590c704d6", "sighting--a0753955-f2f5-4d90-b0e1-c01522888159", "sighting--a1dee24d-765e-4bb8-b082-4859e9040763", "sighting--2411374b-78cf-4c2b-96d0-03d915d758b5", "sighting--6319b055-ad22-49ac-98b1-e2f965fde286", "sighting--6ae14cd6-e0c2-4534-a1fa-ed4ebef74870", "sighting--03154564-6924-4995-9b16-91e4ca0c6eba", "sighting--e515d02e-d4d8-467a-b178-d55ea75cd0fc", "sighting--8da1b5f4-3036-447b-be74-04d4f87b9547", "sighting--9881ef22-5dfd-467e-a842-5e5b25ab3fd7", "sighting--ca371e5b-7944-43be-a0bf-333ffa6a48ee", "sighting--3e10d9e1-b5c5-4654-aece-eb179e3de152", "sighting--5416eeda-d612-4199-825a-8714f9fbf738", "sighting--bdeed7a4-cc16-4142-9f28-04fff6400a49", "sighting--966b2c45-fb99-45aa-940f-7aaa76ce7997", "sighting--6d2d42f8-2424-457c-9958-eb821a39f3ce", "sighting--27505dca-c2f9-4e64-a759-62ddf51bd792", "sighting--66998163-67e8-4827-b769-a40899b10839", "sighting--a455b787-8033-4c47-b9ef-13c82136c16c", "sighting--714307e1-c3f3-4daa-ab56-39f77645695c", "sighting--37a47687-b171-4449-9a00-5ed9da3e22f5", "sighting--56630616-5f8d-4cbd-8540-c686a0173555", "sighting--d2351805-e385-4ded-9bf2-1616ca4189aa", "sighting--906f54a0-7856-441d-89c0-4749be76f159", "sighting--3e4ddad4-4140-4b3d-a8ea-a477c268fce8", "sighting--73b48e94-62da-4205-a30d-da6d9fde4133", "sighting--5bc89b28-c328-4c93-bb28-66ee3ca0161b", "sighting--839ac16d-1d9e-4461-9e02-a76b468af79e", "sighting--f3d2b1b4-cb8c-4204-885f-38f6b81f809d", "sighting--3f1606c8-2c63-4b52-94e1-17b19aaa841d", "sighting--b85047de-142e-4ba0-886f-db72edcd9c2b", "sighting--67881fd0-8c7c-45fe-93e4-2e758f755b91", "sighting--a061aba8-5452-467b-99ea-09f971b157c2", "sighting--008a0249-28c5-4a50-9931-877d5d89ac6e", "sighting--30bc6775-8ab9-423e-bb53-b2e34234ba7e", "sighting--06000901-31c1-41dd-a68d-ec18ed099bc4", "sighting--96383c88-e8ae-4ed0-8875-2ba221538808", "sighting--28f1b11e-4e6a-4524-b2b4-dc1adb373217", "sighting--9fd079f6-a9ee-4d2c-a7cc-14e5d18d0745", "sighting--7fcd5e86-5b84-4972-8463-000635316305", "sighting--47eadd19-c7dc-42b6-adbb-2df75e9d4f99", "sighting--15c28276-8216-4ceb-bf4b-8fc152fb09c6", "sighting--d1456784-0bfb-4cbd-88ab-9c28795854a0", "sighting--34a69069-5459-401e-bacd-7e1669f2a84d", "sighting--279906e7-eca2-4006-aced-73b3edbcaea0", "sighting--31029201-0f72-4197-9b39-cfa327ab0cfc", "sighting--28d203ba-0e73-4cf6-b014-61979f8fe4f9", "sighting--6186c0fc-38ab-40e8-add2-8a8373c7f936", "sighting--d8378fc6-707a-4d7f-bf80-ec57611cdee8", "sighting--3d0d16a2-7509-46bd-805b-5b67cbd9b511", "sighting--2929aebb-9825-4c43-9c53-2e43572e7d6b", "sighting--1977fb2f-fd1b-457c-9966-5e1a52e30a69", "sighting--1fb0b265-de57-493d-ad4c-21ccbb396674", "sighting--78e60a8b-3c0d-454f-9e5b-4d347fb4a0fd", "sighting--c587eca9-c5d5-4b96-8394-04a6bb52f9dc", "sighting--de86e02c-c5d7-4276-8af4-77510a4bed3c", "sighting--c5e8a69f-8a6c-4b73-9d0b-f8fe61b874b3", "sighting--dfb1d8d5-45e6-448c-aec8-bf63de2f0cdf", "sighting--13c41e2b-87ef-4889-ac79-052aed4d595f", "sighting--35d86bf6-2bd3-4495-a543-918064c10039", "sighting--ff81ea87-8868-42f3-b2a9-aec00a16e2ae", "sighting--3de718b1-03fc-4eca-bbc1-e8928a1d1e35", "sighting--f97b1f94-8ec8-4a7d-b9f5-c73506d0e50b", "sighting--49d7a8d0-ef14-4b1b-a44c-c3018b67918b", "sighting--a434c493-5285-4c2c-88c7-27018b2b4c6e", "sighting--15b15de8-bc7c-4b1e-86d5-928b83b57f5a", "sighting--074887c5-e06b-4d75-90e4-506d5ab1b0b4", "sighting--3850171b-dc1e-4bda-9d09-41e823a53268", "sighting--79d7406d-9771-440f-89a3-2868b979a565", "sighting--f4624b4a-b9fd-45fe-ba4f-4bd91a0c943c", "sighting--9e1f15cc-2c63-465b-8139-3b221534b15c", "sighting--80b77090-b94e-4792-874a-e43fa1c2378c", "sighting--33058fe0-caf4-499e-af07-ba0e60f9d87d", "sighting--c3db7fbc-1a58-4972-957c-3496441e3e88", "sighting--44390e33-1b83-42cf-8639-b15093eabd27", "sighting--6dc15570-cd0d-40d0-98fa-58e3e0eb6dc3", "sighting--c67bb72f-5df7-4002-9fcd-ae08d2077e21", "sighting--29a0f890-019a-4acf-8836-ac4a1f516276", "sighting--6d960f51-a16c-4e04-9581-50050c1b66ee", "sighting--b1d67996-0af5-4f5c-bd88-34a7f1ad7dc2", "sighting--f926200e-3db9-499d-a726-54bf98c6de60", "sighting--9378e72e-b841-4fa0-95ca-6758b643226d", "sighting--ab1e11d3-4c51-41b3-b700-3a545ed6ba4e", "sighting--d7620a71-8391-4278-b380-273a13cbfea1", "sighting--da8b0f19-e72d-414f-a237-9abed8ffe29e", "sighting--f0830568-653d-40bf-a689-7f929519fa33", "sighting--34894251-e4b1-4ca1-ac12-7eaa62dfa3c8", "sighting--a0726ad6-90bf-477e-9c26-ee8aafa34737", "sighting--1bb14bf1-0529-4842-848c-78898786d515", "sighting--2108ed38-a2c9-4962-be4d-605b3da7d22d", "sighting--204b6bf9-174c-4e67-bfcb-33b44bc8e7ca", "sighting--90e17cd4-301d-4dad-a797-b556b7dad5b4", "sighting--be142f9f-e4c1-4d93-ad73-5be6d2ccbfff", "sighting--f1acc93b-984b-48f5-a2c9-981450ac546d", "sighting--b066495b-6b36-4074-8373-b55cdbe98ae9", "sighting--91fac8f6-1305-4ca1-9f92-c121274fdddf", "sighting--f1ef1cbd-ef3b-4f95-8c70-0f7ba01e2331", "sighting--40c19137-5149-4052-b58b-77f08730967b", "sighting--9c1f4a15-2e27-411b-a7bb-6fd76f81ebb4", "sighting--79e2a02b-d0cd-4e04-bf6b-bfb40835535c", "sighting--93b789c0-4731-4f29-9ed0-4dad7eb36e47", "sighting--181be0ab-f379-43cf-bdeb-3a0c074b2d1c", "sighting--65ffb09f-bd88-4ff9-961f-1a69362c7096", "sighting--7250c659-fc85-497b-9216-847754c17c11", "sighting--bd52af6c-df44-44fe-8aa3-6d843f7bdda2", "sighting--0373b35d-227b-4b18-a233-298417c52725", "sighting--2d102d5c-f3a8-4567-a74f-11d103e0324d", "sighting--d26524a4-c0cf-448a-98cd-cea7d70cd0fa", "sighting--0900ed7b-8003-48ee-9868-dbc79e5e743c", "sighting--e816118d-9a8d-4a7b-b850-a9f62e58d126", "sighting--488c77fe-c955-43c7-8bb1-aca0b59502c2", "sighting--0eabf71c-00aa-47fd-858f-dcc3f8cf6496", "sighting--33a83384-47f9-461e-b135-cbafbebb70c9", "sighting--dd9e504f-2c45-4c87-90f7-e689ca77e1ec", "sighting--0738eaab-8681-4792-bef9-380b708c5610", "sighting--0c81018a-09f5-4724-aeff-b045d82f6fed", "sighting--04e2a9b8-45f2-4882-b5fa-e1763d9bebfb", "sighting--9d67733d-0f68-468f-9689-8a58567f9e8f", "sighting--084a988f-f688-41b5-a805-7b768ca569cf", "sighting--69db628b-a6a1-42e7-9641-e42328ca7b2b", "sighting--8f8280ba-91ba-40ca-870f-d79f1aeda3e9", "sighting--cc8db084-d662-463a-99ad-235e383e40be", "sighting--ea4e9c87-4839-484f-95b3-0a8ea5a09da9", "sighting--d52d1cb3-6461-49d9-acac-c749876bbcea", "sighting--26cc6836-b0cc-4990-beb5-eacd665b2797", "sighting--02d8f4f3-2c68-4981-bdca-1993ff17f812", "sighting--61e8092c-2735-406c-b835-9cb7d32f66f2", "sighting--80c06268-b22a-4bf4-9763-72ff25df8fda", "sighting--080cc73b-b6ee-4ac6-94f2-db2a7e508fba", "sighting--e4c1360d-1ed6-4d5a-a014-33ee5bbfd785", "sighting--8e16c0b0-6139-435d-bf65-7ebc3af84729", "sighting--fa20649f-ed43-419e-9ef1-2d6956815057", "sighting--1ae4a97b-99a5-46d4-9d41-00e000da25ff", "sighting--0d651a33-4256-4eae-83e2-74068aa3c83b", "sighting--a2a2037e-5257-4cfc-8b67-9fbb1d9ac591", "sighting--c36fe16a-5a1a-4411-ad97-1d62c9b3389f", "sighting--9a1cb5fb-c0aa-49a5-a079-921f42d2a48e", "sighting--cde3ab70-2425-43ce-99c9-385164b3d320", "sighting--1a74cbe5-957b-4fb3-8c9f-8388323d1cb7", "sighting--6ba61e50-8a72-4cb7-bc28-a08eac5e2b01", "sighting--c620a703-1a14-4d6f-8abe-6587c29d54c1", "sighting--34f7240d-d053-487f-97b5-b5a2c92eb5c3", "sighting--1b6f8b7a-ce5c-4a2a-b6d6-8280e0da9107", "sighting--148a67e5-52dd-4ec4-a7a0-fa3a46e96532", "sighting--4c1b851a-f1bf-4648-b082-18ee19ec458b", "sighting--b20ff00b-fdcd-484c-9f12-7d275c328710", "sighting--b3785053-385d-467b-bfaa-93732151294f", "sighting--dcfe25e2-cfc5-4231-8721-6c60d23c7a20", "sighting--34bb122b-9370-4eb6-93a2-89695a14ac76", "sighting--f5d30ce5-d24e-4d57-87c2-91e516d6aa63", "sighting--c1777a90-e5a3-4589-8938-989fcef816d7", "sighting--be42379c-5a50-46a7-8e80-409ee622b3d5", "sighting--8afd426d-6330-4d45-9fdd-ff0273290e88", "sighting--486b2354-55d7-465a-ae34-05be97fdd3a2", "sighting--263727e0-316c-4659-aab1-f21684db7bc0", "sighting--89c94525-5691-416c-859d-ee5cb9b1f005", "sighting--54e88b19-b6e8-47d4-86f9-7439624e13d4", "sighting--dee479fc-4f0c-4293-931f-01363942fd6c", "sighting--d533564f-2658-4af6-8e50-d7d88db9f2a8", "sighting--7f1694e1-774d-4068-9ec1-c95edaf53835", "sighting--e47bd7ef-7c0f-471c-9b49-cf5d751675f4", "sighting--eb4e7638-5d73-47b8-8065-1f1b738bf874", "sighting--c0ddaa10-b5b6-465c-94cc-c11e996eae88", "sighting--bcdd05be-45bd-4bbd-85d3-4c3999e81cd7", "sighting--4ec3cf3b-7d32-4da6-a3a5-de32feac18d1", "sighting--59b73d86-6c05-475c-9b9c-e037ba0bd9c5", "sighting--26e27d96-5039-4fbd-8786-9aef43571d47", "sighting--64af3b79-1556-424f-9295-0014360f6770", "sighting--fcff6969-e158-48fc-a76b-5138233cbbe7", "sighting--ee227f8f-5561-486a-a5b5-5029a90eef20", "sighting--8ce5532c-0563-4b26-8908-748f26ed6724", "sighting--5ffce0a6-311b-4afd-845c-4971110b73d8", "sighting--68409438-4cc6-4198-a727-710b165b1a11", "sighting--a2298287-a849-49cb-8ec1-d0c43c99c73a", "sighting--829d1a86-e206-48e4-b966-e22fa6d330b9", "sighting--dc5948ef-107f-4ec0-bd74-0bf14813f78e", "sighting--0d12471c-1441-48d8-8de3-4bc03cb2d565", "sighting--48145dde-d0fd-47fe-a57a-f009a81e45bc", "sighting--38c9395e-665d-4ea5-9d2b-dc70cdf14e69", "sighting--6b21ec46-ae68-4879-842d-8fa3ccff817c", "sighting--3e03792c-909b-473e-b92c-fe34d44be041", "sighting--b29dc8d2-1098-410f-a846-d6b3adc8e05f", "sighting--020394dc-3dd0-48d4-abec-e331ce2249f3", "sighting--c79ea7ba-0b58-44d6-adf2-dc37ede246b5", "sighting--5d838e69-0fc7-4dca-a2bf-dff83d0cd4d7", "sighting--1d3a0675-b8dc-4c75-8fe4-ef36ef2edbe3", "sighting--465aa838-f1ae-400b-a898-55e9a00041c7", "sighting--dc7eb58b-b053-414b-a9ba-17e907782980", "sighting--17863d4c-72e5-4998-82b8-f1c318f66df8", "sighting--e2a1f9d2-ca39-44d4-9749-467f25075cfb", "sighting--84f01c40-2b7a-4f1c-9368-bbfc1cf45ed3", "sighting--ca42cfc5-850b-4d1f-9881-5440ea932faf", "sighting--fa5f9c14-26e0-4399-b3f0-9c60e8089519", "sighting--d2fee793-ca85-4d38-8b67-120953b419eb", "sighting--c8a91d65-08e1-4cb6-ac77-48106c4b93a0", "sighting--ac7923ce-4046-4049-822e-c7958f1cbf23", "sighting--2f583aad-3a1a-4af4-9b49-ae153fb2d9bd", "sighting--feb6b596-fe1d-4ad2-b987-a8c756404262", "sighting--f394f3cf-da66-4066-b15d-b57739a6f5cb", "sighting--5659829a-da03-46a5-8975-f9fb017a103c", "sighting--3bfbcbf5-e154-4c93-a87f-442388e08959", "sighting--f92bc29e-8935-42bd-981e-9aa581a587d2", "sighting--2bd7eb38-c6ff-4005-a0c5-2143569b9884", "sighting--648998d3-6155-4ac2-bc72-1675e2996fb5", "sighting--9bee9ac8-6c20-4e2c-8749-d383b1f656d6", "sighting--b28eb752-4e91-422c-8e5e-d22281f81724", "sighting--3995bd95-4fa4-4c8f-8bdb-8404ceef3309", "sighting--1ecab1e4-0a45-4563-8845-a340348361f9", "sighting--75ec45bc-847c-4e14-bdb9-3f5b3ea9baa2", "sighting--780792e7-4680-460a-87e6-bfda6e1dc6ab", "sighting--20bfa093-ddab-4715-b460-aec9af2d4a5a", "sighting--bed249cc-aadf-4a35-8fd5-17dd3836cb11", "sighting--a82cac4f-5d63-40ca-b443-c2cb6033cd59", "sighting--f52c7497-d368-4665-8d03-750b77b03813", "sighting--8f9a4966-d6ef-4741-9e1e-9b731115cabf", "sighting--303920e8-7b4d-495e-973f-b85dd9ee4315", "sighting--3e5883fa-9c45-4e1f-a2b9-69fc8f40b331", "sighting--85dd8908-9e6d-4cee-aecc-465dbea1187b", "sighting--dd875697-87a4-4afc-9626-8642cfa1ea4e", "sighting--e9dda556-13da-4bd4-abec-95f2f56eca97", "sighting--7cda376c-d25b-4108-b78f-ca7316682219", "sighting--d642f6ad-8edb-49c4-9ca0-f77dfe1c52f1", "sighting--a1f15d5b-361b-4c49-9b5e-257ec36a270c", "sighting--6f045361-c111-4a31-b3d7-f552a8c50300", "sighting--85b29637-c34d-4f33-9636-cb8d0ca97a02", "sighting--6fc7d190-bc41-4298-a982-7334c0236c14", "sighting--2eb440c1-e771-4979-b86d-3a9b8aa6da19", "sighting--89ad06d9-1e8e-4f33-b5bb-f9b62d386bc3", "sighting--94521f79-6019-46f8-bc46-95324d47a87e", "sighting--f33bb153-b9f0-4960-93b6-25cf644ee53f", "sighting--9cf0a2d0-08eb-4edc-bef1-722e5eab57de", "sighting--cffe966d-1399-4fb3-a62d-acd103559406", "sighting--192781a5-1aab-48a7-ba84-2079f2fca3b3", "sighting--9968e4e8-0275-4470-8608-fcd6758e160c", "sighting--8afc1333-fe60-49cc-8657-c3d4320eed7f", "sighting--ffc6cdf4-368d-4f52-a773-b84a5f496a39", "sighting--45fbba1d-710f-4584-8868-b8cc5130632c", "sighting--b1e05323-883b-40ee-9884-4281524e8bad", "sighting--af3505b0-e75e-4d36-a7af-bcfe40b7fa9b", "sighting--c2f720e0-3238-48e4-b8cf-6370b766c991", "sighting--763d865c-a27e-4cc2-91ed-6814b4f7bea3", "sighting--fc5975f2-2aa0-4824-af63-59a9457f5d32", "sighting--4f0d58bc-ec13-418a-b8c8-a61bec0a6786", "sighting--01977627-b8b0-45df-9e6a-d9a3e6a6a6c8", "sighting--3e722602-982c-4754-b3c4-c9f273c4df30", "sighting--e1530aa8-85ad-4039-922c-52b75285c0fc", "sighting--cd9b40c1-35ae-40df-b292-8c5d0a13e378", "sighting--ae55d4cf-c77d-44fb-8e32-aaea8fe94912", "sighting--ba76d26b-0c57-4a86-a154-7f9760587590", "sighting--aa83f157-cd03-496b-be01-d9bc7f987816", "sighting--fe808a45-3bbf-4c20-aae2-983e8dece22f", "sighting--db297a77-b9e2-40fc-aac0-ebdba5078c74", "sighting--924590b4-5e20-407d-977f-f80d33c5ccc5", "sighting--6a26825d-2aac-4a43-9448-e28d49e5ab7f", "sighting--e5a44372-3527-48b6-b80d-11241ae67c99", "sighting--141128a3-e22f-4cfe-80cb-1d1d1852a6b7", "sighting--d2752c2d-7ee3-4757-b74f-e98508b19d3b", "sighting--2d2623cf-6855-4436-8c42-8887f8e45854", "sighting--681db726-e664-4ba1-9d91-05ca0274e235", "sighting--2b4b5d09-4194-4d16-a3b4-186bdf040353", "sighting--8d70786b-4bfa-4308-b879-4f63f3414b38", "sighting--a24ba1fa-1ae2-45cf-99b1-16747cc677ce", "sighting--80326561-a427-4dae-b905-a3e2483ed246", "sighting--705717a8-242d-4e7c-a69a-592860487155", "sighting--367b6bf6-a951-43e6-932a-ffcfcee8c816", "sighting--71d9b049-69d4-4677-acc1-e1ef306263e5", "sighting--68fb64c2-3409-47e3-94fa-91b60e632fb7", "sighting--21fc20e2-327a-42c0-b5ab-9f7e88890921", "sighting--1b6de37c-e70a-4976-9e82-7e8a11d9fdf5", "sighting--d971b872-7bce-4b89-929e-f1d379726168", "sighting--f8542f4a-0779-4fd9-b578-b41c546b9840", "sighting--4d68638c-1750-4f02-b6a5-fb6a3ec6f465", "sighting--c03166b0-df2f-4be1-9315-824a743e9f71", "sighting--ca62fe12-48ca-462b-bb58-90c7844bc409", "sighting--b1b442c5-610d-4962-83c2-1708657a705b", "sighting--d8070f00-b58f-4b2e-a52a-3ac827d41c7d", "sighting--2599cb4d-524e-4750-84cf-a8da24ef6216", "sighting--75bc51cd-39c3-4c52-a98c-f8857b01764c", "sighting--8ae668f2-2128-4aec-9475-5a81832316e4", "sighting--229bad22-40f1-425f-a2e3-f9d47e33c006", "sighting--6427f00d-84ef-4d2a-84ca-b0542e80b744", "sighting--fddfcb57-b453-43c8-b1b0-c09082bb4164", "sighting--aa5c3b93-3d7e-401c-bcf6-7a15bdb9b353", "sighting--bb29bc33-3da0-4d56-8530-53050fc106e0", "sighting--52250d0f-0b14-48df-bcce-c2b86647711a", "sighting--b273f0ca-c533-4082-a17a-a30768c3740f", "sighting--57a3f58c-4cb0-4cef-8b2c-6556c6484614", "sighting--186ae5e5-d120-4d54-ba06-9a481334502a", "sighting--d70590d2-b72d-4021-92b9-f977bafa4884", "sighting--afb47a13-e332-4283-bb47-9d01a4aea252", "sighting--9ed4ae45-1ab4-485a-ad60-e50b9aa7677a", "sighting--1d484f4b-7c0a-4dd1-a7ab-a7ac77a7989a", "sighting--55721284-b4e2-4f4c-8443-015f0e6dbf86", "sighting--e19388db-be44-4853-958f-baad147b4079", "sighting--d9c108a7-3a66-44f7-99ce-85fecc30ff0d", "sighting--e18b7797-22a2-4910-a3e6-3d95162a4037", "sighting--1d9187c4-f0ac-4868-86d4-ddce6ecc5c5b", "sighting--d7632147-68ac-4a6a-b809-1e19db0f3dac", "sighting--b28a7d8d-206b-487e-ba2f-b56edc5dcec6", "sighting--58e28132-2080-4b24-9630-092d63a79638", "sighting--840f0ac5-ccc5-47de-967a-4b5abb7446cd", "sighting--0c162080-a421-4728-8127-3911bf8f9b8f", "sighting--a8239132-0b88-4164-8653-f97e625399b2", "sighting--1116defc-759d-473a-9dde-7b429cfa53bd", "sighting--76cb7c79-249f-442c-9441-6a7ed27b07af", "sighting--51455f3a-0a29-4883-bf5f-8f568774ec2b", "sighting--733531a5-e54f-494e-846b-15d7545fa545", "sighting--228d6f93-34e5-45e8-a554-6f959f99dd35", "sighting--acdbdd4b-dd25-48ff-a911-ab15af7aa8f9", "sighting--7905ac96-74c9-4c30-b28f-f98f384d0c8b", "sighting--5a89a62e-f6bf-4b1b-8fb6-3a6022f7d42b", "sighting--962a0886-e9c2-4706-858f-1dadb14eb29d", "sighting--7ae1a555-cbea-4bac-9e21-e38d9129de54", "sighting--e3050b22-9cfd-4675-80a5-547a2eeb1e6b", "sighting--8c0bbc45-6a12-42ac-9f28-bdadbe08b17a", "sighting--152758f3-2998-469d-a84f-53b66b662216", "sighting--6730883c-4ca5-44db-9782-fb0b952162c9", "sighting--c8646e36-a3ad-440d-bcc1-8ac8a63e53e2", "sighting--132ac25b-b2eb-45dd-98bc-ef1493cccc7b", "sighting--6df2b7f3-83a0-4650-9549-e40decec0878", "sighting--62cccc9b-f067-42c3-8e63-6c9e8a3ba826", "sighting--f496614b-0146-4020-b387-e9371694f854", "sighting--3c07810d-a7d1-46db-8596-868bb6b71b48", "sighting--6ef55ea8-7bad-4783-9b89-166f48aadc45", "sighting--9c0b6494-d681-4778-9c3e-c564bc726c06", "sighting--a0659eac-b224-43ff-8451-e299c7659888", "sighting--53b098dc-5c5c-4345-bbae-4b109e18d760", "sighting--1d72eda4-26fb-49d8-88f1-47fdc812a1d3", "sighting--cec83d28-bcdc-453e-b7c8-e01450292356", "sighting--b999e8fe-7439-48e6-95de-b59ea7a0659a", "sighting--5c978d62-52f8-4dfe-afe4-db95e0de3576", "sighting--f31f51d7-7f79-49df-8f19-0d5752dc2068", "sighting--d54e7098-69fa-47b0-9822-99f44aee82f1", "sighting--1ebd157c-a0b5-4536-bb1c-4a4e133b44fd", "sighting--c1c0eb42-a265-442e-8c2d-be0ddbc2eeb5", "sighting--ce54416f-70ee-4d02-bba1-c753716270d6", "sighting--23cf3111-52f1-48b5-82ba-2eef29e8bb2d", "sighting--7b949f57-8835-4b4d-9a24-a37d1c13235e", "sighting--8407d8dd-cf2c-4970-94b9-455acd6f3d2b", "sighting--ccddb9e0-c5b2-4f38-8363-d3f2d15180d0", "sighting--ebacf17d-4c95-4c74-bc0d-019da86ba5ec", "sighting--9fdb7f12-7ade-4f57-880d-f25bd9830cf0", "sighting--28b14828-a933-4492-88f2-3ed65bc2d397", "sighting--85e2cbae-f0ac-44f8-9dc3-78d877408836", "sighting--34955f70-d0d2-4ed0-ae00-4db7ff5901de", "sighting--9c462a5c-9b17-491d-b82f-65a08a02438b", "sighting--36d86cb5-fcfc-44c8-a8c0-56b19c416921", "sighting--d16e8e6d-e708-4b90-913d-72448dc3548a", "sighting--d4b70244-9534-4b6b-888e-abe55d3bc4ae", "sighting--0413157f-04ac-4298-b066-d5c380471063", "sighting--7603facf-84f7-4969-b2e0-155cd0f45e5a", "sighting--6b23dc99-004f-4ea1-91a5-4c202f83f1d4", "sighting--d4f28938-1302-4732-a6fd-c6489175cb8d", "sighting--73700897-5a75-44ec-8c9d-e276f631ad88", "sighting--f4b3e66b-8763-4df6-ac1a-4f1219046800", "sighting--a31630c5-2bdd-4fc9-a9ce-b69f27becf90", "sighting--c47fdaf7-4ff2-443e-b028-138107bc17ac", "sighting--9f3f5c03-6bcc-42fe-9890-b4a8e7f3b7f5", "sighting--857c246a-72a6-435b-bb9f-52ffae150711", "sighting--beec2d71-6c75-4bc8-bbdd-c765526373b0", "sighting--f10e756a-d40c-473d-a1ff-087b1f10f065", "sighting--241ee536-ea57-4f3f-acb2-1b1ddad80d3d", "sighting--028b7911-3d1d-424b-885b-46f814d85865", "sighting--979dd89e-53f5-4ac3-bd61-74d99a351325", "sighting--ffd6fc4f-2177-4f38-9a6c-097133fb46b4", "sighting--1f33692d-c425-440f-8023-141c7b697496", "sighting--9be0401c-1117-49ee-a22a-c3a896add6ad", "sighting--cea5996e-1beb-4481-acdb-7a51a3614779", "sighting--233ce2cf-c989-4684-ae0a-c5364e65e247", "sighting--19b538f7-d37c-4c1c-b554-e37a7d0cb64d", "sighting--8b2fab81-f73e-477f-8ca7-cff3208b11a6", "sighting--e6375181-b4c7-4dcc-b9de-6b102c45e6e2", "sighting--9dc47fb3-17ca-449d-a7be-275bb7380b02", "sighting--f5b33957-3c96-4e47-a394-799bd3f31608", "sighting--41422e03-a56a-4ac5-8f08-ef42bf36b538", "sighting--99117548-ca36-42c7-98b9-06644ad1dae4", "sighting--c90e817f-6316-4719-9708-76fe7d2a6a54", "sighting--d07c3a7a-2d86-4147-8fd9-83a1f4f4a540", "sighting--3fe47465-017f-46e8-9745-39a58a5a6ef5", "sighting--9a4a874a-0ef9-4be5-9271-38c77249639b", "sighting--73fc002e-e8bf-4670-afa9-d49674220e73", "sighting--bc9793fc-31ca-47ff-91ee-286676b87411", "sighting--c2d09c22-da3b-45f4-a550-cc24ccac5423", "sighting--861fb839-10c5-49ec-b7ab-d442b6b05d11", "sighting--e7e1e57c-a324-4576-8c76-c6aa5dd2f49d", "sighting--45a16251-19b7-4a31-ae53-47b6dc75ce2c", "sighting--2aa1216f-eddd-49b2-875c-2a196bf1e619", "sighting--cd2f2047-30ac-4c50-b318-bcfb8a7c6c50", "sighting--6ed72e59-4f9b-47a4-95df-942bcd452567", "sighting--1f578932-dd19-42fe-9af5-4f14461dd4ea", "sighting--04178844-d818-4e7b-b726-b60f3ddb18c4", "sighting--c18d79b2-64d7-49b1-8dcc-9ed57c0b51e1", "sighting--04f521c3-f07f-4583-8d4f-362558f62e51", "sighting--ff475864-efc2-47d1-b54c-859ae2bd24ae", "sighting--e19b2280-97ad-4531-b7ea-b8afbec81d8b", "sighting--d490c37e-3e03-4673-aba1-7656e98ce778", "sighting--5660352a-79b4-4de6-94c3-be544048813d", "sighting--dfbf1ea8-c150-4e71-9e35-7e0332f0b8a3", "sighting--3fcf72bd-24d1-412d-8e47-ab4ecc44f127", "sighting--81c676e1-744e-4177-b336-763f95eef758", "sighting--4cbb2474-aab0-4217-b372-7a6a5dd20893", "sighting--a716c1f3-c4a1-456d-ade9-f70c3f3f7a23", "sighting--3e54ef58-4d38-4001-98b4-58a46ed67f54", "sighting--5a1c69e4-cf93-4ee6-bc94-571db83304e1", "sighting--630cff62-b3b0-42b5-966e-872bbf26cd95", "sighting--93010d84-1f66-46fd-b270-31c209e0999e", "sighting--c90003b1-ed64-4c87-bf87-f326bef4684b", "sighting--c0706e87-8b85-46c9-9903-829a316c1a0b", "sighting--942412b7-2cf6-45e0-ac49-8028aac7a39b", "sighting--e7c9172f-cdae-43c1-bddb-9215209b38ed", "sighting--6315faf7-2664-414d-ad01-6cc4fe9fc089", "sighting--d278cb26-7fa4-4b24-ba30-c166d0b345e7", "sighting--7918268e-2792-4356-9afa-52ec39703977", "sighting--6383ba8f-3dc9-4450-8f36-80edbbb47366", "sighting--227e0b04-4dcc-45ca-89b1-2a0c66736044", "sighting--cf308f2e-b719-4f62-b257-cb630edbb19a", "sighting--5fd353c2-b5b2-4f74-b4ca-f2cf4f56aaba", "sighting--385f954e-fcdc-4a27-8efd-c485808cc2e6", "sighting--50e6a848-986a-42ac-a6ca-ee62f54cf2a7", "sighting--50d11eb9-9706-420a-a28e-6617c539c5bd", "sighting--5969c991-c99c-4088-a446-88cb2d551ebf", "sighting--44fd198d-18e8-481d-86f2-e8e2615219f4", "sighting--470562d9-8048-4bd6-aac0-be952c26c448", "sighting--3a650dfb-67e6-4996-8511-9417d1b7c3e2", "sighting--8e1711b4-af4e-46f4-a2ef-e85067b5e907", "sighting--6989bc77-7374-4ea8-b58b-0367f3119674", "sighting--cf97e712-8b03-44b9-8f2b-975d94359e63", "sighting--3e8aef65-1c16-49bf-9698-3cd826106ec1", "sighting--43dfc0fc-9592-4091-bdfa-d3eb8834a700", "sighting--26905ffe-89ce-4e21-8aa5-8e21c99c9061", "sighting--4017822a-8e6d-41f9-ac37-9e90cd80c96c", "sighting--38c56609-c1d9-48cb-98b2-8a03373db290", "sighting--2078cba1-92ce-42b8-9441-067465925d75", "sighting--862d4068-20e1-42af-9cf6-a05cf1e32418", "sighting--afdeaa33-b41d-4632-a39b-bd1cf8d0382d", "sighting--326be617-404f-4937-bd22-a58910d5b56d", "sighting--a69ad046-9d47-45d6-84c9-cde88566a235", "sighting--afb59c2f-047c-48c5-9db8-9165a138b5ec", "sighting--0effec58-2a10-4589-8a80-d70c2c3a4eb4", "sighting--1548c644-3684-4436-a41c-d58153470325", "sighting--034219da-ab76-4639-acdf-5081b8fa954c", "sighting--40ba8d61-8edd-42de-9b73-53874d60ca62", "sighting--c4863e7c-67fd-44eb-b104-1fbf0ae40915", "sighting--6c4ac128-9693-46f2-ad1b-cc591934d5ff", "sighting--33b1728b-6caf-419a-98ca-56bde4941a57", "sighting--e6560888-9293-429e-b33d-1f4dfee844c7", "sighting--a723bdaa-65dc-45de-9e9c-5283b959e6b9", "sighting--75eabbbe-45c4-4b26-a0a9-f235b29fc3f6", "sighting--80d3d685-726e-4b97-b952-7b81e9a51a6d", "sighting--1f56d77e-999d-44eb-9933-9dfe62fd59be", "sighting--c1da0da4-e0fd-4832-be06-1094c1bcd9de", "sighting--148fc154-06df-4dda-bd87-71531d6eba35", "sighting--5bd835e0-d2b8-4cf0-b3c3-a4392c410ea8", "sighting--81cf4923-c73a-4782-97dc-b6e131c75193", "sighting--1e21f1db-02d6-498b-a2d5-68e4e39d5c3f", "sighting--b11e9b77-f9dc-42a4-ba5d-5538dc8022cf", "sighting--345803ef-e0b3-4341-9317-963f79c030a0", "sighting--b78fe3b7-653d-4da9-821d-961438aa7a26", "sighting--1a1f5cb6-57d2-45cf-87e3-14455d349fe6", "sighting--53e40a42-27c0-406e-ad39-e1ae5a435369", "sighting--b01843db-5d26-4ea7-a2fc-70e844c55e5d", "sighting--9723936c-ee03-4c80-8b69-b3d745c768d6", "sighting--14739b40-b159-4e42-8fdf-34a5dfe04162", "sighting--eb319eca-d599-4b03-97f3-fc1abea7af53", "sighting--6554584b-fba6-4b46-880e-756ce2acee98", "sighting--1f85d86d-f921-4dd2-8dec-02a13e1cc356", "sighting--26b6dc73-5239-4b38-8c72-f82b607e9895", "sighting--fd77a6f4-6c55-45b2-a362-3d3744ee4327", "sighting--6c829484-af00-4f9d-b6a1-b53875b091ca", "sighting--f9028f72-2e11-49c3-83e2-993fe749b1f6", "sighting--9b1c80ad-0edd-4e33-9db1-4e0a6f796547", "sighting--db23603e-9565-4678-858d-dced1afcce09", "sighting--46e91c27-48f3-44e7-b744-a80de043080f", "sighting--d1c7c7c1-eeca-467e-9197-f56db5265341", "sighting--ff1a8675-a702-4cef-9ad2-fa2260bcee2b", "sighting--5ffd736b-1fdf-4b26-82d5-c804eacb3de2", "sighting--0ab66050-3f56-4498-a325-6353c2ee9daa", "sighting--bc01f108-2947-4dee-80d6-87847f08a230", "sighting--611915cc-3d0d-4e44-a87b-06d8fe0e96b3", "sighting--ada4b7fe-2dff-4305-81d8-8e6eae138c01", "sighting--bb2c3b12-1567-4b13-82bc-8a8f6c5b9025", "sighting--8f091aa8-ceb5-4aeb-a166-7859698c4052", "sighting--2e6a73bd-ba66-4bb3-9ad7-880d40ec3edc", "sighting--aaea4623-ce4f-4e11-9121-adcb4847d265", "sighting--8ce937d6-5229-4f58-8e58-0cefea6511d1", "sighting--65e5527f-7520-4649-a891-48487cfcaa86", "sighting--86666df2-9be6-4183-9d61-e442878d9b6c", "sighting--87d56c22-b7ba-4b92-be9b-e1a2c935c17e", "sighting--b339ce2e-ccba-43f2-a669-94341b831439", "sighting--7dbb3e7f-a983-4cfb-93dc-5d59dc079544", "sighting--bbfdfc96-3ae6-40f4-94c6-26b833c838d3", "sighting--17df297f-aab9-4e19-a654-1deaa05d3df0", "sighting--27e917f2-a494-40fb-8ed2-d984e47a3beb", "sighting--bab07ba7-e53d-4497-845a-3f63e2d8aa17", "sighting--ebda6aac-04af-41f1-aa1f-02e8fd18a97a", "sighting--d1be77d1-9e17-402c-ae7f-fc2c7d0eb40e", "sighting--59b8d98d-5941-408f-9ef7-5ea399ec9680", "sighting--ea20fded-f782-4a6b-8683-b3eccd7a3145", "sighting--3fa30ff4-7b30-4123-8540-45594be45a73", "sighting--4c45f442-b365-49a5-9a1b-a01cd54f9578", "sighting--cadef5b8-5003-4427-b732-020485f3e53e", "sighting--48eb8551-ad3f-4df9-a0bd-59db86b127c6", "sighting--a9cc533e-5268-47d8-94e3-688d02c3d295", "sighting--0028d060-3e39-4686-950e-18263576d958", "sighting--4940dc9d-d2c7-459a-97fe-11a84fa717b7", "sighting--1dbdf759-7120-4c54-b4a1-2a0e39f4fb59", "sighting--21f50227-44dc-4790-82e1-58ba9663411f", "sighting--33806eeb-2f41-466f-ab44-7aabec690dd7", "sighting--4eb85d18-7db6-4a74-a280-232e4a6666e9", "sighting--9e4f8007-cf63-4898-bbaa-4a23a0bb1048", "sighting--3b81b6b5-714e-4dd0-8866-cb774ef93a57", "sighting--20972a38-2102-484d-8c3a-8cdee8a0dc10", "sighting--c8e2d9f7-ba23-4a23-8b97-d7785edb0898", "sighting--8f9f9e63-b62d-4062-8e79-0f81273f593f", "sighting--99214851-3ca7-4ca8-a7b1-a4b9826a2955", "sighting--98da04e1-b761-4f1d-96b2-8adf7685b486", "sighting--d34215a4-bd52-4a54-b6d5-2c55bfd54247", "sighting--8670ae58-c6c1-4162-8694-0d81d9762d81", "sighting--d337315f-ebd8-412d-8238-7e4fefa29a86", "sighting--c44cc265-3523-4fec-ba50-017f39fd000f", "sighting--e8d5f203-ed75-4349-b104-01316a2be249", "sighting--39107f03-9a1a-47dd-96d0-8e4e34916ba3", "sighting--5d44e093-c5c5-4ff9-9a9f-2a370fe67166", "sighting--7ed00c0e-741d-4361-a1f7-902c980761e6", "sighting--97161a4d-15d7-41b8-86bc-8c906ef18394", "sighting--313bd72a-ecfe-4905-927b-3fe9b3081d15", "sighting--4de618ec-c0ed-4149-8f64-cf7becf15431", "sighting--a8f0bc77-4dd9-44f1-9e14-210b8fb2b158", "sighting--2e23a349-b5b4-48e3-b1ad-9cd25ba651c2", "sighting--61cc7c5d-d424-4c41-8811-c0a0de44340a", "sighting--dc37403c-63cc-4aca-9c9d-3f72dab0e411", "sighting--62fb3845-60c0-4e75-b09c-9c862fbb93ee", "sighting--fe6f3e59-09cc-4a72-9fae-7d7eb4a1def7", "sighting--cb351f74-b0da-4758-a123-a68c0f9e79b5", "sighting--f4b44e1f-30d5-420d-9ba3-f2d2d8e62824", "sighting--b835c602-b367-4a7e-a6aa-5230adf6a61c", "sighting--f110fc04-26f9-43f3-a7f5-07cb4ccaf0b8", "sighting--137bba7d-0da6-42d6-8217-dc2ae84ee014", "sighting--f3c677ff-0307-4d24-ad0c-957d65b95458", "sighting--7f48e28b-02ed-40e6-a0fa-309bf7ca6eac", "sighting--b69d27af-1d40-4748-b790-7e62c1fe080d", "sighting--7cfcd122-24b8-4316-930d-e8974214a7d1", "sighting--9381754b-071c-4432-bab1-93efa83a251e", "sighting--11c008a9-5bf7-49f4-a34d-4e19281a8a1c", "sighting--b9d66e1c-7c5b-4c0e-8067-f4c4ef7b09b7", "sighting--99937dd3-21c9-40cb-8e0c-001c1c2ddc36", "sighting--854cd86e-ae9d-43db-8518-c6933fbf0eb9", "sighting--4d914dfd-35f2-4990-b0ca-c245453269b0", "sighting--97dd599f-eb1f-46d1-8dcb-2d984002b401", "sighting--d20be52c-061b-475c-a174-a8190f4c109b", "sighting--e34ea809-9199-4e83-9181-646e833e0ba6", "sighting--3ac70de8-6614-4458-81ef-69a2a9418d2f", "sighting--6f758040-d873-4239-8941-820102e344cd", "sighting--b41e7f61-feb7-4f03-baa7-ff8b68d75cd5", "sighting--02318cc7-3834-482b-8418-f139d2b70f85", "sighting--59d2737f-fb2a-4abc-b97d-1af0040aad2e", "sighting--912febb1-2c38-46ce-8007-3f6d9f1836ba", "sighting--1595281f-c5ef-48d7-b4bb-c62f667b7f8d", "sighting--b272196f-bbd1-4724-a9b7-37103327cbd4", "sighting--95e414c4-b1db-4d78-8900-c6ce17691a09", "sighting--414b285b-68d5-43e5-a0bf-573df2c5f43e", "sighting--acda2a58-aa1b-47b6-9fe3-cd2b021db199", "sighting--247f4a94-cd46-4ba3-b96e-a9b148ca0e66", "sighting--38456c75-f91a-40dc-8c94-c2f3660a54ef", "sighting--3bed4e53-62f0-448a-b3f4-b3fad6df361c", "sighting--390b5c18-0500-4f02-8b4f-eb7de34517c2", "sighting--fd262878-03a6-43a3-9eb4-d8e5c103f669", "sighting--c0ce5ef7-b4e2-4e5a-b9c3-7d2251e9f718", "sighting--a04ea4eb-bc6a-4d7d-981f-393cb50f1c4c", "sighting--b3277518-7235-4805-bfab-90abaa916351", "sighting--2fbcd5a7-895e-4925-aae0-8019bec8aa47", "sighting--9d1ae367-437c-44b5-8ffc-a787bdb55628", "sighting--577f89bc-2bcb-417c-862d-51284d27b123", "sighting--6ee3a288-1dbf-443b-b683-97458880f7b4", "sighting--cc07492c-1ccd-4477-87d4-e89475813593", "sighting--67bc7590-b21d-49ab-bb41-70a62deea4cd", "sighting--e75b0feb-661f-4261-9910-f8ffcde99810", "sighting--c24ca58c-eadd-4ab2-82c9-70134853f68d", "sighting--5aa434bb-48a2-45c2-9e57-f1b8079add74", "sighting--337ac7b0-e70b-499e-a0b0-4bebbb4e9712", "sighting--fbd534a3-c07c-4f82-a8bf-ddc6575a8c6e", "sighting--6c1df38d-4f5c-4fca-ba94-24913bd403f4", "sighting--f31d1e47-8206-441a-a65a-8f1877c7c475", "sighting--cce76192-6eac-4d2a-9dce-b89f6b3cfa51", "sighting--35b99872-011d-4e4f-b62e-4d5d286fc558", "sighting--7225b9af-e700-4149-a110-4f2f1bd700ac", "sighting--b574a4c9-7bee-4d75-a5a6-bedbed5023c7", "sighting--090cbc73-c155-4370-9554-24baf267a6b1", "sighting--3b2715e6-7d43-4384-bec5-3819b8fa716c", "sighting--486c6a92-bb82-4677-8ff0-a57b8fcd189b", "sighting--ff51271a-38d2-45a4-afa7-4aa924a1107b", "sighting--c0f4d714-e282-407a-b78d-e9370fbc555c", "sighting--72bf5e17-fb2c-4ea7-b143-785dfacab337", "sighting--66eeaeb8-349f-4646-8a03-a1bad42d166d", "sighting--1cb83943-ff6d-40a8-829f-b1c53575c6a0", "sighting--69771b91-f6b2-4e16-8f05-f4f91999eb9d", "sighting--f98f6be3-b30a-491a-8487-4e5dbabf15dc", "sighting--51efb309-cc31-4d2d-8799-90f84c123335", "sighting--57819e49-1412-4e17-85c5-04b1629dccb9", "sighting--5a7b4eae-f483-4c51-9c3f-b1f3b59654cc", "sighting--b0a1b0bf-a5c8-4c08-a852-76161ac1c3c9", "sighting--6f8d0051-d5f9-4239-ae05-1f67c8890592", "sighting--e0476e30-7b20-4f92-aedd-0bfda906a91f", "sighting--68a05391-7790-4381-9ed9-a8992122fcdf", "sighting--125bf849-38bb-4318-b0e2-edc02f76170c", "sighting--e97c1d6f-1b08-4969-a5ca-047fa84cfd8e", "sighting--316b8fa2-0e72-4b31-b7d8-cf7925d7dded", "sighting--730b8a51-3a37-41e8-95b0-14ed31a3fe71", "sighting--491656fa-c68e-44b2-b2b9-8c0e7da895b6", "sighting--e82b18e2-8617-442a-bbbc-01e5e697d918", "sighting--1d3f9c9e-f906-4c47-8b09-eb138472d9fd", "sighting--7f7880e6-68a8-4500-982c-93a5e52d4bc8", "sighting--24ae3e5a-f456-4887-86c0-158a1994551a", "sighting--a95e4bee-1223-4a6b-8e80-e31d4c0b09fb", "sighting--b49c5586-0564-4813-8886-b0d9885bef12", "sighting--ffae4a52-fa4d-4ef8-92cf-7d8d241daa43", "sighting--d2e2b35b-f039-440b-8cc1-838f2c546ba5", "sighting--838df9b6-4d21-4d30-99a3-9f1d4cb7e748", "sighting--c4f2c28f-aea2-492c-a9e3-ca1d17c96c97", "sighting--4227d646-7bc8-40cf-b954-67ffa951736d", "sighting--f511a6f7-27b3-4314-9288-6919e8cb427f", "sighting--83fa283f-abdb-41ee-b052-18fee3e7ace3", "sighting--6dce1003-63f4-4a9b-a3ea-0a42f088625a", "sighting--3e47e512-d488-4ae9-8e53-e4e8bd440443", "sighting--96035ba1-4b75-4aae-a51b-c780f89936d3", "sighting--1c4f98c1-2ef8-4644-8961-fd74878fe2ef", "sighting--2a644ff9-d5fe-4ac7-99f5-6591cc0cd150", "sighting--79981c14-da38-42c2-8b66-1693fad299f3", "sighting--ec474868-9c03-4072-bbf5-10e9baef7e21", "sighting--47c8a11d-6712-4f63-8041-4427fbd8985b", "sighting--5c8eb67f-ea3b-43bf-bc1b-84fa3e5249ff", "sighting--5dbb4a99-f532-4d26-bf5f-c43685aa9c16", "sighting--9cfc7098-c3d5-4934-a233-d96b8b5ed050", "sighting--1ecffea0-91f6-4a4d-a42c-4409956309e6", "sighting--6c91073f-6a10-4728-84bc-e9e29782eee7", "sighting--cd8f2a20-4ede-4bfa-9ed9-daeb6632a8a8", "sighting--9ab981bd-b160-4c5f-913a-ffdb2db6a45c", "sighting--013482f6-0e1f-4f62-8c78-dd8f5129003e", "sighting--1b4e9dcb-3e87-466d-b874-b57b30381852", "sighting--3a128636-8d19-4799-ae59-3bc6bbca839a", "sighting--3f928b56-3bf1-4875-8662-1707c32bfdb5", "sighting--d46e3e03-661a-4f96-88b1-299c82512538", "sighting--2bdcb8bd-4e16-427e-b977-573ea3b603ef", "sighting--429a474d-0036-4c49-a657-135063d041ec", "sighting--c930bcda-affd-4db3-a342-d53648949745", "sighting--44797577-08fd-4ce4-acbc-00640676e6c4", "sighting--a66d51fe-040d-4096-a58e-a8eb048b74df", "sighting--7be14974-f2cb-4abe-bfea-1b8494f38e16", "sighting--edf83b51-6930-4163-a617-67b739f45e08", "sighting--cd0272ac-b81a-4155-ba18-a5468b30a7c3", "sighting--ff9a2bfe-fb32-4784-a029-e3c5cd0b6bdf", "sighting--4ad4a6e5-7dc4-4f43-bce6-72da87d265f7", "sighting--e0823a3f-b203-4002-8426-9d4d5530c95d", "sighting--99bfa917-1fbc-48fa-8517-1a056747db51", "sighting--a2c0b91f-ffd9-40e1-be3b-6028d3296d44", "sighting--294b332f-7227-4422-8c6f-f588b0ffbe7f", "sighting--471f5452-274c-4085-831b-72c74fe97e0d", "sighting--d18a418f-82b0-44e0-bf90-7141d1341078", "sighting--4ff4ab61-8777-4c21-a57b-ac26498e446e", "sighting--a13b3dca-ad98-40a9-9fc6-e452cde0a6d6", "sighting--aee116ab-0912-447e-af87-745fb4336864", "sighting--7297c795-8e02-4fee-b6c5-ee3cef8e5bcd", "sighting--bf659e5b-deb6-4448-af91-6b618afa7610", "sighting--0e34eca6-5981-416f-8f08-07b702c79b30", "sighting--9a8601f9-df8b-44d7-908c-758d9acf4a4b", "sighting--e2220f49-c640-479a-bcc1-2957d8f56a0e", "sighting--81d0253d-0d7b-47a9-8dd8-04ac12b4c262", "sighting--0cd74021-3c01-42cc-82a5-2e50156b5e2f", "sighting--500d8c6a-9d7d-4993-a58e-9db9a687867c", "sighting--046412e0-768d-4bc8-9826-c5d592ccaa15", "sighting--fc9bd682-12bc-4a14-a054-5b410bba9031", "sighting--9cce9e0d-c29d-4210-9b2c-11da1c96698b", "sighting--ccb056c6-72e4-4b99-b61d-d8a63ad07813", "sighting--efdb1230-11f0-4293-89aa-1622bfb112cb", "sighting--888b3fb9-e94e-45cf-8408-6e58b13a79de", "sighting--222e8317-5bd5-498e-8610-4e32b9aecad0", "sighting--429734be-5554-4716-9060-4d5ce9ffc58d", "sighting--4e64523c-ca39-48f5-b52c-0f1845d0f404", "sighting--bc06e571-9c18-461a-944a-279f393ea33a", "sighting--2d36ac84-3965-4ce6-a817-c42adca72c67", "sighting--dc566a80-a772-4399-be02-e31d0068b607", "sighting--af00ab93-2dc5-4a17-814b-5c1707d15719", "sighting--673c9326-a462-43c4-b5a9-12940f1246e1", "sighting--68b796e6-f787-432d-b79e-9609e41cf6cd", "sighting--3bb32ed7-6e80-4f94-b5d5-ab207908100b", "sighting--442f8cfe-e34c-445a-88d2-5cd35b533290", "sighting--c1020c8a-9711-4852-be2a-fe38436b52b6", "sighting--27f3352d-9c0d-4c75-b858-97f488be5ad7", "sighting--8b74434b-6834-46a4-9823-176f96f4ff91", "sighting--66f831d9-8329-4659-8d38-b77352b3c253", "sighting--50c2bbf7-c954-4c03-ab2a-b67b43331270", "sighting--ae461921-7be4-479e-81b9-3c4c7241510b", "sighting--2692b80b-043e-4571-84a6-a25c1069f119", "sighting--99cfe7c5-2038-4bae-ab93-8f2bbed8b5d5", "sighting--558827e5-5499-4a94-9a1e-135d2c6aafb3", "sighting--4e4052f5-ca7b-4181-ac1d-3d8a02473d79", "sighting--076a1e70-06dd-47db-bb5e-eb04bf79e797", "sighting--042471c8-9965-4f4e-b83a-f9134cef8011", "sighting--15b3390e-0294-48bd-9a29-f9ab8946c1cb", "sighting--94fb1b73-5357-4897-8c87-fab5145dd3da", "sighting--b385b20e-9369-47f0-932a-58343aac64e5", "sighting--4c2478c3-fb33-4b66-99d9-7f3049e7ea7a", "sighting--c022b649-66e9-4673-8dba-176192b685cf", "sighting--be3bc3b9-e29a-46fd-a148-ea48f7dcc792", "sighting--db5a5561-232f-4e47-bd37-4ec025fff652", "sighting--f5ca4f35-2793-4219-8bc0-2371cf3be095", "sighting--ebac6215-9314-4663-b608-9d7c9fcaaff3", "sighting--7866dcde-5bf5-4c20-b646-7bea89193253", "sighting--d8bd59f6-e2a2-460f-a740-ec93eb86589e", "sighting--421e6dbd-af6f-4e99-8445-e52b01975702", "sighting--1a19a7d9-8acc-458d-ab9d-018951bce27b", "sighting--5e404c12-4dd4-4449-8ca2-44dd59f9c32d", "sighting--6c24a810-c4d4-4cf6-8ed8-91030b37ff57", "sighting--6929004b-f712-458d-b1c4-bc5c5064aba0", "sighting--47686e1d-ad1c-4918-bfb9-c73aca0c4b34", "sighting--50094386-cf11-4e7a-9de1-2e0e9c9151d5", "sighting--46b88d78-7bb4-4f58-ad93-1b9a611388b0", "sighting--7fc94cd5-ca0d-4214-89f2-ed657dca13bf", "sighting--2248295d-ad4a-40ea-bd8b-134e59302b8f", "sighting--5eed3bef-7c72-471b-b822-bf3a32f38e49", "sighting--2fedce5c-fbbe-4ae3-9490-6d379ef2a99e", "sighting--da4dad74-7d6c-4165-9aa5-9cd7f3c82962", "sighting--79d16fd7-12b8-4fdd-be67-da9abce51d49", "sighting--a0c9dc78-9413-4a33-a12a-a3822f5fd861", "sighting--8f7cc367-d821-4a55-abff-565507fdb830", "sighting--7713b61e-5cff-4755-b944-fcc8955ef393", "sighting--a2f85521-b82b-4127-939a-bd021707ed2c", "sighting--e30c4840-eb89-448b-89df-bc484096356b", "sighting--b42988fe-e450-41ec-a2b1-62b2a8f09b08", "sighting--fb4eca02-44e1-4ca1-bed2-63c13a3c1bd2", "sighting--0944fa0c-c6e4-4479-b782-b94a4829f759", "sighting--39f9b2ef-cec4-49b5-b3b7-f44120d05b4b", "sighting--69d2d9e7-c527-4966-a3b1-6bc4d8b4bc0a", "sighting--90f05b45-dd63-43ce-af65-aefbff4674b5", "sighting--90c3634f-a982-4586-8027-5da89e10555d", "sighting--7f131781-649c-429e-aff4-640dad40bb50", "sighting--e6a7cc39-f713-47b9-85bf-8cc8dd058e6e", "sighting--70e1cfc9-1280-43a8-8d5b-d0207868b307", "sighting--74fdcf97-8f3f-4ef2-af7b-6e9e907a9381", "sighting--72b5c70e-a10d-4fa3-ae8a-ec51fd5ebc9f", "sighting--39dfc294-7af1-4de2-b9da-b0aff2b42a1b", "sighting--2e638ac7-d407-489b-80f5-44fbabec00c1", "sighting--a3eb7240-05b7-49c4-8617-94dbda6ce607", "sighting--2260bf04-6cf1-4ed5-8626-50f9ac23a95f", "sighting--57a9dc7f-423d-4733-b4c0-6f17bbd5b94e", "sighting--cb76de11-0c45-47c9-bac6-8c902dd17a4f", "sighting--01a24a47-8b97-452c-8d7f-c3d2d0566738", "sighting--ccbaf5b9-209a-4f2f-9fc4-7d06bc8148a3", "sighting--a4a30fd2-e25e-4a85-9836-213360bf2db6", "sighting--5ac692fd-53ba-4e56-96f4-3ca9124c5347", "sighting--503ad72b-1d58-4cdc-b016-d6f7b55a37fc", "sighting--b6a9f89f-525a-4dbb-bf58-af34dda9e90f", "sighting--2500203d-f7ff-4399-b6b9-1a89551ca050", "sighting--ff29f5c4-dc2f-43fb-adce-6ec3a5418419", "sighting--5b44abf7-7680-405a-8559-91fd0f79c118", "sighting--502524db-2741-4542-9df5-c331559e8669", "sighting--d48e19da-c10f-4f9f-9517-1af450007621", "sighting--ae63f33f-8e68-46a9-88b6-3bf73ce8ce2c", "sighting--ace41611-82e7-4a23-8d15-41b733177e73", "sighting--f067dff9-8c49-4675-b16c-18c4c0a70d7c", "sighting--fea6dac7-7d9b-4132-8cba-e3b04bdb63bc", "sighting--e1e5ef00-b32a-402d-ba69-7aa153de1aad", "sighting--9dcea775-b69e-4147-ab28-e7b1b6969a5b", "sighting--1acb65e9-913c-4885-9186-91e0a230e02c", "sighting--be3e305b-2355-49a8-a651-cd9e3ebf8a04", "sighting--d570999d-cbe7-4c51-bcc8-5ef203609a15", "sighting--44a2e3c6-c609-4794-a973-3eac0a009fcc", "sighting--0d20414c-160a-4b59-95fa-3e92b8cb1185", "sighting--b51cfc3c-e822-4c82-a191-3cfba259d531", "sighting--60135674-4385-4f60-bf4a-f796e5612c26", "sighting--fba337ec-b014-434c-9f6a-2487d143af8f", "sighting--138e2386-5d2a-42cd-ae91-f7620af128ee", "sighting--bcad5d15-e058-497a-99bf-2a4711be57b4", "sighting--c561b52c-e4c6-4c50-a62e-9b907d3b2c96", "sighting--58b3168a-1380-4b43-97f9-f3a6dd742346", "sighting--e1f390cc-27fd-4578-9795-95eb58ad3aeb", "sighting--79a0e235-489e-4331-b691-23a6959f385e", "sighting--bbcbd9dd-c93d-4d79-9355-7f3456a15a02", "sighting--91290c32-11c6-449e-8669-c825b3ef511c", "sighting--c66c9d6b-9f3b-436a-ba0e-d56a45afad23", "sighting--526e0d20-2613-4064-9885-ae97e805847b", "sighting--cfed924a-fbd1-484d-b8ce-24e7cb883f1f", "sighting--d999096f-1789-4c92-92d1-f1b39d944f97", "sighting--0e1556b4-8a39-4c4a-a13c-a0e9f83052bb", "sighting--f9d61ba5-1e26-4782-8db3-7f510f156df8", "sighting--c672ed9b-96f1-4a91-ae1a-8e76742321b4", "sighting--f0c99628-b430-450a-9a3d-aeca43337441", "sighting--2f3993bd-1664-473e-8517-801d9eccaabc", "sighting--39d00718-d8fd-4075-ab2b-4905f9c07c58", "sighting--c8ab3383-5c5e-4ae6-9cbb-38b22aded3c0", "sighting--0b1afc4f-2b2c-4830-8b09-3d1be0af83b1", "sighting--ee91a198-3c13-4001-a059-c00ccc5e19ec", "sighting--0ae29e1f-378f-41e9-abe8-bce279f38398", "sighting--5d80dfdb-62c7-42ef-8f32-c4919ab36b23", "sighting--598597a2-703d-4dda-834c-140a8e1a7c1f", "sighting--ee8475bd-fcc1-4310-bde2-b05bef279bef", "sighting--11295a16-ef91-4952-9cc5-d08dc2cbd6e6", "sighting--f4e7c03c-fa72-40fc-8a4b-84a1c7f80917", "sighting--7a17cf6b-d37f-46df-8ecc-aa73bbdc0887", "sighting--6ec7d9af-fd40-4fa5-a513-c9ba01875aa2", "sighting--fbc05a2e-a452-4968-bec2-7dae7ee654d5", "sighting--cbe24c00-78bb-45e6-b6da-1bfa9ddb4035", "sighting--361afff6-899c-4710-845c-2c13052c7a99", "sighting--7b4b626b-5bf3-4a40-a123-7f8f74369ee5", "sighting--7539a2dc-150f-4649-b7d1-0a191815e45c", "sighting--f7a8eecf-2be8-401d-854e-795546f76856", "sighting--7a71a8dd-6f9b-4487-8304-2ada469d78af", "sighting--b0334619-0970-4d0c-a99c-55f26805d44a", "sighting--98305bd9-d602-495c-9c05-f3c4c069a9ca", "sighting--6c9a1268-7759-4117-bade-ced639875a51", "sighting--ab1334c1-383f-4c98-98ba-4520c496bb78", "sighting--c06de5e7-a1e6-4ebc-babf-8022505375ce", "sighting--050d1ced-400b-49d9-ae95-2239c129ee77", "sighting--e63cea3f-b7b6-417a-b984-f164ef70aebb", "sighting--97530496-4330-402b-81e9-e4986ba3c8a0", "sighting--107e1b25-f72a-4708-9b2e-3aa9d38f7387", "sighting--3e1dad16-9447-4680-aaf1-03670f695e24", "sighting--1acb151e-8bb5-460e-8356-7249d1297c3a", "sighting--4763935c-3a98-4f23-aa0d-c98cc3f619a8", "sighting--1e3a73bb-8ba1-4d04-9cf5-bfc72c0b292b", "sighting--1b030858-42bf-4ded-ad34-5c262b05ffef", "sighting--938df0df-1118-4dfc-9e99-63dbfcb5e81a", "sighting--43e9bd6d-6d66-4d3e-9c99-a037c1722f4c", "sighting--30b38a8e-825d-4c52-9888-fe02c2a71abf", "sighting--9d3dc9b9-d647-49d0-8d96-8ef130087004", "sighting--213a10d3-dea5-4289-aae3-9fb19811efb0", "sighting--c730c0bd-4682-4db5-a0d3-c599c7ed4645", "sighting--9f760cc2-dd90-43cd-a154-e97d1e7bfc54", "sighting--6746dcef-d88b-42b0-b0e5-439317e385df", "sighting--2087f182-5e35-4ae2-a1cd-03b652f9bf7c", "sighting--6ebf379c-6343-4713-ae8e-e47e39b0729e", "sighting--3e6a68d7-b671-4f04-9fdb-6d0789d6ae84", "sighting--8cc814af-2be9-4d61-ad83-2c7dc2bacdb4", "sighting--e5cad146-4642-433a-ba36-ed6dc2ee2429", "sighting--1822e0e1-bf7c-4f7b-ac2a-7fad81d9671a", "sighting--f4899d9f-ba77-4008-a4aa-9c3753f63080", "sighting--a7ae9a24-0746-4095-8d1c-d2edf04a318e", "sighting--515a3606-48e6-48db-b238-136ae41e5b30", "sighting--91acb449-a91b-4283-9dc8-01ed748bdc5c", "sighting--0a65be6d-8240-42ab-acf2-19f898b4524a", "sighting--bd2fef06-a233-4dd0-8139-733455c8544c", "sighting--542dcc8b-c0ca-4937-9d34-fc077aa66a5e", "sighting--88907c7f-f395-412a-a9e4-f32b8168b4af", "sighting--a01dd5e2-bccb-4777-b690-e6f62614a1a5", "sighting--7cf7f281-7cea-4c8f-8b6f-03b1498a1f18", "sighting--39b303cf-7b92-4989-a2d7-666fba710b56", "sighting--3f915d4c-3209-49d4-b4ef-269fa59dbfed", "sighting--9499fe00-7427-4b22-bfde-b1f54469ffb9", "sighting--e1812d4e-7752-4c8e-859e-a2534f28ebfa", "sighting--2f6bb619-ef10-402b-8d15-7224c06c9492", "sighting--23cfe1e5-7b12-4a60-81b7-5f71e3a5b888", "sighting--f985ac8a-ce93-4e88-85e8-dcf640fafd67", "sighting--93ff5257-0dae-4b38-a628-9eb805816566", "sighting--7a7fab79-b802-45b7-b697-4c4dfb960bee", "sighting--b492d594-d61f-481d-945c-35742e23e3f4", "sighting--c1cca889-0729-4444-aada-4338f3bcc930", "sighting--dbee49a0-3390-4117-be51-de9239420b92", "sighting--b5134fdf-706c-4904-8003-ec97d7c1fb38", "sighting--d15b7db6-64ab-40f4-a092-e8a5e275cc2f", "sighting--fdb2f2b1-8349-4eab-8ee1-c28a5b516ba5", "sighting--40776f1f-0499-4fc6-a795-3031ef25f168", "sighting--fb157a65-4b86-4a93-8691-46fc03e004f7", "sighting--2760ec05-3b9b-40ef-a199-0bfaa369a0b3", "sighting--93665f9e-07e6-4101-8b42-90dd79f3cd2c", "sighting--42bfc4f3-8294-44cb-b39b-d076414d0d89", "sighting--9ef0e882-c9cd-47d8-ae8a-840c73304af5", "sighting--b95aa2fc-a84e-4583-9812-6381de891788", "sighting--6467e4e2-e476-4ed1-b5dc-3a00554c657e", "sighting--0dea22af-c44f-4be0-aec6-bf2d59801af5", "sighting--ea5fe578-43d8-44e1-9243-a8ea116f4df0", "sighting--14842743-43c9-40da-986f-b206e70383bf", "sighting--eccf6da5-131a-4f0a-ad37-d7b106b03f60", "sighting--8be9dd59-923d-4c79-93b4-11e5b72d2362", "sighting--da14fc64-c2fb-42df-bdd3-3a3f5b682c13", "sighting--cd5edcf0-d462-4da0-b104-6a4ea86709b8", "sighting--0678b78f-00d3-45d4-b665-5391d6375fee", "sighting--e7fd32bf-b311-4dfa-ae42-226ffd1d931e", "sighting--ae5fe242-de9e-4fe7-9c4c-176baf163c8f", "sighting--037114a3-6318-49fc-b9b5-8b12e823ffad", "sighting--464ed1bb-1b19-4cf6-8679-327c2fad7c67", "sighting--fa709d22-f876-4928-824d-94d37f7471e6", "sighting--70ac93ec-5349-4677-a7c0-6d3e8248e0ce", "sighting--a8268fe5-923e-4750-88ab-9518d6b44dfa", "sighting--5614cfd1-d89f-4a23-a0bf-a84fe3c208af", "sighting--c4859010-2157-4502-b454-3d517d918258", "sighting--09f382ed-a109-49af-bb1d-17ea7fc2368f", "sighting--2e2f8591-19d0-4fea-8ab4-8fa360726626", "sighting--00cfbed6-3fc0-49be-bcf7-a6eba6ae6a67", "sighting--e0c7765e-5a54-4fd0-b423-ac0886f844bb", "sighting--29354393-7463-4f15-a9d5-0521abdd5c92", "sighting--35726181-b5f0-4a36-9c61-6c2a77867911", "sighting--1e5a9602-3d8f-4bf5-ba10-5762458b9f99", "sighting--bbff228b-cbb4-4579-95e1-0deb1721d9db", "sighting--c2b81968-cb41-400e-8ccc-2a93d3ec0b5e", "sighting--2c8ce172-12ea-4818-b187-5c0648a2b0c3", "sighting--ad3ce6a9-5682-4c63-9c58-ff9d10abad78", "sighting--84a14487-90eb-4bb5-bbc4-22222931fc22", "sighting--a175f25a-4767-4578-a0e1-5345af444f16", "sighting--3ebc46d7-a761-4062-a507-499ddf821a9e", "sighting--f75f9c9a-7d2e-4237-a0aa-cf95e7201829", "sighting--cf53ce05-5291-4ebb-a13e-7b9e85685adf", "sighting--29105b22-8243-4a7a-82c8-a7a918642076", "sighting--46742749-e0fd-41e8-906a-0c5d75e7c929", "sighting--2df688bc-d6cb-4c6c-9bc0-7f8d97812d83", "sighting--766bdd71-4dff-48aa-a703-08ebfb02c38a", "sighting--a0b00f2a-b782-44b3-ac4f-2aef9429eff0", "sighting--2390ecb6-1960-4835-b775-4f9e8043b119", "sighting--f80f3ca6-9f81-4a21-ac66-6c3ad6c4a78f", "sighting--9794a47b-f012-416e-87c1-7705e8e7101d", "sighting--bbf6e864-96ae-42b0-a2b7-0e697533db5d", "sighting--a07dcff1-1ad0-4dbd-84c7-39fb72e8c187", "sighting--fd2a318b-c2c6-4f89-8de4-fa0fbbd6f25f", "sighting--3fcff002-47a4-491f-9ce1-7106c491a5c8", "sighting--0e90347a-32a2-417d-ab99-5923d775f5f0", "sighting--a4b640b8-2232-4482-b03a-a271f69cfc9e", "sighting--8ce6549b-7250-4eff-a3d5-8faf733ad7b5", "sighting--fb938e1b-dcfd-4ed7-83f1-da09ec5f4616", "sighting--a4fee00c-f282-43d1-b064-ba69d3f943c5", "sighting--b065060f-7f45-46dc-aa42-bbd6c777597a", "sighting--8bbe7755-eb40-4edc-957d-de08940df6f1", "sighting--1232d484-2971-4569-8d8e-dfc2109e2176", "sighting--818eb4a9-b950-424c-aca3-9392d66b8214", "sighting--e0d832b7-8854-44bf-9c40-7d2a90ce077c", "sighting--66e215ab-1a2f-4791-97ae-d72301efa0a6", "sighting--ed18e995-0f70-4b55-9c0d-721116d40ed7", "sighting--bc601853-ebd5-4782-8d4b-e9f6779e0697", "sighting--aca8e24f-23eb-4e72-ab59-b6041a46d7f6", "sighting--65de5ea2-a920-4ef1-ae5c-f28b43e3d23a", "sighting--e6cbbddd-e19e-4798-9105-04fc6085cbc6", "sighting--e02b7297-0d01-43c1-89b2-bbac71ba6e67", "sighting--b6a3e7cd-b7cf-46c6-ae5c-9508a68607e2", "sighting--9301a3b9-d006-4827-8d93-595d3c099b18", "sighting--e8bf377f-380b-4a0b-a868-3cd138cdf721", "sighting--11841363-f98e-4794-9720-c4a2d02e4c87", "sighting--73d83a57-8472-4f30-8fc1-85347cd4eb92", "sighting--54dc438c-12d9-4fab-94bb-0f7d8c34bd2b", "sighting--d1f9a9a5-0628-4f30-aa7f-0151ad8cf263", "sighting--e8d99406-a111-4531-b0a9-e6e3c72be310", "sighting--c6c1a45c-a504-4f65-872c-a6ff8480ce96", "sighting--53db1af1-238d-4875-843a-c19e126c9a44", "sighting--edfd08fe-46cb-4e50-922e-424aa1b7383e", "sighting--9c4acf73-7481-48da-9486-c2cae78d883b", "sighting--2062681b-90c8-49a6-aa6d-0596cfda2ecb", "sighting--7df83bec-d134-40fb-bf2b-c6cac72c7540", "sighting--d606ed2e-6dbb-424d-8144-16f8e252c264", "sighting--11b38f77-f186-4db8-88fb-ed1b5843c5d8", "sighting--aa4276df-5b35-4691-b3c1-5f4f23ab1aa2", "sighting--e4dc989c-f359-4489-8dff-cc4a0be1148d", "sighting--0fc42675-35e5-4238-b696-35633abd106a", "sighting--2a615674-2149-48b4-9ed6-2432b13d4181", "sighting--e3d22edd-1796-49aa-99b9-bd9d718258a8", "sighting--f255349f-37f4-45f4-bb8d-29b72a3d2276", "sighting--3f430c0f-8fff-4270-89df-2478b66361dd", "sighting--1e27762d-fcac-47f0-a5fb-468a1b9f8ba4", "sighting--4b955444-b334-48a8-9cfe-8c9916325298", "sighting--6b665845-1ba7-4a45-a759-d44e06310ca6", "sighting--2fa4cc3d-a06c-4a4c-99a6-1cf45336a72e", "sighting--a8f81a53-9389-4e0a-9f1e-543d9ebb5116", "sighting--f25cff65-7f05-4ce2-ac9d-43d3e721f1e9", "sighting--bd9c0bf2-2f09-4140-a665-55a7ba0b4043", "sighting--0b19f9b9-4467-4157-b65f-347a36ab74a0", "sighting--a7c5f5ea-9743-40c0-9b90-a9d19ba15b61", "sighting--a27fa1bf-8e0a-453a-ae47-27b319576099", "sighting--72411281-8eee-4fb1-9ae8-9dec501d87cc", "sighting--ab867bbf-c958-4c0d-9e24-4d8d60f52d7e", "sighting--6a99b731-3f86-43a3-bae6-8e25039703d2", "sighting--173de51c-4b71-4e88-b5b7-9dc40cd660b2", "sighting--3025ac5b-1469-4055-8ffd-da67f556c36a", "sighting--299773d6-1d26-41fc-a1c7-9b2bbcae96bb", "sighting--a3836444-ab02-4a88-a389-0ef2583d60c0", "sighting--c9f6e61f-7e01-4b41-80d3-1e6d423ae784", "sighting--8908dd33-34c7-4f5e-a4ed-b8a11157958b", "sighting--72d46dfe-063d-4535-b532-6f3dd46b3e52", "sighting--06b019b0-2eb6-4b72-8087-98efa662cacf", "sighting--93bae325-8bd8-44ed-b0c8-0b7ea9dd6adb", "sighting--8362f9ab-544e-415b-a80b-6f0d56fd930c", "sighting--3e9ce5c3-6f3e-4745-8175-8981288bee3a", "sighting--97fe49bb-de95-4f10-98b6-fcd9fccee5f4", "sighting--b3e75218-fae0-4e6b-ae31-0fb302d29ddc", "sighting--114656ff-8b67-453c-8982-785cd16206dc", "sighting--69dd211c-fa07-4c03-8ac3-a677b7741c4c", "sighting--e33580d1-6fe9-4d5c-a948-9d943c0ae617", "sighting--dba5baa8-85b1-4be7-9917-916948e91724", "sighting--7ebcf19c-3029-41fe-8474-5b1cb138f5e3", "sighting--c45dda70-bf10-43c5-9942-369c85866c4e", "sighting--2343a85a-82d6-4995-9fd3-4b07231a3696", "sighting--d44414fc-a98e-460e-955c-273c68cec266", "sighting--d8e96100-ea0c-4022-ae8d-d103c4210349", "sighting--b98652bf-bc60-40fe-a865-f4792b2ce318", "sighting--bbf656b6-a5d9-4a06-b132-e3ce31070815", "sighting--69f23757-b930-450a-b3db-76266a377d2d", "sighting--cf0deca9-c7a6-45ab-b1e5-6faf90545858", "sighting--81fd37d4-aad7-4df8-8927-b45923b60a33", "sighting--8e3d3ff8-46cb-4779-bc0d-f1b19ebac18d", "sighting--b9d4c469-32ad-45fa-9699-0863f435f87b", "sighting--39830c44-175d-4ee5-8966-4646e3fb34e3", "sighting--31e76485-ddca-4517-88c9-06b4b2009d68", "sighting--b455bed4-7a68-4dde-a6cb-bba700c998ed", "sighting--fc75f9b4-d64a-4c12-8a5b-a69ab0e5867e", "sighting--31ebe9fc-3e53-474a-b9b1-c0e6a32c1360", "sighting--fb8e2925-4af9-4cff-af11-696c486c284b", "sighting--440f949a-1c8b-4a2d-b587-f674f921202b", "sighting--acf91288-2468-421b-8fb8-7c06c05e45c0", "sighting--cd19ba6f-d672-4779-b490-9e4e4dde7931", "sighting--8157d475-54b0-472f-98c1-572058f804c5", "sighting--24cbc0d9-f857-4ac6-89e3-47be6568e348", "sighting--7ad7eaa9-264b-4f0b-a70d-f0ca457fc80b", "sighting--3918961d-43b5-4fef-83c9-64ed4eeabf24", "sighting--3f23989f-8bb7-4461-b9ca-300e6dd1e2d6", "sighting--c375c588-c141-4207-9f28-80f7a8b2298e", "sighting--26c3cf89-3abf-43ea-9150-14e854b295fb", "sighting--4edbe3f3-696e-4f7e-9317-5049e51af4ac", "sighting--815835f3-27d6-4952-874f-fc0f210719aa", "sighting--696715c5-efb6-454e-b431-0204cf8525f6", "sighting--5ec7f0ad-d95c-4f24-bdd1-76bd9fc80944", "sighting--548f3e30-0d46-4b40-93a4-436b7f7faee2", "sighting--54a7c9a7-663d-4009-ae78-7bc22b55e6fc", "sighting--2b3b540f-0fdb-4b59-a2a1-0870cdeb09bb", "sighting--69e73522-5f42-40de-b644-fade3efdf929", "sighting--e97c90fd-ea5b-43b7-878e-ff68a9bc1d8d", "sighting--026bf922-925f-42d3-8b23-6aa0958f8163", "sighting--960d4808-f659-471b-aafe-5ec61af0ad63", "sighting--33d4785d-d62d-4677-bb52-7c9e127222ec", "sighting--b6eaeccc-2659-4a42-8096-e44b190b0edc", "sighting--a0593f44-c7a4-4eb8-bfc9-32cf5a95e661", "sighting--b259e8e0-b8af-4586-898b-9f115fe1ce1c", "sighting--2de568c2-b5d3-4234-9e0b-2cd32c2f6bbc", "sighting--81f5515d-3fa5-4974-a474-3cdeab2bbd98", "sighting--13908bfb-40cf-411a-815f-50b37af121b6", "sighting--502ec605-74a3-44ba-8106-7d631d4f0b61", "sighting--41b9bd3b-658c-48d5-87e6-734eb39aeef1", "sighting--98be0399-dc25-412e-9ab6-d9a1c25938e5", "sighting--25f4cda8-9013-423b-bbfa-7682b07a89f2", "sighting--56011cee-59eb-476b-98b4-80ed14aa5c26", "sighting--536dbfcc-a85a-4744-8fca-49286ba66a9a", "sighting--e0b6cd00-cb25-42a1-9b71-cebe72622cbc", "sighting--6b7e0f1f-5ed8-46e9-a34c-d6e27b601140", "sighting--40079d73-fd0b-40cd-9374-76ba4ec5794a", "sighting--5d69fec9-2586-4d83-8b89-eed06c1791c7", "sighting--c7ca524e-a4c9-4426-b055-70e47a5aa05e", "sighting--cef5b761-e1aa-4808-a27b-cf3e17190e8b", "sighting--8673bd39-7147-4320-aac0-790bee623412", "sighting--81d5f993-bbf4-4d5f-845d-66120015bbc6", "sighting--5ac9daa8-d1fe-4e4e-a0a2-9a5418e99afa", "sighting--9ba27c06-f900-47d4-a285-bce82ee634fa", "sighting--c00748ae-c7d5-4d5d-a4a3-f59278ec6cf0", "sighting--88cc0483-bb34-47a8-b40b-b8fa18690ec5", "sighting--5f4d6c56-cdb0-4eaa-951f-6886fdfcec5c", "sighting--11944551-7235-4bb3-be3e-18f4d845fe0a", "sighting--5d7f20ec-d41f-41fd-b0e0-5340cc01f351", "sighting--4b78c30b-8206-438e-a841-88c54a818d29", "sighting--3f4e6cb8-8c6f-4eb0-91c4-4ed334a7d2bf", "sighting--bbcb30b1-6efa-4ba7-bc04-c666403e6340", "sighting--5537f85a-7ed0-4804-9a15-d455f890a29e", "sighting--9f2398ac-99d4-45d9-9242-8a3aec6d62d3", "sighting--80e2a5f6-7379-4dfd-8de1-d8a5cd48489d", "sighting--96d945ed-9476-4c50-8ce4-b0576114a914", "sighting--7a02ca0f-4474-4059-9dd1-ba3cdaef5b87", "sighting--42dfe42d-a1a2-4246-8359-d5010acd97a1", "sighting--1ab17196-7f34-4ff7-95f5-058db490f1b5", "sighting--0cad679b-ac89-4ac2-a52c-6846bd2eb5d9", "sighting--94070ce0-5247-4985-a05b-8631a136547b", "sighting--0916d227-1798-49d8-9bd6-8eb2125313eb", "sighting--dff5e4c8-84c8-4602-887c-5ef69f9a4118", "sighting--d5ee0b81-eff5-44a1-8656-51c80ab52e8d", "sighting--09dfcba6-a1b7-415e-a093-446ca3ab7694", "sighting--dc65a0a0-b190-4922-b9d4-6c53a25efd0b", "sighting--9735c944-fd2a-4b19-83a1-60fbacff32af", "sighting--42087232-1361-41d0-ac5a-8ed5e87c390c", "sighting--3e8fd7c5-5ff2-4e0a-a4d7-7be3bf6b8381", "sighting--8f7265cc-d1bc-4f04-af34-363c440766ba", "sighting--3b565aea-ccb3-41ff-ad65-7cf14706819a", "sighting--54e6c469-2527-4ed0-827a-1230b48b0aec", "sighting--d62ecd9b-929e-4e90-9076-61c31c05d15b", "sighting--69068bb9-89e8-4fc5-975b-5ca94597fc4b", "sighting--123a7bfa-7911-4d92-b261-e93aa8b79c78", "sighting--0dad28f3-bcfb-4ad9-a60d-58c5f73e1881", "sighting--4dec1e38-9cb0-43f1-938e-1e60ef088d1d", "sighting--640a4582-52c9-45db-9aac-7d59ce5e226f", "sighting--859bae6a-c88c-4dae-ac12-3a0c0ced5ff9", "sighting--eaa29fb3-0b11-4c25-9770-57f91cd2ca41", "sighting--aa4ae5a3-56ea-4662-b888-100ff2b10bba", "sighting--f367c3e9-9994-4342-898a-02209a4d80ef", "sighting--6bd56004-cb8e-48fa-befc-6437eb548fb2", "sighting--427a7c27-9d80-41b6-bd4a-2f4e594d8029", "sighting--bd2ad564-43b1-4239-b9ce-7b78b94a5bb4", "sighting--f463804c-d54c-45fe-a0f7-7fc2a5fcd819", "sighting--3144a329-5bbe-463b-b643-d2d6fcae57ac", "sighting--8ca74b36-0088-46de-8889-e9ed462ce262", "sighting--43d8570f-176e-4955-b003-219e76e9e600", "sighting--5a5af8cc-3c17-4896-b4fb-e5e74bfca6c3", "sighting--5582f8ec-7eb8-4447-8963-7c0a466e9102", "sighting--360bfd2e-36d9-4b2d-8f18-42108d5831d5", "sighting--1312df51-0d82-4cc3-9fed-e886cf94a9d1", "sighting--b409bcaa-57ec-4507-abb6-6d465e0988b4", "sighting--d8aeac41-a076-4f3e-8491-b497500839c4", "sighting--c1f5e61a-300e-4724-b7a1-394c8a88fc87", "sighting--6f665022-b0cd-48ac-8b24-d447f404b31d", "sighting--bc813743-b1f7-42b0-a99d-ddf6a70587b1", "sighting--a065189a-739b-4e01-89fe-5e98d515ea5b", "sighting--6e63c13b-9ae2-4dec-8284-166c7e8ecabc", "sighting--1bc6e697-bf43-4d75-8f4c-d579a7128df1", "sighting--0c75ba6d-744f-47df-882f-45030b11236e", "sighting--ebdc5129-09bf-47e6-a167-aaea9b76c158", "sighting--b898ddd1-8e44-4850-bd7e-fb327e2ca1f9", "sighting--d408e75d-f95b-4126-839d-c33ea441a7b0", "sighting--43c950da-c920-4926-926b-9a008140e7a2", "sighting--204ca791-2a83-414d-a5f6-34ac5c4423ce", "sighting--db3f2bb8-e339-4b07-a5a3-e81b1f8e0381", "sighting--11643ac1-23c2-4155-a15e-f0c7b660b2e8", "sighting--af2230fd-8cbd-478b-98f1-b39f30c2e639", "sighting--6871fd2a-4ff4-4b92-b02d-77bf3076d6f5", "sighting--700b6cd1-4a7d-454e-ab83-44b3b5b90642", "sighting--25a57504-bdaa-4041-9185-967e4c3e6aa2", "sighting--1b06589e-8d67-4a6f-b1ee-97f20052cddc", "sighting--5f97b9d3-29ed-44c4-8f5c-eb49760037bc", "sighting--956ec475-53a8-4fba-b4bb-0397a077f2b2", "sighting--7b1c3654-9051-4133-845a-0c7d51e8a2bc", "sighting--b852fac1-fb8f-41ab-9c8f-aa25cf6b489f", "sighting--34252314-456e-455f-907f-7e569f01a4a7", "sighting--1941ad01-8165-407e-a2d6-2fde02b6cacf", "sighting--275db7b4-4b3f-49d7-8900-2574d154678c", "sighting--e9f51747-a73b-4d47-9df1-012679198d05", "sighting--4d81e49a-05f9-4996-86ae-5f97405d22b4", "sighting--c18fff6d-8cd4-404d-a61f-e5a60111f5c1", "sighting--11f8c5b3-d909-42f8-91a7-38c7c05ca6e3", "sighting--9e8f778b-b8c6-4fe0-8d7e-03563d7c1666", "sighting--adabbdec-69ec-4a26-92e1-b6b7c9141f3b", "sighting--14c3ace7-9e79-4a6d-972d-ca4a430ba30e", "sighting--a01cca8d-7454-4653-b2df-ee8bc935b0be", "sighting--80cfe595-5d85-4544-8f8a-1afade1e238e", "sighting--bcd9e49d-9a79-46e6-a682-c67ef16b1ef8", "sighting--5384eeb3-09b4-41ba-84ec-bc36cd20d7ce", "sighting--90ff96a3-c25b-4d64-be72-163b729f0c9f", "sighting--73939a64-2a1f-43fa-a942-9837a7ce0098", "sighting--3cc65f9e-b2e2-42ad-8e73-ee902d900f22", "sighting--6af9188b-22ee-45e4-92a2-198c217f9f5f", "sighting--7ded3bc4-11a3-4835-9e49-4172b5f29b91", "sighting--6dc171ac-99c3-476e-841a-c8ef8fced407", "sighting--a1705537-b49d-4266-9d75-132ab31cf007", "sighting--a4bd95f8-1188-4142-82ba-55e0d509edfa", "sighting--de3c0874-0171-46be-bf44-4756cd5a30a9", "sighting--93b0d389-049e-4b6c-9f59-2359509057b7", "sighting--75467f80-a8e1-4b27-9fa0-c36aad141fb6", "sighting--1e3642b0-f036-4c13-b7fa-9b831461f469", "sighting--9e786f30-a62b-4380-8b6b-6fd3b9706f74", "sighting--547b2c85-2b68-4644-8a76-b5dd6bdfd3f8", "sighting--dfe455d7-0bac-4a70-94d5-0f025fad9929", "sighting--6b2825ba-e08c-46f4-b50c-f5142d160019", "sighting--4fc97a0c-7782-45e9-ae79-f9751c10f612", "sighting--dfae9f30-204c-4794-b417-c6191f9814a5", "sighting--a097b266-5a13-4108-8f32-3f4d045decff", "sighting--8f3e3dfc-fa47-4ceb-a95c-e54e44fa0977", "sighting--e8693372-ff3d-4769-aba1-57f01403923a", "sighting--3bb7f2f0-5061-47ff-8748-fb4dde7b0ef8", "sighting--c91d13d8-37dc-46db-8a95-e57ff9188bb1", "sighting--b500c55c-9800-406d-b598-abd5ba18ef66", "sighting--873c15e6-6504-4541-93d1-cd56bb0396dd", "sighting--f6d7c983-f589-4dac-ab71-aca40bcea3ec", "sighting--ec27686f-5c9e-4a24-8a20-bec74368acec", "sighting--a9d0bad6-44d5-4fa7-b79a-f8f4b0becc3e", "sighting--f21b263a-564f-4d27-b2ef-b97e120238f5", "sighting--ebd08039-d628-4155-ba5a-754376a700bd", "sighting--d82cabb0-64d1-4710-b653-45fe57f69574", "sighting--a045637b-633f-43ea-aa8f-c413874d1581", "sighting--3877c25a-09f0-4c56-a7ef-06e8f4e31188", "sighting--cdf90eef-2347-4ec7-affe-819364e0a1fe", "sighting--86a3697a-50fa-4cc8-a547-606d2645b03d", "sighting--c0d5b832-fb80-402a-8ad1-9017f297c0f3", "sighting--4cf7bed6-a088-4654-b488-6cce6946b338", "sighting--759213a6-44ba-45d3-856a-5bbe84d80a96", "sighting--09004dea-a38e-4d62-ba22-bcdeea2fbcd1", "sighting--2d2170ec-43de-4959-b0cf-0beb1515c9ca", "sighting--6e8fe127-f20e-4f7f-b6fc-f7c0ea52ff33", "sighting--dc0adc22-9237-4280-b8bb-a1c11f6464ba", "sighting--3d2bd0df-5a0b-4e8d-94e4-f0e108b8207e", "sighting--01475f28-c067-41e7-96ce-f13b4639ac60", "sighting--15d04336-e747-4522-94fe-176864969014", "sighting--0164940c-1ae7-4a86-8445-08a317a81f67", "sighting--a0dc18fe-92cd-427c-b91e-6fae0f7fe1b4", "sighting--da89cb5d-b408-44dc-a3a8-c9616f2c6910", "sighting--c8abea68-e10a-4ece-a51f-b1b575c8bbdf", "sighting--3fec784c-a495-40f4-8e14-31046264cb60", "sighting--c1ffde06-ebea-4888-9128-d27a34db9f0d", "sighting--50cb6e48-e26c-492c-b121-be402cb65855", "sighting--b219abfa-04ff-498a-9d32-a5c15c1e6920", "sighting--3ce54e57-4ea0-4fde-a932-1a9459e9f60f", "sighting--5f8c222e-7312-4f8d-a831-fc3eb43dadfa", "sighting--7161b24c-17e0-4c06-9402-e3c1e202493a", "sighting--5cfb4f81-6813-4b8e-adb4-8ba6335cd4d5", "sighting--937aa092-ce5d-4677-b472-a95bc70d03af", "sighting--77bc590b-7288-4a1f-9af6-2c69e9c9ee4c", "sighting--b56829dc-356e-43a1-b797-ef85b897c2ac", "sighting--a95b63d2-aa36-468c-ba8d-4991c80515e5", "sighting--7867385f-5ac4-402a-a562-d8d0b1e7920d", "sighting--0065f8ec-7b06-4ff5-8033-a2cf52845eaa", "sighting--2f37001e-f7dc-49fc-a686-c7b33041b11d", "sighting--f202af60-1e9b-46c1-9d82-bcf0331f42d6", "sighting--3efffdce-6e6a-4e16-a3fc-f2501404ff29", "sighting--5be31a03-08aa-42cf-a887-4b551b0772c1", "sighting--aa1bc2e4-24aa-47aa-ad8b-30fdef927937", "sighting--658481eb-2152-4d54-be89-d3f3885d3290", "sighting--50a56321-a113-4d86-bd0d-0783b1e47645", "sighting--e89c6547-fb6b-4a7d-b11d-ff82c1539f6b", "sighting--15e1d928-fa11-472f-a16d-79f875b6e040", "sighting--c09707e5-2434-4a08-8eec-6a32bae619e3", "sighting--7246e682-b6b3-4942-b5f4-7d6292c789e6", "sighting--d33d76c1-c012-4f44-a6ec-3393606b674e", "sighting--e8bb0ac4-0c85-42c1-acce-50aa88915027", "sighting--844d37a4-ae67-426c-bf10-3402cc6c4bfd", "sighting--25666af4-57b5-4178-97d9-f9048d2a8225", "sighting--d00a41eb-b97a-403f-abfc-9a4b41a8826e", "sighting--5bc4a9d7-5c5d-4438-b3b4-39c372d9c692", "sighting--492f4fe9-21d4-45af-a7a9-ab94080f0667", "sighting--2e6bf148-edaa-4c00-a72b-bbcf1f1797da", "sighting--d0332ea6-749d-4704-902b-9bf20248b815", "sighting--81e830dd-afb4-45ef-bc08-e80becad4065", "sighting--0b06af05-962a-465a-a4bd-d0bdde25f833", "sighting--e57c38c9-2399-4f05-917c-7f675971883e", "sighting--e8035bd5-0a51-422e-8d56-ebb55ed7b97b", "sighting--2cde1994-f8b4-402a-b24e-92e702926a1a", "sighting--d32e5c8b-6b70-4785-824a-a34e85f6ff92", "sighting--bb4be5bb-86ff-40ac-9f24-b9e0899ffd28", "sighting--c50e8211-ddd4-47bc-9ce7-0fd80f8382ab", "sighting--885ff9bd-327a-4407-a6b8-98467586a044", "sighting--bdf60510-74e8-44bb-a190-69900ec29eeb", "sighting--9b5da3ac-117a-4561-9793-c2d7cd3d0ee5", "sighting--88f8b811-4cfa-4e44-a3d0-dcd425250bde", "sighting--37561120-4467-400e-83d4-ab35fbb7cb03", "sighting--db543f35-4b80-42e5-8324-c4225b8efdf1", "sighting--2b1527e8-e220-4e28-8546-3bd47b5ac839", "sighting--ccc28820-5a8d-43a7-8d5e-8f21c9e9ac41", "sighting--d6d40cf4-93e2-46ff-b178-3431313b46c0", "sighting--ed7a8d62-3a33-48fc-9cdc-d6790e8642a3", "sighting--a767d821-36eb-4705-a352-823bb6f36426", "sighting--4a4db1ad-08df-48ea-88a2-cf7756823917", "sighting--341edaa6-26e6-4139-8b92-f0bcc99b3133", "sighting--62198db3-32bb-4652-a29d-d30ce7d4dc32", "sighting--52c5da53-f417-40ad-b58a-1089655951bf", "sighting--80cf53a5-5152-4d9a-a146-79c02698f54a", "sighting--79396a97-dbbb-49a5-bb3b-f983bd5f8ad2", "sighting--975f4ead-3453-4eed-ae8c-a4d7c830c33d", "sighting--235c341d-2f15-42b2-81aa-22f5ca4f33d0", "sighting--4b9908cd-ae34-45e7-9be0-83f20f3dffb2", "sighting--cda282cb-9a83-402d-b771-05f715829ee2", "sighting--b4196b29-d9a0-46e8-afc3-b4a6c071a4bf", "sighting--aa8fbaca-2287-4793-be92-87e48a35ef32", "sighting--f6c7de76-86f6-4820-918c-945c293ce6cd", "sighting--ee845434-12ef-47e0-8aaf-36c43dd425b6", "sighting--c65affdb-d8a0-41ff-b6ee-73c539da8f2a", "sighting--13feb749-de4a-4bd2-995b-c308ac965b56", "sighting--1109586b-41c6-4164-9ed4-96f733223a5f", "sighting--1ab9ef8e-b544-49ae-9b59-88fcb21a3ab3", "sighting--f204e297-a330-40dd-bb45-090728633f2d", "sighting--aaeb610c-127e-4dbd-8ede-6fddd26373ef", "sighting--f47e958e-0b0f-42e0-8923-242fdc9fedd1", "sighting--a36a2de4-65fe-454f-891e-25c9ca596397", "sighting--d50e0c0d-bd5a-47db-ba4c-2530289ab522", "sighting--af429b66-6a5e-479f-b46f-90852492ced7", "sighting--4cf6133c-3804-44aa-8e2b-505cbc4e10e2", "sighting--f555715d-b716-4b28-a455-f575809da31a", "sighting--7067420b-5427-4b29-a930-731c781f6eb6", "sighting--a56652bb-2fb7-403b-aebe-0089a96f3f50", "sighting--9a297a1a-7b09-4cd9-9624-010de8ce294a", "sighting--e6ec7b7a-d4db-48da-a5d9-25748c67cb36", "sighting--ed73ffcf-7694-4cc2-ab00-a51261918d97", "sighting--e06141ce-224a-44d3-8269-28025c4d37ec", "sighting--c447d79b-3b29-4a37-b7d1-5cb03c8b7b99", "sighting--9984ea15-b71e-46bb-beed-27e7d1c8a427", "sighting--1c96a217-79d6-46ad-a7ff-a0bd5bc42119", "sighting--fdf15fe0-703a-445b-ba01-c5c05b13dbd9", "sighting--d92db0f6-e3e6-4987-9d79-9f0f0373e907", "sighting--5438916d-6599-495f-a594-7caee116e7d1", "sighting--74ce12d3-d8fc-4a73-89f4-87a5b48ed8ee", "sighting--cbc235d5-5bbf-4632-995c-687f1747ba52", "sighting--f05c4455-5ae6-4e99-9c2b-dc2a39d6cade", "sighting--c0a368b7-8dce-41ca-8dd0-f0e0ba98f140", "sighting--8a0d7b1d-2aca-4adf-a944-fa79cbeee93c", "sighting--cef1b96c-98fd-4b0f-b63f-7607a0f788d9", "sighting--1a8ef51f-2454-4de3-9c45-016c83793434", "sighting--cb5e57c3-047f-45d4-90c3-07e1ee92cb33", "sighting--196379f7-7ccd-4e52-9b6a-e5f2c255a946", "sighting--637f2b18-1319-47d2-9e7e-476c42dde85c", "sighting--ee96de5e-dea8-424c-a60a-a487296ed734", "sighting--175fac62-2a23-4115-b2fe-e8cd2fe8db8f", "sighting--df53100d-38fe-4b90-9f56-f342eff84893", "sighting--d7b93781-84ce-4dec-8d59-07cc332ba884", "sighting--7a07253d-9a16-44e9-a9dd-887b9752dfb4", "sighting--eac3a49d-d3e9-4bcb-bd6c-991bddff9172", "sighting--b9969b01-282f-434c-b00e-e45d953969f4", "sighting--02f6af13-4591-45cd-a1a6-10aa39b5e475", "sighting--d9fcec67-ffe9-4814-b8f1-1f6b4496ea9b", "sighting--ad631ab0-eff0-4b5f-802a-01924fed44fb", "sighting--99771168-b311-4675-91ac-18596357d0e2", "sighting--7d7beeed-757a-49f7-872c-efc0e27a30ff", "sighting--8a0e17ab-0a27-412b-b638-0b7314f247fa", "sighting--d57be1c6-54a7-4a5e-a34d-bd2dda4a016b", "sighting--9ca1b26c-4750-4711-bd13-e8dc372f9051", "sighting--49ca2c3f-d91a-4769-b9cb-010cf1101fb7", "sighting--195a2cd4-f73a-4e17-a099-7c93decbc863", "sighting--9f16b6cd-55a3-4c65-99c6-a28fc6552d77", "sighting--bbfae888-8ef3-4dcf-b8bd-8b655925aa7f", "sighting--47bb1fdb-c1c6-45c6-b0eb-d82af0b75b98", "sighting--c405e302-4705-477e-817d-743fef092335", "sighting--77f1347d-1f26-4188-b765-80bd032ee455", "sighting--7a30e891-beaa-4aa7-81ad-dc3e453a1b74", "sighting--74d3b7b7-df4d-486c-a62f-f51c05e4546e", "sighting--f1106a55-0ddb-4332-af30-6498dd2071a4", "sighting--d810ad97-756d-4a93-8c37-c5ee4088e447", "sighting--7aae15ea-bf0a-4713-805f-cf1afe14f5c7", "sighting--75ad8bb4-cdaa-4212-b5ab-0a361ed04d8a", "sighting--447c8198-38a5-4e49-8283-c3837333df80", "sighting--244cdce7-351b-49b0-acbd-0f4aa3106838", "sighting--b4927ba7-79f0-4e00-bcb3-832f548c22d1", "sighting--f34c4c2f-19f0-4c1f-b7d1-bbff40374953", "sighting--0664c773-045a-4749-a516-ecd3477d31da", "sighting--a8d75529-4068-4ac8-ad36-f26e5ae1ba26", "sighting--744b8d7e-d62f-4d16-bdb3-f647c4dd7a6b", "sighting--59a99b62-8668-40da-a223-fbb773990e1f", "sighting--6de3e5a0-8af1-4f2c-88eb-914b58af58e1", "sighting--b798549f-4ab6-4361-8cb1-6813cb6bd7a5", "sighting--0088948d-1ac4-4e41-9274-891da05a575a", "sighting--8ed13099-6033-4251-ab8d-a72123543bd7", "sighting--fcad9647-3d9d-4e21-8930-705533e78a4f", "sighting--7c3be37c-de86-4346-bf1a-b234e79fbbe8", "sighting--d265d1c8-eb52-479e-b4e2-4c0aba3fd236", "sighting--2568b904-1499-48f9-82c0-29c09dbaff7c", "sighting--9cc57f44-3471-4a2f-bc1e-7f990b93a8a1", "sighting--1efd7596-bda0-4145-88fe-a9b28a8222a3", "sighting--866148f0-14cd-4c61-b093-6e43177d007a", "sighting--f26bc693-742d-4bc5-9eed-b01d4a69df44", "sighting--7bfe70f4-0b5f-4ac1-ab13-1b3bf0861a62", "sighting--3cfbf3e2-80be-4df0-91d7-7b5202183855", "sighting--35751abe-441d-450a-bdbd-03bc9ea2dcb3", "sighting--1c95e425-ed9f-4063-aabe-68aa3be951d0", "sighting--f122d183-686a-485d-8b63-0e3c8e5d301f", "sighting--c21c087e-376a-44d9-bab7-748fbd05eee0", "sighting--6f004eaa-d22b-42f6-a19e-32bd074fbbf3", "sighting--35bf2e45-b749-4fea-848f-b3ecd9e79261", "sighting--fd9f4cd0-fde3-4722-a8ea-efdf257fad54", "sighting--b9e739dd-cc50-4304-a9f5-6ca9791682f8", "sighting--4f74b237-1281-4792-836a-e1e787a95ee8", "sighting--ea13a78b-612f-40c9-848d-6d29c82df7bb", "sighting--e41da6e8-f2c9-4774-b7fa-74883e6616db", "sighting--0b4614e3-3cd7-4283-9a63-c672b2116a97", "sighting--8a6b7375-2777-4912-8607-ee75a1ef35c8", "sighting--738ba3c6-02eb-4c5d-b371-ad2bddf6a6ad", "sighting--a453b948-36ec-4e57-93e9-62e5868e4b88", "sighting--af1134fa-7345-481b-a47f-ca4178493624", "sighting--4f0d1b17-2c95-4c1b-ae43-2999f8cee0c4", "sighting--700b1d5a-e6d6-488b-8137-5d49d6a670f5", "sighting--508c9235-27d5-4024-8e0b-3121dbe301db", "sighting--67c59561-dbd3-4aeb-9ca3-9e92df68660a", "sighting--2b61146f-2566-4b7a-928e-fb7a627a59e1", "sighting--3694abaa-6a04-4c26-bf2c-e85893d67824", "sighting--b5fe9a89-668e-4db5-ac86-2f5983c6b4a2", "sighting--dcacae84-e843-418d-ba7e-b7e6380fc424", "sighting--430a6219-52fe-413e-a112-dc771b68886b", "sighting--60a12a3d-5a31-4610-8a04-463ae0f59474", "sighting--026c39d0-18f0-40a8-bad3-47f897e86320", "sighting--760313a7-b06a-4ced-ab8b-6338a6a1cdf3", "sighting--2ce12e73-f661-4e69-8c87-ceaf8a337bbc", "sighting--6edc42ef-11b0-4b2a-9340-c15fcff8dc68", "sighting--c226735b-78db-4060-ad30-992c9bdb36ae", "sighting--cf90d869-05ef-4ae8-9730-659036068b4a", "sighting--2f21f744-ec52-49ca-8328-cf4d63d23702", "sighting--f29db318-9a54-40aa-a840-038550f1f74b", "sighting--e595f1de-cfc1-4494-b857-b0e9173b389f", "sighting--23df6ec8-f777-4a7a-98b3-bc775d56d63e", "sighting--ff521188-c692-4fcd-87d0-518869cf8e8f", "sighting--d49b10c5-14d3-41c4-ad06-e104d9e8761b", "sighting--28421c37-e7a7-49ed-8f03-3d046de3cf72", "sighting--e45d5892-df76-412f-88b2-db1a6ca056c0", "sighting--2fe775d5-d3d9-4fba-bd8d-9eb7fcdd2289", "sighting--9a630845-469a-4081-a59f-34dbb1cba8ce", "sighting--e2169745-d5d4-4f11-aaa0-83c7e276b089", "sighting--4df9707a-97ae-4758-a737-5a48614e6e2e", "sighting--7bea4e0c-6f58-4cd8-9e92-59f83ca8c4ec", "sighting--8f1d6a8a-1a62-4e53-9197-e85bad18d3f8", "sighting--df5c72f6-9470-413d-a384-c18ec2f950d6", "sighting--58348570-6041-4325-9f6a-da7bc83ba4a1", "sighting--cdaf2e8a-60e0-4d35-a55a-53f5500ea7c0", "sighting--b83533c3-4a2a-4b8c-8748-405bd76f37bb", "sighting--683f4628-9087-4e62-8ae5-00d5ca0da5e9", "sighting--d3c66120-e107-4504-8c2d-54595bf02ece", "sighting--31c164e6-d7fc-4f3c-b604-acc5bc2b3129", "sighting--0eb37f44-6029-44a1-8301-b733232d60c5", "sighting--fe519a85-2783-4916-a0a4-11521907149a", "sighting--7850fac3-db56-4daf-a8c8-f960b4dbb75a", "sighting--61ff408c-1ba7-438e-b722-7ff7c606297c", "sighting--d1e7bdc0-83ed-4c92-be17-7b32b7ee8e4c", "sighting--149c0d04-b584-430e-9531-b7b5fdc3be0f", "sighting--c6b2d9b0-2012-4b8c-ade1-6ba06d6e5d0d", "sighting--c1ba4d04-7e60-4fbc-97e8-387d3d0b7bb1", "sighting--069c5a0f-ac12-44af-8e8b-e14b941f3de7", "sighting--25a616b0-64db-425c-a97c-e309ce514a50", "sighting--7587b1d5-1973-460d-b30e-c483b84db749", "sighting--87867fdd-2817-4a77-bfd1-1735029b1fa6", "sighting--8e864ff6-6a54-4e1d-b2b5-480972f9b7d6", "sighting--1a314d1f-352c-419c-9d85-67e3bb2b5a37", "sighting--1a2528b2-b41d-4360-a0c7-a45fd9b79d94", "sighting--60843941-e41c-4723-9a55-cecc7ed582aa", "sighting--04a27f0c-17dc-489d-9796-61e807e910a5", "sighting--0c161fc1-8b5e-42c9-b0ef-7996bd67f5d0", "sighting--a3f39c55-1196-4563-b0d6-a53f93b031f8", "sighting--72881bf6-4f65-4af3-a646-532de4184f94", "sighting--33cd3a21-6a5c-41b1-898b-9402d075bd3a", "sighting--89426252-d27d-4e91-8eff-892c6b9f10ee", "sighting--fa495602-be93-41f7-b373-eaa0fb607c64", "sighting--c7317ad9-bebc-4237-880c-ffbb5c940146", "sighting--fa40c61a-4e90-4e9c-811f-5e15a9b0b55d", "sighting--919b454b-5fb8-417a-a9b2-b2e17591247a", "sighting--9e94ff4e-8a1d-4ed3-9028-9376464e27df", "sighting--09019b9e-c77b-4cbd-b5ca-1b3365763eb5", "sighting--9d6a095a-d804-4481-a795-1aca957d5270", "sighting--3dc5adf2-391a-43b3-9458-b87b43e1ce6e", "sighting--7b339273-a632-4654-9dff-0d5bee8991ac", "sighting--51f77fc0-5aa8-4371-9eea-7cf79292d4f5", "sighting--50634d8c-f160-44ae-8e4f-0b354b5ee7fd", "sighting--1ec4276d-1cb4-45d9-bb7a-08277ecde372", "sighting--0d3bf08d-a973-4aac-9406-21e87cc3ee41", "sighting--6425f548-1b82-4d47-8ce0-1afe38b1d969", "sighting--9517bb5b-9a05-408e-a9a2-4df95152ba15", "sighting--c9935b4c-cb60-4876-abf1-462d765a3863", "sighting--d558e96c-2af9-4b9e-81ef-0eb0ee72ef42", "sighting--25e0fdd2-590f-4284-a505-879ef9e32568", "sighting--52502391-d7b1-4d28-92ca-dd1077cf4d9c", "sighting--b91aaec5-c98d-40fa-a102-cc5c1bde06d7", "sighting--0b323d61-db18-4ab5-9225-0686945021a6", "sighting--c05bbe01-3e30-4279-bde8-bcb159c5ec03", "sighting--4dae9858-b452-4b89-a3e5-d3544c203126", "sighting--6caf6cad-9490-4d65-b522-096d129916ec", "sighting--1e73de9e-ebf1-454f-9ac1-c0a578d04c7c", "sighting--ff6e439b-a5f1-4a00-ac8f-2dc47983c569", "sighting--f168da80-c225-418d-bda4-03bbef5c09ca", "sighting--73cb0091-7a6f-4577-bfe1-c6cb75dbc5c7", "sighting--a899d4ff-630b-4678-87fc-c2a146549c2e", "sighting--e9d26b3e-7ffc-48c9-a476-78510cf0cf8c", "sighting--dae53fca-a9cd-482c-9dc9-b10aa313315d", "sighting--f128c296-c4d3-4bec-9889-6229a6457e7f", "sighting--86d2fe2b-b0aa-46a2-a757-7c7ec64205df", "sighting--e04e3773-9d35-4ce6-a87d-acaa29ebc4ec", "sighting--1b7f54bc-6c56-4d33-848d-3487a2f3a727", "sighting--4ef77276-f86e-400b-812a-d109441190ae", "sighting--87f13a3d-2d9b-4a46-a609-c9bb3162686d", "sighting--52e0e92d-1926-4200-acb6-6a58a3c3026d", "sighting--c5c0080a-3353-4f10-a244-f3f0247327c5", "sighting--7dcab0a4-eb35-4f88-bf3f-966ade956063", "sighting--00fa0a13-85cc-4357-a6f1-0e4574ab396b", "sighting--6fd012fc-e79f-4639-a2bc-116276f527aa", "sighting--82a03223-4686-4c13-95b0-e753eb3acefb", "sighting--97905d23-00ab-41a6-a7f9-9cf41e0a7876", "sighting--cb39b28e-bdc2-4d4b-8fce-1e38c53e5a9c", "sighting--ff469c75-9942-42b2-8b2c-445d84199ef5", "sighting--ecacb874-9d4c-486a-b4ab-af0a919a10f8", "sighting--8b40784c-f8dd-41fb-bebe-58fd7278ad68", "sighting--df64a653-f646-498c-a936-6331342352f6", "sighting--0bdc72ed-4e30-469b-aa81-53fbb50a48a9", "sighting--c5c6bfec-ccfd-422b-aae5-cecb1e70ca24", "sighting--35ca6e8d-63e6-4d0b-89d2-9286f9495832", "sighting--45ea606f-76a3-464a-922c-73166466898a", "sighting--df6b35c3-0f28-4b76-b7c0-a6ff4af57bc2", "sighting--2c43be48-1a2c-4e31-8340-c5d8473c33e3", "sighting--d0bde33e-4756-4776-9bc5-6b4ec5612e77", "sighting--a013b152-c6e2-4af3-b567-3a6d674fc453", "sighting--d4b567e9-7b84-466d-a09f-92bf9ac5e904", "sighting--d1a60661-7548-43e7-8f6e-3905d18f95e7", "sighting--ba1f3941-7584-447c-9736-7c768d8df7c8", "sighting--0d9bb59d-8ef1-4cce-ac73-ff78187bf0f6", "sighting--706267e3-e75c-4799-be4c-6053f5df3f9b", "sighting--2ace3a88-1d01-443a-b504-ea317d3cc087", "sighting--afa41ba8-1d69-4ac8-af61-3549fc0b4c2d", "sighting--7bdd1ab2-f44a-47ef-9173-72e30ef9a15a", "sighting--4b9ef368-fdaa-4e4e-ae86-507eaf6620bf", "sighting--29af48a1-3d12-4e4b-bdf9-56e6dd92d652", "sighting--2dc5c11d-a834-451c-9205-6f8623300101", "sighting--94d8eca7-6e46-44b9-9e29-0987089cb8f0", "sighting--22914821-03a0-40f3-86dc-8553217df3aa", "sighting--099e9dc2-08a8-49f9-ad18-a4d4a76afade", "sighting--cab1accb-a5b9-45d6-a7f8-5e0a973239fc", "sighting--3a3a1601-9a59-4ea4-90a9-b06ffec20ac0", "sighting--df8ef5e1-293a-41cd-a341-b595528f984a", "sighting--f9fd3802-9c8b-40dc-9574-3085e23182fa", "sighting--a1bdd691-835e-4e40-82c7-e93540a238f7", "sighting--385abfe0-c9ad-4377-b07b-07d42555ff2f", "sighting--233efb22-302e-4391-acd4-4ff38cd350cb", "sighting--872540cf-b4c6-495c-a357-c0c505733555", "sighting--dd6e0269-d6a5-46aa-b689-88eb5e45dd38", "sighting--9cf07b03-1c52-4383-89fe-88a514ebad72", "sighting--fbe7da56-7177-4c73-8d69-0f68eaf02328", "sighting--102697e7-23cb-405c-9a59-32d2635a4c84", "sighting--618707f5-8663-4e00-b9b9-fc931ad51f93", "sighting--998af544-33ff-4184-a8c8-88cc1bd87bb5", "sighting--fa0d0874-56fd-47fd-8fa6-e03d1ad6c283", "sighting--860db47e-88e2-4735-88c5-351b38f65cf8", "sighting--1f4c5cb4-4b7f-4c35-8723-184335d196ca", "sighting--6cd022f7-fbcb-43d2-b041-e175c8c69f34", "sighting--9d06b212-4729-4721-8406-cdb25b31ad63", "sighting--5d0d5fb6-44ba-4c9b-b298-782d67786879", "sighting--5a32f59d-62f2-44f9-a428-98526258941c", "sighting--6f6961e8-990b-45b3-979f-7a0300328a21", "sighting--1d093270-56de-44a8-bbcf-999cc3118cd3", "sighting--2510c7ca-1b29-4d5a-a32a-b3193adf006b", "sighting--0e8851eb-5fbb-4621-aaf5-80f960998bb8", "sighting--bf9a4a9a-23e2-452e-9e83-9566fe8fbd9f", "sighting--0b8c770f-e852-446b-9494-6cb8e20f6de5", "sighting--6274ecf5-a019-43b2-8f04-ea3efdf27d98", "sighting--7ac11c09-1849-4a69-aec0-60ec00fec0fc", "sighting--bf277cc1-5e56-4bbf-8bed-770bc82a25a4", "sighting--c059d920-0135-49bf-b882-eb9db3fe9938", "sighting--0efa07f7-a059-474a-9ed4-bbcd6d08c5d4", "sighting--1c3c7b22-2985-415c-8d1b-c392ef4b1a45", "sighting--eb90c367-d8bc-4d3d-8860-ba205514ac08", "sighting--6ace3815-7bfe-4395-85fe-09e060c40ac6", "sighting--91ae7249-5fe6-45d5-9053-bbeb9a5eb850", "sighting--370113cd-d3b4-444e-a9a9-77e452099671", "sighting--0373cf4e-089d-4402-ae03-c0f071b51353", "sighting--38d2242e-bc7a-446f-b2da-f0c2f493298d", "sighting--f3756926-750a-4d38-85f4-84c15dba819d", "sighting--88efdf37-79f9-4922-8b8b-3143258571fd", "sighting--41e8a409-9ef3-42cf-ade4-3411f62d1821", "sighting--8409c3d8-9823-4368-b896-4d6fbcf67b71", "sighting--6bfb44c9-90fb-4c64-85cf-3348f8d0449f", "sighting--7fdd6232-c063-410c-946d-1e1098f261e9", "sighting--be3956e9-25e9-4fd5-9a06-3a7478a7c84f", "sighting--7c4343f3-1a94-4dbc-b84c-ed3c325639f8", "sighting--52db835e-389d-4de9-a2b9-329b3a07b31a", "sighting--597bd110-fff5-470d-83a1-e6e4afc68ca0", "sighting--5ff0cdcc-fdc2-4f93-ba0b-498f001c1a1e", "sighting--8b497240-5145-46a1-89cc-6eafe9b51b07", "sighting--17b13705-e948-4571-9d88-31fca3d9226e", "sighting--ed82d9d0-6ac6-4c3f-8822-932001ededdd", "sighting--da238862-7166-4000-b7f4-9aff3ba9f8ef", "sighting--63ef730e-d2ec-4786-8e7b-5895413f5271", "sighting--bd2f3674-5d48-454a-a736-f26789e29ce8", "sighting--dacef4e2-3e4b-4bf8-b60d-ac135fe588cc", "sighting--7f1ff18d-2252-4119-83a5-d5e2fd7aac3e", "sighting--67194dc7-c5e4-446f-90ad-4f17025e840a", "sighting--fb9bcebe-1b53-431b-8a5d-5516e07bf538", "sighting--3cf02674-ce16-4258-be8e-842b47eb7822", "sighting--6edc52ae-93ae-486a-b696-d260f1200c7b", "sighting--fd748eee-73a6-4a81-b2ee-8f4816c5ddd3", "sighting--8d1cb7a9-0da2-4242-a9c3-29ac981588fc", "sighting--08775967-12c0-4ad8-bf50-6a61966f737d", "sighting--b59784f8-6868-43e0-b553-3c6dca8a7f02", "sighting--3cf316b0-9363-40ad-b83c-ee41e6d8c3de", "sighting--cea70be4-19b5-4b1e-8605-deddc9234d1b", "sighting--92533425-0c55-44b2-924a-eca63c22cf9b", "sighting--aefabe7d-8ab2-46c7-88db-75e14fd89e2c", "sighting--4a7c64a9-d58e-4262-bc25-a13fcd4bc09f", "sighting--69184a20-700b-46e4-baca-93576b490452", "sighting--b908387b-4072-40e6-b031-d3209a6a9701", "sighting--e04835be-586c-44d7-947b-ca7e9362cac4", "sighting--b49e4dd3-ed83-4d88-88e5-52cccdc47517", "sighting--4086d66c-e6a0-4930-80e9-c4e2674681f3", "sighting--65669350-7796-4727-8d5a-f20e4f23ab4c", "sighting--586106fc-d234-4770-9ab0-a1fc6fbcc423", "sighting--1c969bb9-bb34-449c-85fb-d17c9f8b6274", "sighting--b66a49b8-ad40-4b68-a0bf-9c7101bd9f9e", "sighting--a127b419-cc1a-473b-8059-adc8b63f17d1", "sighting--1a03f280-57a6-4de2-bea4-570be95a3221", "sighting--b982db70-8f09-4e04-a0c0-5f8379630b2d", "sighting--94f92434-97ed-46b2-aa0b-e20ba2f25e39", "sighting--841f99aa-ff4e-418b-b3a3-b769e256a555", "sighting--e27b0950-8159-404f-bb1d-47093f214a51", "sighting--f7e2e7c8-f917-4ea2-a12d-0d390a02cdba", "sighting--bf1cffde-ad15-44e8-abae-34b39eb6b1b5", "sighting--2042c45d-f22f-4370-9b69-4b86a1f3539d", "sighting--83b10c8e-8698-4b20-94a8-5b6b3cd51475", "sighting--469a92de-6679-4091-a493-3c605641b0c0", "sighting--44a54dc6-16dd-4627-8bc7-697c64698619", "sighting--df80fed7-2043-477d-ad9c-4f0592c8fc8a", "sighting--b98d9329-c64c-49a2-9c33-015570787588", "sighting--70a79e4a-b6a5-4753-9f7b-57584ad8b74f", "sighting--6126976d-2cf2-4ebb-850c-667faf9047d3", "sighting--02b00dbe-b0ff-4b7c-a89d-f47ab1b6da9b", "sighting--9dda0325-35e6-4b9e-9ea9-4c3047556e65", "sighting--97aa4a4d-e05f-40fc-ae8a-0f3a64efc113", "sighting--0a6556c3-d44d-42c4-ace4-d1f58a9f1e06", "sighting--1b12675d-aa21-408a-84ae-7c5d384d4f26", "sighting--7b204ae3-9946-4068-b983-412cd7235c9f", "sighting--92c9b4e9-0f94-4029-85d2-ba9fd2655e12", "sighting--6c92d065-8192-4900-bd65-4a22874a6969", "sighting--4b1b393f-e1b2-4542-b147-3e98661102e0", "sighting--e0c6074f-8f91-4b47-b7ab-9cfd99a5502c", "sighting--fa8c83b7-0028-4699-a53e-1c97f4bed239", "sighting--636a98af-69bd-4961-960e-6387e24e4e1d", "sighting--eebc46c7-6db4-4259-9d19-0898180411a2", "sighting--f2b5f501-c220-4a19-acfc-a0e0b6d699de", "sighting--b7902fcd-fda9-48cb-b0d6-c5abf0a6ba2d", "sighting--e1b2eac4-a57f-4648-86e1-6e1d6630bdb8", "sighting--ccdd01c1-11ea-432a-b469-adc8640713cc", "sighting--0791b6eb-251e-4360-b3e6-f08c65fabc6f", "sighting--c67ba735-07c9-477e-b033-a884494dc76b", "sighting--d9ceecc4-42bf-42c6-8c40-81571e8f7085", "sighting--c2f057a3-7421-459c-96c5-657274a47c2a", "sighting--1918f3a7-1626-4ce4-8dc8-5722937c29fd", "sighting--90f67725-d89f-488c-916f-7612dd372ecb", "sighting--234db649-79bf-4911-a9da-39255d4ba258", "sighting--5eb8e9c0-7527-4ed5-adfa-400c9cf14814", "sighting--748828be-12be-4ed2-8773-76c9ad59b998", "sighting--5a9806c6-37e2-4b78-9881-c605dd583980", "sighting--68b0055a-a25e-4fcf-ada2-e325059e4b17", "sighting--3d3e138c-24d9-48b7-91f1-bc62a0bc001e", "sighting--76b35ae4-e6b8-4050-9128-eda68dee250d", "sighting--4a048b4c-df82-41da-989a-f2c48b7b0d0e", "sighting--bee35615-fe5f-48d8-bcc0-c5a2deb5ec66", "sighting--c9a1b01b-0b95-43b1-9e8c-d431ef4294e7", "sighting--1bbb15d3-11ee-41b0-872f-079e19b6c15f", "sighting--17268472-ffbd-4b1f-a1c2-d7fb7c1ff5d0", "sighting--968c96e3-63f0-4395-8c92-6c6a0ab2258f", "sighting--bdc0f322-6428-4862-87d7-e1e90daefc59", "sighting--e8048563-f79a-4616-99b6-4a8e1a1d4915", "sighting--cab55364-f643-4611-b9ed-e4c380e16289", "sighting--d84076f3-6126-4b6c-8758-c14893e71d6b", "sighting--80968809-1484-497c-91db-199952aac453", "sighting--51eb70cf-3139-4cc5-a2f8-a192fad1b96a", "sighting--0e1d7fe9-4afa-4b11-925b-4af08d1ca3db", "sighting--7b9a894b-9afc-4050-a47c-f791866a8cd0", "sighting--1de33628-ffcb-496b-ae4a-ee7cf2a3c68c", "sighting--26789b8d-1c16-4e92-b20d-9ae4cb851441", "sighting--1d133611-1a32-4bc3-af1a-5a85f1047e62", "sighting--5ba98830-d2f9-45b4-8f54-f75ef04e20ee", "sighting--29d6451c-aeb2-47d6-ade9-0614b0752bad", "sighting--507e472b-aee4-4cb5-b3b2-12edeefc1ecd", "sighting--d7d8db5b-84bb-4bc2-8134-391f4f78045d", "sighting--30c775a9-3987-418e-b0b5-14005e06e687", "sighting--9c67666a-be94-4b8f-946a-63a682d9fdd8", "sighting--92b769f2-229f-4323-ae72-a51eef5e1c46", "sighting--242f8821-35c0-4414-875f-2a1c0e438d71", "sighting--bb4d9508-f91c-4bd1-b982-cb1289c5ec66", "sighting--943f5800-2d35-474f-bb8b-d9a117200260", "sighting--c22bb5ca-8aaa-4eb5-b4b2-c8cbd93465f4", "sighting--262ede38-aa7e-43b6-b43d-32565db34668", "sighting--734234cb-5e9f-4e20-84d3-2127f94279b0", "sighting--f35255fa-c3a9-43e8-b177-3fbefa037074", "sighting--11c64e26-ec9d-44b1-98ff-b727a13b23be", "sighting--ed17226d-28f4-419b-aac5-22d41812742c", "sighting--33209e94-57ea-4b88-8a4a-bd4ad6285009", "sighting--e40437c3-7341-42b6-a483-b4019840cc1a", "sighting--55ced1d4-4c0a-45f1-9108-0c0e9707168b", "sighting--132a5e63-1db4-407c-a0ac-aeb74a54241f", "sighting--bfe31d34-4e21-481d-9ce4-677e761b8bbf", "sighting--0a5c32da-62ad-414b-98df-281fb64d9f94", "sighting--7a99f135-5753-4fdb-98a1-d5a11dcd0543", "sighting--bbb2274b-6d68-4961-9aa8-638969817435", "sighting--334d63af-780e-4983-939e-2fda93bf73d9", "sighting--5635e097-8411-4093-ac84-a73aa12ceed0", "sighting--abd6395b-3c7a-43b4-be83-65714a3ef996", "sighting--e9c86395-f99e-49d2-9751-c89f6b801db3", "sighting--97f8834b-8523-493c-be6e-9a721eba2bed", "sighting--bd02b195-7ad5-4265-8042-f4f41bd57269", "sighting--aa44cbc8-1233-4b50-a149-c3ea03f1ce14", "sighting--c6838dde-7f50-4fbd-b6cb-5f973790023b", "sighting--0264d3b4-2346-4b77-a0e0-e213ad0d3c92", "sighting--e2703b29-fedc-452d-b449-1caaf7e827c1", "sighting--1560b79e-d5bd-40d3-aa95-5eae92b593fe", "sighting--cd7abebe-d3b5-4f00-8d4d-38fc2952781f", "sighting--dba24d4b-a7fa-4e70-bb08-b30f6b19148b", "sighting--a18245c6-c2fa-4286-8dc3-e03359438818", "sighting--1a907abf-cc00-43a7-8784-1278dc92cb48", "sighting--978b5e1c-4244-454e-8209-5459690af449", "sighting--93a10aa3-8722-4199-8f9f-14bcf05bd24b", "sighting--05211e15-ef58-4f00-b449-137f3ea9c4c3", "sighting--fe6a6ce2-3e2f-4af4-b97f-63cca7660aa0", "sighting--a4ffd080-b275-4885-a431-0b00f084459c", "sighting--0fa5edb7-39c6-4cb6-b6d0-85d4c01cc7d7", "sighting--e186909a-829c-48fb-90d1-f9c436b98ff2", "sighting--17e29135-1a08-401c-8b84-4dcc106f6543", "sighting--f8273b8f-5d60-4d74-be50-388176e489af", "sighting--e631b811-f37e-48a0-8276-4bb33398e9b1", "sighting--2a9d63ba-5a3a-481f-9b8a-2d5e6408d79e", "sighting--beb1d518-e20a-40fb-8a13-f3630547cf07", "sighting--2f62b8ba-6dc3-4c4c-83c5-09eb101bccb0", "sighting--2ae6a627-ae83-4403-a2c7-e3edcf92fa46", "sighting--c0d08e78-c4ae-4661-b194-a15430d6c5ce", "sighting--86357028-2199-4dd4-b56e-c8dc3053cb1d", "sighting--c8d5c6a4-6e5b-467d-ae91-5ad6c821dd78", "sighting--71ce355d-017a-4237-aa2d-b77c8993cdc0", "sighting--2940c409-74e3-4480-8165-de6a6ea6c6a9", "sighting--3ece25b2-0392-4d17-a4ec-236d0a136d4d", "sighting--cd174170-bcd1-43e7-b0db-81986dfcfafc", "sighting--699228b5-89f1-4fb5-bdf1-ec152f8a9402", "sighting--d98c6a1b-c2e1-414d-964b-0b1546807acd", "sighting--81eb3b36-54ef-4802-979b-20f29a6a7b77", "sighting--679e9b57-002a-40a5-b8dc-e88cc47b3dc9", "sighting--4cedfeaa-939d-4d70-8a9c-109f44505f31", "sighting--b649f56a-1ab0-4b77-a4a8-4750f9ed7275", "sighting--1026878b-b129-4b89-a92b-796224eac400", "sighting--dcf6a2e2-ccc0-4265-b856-6f8f337a5730", "sighting--9e0bbe00-a2fd-4f40-92ab-7ca71190b6d1", "sighting--434ea9dd-dcfb-43dd-be5d-daa83de4bbd3", "sighting--5a154e4b-c87e-49bc-8506-16ce06d3ec0e", "sighting--e272a849-05e5-4a9d-96d5-c03026899630", "sighting--24961632-8fe6-4478-b840-06a7acd18046", "sighting--95653e19-4d82-4570-b177-0780831ac373", "sighting--00ea3ad2-2d3c-4ce4-b5d5-0da777045e2f", "sighting--bf50854d-2199-4d72-8bb5-df8d1a896735", "sighting--7f888c50-de76-4aba-9557-b4a0724019b7", "sighting--34f3792e-bbc3-4d7a-bfab-d305e2ef9ca3", "sighting--5ef46a5e-f258-4ce3-b7e6-b0607b27669d", "sighting--cfbf744a-4a16-43e0-bc89-1b35042125ae", "sighting--4faa163d-0283-4418-9a01-fbfa9ff93012", "sighting--3872ad12-ed34-4e62-a495-6c35ca96e2b0", "sighting--9bf24299-56e1-4463-91e9-05c7f80c82d9", "sighting--6a782596-c98c-4280-a992-73b590f7cc0b", "sighting--ed9cee78-f4fd-4ef3-aa95-458f84a8b0b3", "sighting--9d6445db-1540-4783-b4d6-be82177a7971", "sighting--50dcb7b2-55ae-430a-90cb-1391d3a0acb1", "sighting--652d7bbd-2085-4d8d-b0d5-b9f8a6138893", "sighting--16066ded-3f07-4ace-a3b5-ba4805aef79a", "sighting--bdc70ba3-6162-49e7-8e6e-c5ed4f421e39", "sighting--1f66459d-8188-472c-a001-4748e62f5134", "sighting--157f94a7-738c-43dc-a95f-d2c9995cb29e", "sighting--5418c68f-ad52-48ce-bded-087814943206", "sighting--589d4bb5-90f0-4290-ad0b-4c08918462a2", "sighting--e42e2fa2-5c6c-44da-8e14-86f87b138488", "sighting--56d76fc5-2b83-48f2-82f3-8771d524f32a", "sighting--a78e82fe-e88b-406a-9bce-c52309b9349f", "sighting--dee0eea7-aece-4e1a-860a-daaf80ef744e", "sighting--4d66d482-76a4-4137-adba-a0bf43fb4195", "sighting--50d52d1d-6281-411b-8d10-5fcb4d5f582d", "sighting--7b31e0e9-15a6-4209-a3d1-8e18d1400198", "sighting--8c47a311-decc-4203-92bd-888b6ab96961", "sighting--e8c99466-beaf-43b0-9b9c-fac70b2351ef", "sighting--ba421932-9acd-4ca4-a72a-f56b703b45ed", "sighting--483e53ae-fb2b-4fd6-beaf-074f099ab089", "sighting--96370cb9-106e-48da-8415-54fe861b1ebc", "sighting--45080653-041b-477f-b25d-c5a4a2b4146c", "sighting--a558a50c-c173-49ad-ac27-b092b4974fc4", "sighting--dafb61eb-2696-4b52-85bd-79877f7fcf6a", "sighting--bb260b9d-5022-441e-bec9-340a928dcb84", "sighting--b269a81c-37b8-4843-b2af-51223fb9153b", "sighting--38af19f9-4a38-4cca-a0fa-3fd64bf1224f", "sighting--944861f1-be3e-4530-bfc1-d69d1a594ce6", "sighting--0e6f8a79-32c7-4c3d-9b13-5704672db749", "sighting--c1d2de98-58b5-40f7-acab-5203c3ad011c", "sighting--1806d6b6-b827-4ec8-83a8-bbcd79d264f6", "sighting--071a321e-272c-4ce3-9d55-0738e36c647d", "sighting--d4ad7455-1be9-4ad9-8fd4-b1becba022db", "sighting--9342a3d0-a59e-49c7-a8a5-a02b1767a4ae", "sighting--0426302c-3570-4d63-b127-a707120dbf16", "sighting--78fdd01a-64aa-4fa3-b99f-cfade41f2c12", "sighting--ca16b434-1cb2-4271-b996-76b1d560f43c", "sighting--5cb20481-26a6-4a87-afc1-0e3c5ec8299b", "sighting--65cc9dc0-0bab-4617-961f-657214f476d9", "sighting--fb69fd7a-add2-4e34-b223-5fb155946a32", "sighting--ff5cafc7-6da1-4b91-93e5-64867c13fae8", "sighting--681e0c97-00ff-45f3-ad10-be0e7a58d3c0", "sighting--b3c05424-2f92-49fe-93c5-e9170b1a5e0a", "sighting--20a6d9bd-16cb-48e6-ab3a-e17ba7afaf45", "sighting--9437ef15-fbda-4eaf-a643-e972fdf4f143", "sighting--399ae72d-294e-4545-a2ef-39018442b8b1", "sighting--16d54ee4-1501-4837-868f-d7f46357fc6a", "sighting--1124971a-e2e5-45ee-99c6-2eefe4ecbed7", "sighting--c49359ea-807c-4c09-bb0d-5a2b0b359d58", "sighting--b39dcdfc-e794-428c-9939-67223ca9219f", "sighting--1189b3e2-f878-47b8-be71-0762071766b3", "sighting--4d4e9196-dd70-449c-8874-ca2e0e6d45fc", "sighting--6d7ca3ec-3ace-4245-944f-7028d22a302b", "sighting--5a08157f-05c6-416e-aeae-3da8bf674be7", "sighting--0a181f8c-706f-48a6-8ded-85e0461e945e", "sighting--f748f573-f2e8-4454-a66c-9461c7ab0c17", "sighting--40678a1f-c823-428a-98f4-ae25d3a62f94", "sighting--e1734495-8849-4942-bb63-beab93c6f840", "sighting--c4c50be3-f7d1-4d1b-a544-9baa1614737f", "sighting--f804f1d3-4790-4d75-a324-9d1bad4d46b1", "sighting--c8ff78c6-4444-46ae-a24d-1f3339ea67d8", "sighting--748651a8-6668-4444-aae9-d45751fad1c5", "sighting--51c4d64b-6612-4fca-9607-b4598df48820", "sighting--88946109-b14c-4c90-bbcc-7f1b06cc88c9", "sighting--b949de7e-f8b0-4bde-bd5c-42e037653250", "sighting--c8f62127-8bf5-4c22-826c-ac9b6411e335", "sighting--7a2d007c-c9d3-4bb3-ab7c-2992fefc7ae7", "sighting--5f6de9c4-cd2b-4374-8394-8bfc3f534b96", "sighting--e8a8b6b9-49b4-409c-9b67-56b35254081e", "sighting--a027e58b-d219-4d98-a33e-52a5dde26c4d", "sighting--6bf7a122-ea95-4408-ba74-2dae0ed2dec5", "sighting--7787d4f0-606a-4978-a4c2-30e9fe6e3fd2", "sighting--f8b3facf-84f6-49e4-85e0-a36e7b39c166", "sighting--72fa10e1-64fe-466b-89b9-f9298343b742", "sighting--ae82116b-c4bb-4d83-95f7-af1e9090d659", "sighting--e2f56086-03fd-455b-b7b7-124cf90613f2", "sighting--9d1ae002-2b89-4455-997a-cdbfffde1dea", "sighting--17870204-31b8-4413-b8cf-eb7daae973de", "sighting--874af0af-17da-4597-9c90-f4bce039c610", "sighting--7978e257-4c0b-472e-8886-997bfb9836e2", "sighting--f5b708d3-a9a8-4919-90d7-435315753bf2", "sighting--d6cf12b1-048e-462c-923c-411f8a5bf8fc", "sighting--b79c5729-5391-4fde-8836-807f126b81db", "sighting--7f13dd8f-2fcf-4b9b-8d08-3d42b88db024", "sighting--4f17359b-6fa9-473b-96e7-ccd4c39b6493", "sighting--c4132209-e5d5-4714-b920-9dde69a0b482", "sighting--935eedfa-52bc-4000-983e-806cb4480c35", "sighting--1199a97e-5bea-412a-a69f-db9086a6fba0", "sighting--7435caa6-6388-45fd-bc56-8a79a1263afa", "sighting--0eceb3f5-df64-4955-887c-fc0614937b91", "sighting--c52db13b-51fa-4a69-9856-3cf4272473ec", "sighting--0e5bdd9f-5a0b-4569-9263-67cac9bf23a0", "sighting--6dcac0bf-0e34-4487-812b-66852adf4568", "sighting--9f246bca-6ff9-41df-aa02-2403b506421e", "sighting--4094482a-ccc4-4d98-a30c-8ad667673a84", "sighting--32b1d32b-3232-45a7-80ed-2116b61471f1", "sighting--00d52f6b-f1c7-43ae-858c-799876ddc1fe", "sighting--1248c6b9-b053-4535-ad4c-5e5411332f55", "sighting--1f64c62b-b65e-4422-9225-42c3c6704c7d", "sighting--596529cc-0407-4eaf-b3a3-1d368fcc7ba4", "sighting--944cf3f1-59d3-4195-acef-96369f14e1f1", "sighting--347c1456-3e56-4175-bc39-274e591a87b3", "sighting--a88b2ac3-9376-4144-927d-0fdb43c6a36e", "sighting--f445bcd2-14b7-4eb3-bf87-e3be75e19c91", "sighting--bd3f01ba-973e-451e-928e-87c3dae40745", "sighting--ad11943f-b506-431f-827d-68f6a34a0a21", "sighting--e9edadbb-2a52-4292-97aa-c13ae08809cb", "sighting--5ab66a06-1881-4434-9b01-77468537e55e", "sighting--0a453322-9041-4a06-a1fb-1a305dbf7e8b", "sighting--4b268198-f0bc-48a6-903f-87d043d4e915", "sighting--2b1356d2-5902-49b1-bf72-79c8afd1e5b6", "sighting--be471d81-cf6d-42f3-b118-434d5b5591ce", "sighting--7c39f424-d0a5-4a47-9677-c89ca132bb3a", "sighting--92f78422-a619-48e1-aa00-4ca6425bbe98", "sighting--18225873-1e8c-4eeb-9cc2-876fb55d15e8", "sighting--24b2c589-0c36-4556-b4af-f0a708adfb94", "sighting--d63b5a85-a106-4d14-b167-2c6a812a7b20", "sighting--127bfa9a-3fc2-4a39-914b-1ea599da923b", "sighting--48958f35-109c-457f-b951-66afe9ad5934", "sighting--b57d7871-d1cc-4e20-8287-f1e08f8d0c0b", "sighting--66d5178b-dca1-4a33-a87f-803b2ec84835", "sighting--c6a67f0e-8b9b-44be-9b14-74f0493a2bb2", "sighting--645663b9-407d-4b98-97ef-5b6d71ee9174", "sighting--83875afe-3d0e-4c5d-908f-2c51428aaee6", "sighting--e6163d53-38e1-430f-baf7-a4d22e1cfe76", "sighting--81cd9d5a-7d51-4c2f-9e7a-4ef4dbb8e1b7", "sighting--4c3e9e29-6a62-4564-93e3-c7ecbf465218", "sighting--366f131d-7078-4379-aadd-594494108d36", "sighting--5fccfa71-6e1e-4bb8-ae64-df7e20e45e90", "sighting--62a7032f-d997-4359-a668-30d715b8d580", "sighting--d942f762-db8b-443b-83bc-69bf874aca5d", "sighting--085da308-94c1-4e7f-acac-69997d11e15d", "sighting--bdb65ecc-9051-42dc-8e53-58ac62a5311a", "sighting--963dcd55-319a-4f63-944c-9966b0f38260", "sighting--8523c710-ce40-4d51-80bb-84e18eec6ec8", "sighting--f15c4a23-baeb-4d95-95a0-26a97fc1a2b3", "sighting--92ae2001-d7e3-429e-8006-7c9e01333d98", "sighting--407e3ad9-4676-45a4-94af-cb5fcb56787e", "sighting--5f27e0ba-3348-4490-88e6-fa468b0ea0bc", "sighting--b4da598b-49cd-4856-a4be-45a0f179fa85", "sighting--34ca5f6c-c72f-4c49-a935-1c11aa06b35e", "sighting--ae640f2b-0bd9-4fa0-b18d-67509541a800", "sighting--21777aa8-008e-4157-8b64-16fa69345625", "sighting--8cd57e9f-6bf4-4baf-8cdd-87a67e6a379d", "sighting--842c3dd0-87c9-4bb7-8aec-7313ea25dbfc", "sighting--fcd5a031-eb91-415d-bd1c-894a18e588d2", "sighting--fbe1c2d8-3f10-4f7c-a9fe-bf0f2e981669", "sighting--fff86660-cffa-4fd8-93dc-7123bf7095c8", "sighting--79eb2865-c157-4a20-a73e-0b5ceb398fd7", "sighting--0dc4c333-0d92-4a0a-843f-1b30d6908ed4", "sighting--82bc44c3-8aac-45ca-8393-0261cec8277c", "sighting--54662b98-7302-45b3-ac38-638d5210e130", "sighting--678f1dae-2004-4dde-9daa-1527f9a09e0b", "sighting--dcf7d671-fc1a-423c-9f82-281e7f81093d", "sighting--d2f91365-4315-4b4a-9c69-2aff476df666", "sighting--55c72b7e-8ff6-4fb2-a0b3-0dd18a8ed970", "sighting--7e78e121-07ac-4c28-85b0-dba9b44278c2", "sighting--9cc42f0b-5958-43bd-9ff1-96a094136160", "sighting--130367ab-3fa9-4a71-9d6e-a8fd8d3c6e0f", "sighting--ed169b97-c2a6-4afa-a7fd-4dfa125e439a", "sighting--4044bd99-4d54-425e-bb20-918659d3c957", "sighting--4c0eafb6-c72c-4202-85cd-b1ac0565b5e4", "sighting--34aed670-d15f-4210-ba68-68dc2421ef62", "sighting--5e8f6fd3-10a6-44e1-977e-ae7de7db9baa", "sighting--ec2d0d64-e48a-4bc1-9c66-7ea83bc26994", "sighting--c96a08c7-ac9c-45da-869f-6797ff8d968f", "sighting--2d78a90f-239f-4dfb-ac96-de3c9c6c2945", "sighting--462df104-1f24-4ab0-b207-43b14600cb16", "sighting--530175d2-53bf-41d0-a2ee-d40739787cfb", "sighting--457e9f68-59ee-4019-a1e8-faabf1fff829", "sighting--a3b10f6d-9289-4452-bf3a-b619938d5788", "sighting--3b54965a-6034-4615-9a68-f395d73eddf7", "sighting--6b6522a6-c1cb-4082-a785-662892103de2", "sighting--7a5e62ed-c53b-472e-b6b0-58558772329e", "sighting--02560428-06e6-42da-8a0e-c1d27755a9a3", "sighting--a0be800a-dd8b-4717-a7b9-654fad0fb2b5", "sighting--bc65d162-5475-473d-8ad3-0761a239fa16", "sighting--44c99e43-5b9c-426d-ab0f-eb4af9b467f4", "sighting--6c91eecd-6e02-40c4-86bf-3637d365f74b", "sighting--923d17c4-7d1c-4f5f-901c-2bbc377c7fac", "sighting--4a638daf-c980-4eb8-8b8f-7f3bfad68d55", "sighting--5c297465-741e-4676-be8f-07bb9033dc85", "sighting--fcaec5e4-4a69-4ed8-ae24-a1656d86dc1a", "sighting--f7d12956-8d14-4def-b86d-8dbbc96df9c7", "sighting--bd9b7b3b-bdaa-482d-a529-1a1003ed35a9", "sighting--45712b71-1e45-475e-a593-3795a7b1af8d", "sighting--092f86cd-c456-4506-81d4-e28176a12307", "sighting--fb837ec5-28f8-42b6-9df6-02aa710fbbd8", "sighting--0d30dd13-4022-4024-a410-cd846ce49fcb", "sighting--dbe4d0fd-f52d-433d-bf34-2cf6a19ef166", "sighting--27cd8f7f-70db-47fc-8a91-dbc6bf961724", "sighting--54dc156d-e2b7-41e1-81f2-559e2d518716", "sighting--b2f0d319-3a05-4195-a7af-870aba70917d", "sighting--9c8e7400-546c-4d82-8867-cd180b1d9c3f", "sighting--08b3e7bb-2fcb-4e85-a8fc-15f6d42fc2a5", "sighting--5edf18e5-fe31-4fd9-b9cb-857657a817d6", "sighting--e13a7a26-0717-48f5-bab6-7d5105ae90b0", "sighting--6cb56600-88f7-4d2d-ba57-a4a0a805e7d4", "sighting--90db2f4b-003f-4b63-b5f7-bfbc67a96ed4", "sighting--9a837fc5-c535-4785-81a6-55c9bd13aca9", "sighting--352b2f44-9019-47ee-a1f4-de70c82140e3", "sighting--4ba5f3c9-9bbb-4c5f-b0a6-f004460523a2", "sighting--c957cc5f-272d-45df-a329-cbe8e7f9b9f7", "sighting--9fbc10aa-280e-4362-986d-4bc88f2935a4", "sighting--88c9c34d-5bae-4123-93b4-4291b78b1281", "sighting--97d9cde7-fc63-4332-9da1-c59125513693", "sighting--eb5ddb49-f021-46ba-892f-f3d9ffb49c51", "sighting--89652cce-6eb0-4266-95a6-f22d3be8b54f", "sighting--54f5fd96-86d4-4c48-a86a-51d68ada5eab", "sighting--fd7654b1-bff8-4827-bf56-ceed436bfd4d", "sighting--e331e81b-c9da-46c0-a9f7-54d5a88544af", "sighting--16a2d1ac-d6d2-4c33-bdb3-e7b002ac3cf6", "sighting--8a609f1e-1cde-4202-b174-e6281bc95d0e", "sighting--6d6e120b-a04b-4a92-b8ef-f3abc6319781", "sighting--c8827952-0636-4201-a481-03ba51bc6071", "sighting--ede50a9d-fa0c-4431-bf1b-a9cf2fd2dd24", "sighting--2a3c6cb4-89cb-4ff2-aa3f-951faf902b96", "sighting--d49d7ff2-d1bb-4b92-a086-4a59002294d3", "sighting--261e887c-163e-495d-903d-b71716d3edc8", "sighting--e5f9d2b6-10fc-479e-b390-cd8128a42c2e", "sighting--0357730d-35c5-404d-aace-8742fd1adcc2", "sighting--90563507-17c3-4bca-a853-e05654692b54"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-13T11:00:02.162Z", "modified": "2026-05-13T11:00:02.162Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}